736531ba7d6e55f9cec196248ea7ac8ea57e65994009fb06bf1f64c22e961521

Sharing

Copy URL

Twitter E-mail

General

Target

736531ba7d6e55f9cec196248ea7ac8ea57e65994009fb06bf1f64c22e961521
Size

2.6MB
MD5

4123c9ed71731951913f4f3f038c781c
SHA1

6da515bc2a1c3ded0b909aee4ebd1123b426a30e
SHA256

736531ba7d6e55f9cec196248ea7ac8ea57e65994009fb06bf1f64c22e961521
SHA512

8f51018b878ab6c3a15c2854bc1bb684cbe20090b7e8b062fc63aa54a9c5aba8bc61b8d913e5c4c3841cc563964996b5cce3fd19d856e67cdf7022e7a06c4aa5
SSDEEP

3072:NQNkoMGUxCZMwPfCxWDPQH/UUtDOXbpWJ1:NqUxCZvYWDIH3tDOXdWb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
736531ba7d6e55f9cec196248ea7ac8ea57e65994009fb06bf1f64c22e961521

Files

736531ba7d6e55f9cec196248ea7ac8ea57e65994009fb06bf1f64c22e961521
.dll windows:5 windows x86 arch:x86

0999f9bfec3457a8f6bc286722c242e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\软件代码\CTA8280\Testdebug-1\Bin\HVI.pdb

Imports

mfc100ud

ord15144
ord3440
ord10175
ord11924
ord7719
ord2744
ord4886
ord13122
ord9904
ord15963
ord12863
ord4037
ord13035
ord10077
ord16660
ord16659
ord16732
ord16750
ord16746
ord16748
ord16749
ord16747
ord2965
ord9045
ord3477
ord3480
ord14996
ord6879
ord3339
ord3340
ord3589
ord3590
ord12309
ord11938
ord9973
ord13078
ord1062
ord1029
ord1064
ord13223
ord4015
ord3895
ord4270
ord14708
ord5926
ord11351
ord15939
ord1460
ord15883
ord14564
ord5796
ord9681
ord13988
ord13221
ord1759
ord1766
ord1772
ord1770
ord1777
ord5341
ord5378
ord5349
ord5361
ord5357
ord5353
ord5383
ord5374
ord5345
ord5387
ord5366
ord5332
ord5336
ord5369
ord4897
ord16667
ord4884
ord3241
ord15965
ord8692
ord15971
ord7563
ord12638
ord14929
ord6560
ord2873
ord13071
ord4142
ord3553
ord3552
ord3439
ord13117
ord6368
ord11153
ord10149
ord4555
ord2599
ord417
ord1462
ord7851
ord8218
ord1674
ord3189
ord6538
ord299
ord1731
ord1730
ord5521
ord302
ord292
ord5232
ord286
ord1003
ord336
ord4290
ord1017
ord8762
ord1428
ord1449
ord9358
ord9264
ord13931
ord16444
ord5851
ord2561
ord13532
ord13533
ord15964
ord8691
ord15970
ord10338
ord4347
ord4288
ord14016
ord8712
ord2080
ord16763
ord12908
ord15841
ord13525
ord2482
ord1451
ord2442
ord2440
ord2470
ord2357
ord15724
ord2301
ord2429
ord4050
ord9064
ord7920
ord442
ord1441
ord2204
ord2324
ord2273
ord2481
ord2479
ord2316
ord2220
ord2300
ord337
ord1447
ord1018
ord1434
ord8765
ord16157
ord16154
ord16159
ord16156
ord16158
ord16155
ord4053
ord6535
ord13198
ord13206
ord4993
ord9053
ord11324
ord13216
ord13167
ord13997
ord5692
ord6079
ord6340
ord10291
ord6049
ord6343
ord5695
ord5914
ord5672
ord8467
ord8468
ord8458
ord5912
ord9057
ord11148
ord10148
ord4670
ord2695
ord7542
ord14235
ord991
ord8374
ord3892
ord1442

msvcr100d

??_V@YAXPAX@Z
_malloc_dbg
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler3
_wtoi
strcpy
sprintf
fabs
wcslen
memmove_s
_snprintf_s
_errno
_CxxThrowException
_CrtDbgReportW
_CrtDbgReport
free
wcscpy
_vsnprintf_s
memset
_vsnwprintf_s
_snwprintf_s
wcscpy_s
wcsncpy_s
strcpy_s
calloc
_recalloc
memcmp
_wtof
_wcsicmp
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_CrtSetCheckCount
_encoded_null
_free_dbg
_CRT_RTC_INITW

kernel32

LocalFree
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
RaiseException
lstrlenA
GetProcAddress
LoadLibraryW
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
HeapFree
HeapAlloc
CloseHandle
SetEvent
OpenEventA
GetProcessHeap
GetModuleFileNameW
VirtualQuery
FreeLibrary
OutputDebugStringA
OutputDebugStringW
GetLastError
VirtualAlloc
UnmapViewOfFile
GetSystemInfo
MapViewOfFile
CreateFileMappingA
GetCurrentThread
OpenFileMappingA
InterlockedIncrement
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc

oleaut32

SysFreeString

modepub

U_DelaymS
RdGainOffset
ReadEEPROM
WriteEEPROM

ccpci

?PutIoGroup@@YGXKKNKKN@Z
Wait
PutIo
GetIo

fhvi

U_FHVI_MeasureV
U_FHVI_MeasureI
FHVI_GetCHExist
U_FHVI_SetOutValFast
U_FHVI_SetMode
U_FHVI_Init
U_FHVI_SetOutVal

tif

TIF_GetPara

test8280

GetMessageInfo

errhandle

?SendWarning@@YAHHHHPA_W00@Z
?SendError@@YAHHHHPA_W00@Z

cbit

U_CBIT_RelayOn

user32

MessageBoxA

advapi32

RevertToSelf
SetThreadToken
OpenThreadToken

Exports

Exports

?HVI_GetCalDate@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V12@H@Z
?U_HVI_GetCHCondition@@YAXHHAAHAAN1110@Z
?U_HVI_GetCHCondition@@YAXHHAAHAAN111@Z
HVI_CheckState
HVI_Clear
HVI_Config
HVI_FPGACheck
HVI_GetAdcVal
HVI_GetAdd
HVI_GetCHExist
HVI_GetCHStatus
HVI_GetCHcfg
HVI_GetChType
HVI_GetFPGAVer
HVI_GetID
HVI_PhyChCheck
HVI_SetAdd
HVI_SetBoardVer
HVI_SetCHExist
HVI_SetCHStatus
HVI_SetCHcfg
HVI_SetChType
HVI_SetFPGAVer
HVI_SetID
HVI_SetMode1300
HVI_SetMode20mA
HVI_SetParamDataPoint
HVI_SetRelay
HVI_SetSiteDataPoint
ShowHVIDlg
U_HVI_Connect
U_HVI_GetBoardVer
U_HVI_GetChNum
U_HVI_GetVOSCData
U_HVI_GetVOSCDataCnt
U_HVI_GetVOSCDataInfo
U_HVI_Init
U_HVI_MeasureI
U_HVI_MeasureV
U_HVI_SetMode
U_HVI_SetOutVal
U_HVI_SetOutValFast
U_HVI_SetOutValSite
U_HVI_SetOutValSlow

Sections

.textbss
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

POWER
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VOSC
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0999f9bfec3457a8f6bc286722c242e1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc100ud

msvcr100d

kernel32

oleaut32

modepub

ccpci

fhvi

tif

test8280

errhandle

cbit

user32

advapi32

Exports

Exports

Sections

.textbss Size: - Virtual size: 80KB

.text Size: 182KB - Virtual size: 181KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 1024B - Virtual size: 2KB

.idata Size: 7KB - Virtual size: 6KB

.tls Size: 1024B - Virtual size: 782B

POWER Size: 7KB - Virtual size: 7KB

VOSC Size: 2.4MB - Virtual size: 2.4MB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 20KB - Virtual size: 20KB

.textbss
Size: - Virtual size: 80KB

.text
Size: 182KB - Virtual size: 181KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 1024B - Virtual size: 2KB

.idata
Size: 7KB - Virtual size: 6KB

.tls
Size: 1024B - Virtual size: 782B

POWER
Size: 7KB - Virtual size: 7KB

VOSC
Size: 2.4MB - Virtual size: 2.4MB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 20KB - Virtual size: 20KB