68f27b3d2b663d34428b2657d1a9fd40N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

68f27b3d2b663d34428b2657d1a9fd40N.exe
Size

69KB
MD5

68f27b3d2b663d34428b2657d1a9fd40
SHA1

5149a9b57cdbaca23c16cc074422a42f3fc08525
SHA256

3ff3d733eebeeece7d5880f93186b566aa8f2a7007df71107a5e2f89ef8d493b
SHA512

ce286e28a271e7e4c05aa3b94c13b2c610860a525d9fb98cfe728220b24f86e07f642e7fe3db43a3d82aae570abd17e1e1a390e55bb714eeb205f59cb501a7ad
SSDEEP

1536:X8P52ealUjXkqfZta4+FG4JfdBL5C2+9d:Deal+zfZE4+FFFC2+9d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68f27b3d2b663d34428b2657d1a9fd40N.exe

Files

68f27b3d2b663d34428b2657d1a9fd40N.exe
.dll windows:4 windows x86 arch:x86

64a5600bb0ef91d8d7810fcf15613983

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libdriver_common-0

lockClientConnect
lockClientDoCheckIn
lockClientDoCheckInV2
lockClientDoCheckInV3
lockClientDoCheckOut
lockClientDoEatBreakfast
lockClientFree
lockClientInit

libgcc_s_sjlj-1

_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Unregister
__divdi3

kernel32

ClearCommError
CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommState
GetCommTimeouts
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OutputDebugStringA
PurgeComm
QueryPerformanceCounter
ReadFile
SetCommState
SetCommTimeouts
SetSystemTime
SetUnhandledExceptionFilter
SetupComm
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WriteFile

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
_winmajor
abort
calloc
free
fwrite
malloc
memcpy
memmove
vfprintf

nspr4

PR_Close
PR_Connect
PR_DestroyLock
PR_GetErrorText
PR_GetErrorTextLength
PR_ImplodeTime
PR_InitializeNetAddr
PR_IntervalNow
PR_Lock
PR_MillisecondsToInterval
PR_NewLock
PR_NewTCPSocket
PR_NewUDPSocket
PR_Now
PR_Recv
PR_Send
PR_SendTo
PR_Shutdown
PR_StringToNetAddr
PR_Unlock
PR_snprintf

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdlPv
_Znwj
__cxa_pure_virtual
__gxx_personality_sj0

Exports

Exports

AAABBB
BCBABE
BuildDriver
CheckCardWritable
CheckIn
CheckInV2
CheckInV3
CheckOut
ClearCard
ClearCardWithUserInfo
ClearDoorOpenRecord
DestroyDriver
EatBreakfast
FDFDAB
FFF111
FFFTTT
FindPort
FireBeep
GetFirmwareVersion
GetLibraryMagicCode
GetMifareCardPhyID
ReadCard
ReadCardEx
ReadCardEx2
ReadDoorOpenRecord
SetupSystemTime
TTTFFF
V2ClearCard
V2ClearCardWithUserInfo
V2ReadCard
V2WriteCard
V2WriteCardWithUserInfo
WriteCard
WriteCardEx
WriteCardEx2
WriteCardWithUserInfo
XXXYYY

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64a5600bb0ef91d8d7810fcf15613983

Headers

File Characteristics

Imports

libdriver_common-0

libgcc_s_sjlj-1

kernel32

msvcrt

nspr4

libstdc++-6

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 55KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 3KB

.edata Size: 1024B - Virtual size: 907B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 56KB - Virtual size: 55KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 1024B - Virtual size: 907B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 3KB - Virtual size: 2KB