777a746a07e8149fe27af574610d0c75a542ceadb677e17d4d8c80cb34626687

Sharing

Copy URL Twitter E-mail

General

Target

777a746a07e8149fe27af574610d0c75a542ceadb677e17d4d8c80cb34626687
Size

484KB
MD5

ae6996d252c9a00a422f7c80a86b2436
SHA1

267e4cd026f6dcfa723c9c1423da6df357c77532
SHA256

777a746a07e8149fe27af574610d0c75a542ceadb677e17d4d8c80cb34626687
SHA512

620fb383d905046797ccec8b79429040a245175e5b87f726692b657bb27321939bbbf690c2ac19dd3ebf7f704ef4ee6b50d91ef1891fee3af9d3ac7887f09458
SSDEEP

12288:cVPyiOuZUFWX28tgHp2EaXGCoL/7mR5tCXk98nn:cVPyiOrWGkgJhaXU7mR5q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
777a746a07e8149fe27af574610d0c75a542ceadb677e17d4d8c80cb34626687

Files

777a746a07e8149fe27af574610d0c75a542ceadb677e17d4d8c80cb34626687
.exe windows:6 windows x86 arch:x86

c6333517d358ef7be481b5205d5e23ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\HT32-ISP\HT32_ISP\FlashCommander\FlashCommander\Release\ht32flashcmd.pdb

Imports

hid

HidD_GetPreparsedData
HidD_GetAttributes
HidD_GetHidGuid
HidP_GetCaps
HidD_GetInputReport

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
CMP_WaitNoPendingInstallEvents
SetupDiGetClassDevsW

kernel32

GetLocaleInfoW
GetUserDefaultLCID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetStdHandle
ExitProcess
GetCommandLineW
GetCommandLineA
HeapQueryInformation
GetFileType
GlobalFlags
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
QueryPerformanceFrequency
GetExitCodeThread
RaiseException
OutputDebugStringW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetCurrentProcessId
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
lstrcmpA
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryA
LoadLibraryExW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FormatMessageW
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
OutputDebugStringA
GetACP
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
CancelIo
FindClose
PurgeComm
WriteFile
GetOverlappedResult
WaitForSingleObject
ReadFile
WriteConsoleW
SetCommState
GetCommState
GetLastError
CreateFileW
GetModuleFileNameW
CloseHandle
CreateEventW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle

user32

GetDC
SetWindowTextW
IsWindowEnabled
GetMonitorInfoW
MonitorFromWindow
WinHelpW
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetSysColorBrush
LoadCursorW
GetWindowThreadProcessId
DrawTextW
GetClassLongW
SetWindowLongW
PtInRect
CopyRect
GetSysColor
DrawTextExW
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
GrayStringW
TabbedTextOutW
ClientToScreen
RealChildWindowFromPoint
DestroyMenu
CheckMenuItem
ReleaseDC
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
RegisterDeviceNotificationW
GetClientRect
SetRectEmpty
OffsetRect
GetParent
GetSubMenu
GetMenuItemID
GetMenuItemCount
DefWindowProcW
CharUpperW
GetSystemMetrics
SendMessageW
GetScrollPos
GetWindowTextW
GetWindowLongW
GetWindow
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
SetMenuItemInfoW
LoadBitmapW
PostQuitMessage
GetMessagePos
GetMessageTime
MapWindowPoints
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetMenu
GetMenu
EnableWindow
GetCapture
GetKeyState
GetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
PostMessageW

gdi32

DeleteObject
Escape
GetClipBox
GetStockObject
PtVisible
RectVisible
RestoreDC
SaveDC
SelectObject
SetMapMode
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateBitmap
SetTextColor
SetBkColor
GetDeviceCaps
DeleteDC

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegCloseKey
RegEnumValueW
RegOpenKeyExW

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantChangeType
VariantClear
VariantInit

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

CRYPT_EnableCommandKey
CRYPT_SetCommandKey
GetImage
GetImageInfo
GetProgramInfo
ISP_BlankCheck
ISP_CRCCheck
ISP_CloseSerialPortConnect
ISP_EraseMass
ISP_ErasePage
ISP_Execute
ISP_Exit
ISP_GetInformation
ISP_GetTimeoutStatus
ISP_GetTransProgress
ISP_GetUserData
ISP_GetUserResult
ISP_IsConnectedToDevice
ISP_ReadData
ISP_Reset
ISP_ResetToIAP
ISP_SendAuthentication
ISP_SendUserCmd
ISP_SetEncrypt
ISP_SetTimeout
ISP_SetupSerialPortConnection
ISP_WaitForConnect
ISP_WriteProgramB

Sections

.text
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6333517d358ef7be481b5205d5e23ad

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

hid

setupapi

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

ole32

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 336KB - Virtual size: 336KB

.rdata Size: 109KB - Virtual size: 108KB

.data Size: 7KB - Virtual size: 21KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 336KB - Virtual size: 336KB

.rdata
Size: 109KB - Virtual size: 108KB

.data
Size: 7KB - Virtual size: 21KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 21KB - Virtual size: 21KB