583a5f5ec9d0f8c2e8f16558ae4491753db25db97dce1450b35ded6e5b62b1e3

General

Target

583a5f5ec9d0f8c2e8f16558ae4491753db25db97dce1450b35ded6e5b62b1e3
Size

48KB
MD5

1b052a07def08a1aa821be950a4d859a
SHA1

224b5ecb796d82015908666cd5331aa49766a781
SHA256

583a5f5ec9d0f8c2e8f16558ae4491753db25db97dce1450b35ded6e5b62b1e3
SHA512

5a601038a60bddee2ad8cc5b332f9451b0b6eed556f53672173921ca1ec369eda2cadcf4e1da2aa7c8bbbc5f90334ec211a86d9f8bc1db3c8f8a1b56d6074590
SSDEEP

768:NHpSG2alaMFha+daTCfQXmtLr/YBj5x8FW9/BAFT+J/9ro3kEO:Nl2alaMFha+daTCfQXtRzduFT+h9ro3k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
583a5f5ec9d0f8c2e8f16558ae4491753db25db97dce1450b35ded6e5b62b1e3

Files

583a5f5ec9d0f8c2e8f16558ae4491753db25db97dce1450b35ded6e5b62b1e3
.dll windows:4 windows x86 arch:x86

54bae8425a1912cbe11e269480910ba3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dwntools

?SendByte@CSerialPort@@QAEHE@Z
?SendByte@CServerSocket@@QAEHE@Z
?ReadData@CSerialPort@@QAEKPAXKK@Z
?ReadData@CServerSocket@@QAEKPAXHK@Z
?SendData@CSerialPort@@QAEKPAXK@Z
?SendData@CServerSocket@@QAEKPAXH@Z
?DwnInfo@@YAXEGGPBDPAD_K@Z
?DDLGetString@@YAXPBD0PAD@Z
?EA_CCID_bTransmitData@CSerialPort@@QAEHPAEK0PAK@Z
?ClearReadBuff@CSerialPort@@QAEHXZ

mfc42

ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1116
ord1578
ord600
ord826
ord3663
ord825
ord1871
ord823
ord1168
ord269

msvcrt

fopen
strstr
_onexit
__dllonexit
_adjust_fdiv
_initterm
sprintf
malloc
??1type_info@@UAE@XZ
fseek
ftell
fread
fclose
free
__CxxFrameHandler

kernel32

LocalAlloc
LocalFree
GetExitCodeThread
Sleep

user32

MessageBoxA

Exports

Exports

??4CServerSocket@@QAEAAV0@ABV0@@Z
EA_hDownLoad
EA_vDownExit

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54bae8425a1912cbe11e269480910ba3

Headers

File Characteristics

Imports

dwntools

mfc42

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 4KB - Virtual size: 1KB