0167d7bb93ec1bb09f6825019f8d477d3653fc3c9e234e29302162af7834913d

Sharing

Copy URL Twitter E-mail

General

Target

0167d7bb93ec1bb09f6825019f8d477d3653fc3c9e234e29302162af7834913d
Size

220KB
MD5

ef524d060386dc1ced402b1445f2b66e
SHA1

7cedb4a56fbc9a292f758824f9df787c438c3dcd
SHA256

0167d7bb93ec1bb09f6825019f8d477d3653fc3c9e234e29302162af7834913d
SHA512

9e2db3b6bd6c7144234583ab957ba7fe2c32f9ef7447e456de3dc22780470664ab58bf65887853efbf538530fe248f279123b1f1fc6b009084bf19dfcde24f77
SSDEEP

6144:V9su97320Fok6dr0Q2Skj5r6TCOq1Ady4Rjs2vW:VFCrhTYkycPe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0167d7bb93ec1bb09f6825019f8d477d3653fc3c9e234e29302162af7834913d

Files

0167d7bb93ec1bb09f6825019f8d477d3653fc3c9e234e29302162af7834913d
.dll windows:4 windows x86 arch:x86

94207dc5c5d8f7916c9e5fb2db1e2e09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
CreateEventA
Sleep
ResetEvent
ReadFile
GetOverlappedResult
WriteFile
GetTickCount
LeaveCriticalSection
PurgeComm
SetCommState
BuildCommDCBA
GetCommState
SetCommMask
SetCommTimeouts
EnterCriticalSection
InitializeCriticalSection
ClearCommError
GetCurrentDirectoryA
LocalFree
FormatMessageA
DisableThreadLibraryCalls
CompareStringW
CompareStringA
SetEndOfFile
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetStdHandle
GetModuleHandleA
GetModuleFileNameA
SetCurrentDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateFileA
CloseHandle
CreateMutexA
GetLastError
WaitForSingleObject
ReleaseMutex
GetCPInfo
FlushFileBuffers
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
SetEnvironmentVariableA
GetCurrentThreadId
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
RtlUnwind
DeleteFileA
InterlockedExchange
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapFree

user32

MessageBoxA

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

hid

HidD_GetHidGuid
HidD_SetFeature
HidD_GetAttributes
HidD_GetFeature

gdiplus

GdipAlloc
GdiplusStartup
GdipCreateBitmapFromFile
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdipCloneImage

Exports

Exports

HexToStr
ICC_GetInputPassEx
ICC_KeyBoard_Close
ICC_KeyBoard_DispSound
ICC_KeyBoard_DisplaySound
ICC_KeyBoard_GetDeviceCSN
ICC_KeyBoard_GetInputPass
ICC_KeyBoard_GetInputPassEx
ICC_KeyBoard_GetPass
ICC_KeyBoard_GetScanMode
ICC_KeyBoard_GetScanVersion
ICC_KeyBoard_Open
ICC_KeyBoard_ScanCode
ICC_KeyBoard_SetScanMode
ICC_PosBeep
ICC_Reader_24c_PowerOff
ICC_Reader_24c_PowerOn
ICC_Reader_24c_Read
ICC_Reader_24c_Write
ICC_Reader_4428_Change
ICC_Reader_4428_ChangeHEX
ICC_Reader_4428_PowerOff
ICC_Reader_4428_PowerOn
ICC_Reader_4428_PowerOnHEX
ICC_Reader_4428_Read
ICC_Reader_4428_ReadCount
ICC_Reader_4428_ReadHEX
ICC_Reader_4428_ReadProtect
ICC_Reader_4428_Verify
ICC_Reader_4428_VerifyHEX
ICC_Reader_4428_Write
ICC_Reader_4428_WriteHEX
ICC_Reader_4428_WriteProtect
ICC_Reader_4442_Change
ICC_Reader_4442_ChangeHEX
ICC_Reader_4442_PowerOff
ICC_Reader_4442_PowerOn
ICC_Reader_4442_PowerOnHEX
ICC_Reader_4442_Read
ICC_Reader_4442_ReadCount
ICC_Reader_4442_ReadHEX
ICC_Reader_4442_ReadProtect
ICC_Reader_4442_Verify
ICC_Reader_4442_VerifyHEX
ICC_Reader_4442_Write
ICC_Reader_4442_WriteHEX
ICC_Reader_4442_WriteProtect
ICC_Reader_AppStatsJump
ICC_Reader_Application
ICC_Reader_ApplicationHEX
ICC_Reader_CheckFlashDataValue
ICC_Reader_ClearScreen
ICC_Reader_Close
ICC_Reader_DispSound
ICC_Reader_DisplayInfo
ICC_Reader_ExitDisInfo
ICC_Reader_GetAppStats
ICC_Reader_GetDeviceCSN
ICC_Reader_GetDeviceSN
ICC_Reader_GetDeviceVersion
ICC_Reader_GetICCVersion
ICC_Reader_GetMagCardMode
ICC_Reader_GetMagVersion
ICC_Reader_GetMassage
ICC_Reader_GetQRCodeMode
ICC_Reader_GetQRVersion
ICC_Reader_GetStatus
ICC_Reader_InitLoadData
ICC_Reader_KeyBoardEnterDFU
ICC_Reader_KeyBoardLoadAppDate
ICC_Reader_KeyBoardSound
ICC_Reader_KeyBoardVersion
ICC_Reader_Libinfo
ICC_Reader_Libinfo1
ICC_Reader_LoadAppData
ICC_Reader_LoadFonts
ICC_Reader_LoadPicture
ICC_Reader_MagCard
ICC_Reader_MessageDataEncrypt
ICC_Reader_Open
ICC_Reader_PictureScroll
ICC_Reader_PowerOff
ICC_Reader_PowerOn
ICC_Reader_PowerOnHEX
ICC_Reader_QRcodeDisplay
ICC_Reader_ReadEEPROM
ICC_Reader_ScanCode
ICC_Reader_SendMassage
ICC_Reader_SetDeviceSN
ICC_Reader_SetMagCardMode
ICC_Reader_SetQRCodeMode
ICC_Reader_SoftReset
ICC_Reader_WriteEEPROM
ICC_Reader_hot_PowerOn
ICC_Reader_pre_PowerOn
ICC_ScanDevice_ScanCode
PICC_Reader_15693_Read
PICC_Reader_15693_Write
PICC_Reader_AFI
PICC_Reader_Application
PICC_Reader_ApplicationHEX
PICC_Reader_Authentication
PICC_Reader_AuthenticationHEX
PICC_Reader_DSFID
PICC_Reader_Decrement
PICC_Reader_FindCard
PICC_Reader_GetPICCVersion
PICC_Reader_ID_CertAndFinger
PICC_Reader_ID_CertDNCode
PICC_Reader_ID_CertInfo
PICC_Reader_ID_CertUID
PICC_Reader_ID_SAMCode
PICC_Reader_Increment
PICC_Reader_Initval
PICC_Reader_Inventory
PICC_Reader_LockDataBlock
PICC_Reader_PowerOnTypeA
PICC_Reader_PowerOnTypeAHEX
PICC_Reader_PowerOnTypeB
PICC_Reader_PowerOnTypeBHEX
PICC_Reader_RFControl
PICC_Reader_Read
PICC_Reader_ReadHEX
PICC_Reader_Readval
PICC_Reader_Request
PICC_Reader_SystemInfor
PICC_Reader_Write
PICC_Reader_WriteHEX
StrToHex

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

94207dc5c5d8f7916c9e5fb2db1e2e09

Headers

File Characteristics

Imports

kernel32

user32

setupapi

hid

gdiplus

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 9KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 9KB

.rmnet
Size: 60KB - Virtual size: 60KB