5875de0a938b9b0d36213f84412122337d34710e7d75e22f6ff5d86b99b9f26a

Sharing

Copy URL Twitter E-mail

General

Target

5875de0a938b9b0d36213f84412122337d34710e7d75e22f6ff5d86b99b9f26a
Size

136KB
MD5

2f0a37b1a50b2f8f0e4a3b52377906f6
SHA1

eaac109f5f23a1cb40d4070cf95eb1c3e8297ae8
SHA256

5875de0a938b9b0d36213f84412122337d34710e7d75e22f6ff5d86b99b9f26a
SHA512

916579575288528b2565f1f2cdd4a38f867754dc3ac6310e237f7717fe22f9c115c612455ccb8f2541943cd9fb9be85b8b608ad31b65790363fa4ef0b6f5f74c
SSDEEP

3072:RmlCWAMC4tR1RuqK2QN74XLRKWo0pcHU:kqqlu0FfuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5875de0a938b9b0d36213f84412122337d34710e7d75e22f6ff5d86b99b9f26a

Files

5875de0a938b9b0d36213f84412122337d34710e7d75e22f6ff5d86b99b9f26a
.dll windows:4 windows x86 arch:x86

745297f5cc41da86af515966276b5f7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileA
DeleteFileA
FindNextFileA
FileTimeToSystemTime
CloseHandle
SetCommTimeouts
SetCommState
GetCommState
SetupComm
GetLastError
ClearCommError
CreateFileA
FindClose
PurgeComm
WriteFile
ReadFile
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
GetTickCount
CreateMutexA
CreateDirectoryA
GetLocalTime
WaitForSingleObject
GetCurrentProcessId
ReleaseMutex
lstrcatA
GetModuleFileNameA
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
RaiseException
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
GetCPInfo
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW

Exports

Exports

SIU_ClearMcuID
SIU_ClearSerialNum
SIU_CloseCom
SIU_DataCompute
SIU_EnableEncrypt
SIU_GetAllDoorStatus
SIU_GetBatteryValStatus
SIU_GetCDMModel
SIU_GetEncryptMode
SIU_GetFirmWareVersion
SIU_GetHumanStatus
SIU_GetKCV
SIU_GetLEDStatus
SIU_GetLightStatus
SIU_GetMcuID
SIU_GetSOPStatus
SIU_GetSerialNum
SIU_GetShutterStatus
SIU_GetStatus
SIU_GetTemperature
SIU_GetVersion
SIU_GetWarningStatus
SIU_InitKey
SIU_LoadKey
SIU_LoadMcuID
SIU_LoadSerialNum
SIU_MCUReset
SIU_MakeMac
SIU_OpenCom
SIU_OpenOrCloseWarning
SIU_Reset
SIU_SetCDMModel
SIU_SetLEDBLink
SIU_SetLEDStatus
SIU_SetLightBLink
SIU_SetLightStatus
SIU_SetVector
SIU_ShutterClose
SIU_ShutterCloseCom
SIU_ShutterDetectObject
SIU_ShutterOpen
SIU_ShutterOpenCom
SIU_ShutterReset
SIU_TestTry
SIU_WarningCancel

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

745297f5cc41da86af515966276b5f7b

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 76KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 24KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 880B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 80KB - Virtual size: 76KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 24KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 880B

.reloc
Size: 12KB - Virtual size: 8KB