683bd5e5f5cd04ed6dc227941b7b650b0ecacd4ed54d83be9105f4784cea243c

Sharing

Copy URL

Twitter E-mail

General

Target

683bd5e5f5cd04ed6dc227941b7b650b0ecacd4ed54d83be9105f4784cea243c
Size

1.3MB
MD5

380222840f465b37ffa80c17ee313d78
SHA1

c08a5b4e9f37f1365757c84bbe397ed453ce09c1
SHA256

683bd5e5f5cd04ed6dc227941b7b650b0ecacd4ed54d83be9105f4784cea243c
SHA512

c272aa1480e2afa18b1175d0296a0f1a72d2763c0eb9f92cd4c6b8eadf75e8fc87b3aedbc0d86d1d39886876a2af13cb3265e0edbd8d1d1098f162ad94821c3e
SSDEEP

6144:8ID8k27/dDAiyWsWPoTyHWBpiqdxIneXNkrnlhWs5HI:ix3WnIn7nlh7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
683bd5e5f5cd04ed6dc227941b7b650b0ecacd4ed54d83be9105f4784cea243c

Files

683bd5e5f5cd04ed6dc227941b7b650b0ecacd4ed54d83be9105f4784cea243c
.dll windows:6 windows x86 arch:x86

992859e027a85f0366db99f36c917f0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseSemaphore
WaitForSingleObject
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
GetSystemDirectoryA
CreateSemaphoreA
GetLastError
DeviceIoControl
ReleaseMutex
CreateMutexA
Sleep
GetLogicalDriveStringsA
CreateFileW
GetStringTypeW
LCMapStringEx
CompareStringEx
HeapSize
WriteConsoleW
SetStdHandle
CloseHandle
CreateFileA
HeapReAlloc
SetEnvironmentVariableA
LoadLibraryW
OutputDebugStringW
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
ReadFile
AreFileApisANSI
MultiByteToWideChar
EncodePointer
DecodePointer
GetProcAddress
LoadLibraryExW
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WideCharToMultiByte
FlushFileBuffers
GetConsoleCP
GetConsoleMode
RtlUnwind
GetFileType
InitOnceExecuteOnce
GetStartupInfoW
SetFilePointer
SetFilePointerEx
ReadConsoleW
DeleteFileW
MoveFileExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
SetLastError
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

setupapi

SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA

Exports

Exports

CloseUSBDisk
FM_RSA_PKCS1_padding_add_type_1
FM_RSA_PKCS1_padding_add_type_2
FM_RSA_PKCS1_padding_check_type_1
FM_RSA_PKCS1_padding_check_type_2
FM_SIC_AgreeKey_SM9
FM_SIC_ClearUser
FM_SIC_CloseAllDevice
FM_SIC_CloseDevice
FM_SIC_CloseDeviceEx
FM_SIC_Cmd
FM_SIC_ContainerDelete
FM_SIC_ContainerEnum
FM_SIC_ContainerInfo
FM_SIC_ContainerRead
FM_SIC_ContainerWrite
FM_SIC_ContainerWriteECCCert
FM_SIC_Decrypt
FM_SIC_DecryptFinal
FM_SIC_DecryptInit
FM_SIC_DecryptUpdate
FM_SIC_DelECCKeypair
FM_SIC_DelKey
FM_SIC_DelRSAKeypair
FM_SIC_DelSM9MasterKeypair
FM_SIC_DelSM9UserKeypair
FM_SIC_ECCDecrypt
FM_SIC_ECCDecrypt_B
FM_SIC_ECCEncrypt
FM_SIC_ECCEncrypt_B
FM_SIC_ECCSign
FM_SIC_ECCVerify
FM_SIC_Encrypt
FM_SIC_EncryptFinal
FM_SIC_EncryptInit
FM_SIC_EncryptUpdate
FM_SIC_EnumDevice
FM_SIC_EnumDeviceSerialNum
FM_SIC_ExportECCKeypair
FM_SIC_ExportKey
FM_SIC_ExportRSAKeypair
FM_SIC_ExportSM9MasterKeypair
FM_SIC_ExportSM9UserKeypair
FM_SIC_ExtAuthenticate
FM_SIC_FILE_CreateDir
FM_SIC_FILE_CreateFile
FM_SIC_FILE_DeleteDir
FM_SIC_FILE_DeleteFile
FM_SIC_FILE_EnmuDir
FM_SIC_FILE_EnmuFile
FM_SIC_FILE_GetInfo
FM_SIC_FILE_Init
FM_SIC_FILE_ReadFile
FM_SIC_FILE_WriteFile
FM_SIC_GenECCKeypair
FM_SIC_GenKey
FM_SIC_GenRSAKeypair
FM_SIC_GenRandom
FM_SIC_GenSM9MasterKeypair
FM_SIC_GenSM9UserKeypair
FM_SIC_GenerateAgreementDataAndKeyWithECC
FM_SIC_GenerateAgreementDataAndKey_SM9
FM_SIC_GenerateAgreementDataWithECC
FM_SIC_GenerateAgreementDataWithPAIR_SM9
FM_SIC_GenerateKeyWithECC
FM_SIC_GenerateKey_SM9
FM_SIC_GetDevType
FM_SIC_GetDeviceInfo
FM_SIC_GetErrInfo
FM_SIC_GetInfo
FM_SIC_GetRsaKeyInfo
FM_SIC_HashFinal
FM_SIC_HashFinal_Ctx
FM_SIC_HashInit
FM_SIC_HashInit_Ctx
FM_SIC_HashUpdate
FM_SIC_HashUpdate_Ctx
FM_SIC_ImportECCKeypair
FM_SIC_ImportECCPrivateKey
FM_SIC_ImportKey
FM_SIC_ImportP12Cert
FM_SIC_ImportRSAKeypair
FM_SIC_ImportRSAPrivateKey
FM_SIC_ImportSM9MasterKeypair
FM_SIC_ImportSM9UserKeypair
FM_SIC_IntAuthenticate
FM_SIC_OpenByName
FM_SIC_OpenBySerial
FM_SIC_OpenDevice
FM_SIC_OpenDeviceEx
FM_SIC_RSADecrypt
FM_SIC_RSAEncrypt
FM_SIC_RSASign
FM_SIC_RSAVerify
FM_SIC_ReDownLoad
FM_SIC_ReadHiddenPart
FM_SIC_SM3Final
FM_SIC_SM3Final_Ctx
FM_SIC_SM3Final_Hard
FM_SIC_SM3Init
FM_SIC_SM3Init_Ctx
FM_SIC_SM3Init_Hard
FM_SIC_SM3Update
FM_SIC_SM3Update_Ctx
FM_SIC_SM3Update_Hard
FM_SIC_SM9Decrypt
FM_SIC_SM9Encrypt
FM_SIC_SM9KeyEncapsulePack
FM_SIC_SM9KeyEncapsuleUnpack
FM_SIC_SM9Sign
FM_SIC_SM9Verify
FM_SIC_SetAuth
FM_SIC_USER_BackupMng_SOFT
FM_SIC_USER_ChangePin
FM_SIC_USER_GetInfo_UKey
FM_SIC_USER_Login
FM_SIC_USER_Login_UKey
FM_SIC_USER_Logout
FM_SIC_USER_Logout_UKey
FM_SIC_USER_UserMng
FM_SIC_WaitForEvent
FM_SIC_WriteHiddenPart
FM_U_GetDiskType
FM_U_OpenDevice
GetCapa
GetSerialNum
Ukey_transfer_T
WritePriData
WriteUCfg
WriteUType

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

992859e027a85f0366db99f36c917f0e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

setupapi

Exports

Exports

Sections

.text Size: 201KB - Virtual size: 200KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 19KB - Virtual size: 18KB

.text
Size: 201KB - Virtual size: 200KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 19KB - Virtual size: 18KB