79fb3f4e6f45ea6501f773c89765e585a9fefd91d0259101f988253f3aca283a

Sharing

Copy URL Twitter E-mail

General

Target

79fb3f4e6f45ea6501f773c89765e585a9fefd91d0259101f988253f3aca283a
Size

645KB
MD5

0280ee2c105440505ce2dd36ffb0b6e1
SHA1

0301f7bc07f5d69c05da9708b4cd91e949fec17d
SHA256

79fb3f4e6f45ea6501f773c89765e585a9fefd91d0259101f988253f3aca283a
SHA512

0da57a59f08911b9c34f14466b40fbd0df938e7b03e82dcd3b32385a630f2e0320f0a486a72956e889b9dcb87f20e1472dfdaed94b77dfc658cf9f9f6d75c2bd
SSDEEP

12288:9PA4Fhx/qEfo1BMi6iCmrsgYus1cmJrA1ivmPIAR:9PjFqVIi6i3s1cmdHeA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79fb3f4e6f45ea6501f773c89765e585a9fefd91d0259101f988253f3aca283a

Files

79fb3f4e6f45ea6501f773c89765e585a9fefd91d0259101f988253f3aca283a
.dll windows:6 windows x64 arch:x64

9719d090012a9ee8f7a4238068f547bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
HeapReAlloc
PurgeComm
EnumSystemLocalesW
WriteConsoleW
GetCurrentProcessId
SetCommConfig
SetCommTimeouts
ClearCommError
CloseHandle
EscapeCommFunction
GetLastError
SetupComm
CreateFileW
GetOEMCP
WriteFile
GetCommConfig
ReadFile
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentThread
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFileType
GetStdHandle
HeapAlloc
HeapFree
GetModuleFileNameW
ExitProcess
Sleep
SetFilePointerEx
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
WaitForSingleObjectEx
GetExitCodeThread
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
GetStringTypeW
CompareStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW

user32

EnableWindow
SetWindowLongPtrW
DialogBoxParamW
GetSysColorBrush
FindWindowW
LoadImageW
PostMessageW
ShowWindow
GetDlgItem
InvalidateRect
MessageBoxA
FillRect
SendMessageW
EndDialog
MessageBeep
GetWindowLongPtrW
DestroyCursor
DrawTextA
GetWindowTextA
SetWindowTextA
DrawFocusRect
GetSysColor
LoadCursorW
SetCursor

gdi32

DeleteObject
GetObjectW
CreateFontIndirectW
GetCurrentObject
SetBrushOrgEx
SelectObject
CreateCompatibleDC
DeleteDC
SetTextColor
SetBkColor
SetStretchBltMode
CreateSolidBrush

advapi32

RegQueryValueW
RegSetValueExW
RegCreateKeyExA
RegSetValueA
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteA

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
SetupDiGetDevicePropertyW
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiClassGuidsFromNameA

ws2_32

htons
htonl
WSAStartup
WSAStringToAddressW

msimg32

TransparentBlt

dnsapi

DnsFree
DnsQuery_W

Exports

Exports

BRIDGE_About
BRIDGE_Close
BRIDGE_CreateDriver
BRIDGE_CreateDriverFromConfigString
BRIDGE_CreateDriverFromProfileID
BRIDGE_CreateNewProfile
BRIDGE_DeleteProfile
BRIDGE_DriverGetAutoCache
BRIDGE_DriverGetAutoDetectComPort
BRIDGE_DriverGetCable
BRIDGE_DriverGetCable2
BRIDGE_DriverGetCurrentComPort
BRIDGE_DriverGetDensityMode
BRIDGE_DriverGetMode
BRIDGE_DriverGetSmartSpeedEnabled
BRIDGE_DriverSetAutoCache
BRIDGE_DriverSetAutoDetectComPort
BRIDGE_DriverSetCable
BRIDGE_DriverSetCable2
BRIDGE_DriverSetCurrentComPort
BRIDGE_DriverSetDensityMode
BRIDGE_DriverSetMode
BRIDGE_DriverSetSmartSpeedEnabled
BRIDGE_EnableUsageNotifications
BRIDGE_EnumComports
BRIDGE_ExportProfilesToString
BRIDGE_FreeDriver
BRIDGE_GetAllProfiles
BRIDGE_GetConfigString
BRIDGE_GetDriverIndex
BRIDGE_GetDriverInfo
BRIDGE_GetProfileConfigFromString
BRIDGE_ImportProfilesFromString
BRIDGE_NumDrivers
BRIDGE_Open
BRIDGE_SetConfigFromString
BRIDGE_SetDriverIndex
BRIDGE_SetProfileConfigFromString
BRIDGE_SetProfileName
BRIDGE_ShowConfigDialog
DRIVER_canTurboWrite
DRIVER_commitWriteBuffer
DRIVER_getBitSpeed
DRIVER_getCurrentCylinderNumber
DRIVER_getCurrentSide
DRIVER_getDriveTypeID
DRIVER_getMFMBit
DRIVER_getMFMSpeed
DRIVER_getMaxCylinder
DRIVER_getTrack
DRIVER_gotoCylinder
DRIVER_handleNoClickStep
DRIVER_hasDiskChanged
DRIVER_isAtCylinder0
DRIVER_isDiskInDrive
DRIVER_isMFMDataAvailable
DRIVER_isMFMPositionAtIndex
DRIVER_isMotorRunning
DRIVER_isReady
DRIVER_isReadyToWrite
DRIVER_isStillWorking
DRIVER_isWriteComplete
DRIVER_isWritePending
DRIVER_isWriteProtected
DRIVER_maxMFMBitPosition
DRIVER_mfmSwitchBuffer
DRIVER_putTrack
DRIVER_resetDrive
DRIVER_setDirectMode
DRIVER_setMotorStatus
DRIVER_setSurface
DRIVER_writeShortToBuffer

Sections

.text
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9719d090012a9ee8f7a4238068f547bd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

setupapi

ws2_32

msimg32

dnsapi

Exports

Exports

Sections

.text Size: 466KB - Virtual size: 466KB

.rdata Size: 112KB - Virtual size: 111KB

.data Size: 12KB - Virtual size: 19KB

.pdata Size: 20KB - Virtual size: 19KB

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 466KB - Virtual size: 466KB

.rdata
Size: 112KB - Virtual size: 111KB

.data
Size: 12KB - Virtual size: 19KB

.pdata
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 4KB - Virtual size: 4KB