c09b5a5c0b7ba9e3c610751f2927c980N

Sharing

Copy URL

Twitter E-mail

General

Target

c09b5a5c0b7ba9e3c610751f2927c980N
Size

428KB
MD5

c09b5a5c0b7ba9e3c610751f2927c980
SHA1

5e60e1d789a03d67d0bfbf0056bc9d699a3771b3
SHA256

3bb15ee17d3c3ad2442a29fe851a8b13a4c55945b13498f5122bff898d2b3dbf
SHA512

c84c2ee753380d356ae69e93724acb4bad5f42f78e99bec3b42be6f384a60508e21ac925ff3204d2114f9b75fd7aab23254df45eecabd091d17fe8452f9b8922
SSDEEP

6144:2iCUacBKgaUwfGlrUQdq5v63awGzSgN3bSpQdfQrRrqw7xgV:BvaUwfPkq5C3aeidQqwxg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c09b5a5c0b7ba9e3c610751f2927c980N

Files

c09b5a5c0b7ba9e3c610751f2927c980N
.exe windows:4 windows x86 arch:x86

58c489ab7912828a81e4ca2d908cce92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

myport

?Read@RS232@@QAEHJ@Z
?IdleFunction@RS232@@UAEHXZ
?ErrorName@Win32Port@@UAEPADH@Z
?FlushTXBuffer@Win32Port@@UAEHXZ
?FlushRXBuffer@Win32Port@@UAEHXZ
?Peek@Win32Port@@UAEHPAXI@Z
?Rts@Win32Port@@UAEHH@Z
?Dtr@Win32Port@@UAEHH@Z
?DtrDsrHandshaking@Win32Port@@UAEHH@Z
?RtsCtsHandshaking@Win32Port@@UAEHH@Z
?XonXoffHandshaking@Win32Port@@UAEHH@Z
?SoftwareOverrunError@Win32Port@@UAEHH@Z
?Break@Win32Port@@UAEHJ@Z
?HardwareOverrunError@Win32Port@@UAEHH@Z
?FramingError@Win32Port@@UAEHH@Z
?BreakDetect@Win32Port@@UAEHH@Z
?ParityError@Win32Port@@UAEHH@Z
?Dsr@Win32Port@@UAEHXZ
?Cts@Win32Port@@UAEHXZ
?Ri@Win32Port@@UAEHXZ
?Cd@Win32Port@@UAEHXZ
?Set@Win32Port@@UAE?AW4RS232Error@@JHHH@Z
?write_byte@Win32Port@@MAEHH@Z
?read_byte@Win32Port@@MAEHXZ
?write_buffer@Win32Port@@MAEHPADI@Z
?read_buffer@Win32Port@@MAEHPADI@Z
??1Win32Port@@UAE@XZ
??0Win32Port@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@JDHHHHHHH@Z
?Write@RS232@@QAEHPAXIJPAD@Z
?FormatDebugOutput@Win32Port@@UAEHPADH@Z

kernel32

GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
FindResourceExA
GetFileAttributesA
GetFileSize
GetFileTime
SetErrorMode
GetCurrentDirectoryA
TlsGetValue
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
GetTimeZoneInformation
ExitThread
TerminateProcess
HeapSize
HeapReAlloc
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalAlloc
GetCurrentThread
lstrcmpA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
ReleaseMutex
CreateMutexA
CreateEventA
CreateFileMappingA
MapViewOfFile
WaitForSingleObject
SetEvent
UnmapViewOfFile
CloseHandle
CreateThread
TerminateThread
EnterCriticalSection
LeaveCriticalSection
Sleep
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleFileNameA
GetLocalTime
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA

user32

GetMenuStringA
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
MessageBeep
InflateRect
LoadStringA
GetSysColorBrush
LoadCursorA
GetClassNameA
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
SetRect
WindowFromPoint
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
CharUpperA
IsZoomed
GetSystemMenu
DeleteMenu
AppendMenuA
IsRectEmpty
SetParent
PtInRect
BringWindowToTop
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
SetCursor
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
MapDialogRect
GetAsyncKeyState
wvsprintfA
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
InsertMenuA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetTopWindow
IsChild
GetParent
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
LockWindowUpdate
GetDCEx
FillRect
InvertRect
ClientToScreen
SetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
UpdateWindow
MessageBoxA
GetKeyState
KillTimer
PostMessageA
GetClientRect
SetForegroundWindow
SetTimer
OffsetRect
GetWindowRect
SendMessageA
EnableWindow
RedrawWindow
GetSysColor
IsWindow
UnregisterClassA

gdi32

SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
CreateRectRgnIndirect
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetCharWidthA
GetTextMetricsA
EnumFontFamiliesExA
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
BitBlt
Escape
GetTextColor
LPtoDP
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePatternBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
CreateFontIndirectA
CreateFontA
GetBkColor
CreateSolidBrush
CreateRectRgn
DeleteObject
SetTextAlign
IntersectClipRect
ExcludeClipRect
PatBlt

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish

comctl32

ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

CoFreeUnusedLibraries
CoRevokeClassObject
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoRegisterMessageFilter
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize

olepro32

ord253

oleaut32

VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen

wsock32

sendto
htonl
recvfrom
__WSAFDIsSet
accept
bind
listen
ioctlsocket
htons
socket
setsockopt
connect
select
recv
send
closesocket
WSACleanup
WSAStartup

Sections

.text
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

58c489ab7912828a81e4ca2d908cce92

Headers

File Characteristics

Imports

myport

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 236KB - Virtual size: 234KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 24KB - Virtual size: 35KB

.rsrc Size: 104KB - Virtual size: 104KB

.text
Size: 236KB - Virtual size: 234KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 24KB - Virtual size: 35KB

.rsrc
Size: 104KB - Virtual size: 104KB