e20d6ca74d368d2ed65cd34955102b3e44bb67088ef307971e04697bbc51a664

Sharing

Copy URL

Twitter E-mail

General

Target

e20d6ca74d368d2ed65cd34955102b3e44bb67088ef307971e04697bbc51a664
Size

14KB
MD5

3cd7d9d11d30683a3d68842d2861a7da
SHA1

5a820f5c9902129bc3dd1f91452ea61298231bf4
SHA256

e20d6ca74d368d2ed65cd34955102b3e44bb67088ef307971e04697bbc51a664
SHA512

b6d035a115b93b29c0a37e8fac5f554445cbf1f04ae23c54c6cd9dedfdcd1abddb9f0cd778bfca2d0170ad1218fed7112c3055e6603fcbf657be743354f77d35
SSDEEP

384:tkHqWB6f6LOS2Qvh3HJDRjVMtZ8EAsz1:tkr/HqtZ2A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e20d6ca74d368d2ed65cd34955102b3e44bb67088ef307971e04697bbc51a664

Files

e20d6ca74d368d2ed65cd34955102b3e44bb67088ef307971e04697bbc51a664
.dll windows:6 windows x86 arch:x86

a9e479f9368264aa33b62e747343131d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\GitlabComRepository\WindowsProject\TemplateProject\SourceCode\Platform\API\lib\mxlibi2c\x86\mxlibi2c.pdb

Imports

libft260

_FT260_CreateDeviceList@4
_FT260_I2CMaster_Init@8
_FT260_Close@4
_FT260_I2CMaster_Write@24
_FT260_Open@8
_FT260_I2CMaster_Read@28

slabhidtosmbus

HidSmbus_WriteRequest
HidSmbus_SetGpioConfig
HidSmbus_Open
HidSmbus_SetSmbusConfig
HidSmbus_WriteLatch
HidSmbus_ReadLatch
HidSmbus_GetNumDevices
HidSmbus_GetReadResponse
HidSmbus_GetGpioConfig
HidSmbus_Close
HidSmbus_ReadRequest

vcruntime140

memset
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_execute_onexit_table

kernel32

InitializeSListHead
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

Exports

Exports

GetCP2112Din
GetCP2112Dout
GetCP2112GpioDin
GetCP2112GpioDout
GetCP2112UartMode
GetFT260UartMode
GetTCA9535Registry
SetCP2112Dout
SetCP2112GpioDout
SetCP2112UartMode
SetFT260UartMode
SetTCA9535Registry

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9e479f9368264aa33b62e747343131d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libft260

slabhidtosmbus

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 536B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 536B