88e6ffd2533d4e0e21c2b5b2768099e9e3706ebdf8b2e3caf89e58bce78f836a

Sharing

Copy URL Twitter E-mail

General

Target

88e6ffd2533d4e0e21c2b5b2768099e9e3706ebdf8b2e3caf89e58bce78f836a
Size

422KB
MD5

e84e572ccb5470b3c66630c48324da16
SHA1

a0a8b266400b344ea4b5aa33c85a95db49820348
SHA256

88e6ffd2533d4e0e21c2b5b2768099e9e3706ebdf8b2e3caf89e58bce78f836a
SHA512

f2b18308c097dbcef79279839f561fe03e5cc64432f2c714c79e165a01335a37da00d53d4c6abb75166dcba45187c954efd0c208da3f25990d8fc5eeabce62cd
SSDEEP

12288:6Xo/a716XF0uOm/cMCAZOBES7Nm4epeJx5Z1H5Vmuq2fnngliK:s6Vym/cjAZOBES84Rjng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88e6ffd2533d4e0e21c2b5b2768099e9e3706ebdf8b2e3caf89e58bce78f836a

Files

88e6ffd2533d4e0e21c2b5b2768099e9e3706ebdf8b2e3caf89e58bce78f836a
.dll windows:6 windows x86 arch:x86

501bdbbf7b0e400c4e89ce4cd90bda92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\data\Documents\Development\gigecam_driver\build_tools\tmp\vcs\bin\Win32\Release\ipconfig_api_Win32.pdb

Imports

ws2_32

ntohl
inet_pton
htonl

kernel32

LoadLibraryExW
Sleep
DisableThreadLibraryCalls
RegisterWaitForSingleObject
UnregisterWaitEx
WideCharToMultiByte
MultiByteToWideChar
ReadFile
WriteFile
SetFilePointer
CreateFileW
LocalFileTimeToFileTime
CloseHandle
GetCurrentDirectoryW
SystemTimeToFileTime
CreateEventW
ResetEvent
GetCurrentProcessId
CreateMailslotW
FormatMessageW
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetCPInfo
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
FreeLibrary
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
SetFilePointerEx
GetConsoleMode
ReadConsoleW
HeapReAlloc
GetFileSizeEx
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
FlushFileBuffers
GetConsoleCP
HeapSize
SetEndOfFile
WriteConsoleW

ole32

CoUninitialize
CoInitializeEx
CoCreateGuid
CoTaskMemFree
StringFromIID
CoCreateInstance

shlwapi

PathFindExtensionW

oleaut32

SysFreeString
SysAllocString

Exports

Exports

IPConfig_AcquireDevice
IPConfig_AutoAssignConfig
IPConfig_CreateWaitForDeviceListChanged
IPConfig_DeleteWaitForDeviceListChanged
IPConfig_EnableLogging
IPConfig_Exit
IPConfig_GetCameraInfoByIPAddressString
IPConfig_GetDeviceIPConfig
IPConfig_GetDeviceList
IPConfig_GetServiceVersion
IPConfig_Init
IPConfig_ReadMem
IPConfig_ReleaseDevice
IPConfig_SendForceIP
IPConfig_SendForceIP_ForSerial
IPConfig_SetDeviceIPConfig
IPConfig_SetDeviceUserDefinedName
IPConfig_SetServiceProperty
IPConfig_UploadFirmware
IPConfig_WriteMem

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

501bdbbf7b0e400c4e89ce4cd90bda92

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

ole32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 310KB - Virtual size: 309KB

.rdata Size: 87KB - Virtual size: 86KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 310KB - Virtual size: 309KB

.rdata
Size: 87KB - Virtual size: 86KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 14KB - Virtual size: 14KB