HUAWEI3G[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

HUAWEI3G.zip
Size

5.3MB
MD5

ed83fe1ade3916d7ad7ccfe285d236c9
SHA1

e6153c45d5092d0c192f15b34201914c948b7c41
SHA256

2f6abee23ee3204c3a5282d93d56a52ed0fb020671160c448c0c52ced25f9d8b
SHA512

9a18a173c888b1050cc91058a235566f463b062ce835116f3a17a547d61cf706706acd34eb1cb685a98e6c6fa591a7f5eb7b066025349eece80eead201f10e1a
SSDEEP

98304:tZU7FT9F3sjt5mBeHM8jtZr/zvi+P8BDSm6I2tRvLlE0b2CgEgxaoy0p:tZU7FT33spoBeHMWBrkB96NfL20ngxxp

Score

N/A

Malware Config

Signatures

Files

HUAWEI3G.zip
.zip
HUAWEI3G/Driver/X64/WdfCoInstaller01007.dll
.dll windows x64

cc5018e235a4bdab3c3d361ebe86307a

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-06-2007 23:54

Not After

13-06-2012 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-06-2007 23:54

Not After

13-06-2012 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:02:30:7e:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2008 21:57

Not After

10-06-2009 22:07

Subject

CN=Microsoft Windows Component Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

11-10-2005 21:55

Not After

26-04-2010 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

31:71:27:67:11:3a:7f:fc:dd:98:9e:a8:a8:14:0c:40:79:51:69:2d
Signer

Actual PE Digest

31:71:27:67:11:3a:7f:fc:dd:98:9e:a8:a8:14:0c:40:79:51:69:2d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Component Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

27-03-2008 23:51
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
_ultow
malloc
_wcsnicmp
free
_wtoi
_wcsicmp
_stricmp
_vsnwprintf

setupapi

SetupCloseInfFile
CM_Set_DevNode_Problem_Ex
SetupDiGetDeviceInstallParamsW
SetupLogErrorW
SetupOpenInfFileW
SetupCloseLog
SetupDiSetDeviceInstallParamsW
SetupOpenLog
SetupFindNextMatchLineW
SetupDiGetActualSectionToInstallW
SetupDiGetSelectedDriverW
SetupGetStringFieldW
SetupPromptReboot
SetupFindFirstLineW
SetupGetLineCountW
SetupDiGetDriverInfoDetailW

kernel32

GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
Sleep
LoadLibraryExW
ExpandEnvironmentStringsW
GetFileInformationByHandle
DeleteFileW
CloseHandle
FindNextFileW
RemoveDirectoryW
LockResource
GetLocalTime
FindClose
SetLastError
CreateFileW
FileTimeToSystemTime
TerminateProcess
GetExitCodeProcess
FormatMessageW
SizeofResource
WriteFile
OutputDebugStringW
WaitForSingleObject
CreateDirectoryW
CreateProcessW
LoadResource
FindResourceW
FindFirstFileW
LoadLibraryW
WideCharToMultiByte
FreeLibrary
lstrlenA
LocalFree
GetWindowsDirectoryW
LocalAlloc
GlobalFree
GetProcAddress
VerifyVersionInfoW
GetModuleFileNameW
GetModuleHandleW
VerSetConditionMask

advapi32

RegCloseKey
DeleteService
OpenSCManagerW
QueryServiceLockStatusW
QueryServiceConfigW
UnlockServiceDatabase
ChangeServiceConfigW
LockServiceDatabase
RegSetValueExW
RegFlushKey
RegCreateKeyExW
CloseServiceHandle
RegOpenKeyExW
QueryServiceStatusEx
RegQueryValueExW
OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW
IsCharAlphaNumericW
IsCharAlphaW

ole32

CoTaskMemFree

Exports

Exports

WdfCoInstaller
WdfPostDeviceInstall
WdfPostDeviceRemove
WdfPreDeviceInstall
WdfPreDeviceRemove

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_busfilter.inf
HUAWEI3G/Driver/X64/ew_cdcacm.cat
HUAWEI3G/Driver/X64/ew_cdcacm.inf
HUAWEI3G/Driver/X64/ew_cdcacm.sys
.exe windows x64

e0cd26c2ab5c50387e18b3c102808740

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExFreePoolWithTag
KeRemoveQueueDpc
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoDeleteDevice
KeSetEvent
IoFreeWorkItem
KeInitializeEvent
KeInitializeDpc
KeReleaseSpinLock
IoDetachDevice
KeInitializeTimer
KeSetTimerEx
IoCancelIrp
wcsstr
IoAllocateWorkItem
IofCompleteRequest
KeWaitForSingleObject
RtlWriteRegistryValue
IoAttachDeviceToDeviceStack
IoCreateSymbolicLink
IoCreateDevice
IoQueueWorkItem
KeCancelTimer
IoGetDeviceProperty
RtlDeleteRegistryValue
DbgPrint
KeAcquireSpinLockRaiseToDpc
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
IoDeleteSymbolicLink
MmMapLockedPagesSpecifyCache
PsTerminateSystemThread
ZwClose
KeSetTimer
PsCreateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
KeBugCheckEx
_vsnwprintf
RtlInitUnicodeString
MmGetSystemRoutineAddress
ZwOpenKey
ZwQueryValueKey
RtlCopyUnicodeString
IoOpenDeviceRegistryKey
IoReuseIrp
KeDelayExecutionThread
KeInsertQueueDpc
IoFreeIrp
IoAllocateIrp
IoBuildDeviceIoControlRequest
PoRequestPowerIrp
PoStartNextPowerIrp
PoCallDriver
PsGetVersion
KeClearEvent
IofCallDriver
ExAllocatePoolWithTag
memcmp

usbd.sys

USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_cdcecm.cat
HUAWEI3G/Driver/X64/ew_cdcecm.inf
HUAWEI3G/Driver/X64/ew_cdcecm.sys
.exe windows x64

04a34afdc3286df7a48eb3be1bc637da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoFreeMdl
MmMapLockedPagesSpecifyCache
ExInterlockedInsertHeadList
RtlCopyUnicodeString
ProbeForRead
RtlAnsiStringToUnicodeString
ProbeForWrite
RtlInitAnsiString
RtlFreeUnicodeString
_vsnprintf
ZwClose
MmProbeAndLockPages
MmUnlockPages
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
IoAllocateMdl
RtlCreateSecurityDescriptor
KeBugCheckEx
strncmp
ExAcquireFastMutex
ExReleaseFastMutex
KeCancelTimer
IoQueueWorkItem
ExInterlockedRemoveHeadList
KeSetTimer
RtlWriteRegistryValue
KeInsertQueueDpc
KeDelayExecutionThread
KeRemoveQueueDpc
KeClearEvent
KeAcquireSpinLockRaiseToDpc
IofCallDriver
DbgPrint
IoGetDeviceProperty
RtlUnicodeStringToInteger
KeWaitForSingleObject
IofCompleteRequest
IoAllocateWorkItem
ExInterlockedInsertTailList
KeInitializeTimer
KeReleaseSpinLock
KeInitializeDpc
KeInitializeEvent
IoFreeWorkItem
_vsnwprintf
ZwSetSecurityObject
ZwOpenFile
RtlInitUnicodeString
MmGetSystemRoutineAddress
ZwOpenKey
ZwQueryValueKey
IoOpenDeviceRegistryKey
IoReuseIrp
IoFreeIrp
IoAllocateIrp
PoRequestPowerIrp
IoCancelIrp
PoStartNextPowerIrp
PoCallDriver
IoBuildDeviceIoControlRequest
PsGetVersion
KeSetEvent
ExFreePoolWithTag
ExAllocatePoolWithTag
__C_specific_handler

ndis.sys

NdisFreeMemory
NdisMRegisterMiniport
NdisInitializeWrapper
NdisMDeregisterDevice
NdisMRegisterDevice
NdisReadConfiguration
NdisReadNetworkAddress
NdisCloseConfiguration
NdisWriteConfiguration
NdisOpenConfiguration
NdisAllocateBuffer
NdisAllocatePacket
NdisAllocateMemoryWithTag
NdisFreeBufferPool
NdisAllocateBufferPool
NdisAllocatePacketPool
NdisMIndicateStatus
NdisMIndicateStatusComplete
NdisFreePacketPool
NdisMSleep
NdisFreePacket
NdisMGetDeviceProperty
NdisTerminateWrapper
NdisMSetAttributesEx
NdisMRegisterUnloadHandler

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 896B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_cdcmdm.inf
HUAWEI3G/Driver/X64/ew_hwupgrade.cat
HUAWEI3G/Driver/X64/ew_hwupgrade.inf
HUAWEI3G/Driver/X64/ew_hwupgrade.sys
.exe windows x64

c3d61e3fe14ae7e30ee82f80f3648cb6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

RtlCopyUnicodeString
KeBugCheckEx
DbgPrint
RtlInitUnicodeString

wdfldr.sys

WdfVersionBind
WdfVersionUnbind

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_hwusbdev.cat
HUAWEI3G/Driver/X64/ew_hwusbdev.inf
HUAWEI3G/Driver/X64/ew_hwusbdev.sys
.exe windows x64

cb85c7f41150cda0451f8c96486811ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IofCompleteRequest
IoFreeIrp
RtlFreeAnsiString
RtlCopyUnicodeString
IoReleaseCancelSpinLock
DbgPrint
KeAcquireSpinLockRaiseToDpc
IoAcquireRemoveLockEx
KeClearEvent
IoReuseIrp
IoSetDeviceInterfaceState
KeSetPriorityThread
RtlInitUnicodeString
ExGetPreviousMode
IoReleaseRemoveLockEx
KeReleaseSpinLockFromDpcLevel
IoCancelIrp
PsCreateSystemThread
PsTerminateSystemThread
ZwClose
ObReferenceObjectByHandle
KeWaitForSingleObject
RtlWriteRegistryValue
IoGetAttachedDeviceReference
IoAllocateIrp
ObfDereferenceObject
KeWaitForMultipleObjects
KeAcquireSpinLockAtDpcLevel
IofCallDriver
ZwOpenKey
IoRegisterDeviceInterface
IoDeleteDevice
ZwSetValueKey
IoDetachDevice
PoSetPowerState
IoAttachDeviceToDeviceStack
KeReleaseSpinLock
IoOpenDeviceRegistryKey
IoCreateDevice
IoGetDeviceProperty
RtlDeleteRegistryValue
sprintf
ZwQueryValueKey
RtlAnsiStringToUnicodeString
strstr
RtlIntegerToUnicodeString
RtlInitAnsiString
KeInitializeDpc
KeInitializeTimer
RtlFreeUnicodeString
RtlAppendUnicodeStringToString
IoReleaseRemoveLockAndWaitEx
IoInitializeRemoveLockEx
IoAcquireCancelSpinLock
MmMapLockedPagesSpecifyCache
KeSetTimer
KeCancelTimer
isprint
KeReadStateTimer
KeQueryPriorityThread
IoBuildDeviceIoControlRequest
IoWMIRegistrationControl
KeReadStateEvent
IoFreeWorkItem
PoRequestPowerIrp
IoAllocateWorkItem
PoStartNextPowerIrp
PoCallDriver
IoIsWdmVersionAvailable
IoQueueWorkItem
KeBugCheckEx
RtlUnicodeStringToAnsiString
KeInitializeEvent
KeSetEvent
PsThreadType
ExFreePoolWithTag
RtlCompareMemory
ExAllocatePoolWithTag
__C_specific_handler

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

wmilib.sys

WmiSystemControl
WmiCompleteRequest

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_hwusbdevcfg.cat
HUAWEI3G/Driver/X64/ew_hwusbdevcfg.inf
HUAWEI3G/Driver/X64/ew_jubusenum.cat
HUAWEI3G/Driver/X64/ew_jubusenum.inf
HUAWEI3G/Driver/X64/ew_jubusenum.sys
.exe windows x64

ed93ac1de9af1a35e9b87671592baa38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoBuildDeviceIoControlRequest
KeInitializeEvent
KeDelayExecutionThread
KeWaitForSingleObject
RtlCompareUnicodeString
RtlUpcaseUnicodeChar
IofCallDriver
DbgPrint
strncpy
RtlCopyUnicodeString
IoSetThreadHardErrorMode
IoRaiseInformationalHardError
KeBugCheckEx
RtlAnsiCharToUnicodeChar
MmGetSystemRoutineAddress
strstr
RtlInitUnicodeString

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_jucdcacm.cat
HUAWEI3G/Driver/X64/ew_jucdcacm.inf
HUAWEI3G/Driver/X64/ew_jucdcacm.sys
.exe windows x64

ca19dd10fb633968226fb2a8de5900cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExFreePoolWithTag
_wcsnicmp
RtlInitUnicodeString
MmGetSystemRoutineAddress
RtlGetVersion
RtlEqualUnicodeString
wcsrchr
ZwQueryValueKey
ExAllocatePool
ZwEnumerateValueKey
ZwClose
RtlTimeToTimeFields
RtlWriteRegistryValue
PsGetVersion
RtlCompareUnicodeString
IoDeleteSymbolicLink
RtlDeleteRegistryValue
DbgPrint
ZwQueryKey
ZwOpenKey
KeSetEvent
KeInitializeEvent
KeDelayExecutionThread
IofCompleteRequest
KeWaitForSingleObject
KeBugCheckEx
RtlCopyUnicodeString
RtlUnicodeToMultiByteN
RtlAnsiCharToUnicodeChar
RtlUnicodeStringToInteger
IoGetConfigurationInformation
IoCreateSymbolicLink
ExAllocatePoolWithTag

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_jucdcecm.cat
HUAWEI3G/Driver/X64/ew_jucdcecm.inf
HUAWEI3G/Driver/X64/ew_jucdcecm.sys
.exe windows x64

8cb5faaad562c9a39bb4b41df6157874

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoFreeMdl
MmMapLockedPagesSpecifyCache
RtlWriteRegistryValue
KeAcquireSpinLockRaiseToDpc
ZwOpenKey
IoGetDeviceProperty
RtlUnicodeStringToInteger
ZwClose
ExInterlockedInsertTailList
KeReleaseSpinLock
ZwSetValueKey
KeInitializeEvent
RtlAppendUnicodeToString
MmGetSystemRoutineAddress
RtlInitUnicodeString
RtlCopyUnicodeString
KeBugCheckEx
ExInterlockedRemoveHeadList
ExInterlockedInsertHeadList
DbgPrint
RtlAnsiCharToUnicodeChar

ndis.sys

NdisAllocateBuffer
NdisAllocatePacket
NdisMGetDeviceProperty
NdisAllocateMemoryWithTag
NdisTerminateWrapper
NdisOpenConfiguration
NdisCloseConfiguration
NdisReadConfiguration
NdisFreeBufferPool
NdisMDeregisterAdapterShutdownHandler
NdisAllocateBufferPool
NdisMSetAttributesEx
NdisInitializeWrapper
NdisWaitEvent
NdisAllocatePacketPool
NdisFreeMemory
NdisSetEvent
NdisMRegisterMiniport
NdisReadNetworkAddress
NdisMRegisterUnloadHandler
NdisMIndicateStatus
NdisMIndicateStatusComplete
NdisFreePacketPool
NdisMSleep
NdisFreePacket

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_jucdcmdm.cat
HUAWEI3G/Driver/X64/ew_jucdcmdm.inf
HUAWEI3G/Driver/X64/ew_juextctrl.cat
HUAWEI3G/Driver/X64/ew_juextctrl.inf
HUAWEI3G/Driver/X64/ew_juextctrl.sys
.exe windows x64

781bbd104ce1319e15593dbe359daa85

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

RtlCopyUnicodeString
KeBugCheckEx
RtlInitUnicodeString
RtlCompareUnicodeString
RtlUnicodeStringToInteger
DbgPrint
RtlAnsiCharToUnicodeChar

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_juwwanecm.cat
HUAWEI3G/Driver/X64/ew_juwwanecm.inf
HUAWEI3G/Driver/X64/ew_juwwanecm.sys
.exe windows x64

108cba731cea8d2bba409d7c08e76a95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

DbgPrint
ExFreePoolWithTag
RtlCompareMemory
RtlFreeUnicodeString
RtlStringFromGUID
MmMapLockedPagesSpecifyCache
RtlWriteRegistryValue
IoGetDeviceProperty
RtlUnicodeStringToInteger
ZwClose
ExInterlockedInsertTailList
ZwSetValueKey
KeInitializeEvent
RtlAppendUnicodeToString
MmGetSystemRoutineAddress
RtlInitUnicodeString
RtlCopyUnicodeString
KeBugCheckEx
ExInterlockedRemoveHeadList
ExInterlockedInsertHeadList
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ZwOpenKey
RtlUnicodeToMultiByteN
RtlAnsiCharToUnicodeChar
ExAllocatePoolWithTag
KeInitializeMutex
KeSetEvent
KeReleaseMutex
KeDelayExecutionThread
PsCreateSystemThread
PsTerminateSystemThread
KeQueryTimeIncrement
ObReferenceObjectByHandle
KeWaitForSingleObject
ObfDereferenceObject
__chkstk

ndis.sys

NdisAllocateNetBufferAndNetBufferList
NdisAllocateMdl
NdisMIndicateReceiveNetBufferLists
NdisMSendNetBufferListsComplete
NdisMOidRequestComplete
NdisMSetMiniportAttributes
NdisMGetDeviceProperty
NdisFreeNetBufferList
NdisFreeMdl
NdisAllocateMemoryWithTagPriority
NdisMSleep
NdisMRegisterMiniportDriver
NdisWriteConfiguration
NdisCloseConfiguration
NdisReadNetworkAddress
NdisSetEvent
NdisFreeMemory
NdisAllocateNetBufferListPool
NdisFreeNetBufferListPool
NdisMDeregisterMiniportDriver
NdisMIndicateStatusEx
NdisWaitEvent
NdisOpenConfigurationEx
NdisReadConfiguration

netio.sys

NotifyIpInterfaceChange
InitializeIpForwardEntry
CreateUnicastIpAddressEntry
CancelMibChangeNotify2
ConvertInterfaceLuidToGuid
CreateIpForwardEntry2
FreeMibTable
DeleteUnicastIpAddressEntry
GetUnicastIpAddressTable
GetIpForwardTable2
InitializeUnicastIpAddressEntry
DeleteIpForwardEntry2

wdfldr.sys

WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBindClass
WdfVersionBind

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_usbenumfilter.cat
HUAWEI3G/Driver/X64/ew_usbenumfilter.sys
.exe windows x64

0046771234db44cc34966ce3fc411284

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoAcquireRemoveLockEx
IoDeleteDevice
KeSetEvent
KeInitializeEvent
IoReleaseRemoveLockEx
IoDetachDevice
PoStartNextPowerIrp
IofCompleteRequest
IoReleaseRemoveLockAndWaitEx
KeWaitForSingleObject
IoGetAttachedDeviceReference
IoAttachDeviceToDeviceStack
PoCallDriver
ObfDereferenceObject
IoInitializeRemoveLockEx
IoCreateDevice
DbgPrint
IofCallDriver
KeClearEvent
ExFreePoolWithTag
_wcsnicmp
RtlInitUnicodeString
swprintf
ZwQueryValueKey
ExAllocatePool
ZwClose
IoFreeIrp
IoAllocateIrp
RtlCompareMemory
ZwOpenKey
KeBugCheckEx
MmGetSystemRoutineAddress
PsGetVersion

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 384B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ew_wwanecm.cat
HUAWEI3G/Driver/X64/ew_wwanecm.inf
HUAWEI3G/Driver/X64/ew_wwanecm.sys
.exe windows x64

f06aed0e354a98bddf42e6c039bad9c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoAllocateMdl
RtlCreateSecurityDescriptor
IoAcquireCancelSpinLock
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlInitUnicodeString
MmGetSystemRoutineAddress
ObfDereferenceObject
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
ZwSetValueKey
ExFreePool
ZwOpenKey
KeBugCheckEx
IoReleaseCancelSpinLock
MmUnlockPages
MmProbeAndLockPages
ZwClose
_vsnprintf
RtlFreeUnicodeString
IoFreeMdl
RtlInitAnsiString
ProbeForWrite
RtlAnsiStringToUnicodeString
ProbeForRead
RtlCopyUnicodeString
RtlCompareMemory
ExInterlockedInsertHeadList
MmMapLockedPagesSpecifyCache
strncmp
ExAcquireFastMutex
ExReleaseFastMutex
KeCancelTimer
IoQueueWorkItem
ExInterlockedRemoveHeadList
KeSetTimer
RtlWriteRegistryValue
KeWaitForSingleObject
KeInsertQueueDpc
KeDelayExecutionThread
KeSetEvent
KeRemoveQueueDpc
KeClearEvent
KeAcquireSpinLockRaiseToDpc
_vsnwprintf
ZwSetSecurityObject
ZwOpenFile
DbgPrint
IoGetDeviceProperty
RtlUnicodeStringToInteger
IofCompleteRequest
IoAllocateWorkItem
ExInterlockedInsertTailList
KeInitializeTimer
KeReleaseSpinLock
KeInitializeDpc
KeInitializeEvent
ZwQueryValueKey
IoOpenDeviceRegistryKey
IoReuseIrp
IoFreeIrp
IoAllocateIrp
IofCallDriver
PoRequestPowerIrp
IoCancelIrp
PoStartNextPowerIrp
PoCallDriver
IoBuildDeviceIoControlRequest
isspace
isprint
PsGetVersion
IoFreeWorkItem
ExFreePoolWithTag
ExAllocatePoolWithTag
__C_specific_handler

hal

KeStallExecutionProcessor

ndis.sys

NdisFreeMdl
NdisMRegisterMiniportDriver
NdisWriteConfiguration
NdisCloseConfiguration
NdisFreeMemory
NdisMDeregisterMiniportDriver
NdisOpenConfigurationEx
NdisMGetDeviceProperty
NdisMSetMiniportAttributes
NdisFreeNetBufferListPool
NdisAllocateMemoryWithTagPriority
NdisCancelTimerObject
NdisAllocateMemoryWithTag
NdisSetTimerObject
NdisFreeTimerObject
NdisAllocateTimerObject
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisReadConfiguration
NdisReadNetworkAddress
NdisMSendNetBufferListsComplete
NdisAllocateNetBufferAndNetBufferList
NdisAllocateMdl
NdisMIndicateReceiveNetBufferLists
NdisMIndicateStatusEx
NdisAllocateNetBufferListPool
NdisMSleep
NdisFreeNetBufferList

netio.sys

InitializeUnicastIpAddressEntry
GetIpForwardTable2
DeleteUnicastIpAddressEntry
FreeMibTable
CreateIpForwardEntry2
CreateUnicastIpAddressEntry
DeleteIpForwardEntry2
InitializeIpForwardEntry
GetUnicastIpAddressTable

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ewdcsc.cat
HUAWEI3G/Driver/X64/ewdcsc.inf
HUAWEI3G/Driver/X64/ewdcsc.sys
.exe windows x64

ae16122131d27aba2d281331059840c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoBuildDeviceIoControlRequest
IoSetDeviceInterfaceState
KeSetEvent
IoFreeWorkItem
RtlQueryRegistryValues
KeSetTimerEx
RtlFreeUnicodeString
PsCreateSystemThread
PsTerminateSystemThread
IoAllocateWorkItem
ZwClose
ObReferenceObjectByHandle
KeWaitForSingleObject
IoFreeIrp
IoReuseIrp
ObfDereferenceObject
IoQueueWorkItem
KeCancelTimer
DbgPrint
IofCallDriver
PoRequestPowerIrp
IoCancelIrp
PoStartNextPowerIrp
PoCallDriver
IoWMIRegistrationControl
ZwQueryValueKey
KeBugCheckEx
KeClearEvent
IoAcquireCancelSpinLock
KeAcquireSpinLockRaiseToDpc
IoReleaseCancelSpinLock
IoCreateDevice
KeInitializeTimerEx
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IofCompleteRequest
PoSetPowerState
IoDetachDevice
KeReleaseSpinLock
KeInitializeDpc
KeInitializeEvent
IoDeleteDevice
RtlInitUnicodeString
IoRegisterDeviceInterface
ExFreePoolWithTag
IoAllocateIrp
ExAllocatePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion
__C_specific_handler

wmilib.sys

WmiSystemControl
WmiCompleteRequest

usbd.sys

USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

smclib.sys

SmartcardUpdateCardCapabilities
SmartcardT0Reply
SmartcardT0Request
SmartcardT1Request
SmartcardAcquireRemoveLock
SmartcardReleaseRemoveLock
SmartcardAcquireRemoveLockWithTag
SmartcardDeviceControl
SmartcardReleaseRemoveLockWithTag
SmartcardSetDebugLevel
SmartcardLogError
SmartcardInitialize
SmartcardT1Reply

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ewmdm2k.cat
HUAWEI3G/Driver/X64/ewmdm2k.inf
HUAWEI3G/Driver/X64/ewnet.inf
HUAWEI3G/Driver/X64/ewser2k.cat
HUAWEI3G/Driver/X64/ewser2k.inf
HUAWEI3G/Driver/X64/ewsmartcard.cat
HUAWEI3G/Driver/X64/ewsmartcard.inf
HUAWEI3G/Driver/X64/ewusbmdm.sys
.exe windows x64

bbde52939d9cb8784e1cfa4ff225536b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeReleaseSpinLock
_vsnprintf
IofCompleteRequest
IoFreeIrp
RtlFreeAnsiString
RtlCopyUnicodeString
IoReleaseCancelSpinLock
RtlDeleteRegistryValue
DbgPrint
KeAcquireSpinLockRaiseToDpc
IoAcquireRemoveLockEx
KeClearEvent
IoReuseIrp
IoSetDeviceInterfaceState
KeSetPriorityThread
RtlInitUnicodeString
ExGetPreviousMode
IoReleaseRemoveLockEx
KeReleaseSpinLockFromDpcLevel
IoCancelIrp
PsCreateSystemThread
PsTerminateSystemThread
ZwClose
ObReferenceObjectByHandle
KeWaitForSingleObject
RtlWriteRegistryValue
IoGetAttachedDeviceReference
RtlCompareUnicodeString
IoAllocateIrp
ObfDereferenceObject
IoOpenDeviceRegistryKey
KeWaitForMultipleObjects
KeAcquireSpinLockAtDpcLevel
KeQueryPriorityThread
IofCallDriver
IoRegisterDeviceInterface
IoDeleteDevice
ZwSetValueKey
RtlUnicodeStringToAnsiString
PoSetPowerState
IoCreateUnprotectedSymbolicLink
IoAttachDeviceToDeviceStack
RtlCompareMemory
IoCreateDevice
IoGetDeviceProperty
ZwOpenKey
ZwQueryValueKey
RtlTimeToTimeFields
MmGetSystemRoutineAddress
isprint
RtlAnsiStringToUnicodeString
strstr
RtlIntegerToUnicodeString
RtlInitAnsiString
KeInitializeDpc
KeInitializeTimer
RtlFreeUnicodeString
RtlAppendUnicodeStringToString
IoReleaseRemoveLockAndWaitEx
IoInitializeRemoveLockEx
IoAcquireCancelSpinLock
MmMapLockedPagesSpecifyCache
KeSetTimer
KeCancelTimer
KeReadStateTimer
IoBuildDeviceIoControlRequest
IoWMIRegistrationControl
KeReadStateEvent
IoFreeWorkItem
PoRequestPowerIrp
IoAllocateWorkItem
PoStartNextPowerIrp
PoCallDriver
IoQueueWorkItem
KeBugCheckEx
KeInitializeEvent
KeSetEvent
ExFreePoolWithTag
IoDeleteSymbolicLink
IoDetachDevice
ExAllocatePoolWithTag
PsGetVersion
__C_specific_handler

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

wmilib.sys

WmiSystemControl
WmiCompleteRequest

Sections

.text
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ewusbnet.cat
HUAWEI3G/Driver/X64/ewusbnet.sys
.exe windows x64

eada4b81a73ba856e2cdd2be8485bc7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ZwSetSecurityObject
strrchr
ZwOpenFile
IoReleaseCancelSpinLock
RtlCreateSecurityDescriptor
ExAllocatePool
KeSetPriorityThread
MmGetSystemRoutineAddress
ExGetPreviousMode
KeReleaseSpinLockFromDpcLevel
KeReleaseMutex
KeAcquireSpinLockAtDpcLevel
KeQueryPriorityThread
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeMutex
KeInitializeDpc
KeInitializeTimer
IoOpenDeviceRegistryKey
ZwCreateFile
IofCompleteRequest
ZwQueryValueKey
RtlTimeToTimeFields
ZwWriteFile
KeSetTimer
KeCancelTimer
IoRegisterPlugPlayNotification
KeReadStateEvent
IoFreeWorkItem
PoRequestPowerIrp
IoGetDeviceObjectPointer
IoAllocateWorkItem
PoStartNextPowerIrp
IoUnregisterPlugPlayNotification
PoCallDriver
KeReadStateTimer
IoQueueWorkItem
RtlCompareMemory
KeBugCheckEx
IoCancelIrp
IoInitializeRemoveLockEx
RtlInitAnsiString
ExInterlockedRemoveHeadList
RtlRandom
IoReleaseRemoveLockAndWaitEx
ExInterlockedInsertTailList
IoFreeMdl
IoAcquireRemoveLockEx
ZwOpenKey
RtlCopyUnicodeString
RtlWriteRegistryValue
RtlFreeAnsiString
RtlAppendUnicodeStringToString
RtlFreeUnicodeString
IoReleaseRemoveLockEx
ZwSetValueKey
RtlUnicodeStringToAnsiString
KeInitializeEvent
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
IoReuseIrp
KeWaitForMultipleObjects
ObfDereferenceObject
KeWaitForSingleObject
ObReferenceObjectByHandle
ZwClose
PsTerminateSystemThread
PsCreateSystemThread
KeClearEvent
IoAllocateIrp
IoFreeIrp
MmMapLockedPagesSpecifyCache
ExFreePoolWithTag
ExAllocatePoolWithTag
KeSetEvent
_vsnprintf
KeAcquireSpinLockRaiseToDpc
DbgPrint
ExSystemTimeToLocalTime
KeReleaseSpinLock
PsGetVersion

ndis.sys

NdisOpenConfiguration
NdisMIndicateStatus
NdisWriteConfiguration
NdisReadConfiguration
NdisWriteErrorLogEntry
NdisMDeregisterDevice
NdisMRegisterDevice
NdisAllocateBuffer
NdisFreeBufferPool
NdisAllocateBufferPool
NdisInitializeTimer
NdisAllocatePacketPool
NdisReadNetworkAddress
NdisCloseConfiguration
NdisInitializeEvent
NdisFreePacketPool
NdisMRegisterAdapterShutdownHandler
NdisMIndicateStatusComplete
NdisAllocatePacket
NdisFreePacket
NdisMGetDeviceProperty
NdisTerminateWrapper
NdisSetTimer
NdisMDeregisterAdapterShutdownHandler
NdisMSetAttributesEx
NdisInitializeWrapper
NdisWaitEvent
NdisSetEvent
NdisMRegisterMiniport
NdisCancelTimer
NdisMRegisterUnloadHandler
NdisMSleep
NdisAllocateMemoryWithTag
NdisFreeMemory

usbd.sys

USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

Sections

.text
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X64/ewusbwwan.cat
HUAWEI3G/Driver/X64/ewusbwwan.inf
HUAWEI3G/Driver/X64/ewusbwwan.sys
.exe windows x64

da71bd69a3fe5e5dd34866ebf8850a68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IofCallDriver
KeInitializeMutex
KeInitializeDpc
KeInitializeTimer
IoSetDevicePropertyData
KeReadStateEvent
IoOpenDeviceRegistryKey
ZwCreateFile
ExSystemTimeToLocalTime
ZwQueryValueKey
RtlTimeToTimeFields
ZwWriteFile
KeSetTimer
KeCancelTimer
ExAllocatePool
IoFreeWorkItem
KeQueryPriorityThread
IoGetDeviceObjectPointer
IoAllocateWorkItem
PoStartNextPowerIrp
IoUnregisterPlugPlayNotification
PoCallDriver
KeReadStateTimer
IoQueueWorkItem
IoBuildDeviceIoControlRequest
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
MmGetSystemRoutineAddress
_vsnwprintf
KeBugCheckEx
RtlCreateSecurityDescriptor
KeReleaseSpinLockFromDpcLevel
KeReleaseMutex
KeAcquireSpinLockAtDpcLevel
PoRequestPowerIrp
ZwOpenFile
strrchr
ZwSetSecurityObject
IofCompleteRequest
IoCancelIrp
RtlInitAnsiString
IoInitializeRemoveLockEx
ExInterlockedRemoveHeadList
RtlRandom
IoReleaseRemoveLockAndWaitEx
ExInterlockedInsertTailList
IoAcquireRemoveLockEx
ZwOpenKey
RtlCopyUnicodeString
RtlWriteRegistryValue
RtlFreeAnsiString
RtlAppendUnicodeStringToString
RtlFreeUnicodeString
IoReleaseRemoveLockEx
ZwSetValueKey
RtlUnicodeStringToAnsiString
KeInitializeEvent
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
IoReuseIrp
KeWaitForMultipleObjects
ObfDereferenceObject
ObReferenceObjectByHandle
ZwClose
PsTerminateSystemThread
PsCreateSystemThread
RtlCompareMemory
IoAllocateIrp
IoFreeIrp
ExFreePoolWithTag
ExGetPreviousMode
IoReleaseCancelSpinLock
KeSetPriorityThread
ExAllocatePoolWithTag
MmMapLockedPagesSpecifyCache
KeSetEvent
_vsnprintf
KeAcquireSpinLockRaiseToDpc
DbgPrint
KeWaitForSingleObject
KeReleaseSpinLock
IoRegisterPlugPlayNotification
KeClearEvent
PsGetVersion
__chkstk

hal

KeStallExecutionProcessor

ndis.sys

NdisMIndicateStatusEx
NdisMSendNetBufferListsComplete
NdisMOidRequestComplete
NdisAllocateMemoryWithTagPriority
NdisMIndicateReceiveNetBufferLists
NdisFreeMemory
NdisAllocateMemoryWithTag
NdisReadConfiguration
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisAllocateNetBufferAndNetBufferList
NdisAllocateNetBufferListPool
NdisReadNetworkAddress
NdisAllocateMdl
NdisInitializeEvent
NdisFreeMdl
NdisFreeNetBufferListPool
NdisFreeNetBufferList
NdisMSetMiniportAttributes
NdisCancelTimerObject
NdisMGetDeviceProperty
NdisOpenConfigurationEx
NdisMResetComplete
NdisSetTimerObject
NdisWriteErrorLogEntry
NdisFreeTimerObject
NdisWaitEvent
NdisMDeregisterMiniportDriver
NdisSetEvent
NdisCloseConfiguration
NdisWriteConfiguration
NdisMRegisterMiniportDriver
NdisMSleep
NdisAllocateTimerObject

usbd.sys

USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

netio.sys

GetUnicastIpAddressTable
InitializeUnicastIpAddressEntry
GetIpForwardTable2
DeleteUnicastIpAddressEntry
FreeMibTable
CreateIpForwardEntry2
CreateUnicastIpAddressEntry
DeleteIpForwardEntry2
InitializeIpForwardEntry

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGED_CO
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/WdfCoInstaller01007.dll
.dll windows x86

9aa2546c4dfe543e11dbbf7cb79c00c5

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:02:30:7e:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2008 21:57

Not After

10-06-2009 22:07

Subject

CN=Microsoft Windows Component Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

11-10-2005 21:55

Not After

26-04-2010 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

67:f1:0f:19:25:39:f6:40:e2:69:b1:19:9c:75:1f:4e:47:c6:b7:84
Signer

Actual PE Digest

67:f1:0f:19:25:39:f6:40:e2:69:b1:19:9c:75:1f:4e:47:c6:b7:84

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Component Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

27-03-2008 23:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
_wcsnicmp
malloc
free
_wtoi
_wcsicmp
_ultow
_stricmp
memset
memcpy
_vsnwprintf

setupapi

SetupCloseInfFile
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupOpenLog
SetupLogErrorW
SetupCloseLog
CM_Set_DevNode_Problem_Ex
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupPromptReboot
SetupDiGetActualSectionToInstallW
SetupGetLineCountW
SetupFindFirstLineW
SetupGetStringFieldW
SetupFindNextMatchLineW
SetupDiGetSelectedDriverW

kernel32

GetWindowsDirectoryW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryExW
ExpandEnvironmentStringsW
CreateProcessW
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
WriteFile
RemoveDirectoryW
CreateDirectoryW
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
CreateFileW
GetFileInformationByHandle
FileTimeToSystemTime
CloseHandle
FormatMessageW
GetLocalTime
OutputDebugStringW
LoadLibraryW
FreeLibrary
lstrlenA
WideCharToMultiByte
GetModuleFileNameW
LocalAlloc
LocalFree
GetLastError
GetProcAddress
GetModuleHandleW
GlobalFree
VerifyVersionInfoW
VerSetConditionMask

advapi32

RegQueryValueExW
LockServiceDatabase
QueryServiceLockStatusW
ChangeServiceConfigW
UnlockServiceDatabase
QueryServiceConfigW
RegSetValueExW
RegFlushKey
RegCreateKeyExW
DeleteService
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
CloseServiceHandle
RegOpenKeyExW
RegCloseKey

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust

shell32

CommandLineToArgvW

user32

IsCharAlphaW
IsCharAlphaNumericW
LoadStringW

ole32

CoTaskMemFree

Exports

Exports

WdfCoInstaller
WdfPostDeviceInstall
WdfPostDeviceRemove
WdfPreDeviceInstall
WdfPreDeviceRemove

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1019KB - Virtual size: 1019KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_busfilter.inf
HUAWEI3G/Driver/X86/ew_cdcacm.cat
HUAWEI3G/Driver/X86/ew_cdcacm.inf
HUAWEI3G/Driver/X86/ew_cdcacm.sys
.exe windows x86

e55e1dd7e0a25d5fb503e7cde1d727a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExFreePoolWithTag
IoSetDeviceInterfaceState
RtlDeleteRegistryValue
IoDeleteSymbolicLink
IoFreeWorkItem
memset
KeSetTimerEx
KeSetEvent
KeCancelTimer
InterlockedExchange
KeClearEvent
wcsstr
IofCompleteRequest
IoCancelIrp
IoGetDeviceProperty
RtlWriteRegistryValue
IoCreateSymbolicLink
ExAllocatePoolWithTag
KeWaitForSingleObject
KeRemoveQueueDpc
IoQueueWorkItem
KeInitializeSpinLock
KeInitializeDpc
KeInitializeTimer
IoAllocateWorkItem
KeInitializeEvent
IoDeleteDevice
IoDetachDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
IoRegisterDeviceInterface
IofCallDriver
PsTerminateSystemThread
ZwClose
MmMapLockedPagesSpecifyCache
memcpy
KeSetTimer
ObfDereferenceObject
ObReferenceObjectByHandle
PsCreateSystemThread
KeTickCount
KeBugCheckEx
DbgPrint
IoBuildDeviceIoControlRequest
PoCallDriver
MmGetSystemRoutineAddress
RtlInitUnicodeString
ZwQueryValueKey
ZwOpenKey
IoOpenDeviceRegistryKey
ZwCreateKey
RtlCopyUnicodeString
IoReuseIrp
IoFreeIrp
InterlockedDecrement
KeDelayExecutionThread
KeInsertQueueDpc
IoAllocateIrp
PoStartNextPowerIrp
InterlockedIncrement
PoRequestPowerIrp
PsGetVersion
_vsnwprintf

hal

KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_cdcecm.cat
HUAWEI3G/Driver/X86/ew_cdcecm.inf
HUAWEI3G/Driver/X86/ew_cdcecm.sys
.exe windows x86

296731b97271c380a3d7502492ddf57c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoFreeMdl
InterlockedIncrement
MmMapLockedPagesSpecifyCache
InterlockedDecrement
InterlockedExchange
KeQueryInterruptTime
ExfInterlockedInsertHeadList
RtlCopyUnicodeString
_vsnprintf
memcpy
RtlCreateSecurityDescriptor
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
ProbeForWrite
ProbeForRead
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeTickCount
KeBugCheckEx
KeInitializeEvent
strncmp
KeClearEvent
IoQueueWorkItem
RtlWriteRegistryValue
KeRemoveQueueDpc
KeCancelTimer
KeSetTimer
KeInsertQueueDpc
KeDelayExecutionThread
ExfInterlockedRemoveHeadList
IofCallDriver
KeWaitForSingleObject
IoAllocateWorkItem
KeInitializeDpc
KeInitializeTimer
RtlUnicodeStringToInteger
memset
ExAllocatePoolWithTag
ExfInterlockedInsertTailList
KeSetEvent
IofCompleteRequest
IoFreeWorkItem
IoGetDeviceProperty
ExFreePoolWithTag
DbgPrint
ZwClose
IoBuildDeviceIoControlRequest
PoCallDriver
PoRequestPowerIrp
MmGetSystemRoutineAddress
RtlInitUnicodeString
ZwQueryValueKey
ZwOpenKey
IoOpenDeviceRegistryKey
ZwCreateKey
IoReuseIrp
IoFreeIrp
IoCancelIrp
KeInitializeSpinLock
IoAllocateIrp
PoStartNextPowerIrp
_vsnwprintf
PsGetVersion
ZwSetSecurityObject
ZwOpenFile
RtlUnwind

hal

ExReleaseFastMutex
KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql
ExAcquireFastMutex

ndis.sys

NdisWriteConfiguration
NdisReadConfiguration
NdisCloseConfiguration
NdisOpenConfiguration
NdisAllocateBuffer
NdisAllocatePacket
NdisMIndicateStatus
NdisMIndicateStatusComplete
NdisMSleep
NdisReadNetworkAddress
NdisAllocatePacketPool
NdisFreePacket
NdisFreePacketPool
NdisFreeBufferPool
NdisMDeregisterDevice
NdisAllocateMemoryWithTag
NdisInitializeWrapper
NdisMRegisterMiniport
NdisTerminateWrapper
NdisMRegisterUnloadHandler
NdisMSetAttributesEx
NdisMGetDeviceProperty
NdisMRegisterDevice
NdisAllocateBufferPool
NdisFreeMemory

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_cdcmdm.inf
HUAWEI3G/Driver/X86/ew_hwupgrade.cat
HUAWEI3G/Driver/X86/ew_hwupgrade.inf
HUAWEI3G/Driver/X86/ew_hwupgrade.sys
.exe windows x86

1a1b9fd582b19a79564f00aaf72e299b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
RtlCopyUnicodeString
KeTickCount
DbgPrint
memcpy
memset

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 878B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_hwusbdev.cat
HUAWEI3G/Driver/X86/ew_hwusbdev.inf
HUAWEI3G/Driver/X86/ew_hwusbdev.sys
.exe windows x86

41252f96bd8abf8c927bbb0b9bb2c577

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql

ntoskrnl.exe

IoFreeIrp
ExFreePoolWithTag
DbgPrint
IoReleaseCancelSpinLock
IofCompleteRequest
ExAllocatePoolWithTag
RtlCopyUnicodeString
RtlFreeAnsiString
KeInitializeEvent
RtlUnicodeStringToAnsiString
memset
IoCancelIrp
KeWaitForSingleObject
IofCallDriver
IoReuseIrp
IoAllocateIrp
ZwClose
KeClearEvent
ObfDereferenceObject
IoGetAttachedDeviceReference
IoReleaseRemoveLockEx
RtlInitUnicodeString
ExGetPreviousMode
ZwOpenKey
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
PsTerminateSystemThread
IoSetDeviceInterfaceState
ObReferenceObjectByHandle
PsCreateSystemThread
IoAcquireRemoveLockEx
RtlWriteRegistryValue
KeWaitForMultipleObjects
KeSetPriorityThread
KeGetCurrentThread
ZwSetValueKey
IoOpenDeviceRegistryKey
memcpy
IoDeleteDevice
KeSetEvent
RtlCompareMemory
IoGetDeviceProperty
IoRegisterDeviceInterface
PoSetPowerState
IoAttachDeviceToDeviceStack
IoCreateDevice
KeQuerySystemTime
RtlDeleteRegistryValue
ZwQueryValueKey
sprintf
KeInitializeDpc
KeInitializeTimer
IoInitializeRemoveLockEx
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoReleaseRemoveLockAndWaitEx
strstr
IoAcquireCancelSpinLock
KeCancelTimer
KeSetTimer
MmMapLockedPagesSpecifyCache
isprint
KeReadStateTimer
KeQueryPriorityThread
IoBuildDeviceIoControlRequest
PoCallDriver
PoStartNextPowerIrp
IoIsWdmVersionAvailable
IoWMIRegistrationControl
PoRequestPowerIrp
IoFreeWorkItem
KeReadStateEvent
IoQueueWorkItem
IoAllocateWorkItem
KeTickCount
KeBugCheckEx
IoDetachDevice
RtlUnwind
PsThreadType

usbd.sys

USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

wmilib.sys

WmiSystemControl
WmiCompleteRequest

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 896B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_hwusbdevcfg.cat
HUAWEI3G/Driver/X86/ew_hwusbdevcfg.inf
HUAWEI3G/Driver/X86/ew_jubusenum.cat
HUAWEI3G/Driver/X86/ew_jubusenum.inf
HUAWEI3G/Driver/X86/ew_jubusenum.sys
.exe windows x86

1763377db5a4b29901edec4cfadb448d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeEvent
RtlCompareUnicodeString
memcpy
KeDelayExecutionThread
RtlUpcaseUnicodeChar
memset
strstr
strncpy
IoRaiseInformationalHardError
IoSetThreadHardErrorMode
KeTickCount
KeBugCheckEx
_allmul
RtlInitUnicodeString
RtlAnsiCharToUnicodeChar
MmGetSystemRoutineAddress
RtlCopyUnicodeString
DbgPrint

hal

KeGetCurrentIrql

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_jucdcacm.cat
HUAWEI3G/Driver/X86/ew_jucdcacm.inf
HUAWEI3G/Driver/X86/ew_jucdcacm.sys
.exe windows x86

28007af2dd759c9d8fff8673601f3f96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlGetVersion
MmGetSystemRoutineAddress
ZwClose
RtlDeleteRegistryValue
RtlEqualUnicodeString
ExFreePoolWithTag
ZwEnumerateValueKey
ExAllocatePoolWithTag
ZwQueryKey
ZwOpenKey
memcpy
IoGetConfigurationInformation
RtlWriteRegistryValue
IoDeleteSymbolicLink
ZwQueryValueKey
_wcsnicmp
PsGetVersion
RtlTimeToTimeFields
KeQuerySystemTime
IoCreateSymbolicLink
RtlCompareUnicodeString
wcsrchr
KeDelayExecutionThread
KeSetEvent
IofCompleteRequest
KeWaitForSingleObject
KeInitializeEvent
KeTickCount
KeBugCheckEx
RtlInitUnicodeString
DbgPrint
RtlCopyUnicodeString
RtlUnicodeToMultiByteN
RtlAnsiCharToUnicodeChar
RtlUnicodeStringToInteger
memset
ExAllocatePool
_allmul

hal

KeGetCurrentIrql

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_jucdcecm.cat
HUAWEI3G/Driver/X86/ew_jucdcecm.inf
HUAWEI3G/Driver/X86/ew_jucdcecm.sys
.exe windows x86

ea32c59444799a6d9b44ef3a6b4cc1a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlWriteRegistryValue
_aulldiv
MmMapLockedPagesSpecifyCache
DbgPrint
IoGetDeviceProperty
KeInitializeEvent
MmGetSystemRoutineAddress
RtlAppendUnicodeToString
ZwOpenKey
RtlInitUnicodeString
ZwSetValueKey
ZwClose
memcpy
ExfInterlockedInsertTailList
KeQueryInterruptTime
KeInitializeSpinLock
RtlUnicodeStringToInteger
RtlCopyUnicodeString
KeBugCheckEx
KeTickCount
_alldiv
_allmul
ExfInterlockedInsertHeadList
ExfInterlockedRemoveHeadList
memset
IoFreeMdl
RtlAnsiCharToUnicodeChar

ndis.sys

NdisMDeregisterAdapterShutdownHandler
NdisWaitEvent
NdisSetEvent
NdisReadNetworkAddress
NdisInitializeWrapper
NdisCloseConfiguration
NdisReadConfiguration
NdisOpenConfiguration
NdisAllocateMemoryWithTag
NdisMGetDeviceProperty
NdisAllocateBufferPool
NdisAllocatePacketPool
NdisFreePacket
NdisFreeMemory
NdisFreePacketPool
NdisFreeBufferPool
NdisMIndicateStatus
NdisMIndicateStatusComplete
NdisMRegisterMiniport
NdisTerminateWrapper
NdisMRegisterUnloadHandler
NdisMSetAttributesEx
NdisAllocatePacket
NdisMSleep
NdisAllocateBuffer

hal

KfReleaseSpinLock
KeGetCurrentIrql
KfAcquireSpinLock

wdfldr.sys

WdfVersionBind
WdfVersionUnbind

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_jucdcmdm.cat
HUAWEI3G/Driver/X86/ew_jucdcmdm.inf
HUAWEI3G/Driver/X86/ew_juextctrl.cat
HUAWEI3G/Driver/X86/ew_juextctrl.inf
HUAWEI3G/Driver/X86/ew_juextctrl.sys
.exe windows x86

4754df287a56ad8e25591c14a5aab9d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCompareUnicodeString
KeTickCount
KeBugCheckEx
memcpy
_allmul
RtlUnicodeStringToInteger
RtlInitUnicodeString
DbgPrint
RtlCopyUnicodeString
memset
RtlAnsiCharToUnicodeChar

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 774B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_juwwanecm.cat
HUAWEI3G/Driver/X86/ew_juwwanecm.inf
HUAWEI3G/Driver/X86/ew_juwwanecm.sys
.exe windows x86

12d3006078617fdda4f0efaaf684a72a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlFreeUnicodeString
RtlStringFromGUID
RtlCompareMemory
_chkstk
MmMapLockedPagesSpecifyCache
_aulldiv
RtlUnicodeStringToInteger
RtlWriteRegistryValue
IoGetDeviceProperty
KeInitializeEvent
MmGetSystemRoutineAddress
RtlCopyUnicodeString
RtlAppendUnicodeToString
ZwOpenKey
RtlInitUnicodeString
ZwSetValueKey
ZwClose
memcpy
ExfInterlockedInsertTailList
KeQueryInterruptTime
KeInitializeSpinLock
ExFreePoolWithTag
KeBugCheckEx
KeTickCount
_alldiv
_allmul
ExfInterlockedRemoveHeadList
ExfInterlockedInsertHeadList
memset
DbgPrint
RtlUnicodeToMultiByteN
RtlAnsiCharToUnicodeChar
ExAllocatePoolWithTag
KeSetEvent
KeInitializeMutex
KeWaitForSingleObject
KeReleaseMutex
KeDelayExecutionThread
PsTerminateSystemThread
ObReferenceObjectByHandle
PsCreateSystemThread
ObfDereferenceObject
KeQueryTimeIncrement

hal

KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock

ndis.sys

NdisReadNetworkAddress
NdisMOidRequestComplete
NdisReadConfiguration
NdisCloseConfiguration
NdisMSendNetBufferListsComplete
NdisAllocateNetBufferAndNetBufferList
NdisWriteConfiguration
NdisMGetDeviceProperty
NdisFreeNetBufferList
NdisFreeMdl
NdisOpenConfigurationEx
NdisAllocateMemoryWithTagPriority
NdisMSleep
NdisWaitEvent
NdisSetEvent
NdisFreeMemory
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisMIndicateStatusEx
NdisMRegisterMiniportDriver
NdisMSetMiniportAttributes
NdisMDeregisterMiniportDriver
NdisMIndicateReceiveNetBufferLists
NdisAllocateMdl

netio.sys

CancelMibChangeNotify2
FreeMibTable
CreateUnicastIpAddressEntry
InitializeUnicastIpAddressEntry
DeleteUnicastIpAddressEntry
GetUnicastIpAddressTable
CreateIpForwardEntry2
InitializeIpForwardEntry
DeleteIpForwardEntry2
GetIpForwardTable2
NotifyIpInterfaceChange
ConvertInterfaceLuidToGuid

wdfldr.sys

WdfVersionBindClass
WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBind

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_usbenumfilter.cat
HUAWEI3G/Driver/X86/ew_usbenumfilter.sys
.exe windows x86

0e6a11835d484b5311859d33f8c41f3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoInitializeRemoveLockEx
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
ObfDereferenceObject
IoGetAttachedDeviceReference
IoReleaseRemoveLockEx
IofCallDriver
IofCompleteRequest
IoAcquireRemoveLockEx
KeSetEvent
PoCallDriver
PoStartNextPowerIrp
DbgPrint
KeWaitForSingleObject
KeInitializeEvent
IoDetachDevice
IoReleaseRemoveLockAndWaitEx
RtlCompareMemory
memcpy
memset
IoFreeIrp
ExFreePoolWithTag
IoAllocateIrp
_wcsnicmp
swprintf
ExAllocatePool
ZwQueryValueKey
ZwClose
RtlInitUnicodeString
ZwOpenKey
KeClearEvent
KeTickCount
MmGetSystemRoutineAddress
PsGetVersion

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ew_wwanecm.cat
HUAWEI3G/Driver/X86/ew_wwanecm.inf
HUAWEI3G/Driver/X86/ew_wwanecm.sys
.exe windows x86

0f4a34caf9b0184d9999106d5998df06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ProbeForRead
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ProbeForWrite
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
ObfDereferenceObject
MmGetSystemRoutineAddress
RtlInitUnicodeString
PsTerminateSystemThread
ObReferenceObjectByHandle
PsCreateSystemThread
ExFreePool
ZwSetValueKey
ZwOpenKey
KeTickCount
IoAllocateMdl
MmProbeAndLockPages
RtlUnwind
MmUnlockPages
IoFreeMdl
IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
RtlCreateSecurityDescriptor
ZwClose
_vsnprintf
RtlCopyUnicodeString
ExfInterlockedInsertHeadList
MmMapLockedPagesSpecifyCache
KeQueryInterruptTime
RtlCompareMemory
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
memcpy
strncmp
KeClearEvent
IoQueueWorkItem
RtlWriteRegistryValue
KeWaitForSingleObject
KeRemoveQueueDpc
KeSetEvent
KeCancelTimer
KeSetTimer
KeInsertQueueDpc
KeDelayExecutionThread
ExfInterlockedRemoveHeadList
IoAllocateWorkItem
_vsnwprintf
InterlockedExchangeAdd
ZwSetSecurityObject
ZwOpenFile
KeInitializeDpc
KeInitializeTimer
RtlUnicodeStringToInteger
ExAllocatePoolWithTag
ExfInterlockedInsertTailList
IofCompleteRequest
IoFreeWorkItem
IoGetDeviceProperty
ExFreePoolWithTag
memset
ZwQueryValueKey
IoOpenDeviceRegistryKey
ZwCreateKey
IofCallDriver
IoReuseIrp
IoFreeIrp
IoCancelIrp
KeInitializeSpinLock
IoAllocateIrp
isspace
isprint
PoStartNextPowerIrp
PoRequestPowerIrp
PoCallDriver
IoBuildDeviceIoControlRequest
PsGetVersion
DbgPrint
KeBugCheckEx
KeInitializeEvent

hal

KeStallExecutionProcessor
KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql
ExReleaseFastMutex
ExAcquireFastMutex

ndis.sys

NdisFreeNetBufferList
NdisFreeMdl
NdisCloseConfiguration
NdisWriteConfiguration
NdisOpenConfigurationEx
NdisFreeMemory
NdisMGetDeviceProperty
NdisMSetMiniportAttributes
NdisAllocateTimerObject
NdisSetTimerObject
NdisAllocateMemoryWithTag
NdisCancelTimerObject
NdisFreeTimerObject
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisReadNetworkAddress
NdisReadConfiguration
NdisMSendNetBufferListsComplete
NdisAllocateMdl
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisAllocateNetBufferAndNetBufferList
NdisMIndicateReceiveNetBufferLists
NdisMIndicateStatusEx
NdisMSleep
NdisAllocateNetBufferListPool
NdisFreeNetBufferListPool
NdisAllocateMemoryWithTagPriority

netio.sys

FreeMibTable
CreateUnicastIpAddressEntry
InitializeUnicastIpAddressEntry
DeleteUnicastIpAddressEntry
GetUnicastIpAddressTable
CreateIpForwardEntry2
InitializeIpForwardEntry
DeleteIpForwardEntry2
GetIpForwardTable2

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ewdcsc.cat
HUAWEI3G/Driver/X86/ewdcsc.inf
HUAWEI3G/Driver/X86/ewdcsc.sys
.exe windows x86

18d53781b7be44c6d331757ee5159f1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeWaitForSingleObject
IofCallDriver
IoReuseIrp
IoAllocateIrp
RtlQueryRegistryValues
KeClearEvent
InterlockedIncrement
InterlockedDecrement
ObfDereferenceObject
PsTerminateSystemThread
IoBuildDeviceIoControlRequest
IoFreeWorkItem
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
InterlockedExchange
KeCancelTimer
IoFreeIrp
IoSetDeviceInterfaceState
IoQueueWorkItem
IoAllocateWorkItem
KeSetTimerEx
PoStartNextPowerIrp
PoCallDriver
PoRequestPowerIrp
IoCancelIrp
IoWMIRegistrationControl
ZwQueryValueKey
KeTickCount
KeBugCheckEx
IoReleaseCancelSpinLock
IofCompleteRequest
IoOpenDeviceRegistryKey
DbgPrint
memset
KeSetEvent
memmove
RtlFreeUnicodeString
IoAcquireCancelSpinLock
RtlInitUnicodeString
IoCreateDevice
KeInitializeSpinLock
KeInitializeEvent
PoSetPowerState
ExAllocatePoolWithTag
IoAttachDeviceToDeviceStack
IoRegisterDeviceInterface
KeInitializeDpc
KeInitializeTimerEx
IoDetachDevice
IoDeleteDevice
memcpy
ExFreePoolWithTag
PsGetVersion
MmGetSystemRoutineAddress
RtlUnwind

hal

KfReleaseSpinLock
KfAcquireSpinLock

wmilib.sys

WmiSystemControl
WmiCompleteRequest

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

smclib.sys

SmartcardT0Request
SmartcardT0Reply
SmartcardAcquireRemoveLock
SmartcardDeviceControl
SmartcardT1Reply
SmartcardReleaseRemoveLockWithTag
SmartcardAcquireRemoveLockWithTag
SmartcardSetDebugLevel
SmartcardLogError
SmartcardInitialize
SmartcardT1Request
SmartcardReleaseRemoveLock
SmartcardUpdateCardCapabilities

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ewmdm2k.cat
HUAWEI3G/Driver/X86/ewmdm2k.inf
HUAWEI3G/Driver/X86/ewnet.inf
HUAWEI3G/Driver/X86/ewser2k.cat
HUAWEI3G/Driver/X86/ewser2k.inf
HUAWEI3G/Driver/X86/ewsmartcard.cat
HUAWEI3G/Driver/X86/ewsmartcard.inf
HUAWEI3G/Driver/X86/ewusbmdm.sys
.exe windows x86

a334a383a8ed99f89aa0b4010740076b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
DbgPrint
ExFreePoolWithTag
RtlDeleteRegistryValue
IoDeleteSymbolicLink
IoReleaseCancelSpinLock
IoFreeIrp
KeSetEvent
ExAllocatePoolWithTag
RtlCopyUnicodeString
RtlFreeAnsiString
KeInitializeEvent
RtlUnicodeStringToAnsiString
memcpy
memset
IoCancelIrp
KeWaitForSingleObject
IofCallDriver
IoReuseIrp
IoAllocateIrp
RtlCompareUnicodeString
ZwClose
ExGetPreviousMode
RtlInitUnicodeString
IoOpenDeviceRegistryKey
ObfDereferenceObject
IoGetAttachedDeviceReference
IoReleaseRemoveLockEx
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
IoSetDeviceInterfaceState
KeClearEvent
IoAcquireRemoveLockEx
KeGetCurrentThread
RtlWriteRegistryValue
KeWaitForMultipleObjects
KeQueryPriorityThread
KeSetPriorityThread
PsTerminateSystemThread
ObReferenceObjectByHandle
PsCreateSystemThread
ZwSetValueKey
ZwOpenKey
IoDeleteDevice
IoDetachDevice
IoCreateUnprotectedSymbolicLink
RtlCompareMemory
IoGetDeviceProperty
IoRegisterDeviceInterface
PoSetPowerState
IoAttachDeviceToDeviceStack
IoCreateDevice
KeQuerySystemTime
ZwQueryValueKey
RtlTimeToTimeFields
MmGetSystemRoutineAddress
isprint
IoReleaseRemoveLockAndWaitEx
KeInitializeDpc
KeInitializeTimer
IoInitializeRemoveLockEx
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
strstr
IoAcquireCancelSpinLock
KeCancelTimer
KeSetTimer
MmMapLockedPagesSpecifyCache
KeReadStateTimer
IoBuildDeviceIoControlRequest
PoCallDriver
PoStartNextPowerIrp
IoWMIRegistrationControl
PoRequestPowerIrp
IoFreeWorkItem
KeReadStateEvent
IoQueueWorkItem
IoAllocateWorkItem
KeTickCount
KeBugCheckEx
_vsnprintf
RtlUnwind
PsGetVersion

hal

KfReleaseSpinLock
KeGetCurrentIrql
KfAcquireSpinLock

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

wmilib.sys

WmiCompleteRequest
WmiSystemControl

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 896B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ewusbnet.cat
HUAWEI3G/Driver/X86/ewusbnet.sys
.exe windows x86

56382c43c80a0430202bafd35cdaba0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strrchr
RtlInitAnsiString
ExAllocatePool
KeSetPriorityThread
KeGetCurrentThread
MmGetSystemRoutineAddress
ExGetPreviousMode
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
IofCallDriver
KeReleaseMutex
KeQueryPriorityThread
IoBuildDeviceIoControlRequest
KeInitializeDpc
KeInitializeTimer
KeInitializeMutex
IoOpenDeviceRegistryKey
KeQuerySystemTime
ZwQueryValueKey
ZwWriteFile
ZwSetSecurityObject
RtlTimeToTimeFields
IoCancelIrp
KeCancelTimer
KeSetTimer
PoCallDriver
PoStartNextPowerIrp
KeReadStateTimer
_allmul
IoRegisterPlugPlayNotification
IoGetDeviceObjectPointer
IoUnregisterPlugPlayNotification
PoRequestPowerIrp
IoFreeWorkItem
KeReadStateEvent
IoQueueWorkItem
IoAllocateWorkItem
RtlCompareMemory
KeBugCheckEx
IoReleaseCancelSpinLock
IofCompleteRequest
KeTickCount
RtlRandom
RtlCreateSecurityDescriptor
ExSystemTimeToLocalTime
ZwOpenFile
ExfInterlockedRemoveHeadList
IoFreeMdl
IoReleaseRemoveLockAndWaitEx
ExfInterlockedInsertTailList
IoInitializeRemoveLockEx
IoAcquireRemoveLockEx
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlWriteRegistryValue
RtlInitUnicodeString
RtlCopyUnicodeString
RtlAnsiStringToUnicodeString
RtlAppendUnicodeStringToString
ZwOpenKey
ZwSetValueKey
RtlFreeUnicodeString
IoReuseIrp
KeInitializeEvent
IoReleaseRemoveLockEx
PsCreateSystemThread
ObReferenceObjectByHandle
PsTerminateSystemThread
KeWaitForMultipleObjects
KeClearEvent
KeWaitForSingleObject
ObfDereferenceObject
ZwClose
ExAllocatePoolWithTag
ExFreePoolWithTag
IoAllocateIrp
IoFreeIrp
MmMapLockedPagesSpecifyCache
KeSetEvent
_vsnprintf
memset
memcpy
ZwCreateFile
DbgPrint
PsGetVersion

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql

ndis.sys

NdisWriteErrorLogEntry
NdisReadConfiguration
NdisMRegisterDevice
NdisMDeregisterDevice
NdisMRegisterAdapterShutdownHandler
NdisOpenConfiguration
NdisReadNetworkAddress
NdisCloseConfiguration
NdisFreePacket
NdisFreeBufferPool
NdisFreePacketPool
NdisAllocatePacketPool
NdisAllocateBufferPool
NdisAllocatePacket
NdisAllocateBuffer
NdisWriteConfiguration
NdisInitializeEvent
NdisInitializeWrapper
NdisTerminateWrapper
NdisMRegisterMiniport
NdisMRegisterUnloadHandler
NdisMGetDeviceProperty
NdisMSetAttributesEx
NdisSetTimer
NdisCancelTimer
NdisSetEvent
NdisWaitEvent
NdisMSleep
NdisMDeregisterAdapterShutdownHandler
NdisAllocateMemoryWithTag
NdisFreeMemory
NdisMIndicateStatus
NdisMIndicateStatusComplete
NdisInitializeTimer

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 256B - Virtual size: 229B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/ewusbwwan.cat
HUAWEI3G/Driver/X86/ewusbwwan.inf
HUAWEI3G/Driver/X86/ewusbwwan.sys
.exe windows x86

c1ddfe25707e34399df1137dba42b953

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeQueryPriorityThread
IoSetDevicePropertyData
KeInitializeDpc
KeInitializeTimer
KeInitializeMutex
KeReadStateEvent
IoOpenDeviceRegistryKey
KeQuerySystemTime
ZwQueryValueKey
ZwWriteFile
ZwCreateFile
RtlTimeToTimeFields
ExSystemTimeToLocalTime
KeCancelTimer
KeSetTimer
PoCallDriver
PoStartNextPowerIrp
KeSetPriorityThread
_allmul
IoRegisterPlugPlayNotification
IoGetDeviceObjectPointer
IoUnregisterPlugPlayNotification
PoRequestPowerIrp
IoFreeWorkItem
IoQueueWorkItem
IoAllocateWorkItem
IoBuildDeviceIoControlRequest
_aulldvrm
RtlAppendUnicodeToString
RtlIntegerToUnicodeString
_vsnwprintf
MmGetSystemRoutineAddress
_chkstk
KeBugCheckEx
ExAllocatePool
KeReleaseMutex
strrchr
IoCancelIrp
RtlCreateSecurityDescriptor
KeGetCurrentThread
IofCallDriver
KefAcquireSpinLockAtDpcLevel
ZwOpenFile
ZwSetSecurityObject
IofCompleteRequest
IoReleaseCancelSpinLock
KeTickCount
RtlRandom
ExfInterlockedRemoveHeadList
IoReleaseRemoveLockAndWaitEx
ExfInterlockedInsertTailList
IoInitializeRemoveLockEx
IoAcquireRemoveLockEx
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlWriteRegistryValue
RtlInitUnicodeString
RtlCopyUnicodeString
RtlAnsiStringToUnicodeString
RtlAppendUnicodeStringToString
ZwOpenKey
ZwSetValueKey
RtlFreeUnicodeString
KeInitializeEvent
IoReuseIrp
IoReleaseRemoveLockEx
PsCreateSystemThread
ObReferenceObjectByHandle
PsTerminateSystemThread
KeWaitForMultipleObjects
ObfDereferenceObject
ZwClose
RtlCompareMemory
ExAllocatePoolWithTag
ExFreePoolWithTag
IoAllocateIrp
KefReleaseSpinLockFromDpcLevel
ExGetPreviousMode
RtlInitAnsiString
IoFreeIrp
MmMapLockedPagesSpecifyCache
KeSetEvent
_vsnprintf
KeWaitForSingleObject
KeClearEvent
memset
memcpy
KeReadStateTimer
DbgPrint
PsGetVersion

hal

KfAcquireSpinLock
KeGetCurrentIrql
KeStallExecutionProcessor
KfReleaseSpinLock

ndis.sys

NdisMIndicateStatusEx
NdisFreeMemory
NdisAllocateMemoryWithTagPriority
NdisAllocateMemoryWithTag
NdisReadConfiguration
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisReadNetworkAddress
NdisFreeMdl
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisInitializeEvent
NdisMRegisterMiniportDriver
NdisMGetDeviceProperty
NdisMSetMiniportAttributes
NdisAllocateTimerObject
NdisWriteErrorLogEntry
NdisMResetComplete
NdisSetTimerObject
NdisCancelTimerObject
NdisFreeTimerObject
NdisSetEvent
NdisWaitEvent
NdisMSleep
NdisMDeregisterMiniportDriver
NdisOpenConfigurationEx
NdisWriteConfiguration
NdisCloseConfiguration
NdisMSendNetBufferListsComplete
NdisMOidRequestComplete
NdisMIndicateReceiveNetBufferLists

usbd.sys

USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

netio.sys

FreeMibTable
CreateUnicastIpAddressEntry
InitializeUnicastIpAddressEntry
DeleteUnicastIpAddressEntry
GetUnicastIpAddressTable
CreateIpForwardEntry2
InitializeIpForwardEntry
DeleteIpForwardEntry2
GetIpForwardTable2

Sections

.text
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGED_CO
Size: 512B - Virtual size: 229B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/X86/usbccid.cat
HUAWEI3G/Driver/X86/usbccid.inf
HUAWEI3G/Driver/X86/usbccid.sys
.exe windows x86

f39b03ee1f9cd5628c4512b5c20bceb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeTickCount
KeBugCheckEx
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
IoCreateDevice
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
KeDelayExecutionThread
ExAllocatePoolWithTag
ExFreePoolWithTag
IofCompleteRequest
_except_handler3
RtlInitUnicodeString
ZwQueryValueKey
IoInitializeRemoveLockEx
ZwClose
KeSetEvent
ExFreePool
IoAcquireCancelSpinLock
IoFreeIrp
IoReleaseRemoveLockEx
IoCancelIrp
KeWaitForSingleObject
IofCallDriver
IoAllocateIrp
KeInitializeEvent
IoAcquireRemoveLockEx
_allmul
IoBuildDeviceIoControlRequest
InterlockedDecrement
InterlockedIncrement
ExfInterlockedInsertTailList
ExfInterlockedRemoveHeadList
KeInitializeSpinLock
IoFreeWorkItem
IoQueueWorkItem
InterlockedCompareExchange
IoAllocateWorkItem
KeResetEvent
KeClearEvent
IoRegisterDeviceInterface
PoStartNextPowerIrp
PoSetPowerState
PoCallDriver
PoRequestPowerIrp
IoSetDeviceInterfaceState
IoDeleteDevice
IoDetachDevice
RtlFreeUnicodeString
IoReleaseRemoveLockAndWaitEx
InterlockedExchange
IoReleaseCancelSpinLock

hal

KfReleaseSpinLock
KfAcquireSpinLock

smclib.sys

SmartcardT1Request
SmartcardT0Request
SmartcardT0Reply
SmartcardUpdateCardCapabilities
SmartcardDeviceControl
SmartcardT1Reply
SmartcardInitialize
SmartcardExit

usbd.sys

USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx
USBD_ParseDescriptors

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEABLE
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/Driver/install.xml
HUAWEI3G/DriverSetup.exe
.exe windows x86

532b7303d0db6c32239329119355e78f

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0f:f1:a4:a7:1b:6a:ff:9c:25:e5:00:6e:24:7c:d0:38
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

25-07-2012 00:00

Not After

24-08-2014 23:59

Subject

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:6c:dd:e0:d7:f9:3a:2f:46:91:bc:bf:e0:70:0a:d4:29:8b:6e:54
Signer

Actual PE Digest

27:6c:dd:e0:d7:f9:3a:2f:46:91:bc:bf:e0:70:0a:d4:29:8b:6e:54

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

17-02-2013 02:11
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
GetTickCount
RaiseException
RtlUnwind
CreateDirectoryA
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
Sleep
VirtualFree
GetFileAttributesA
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetOEMCP
GetCPInfo
SetErrorMode
FileTimeToSystemTime
CreateFileA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
FreeResource
WritePrivateProfileStringA
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
lstrlenA
CompareStringW
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
CreateSemaphoreA
GetVersion
CreateProcessA
GetLastError
WaitForSingleObject
GetExitCodeProcess
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
LoadLibraryA
GetProcAddress
HeapDestroy
FreeLibrary

user32

EndDialog
CreateDialogIndirectParamA
RegisterClipboardFormatA
PostThreadMessageA
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ShowWindow
MoveWindow
IsDialogMessageA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
ReleaseCapture
GetCapture
SetCapture
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDesktopWindow
ClientToScreen
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
CharUpperA
GetWindowTextA
SetWindowTextA
UnhookWindowsHookEx
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetWindowLongA
DestroyMenu
UnregisterClassA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
SendMessageA
GetParent
GetFocus
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
SetCursor
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup

gdi32

DeleteDC
GetStockObject
ExtSelectClipRgn
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
GetBkColor
GetDeviceCaps
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectA
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HUAWEI3G/DriverUninstall.exe
.exe windows x86

10b1379cc03f80f610d0c9ee3f36c9e7

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0f:f1:a4:a7:1b:6a:ff:9c:25:e5:00:6e:24:7c:d0:38
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

25-07-2012 00:00

Not After

24-08-2014 23:59

Subject

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b0:d7:c0:86:09:9c:e7:5a:b9:29:e8:99:b4:6e:48:4d:39:c5:6f:dd
Signer

Actual PE Digest

b0:d7:c0:86:09:9c:e7:5a:b9:29:e8:99:b4:6e:48:4d:39:c5:6f:dd

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

17-02-2013 02:11
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetFileTime
GetTickCount
RaiseException
RtlUnwind
CreateDirectoryA
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
Sleep
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetOEMCP
GetCPInfo
FileTimeToSystemTime
SetErrorMode
CreateFileA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
GlobalFlags
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
FreeResource
GlobalFree
WritePrivateProfileStringA
GetCurrentProcessId
SetLastError
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalLock
lstrcmpA
GlobalAlloc
GlobalDeleteAtom
lstrlenA
CompareStringW
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
CreateSemaphoreA
GetVersion
CreateProcessA
GetLastError
WaitForSingleObject
GetExitCodeProcess
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
LoadLibraryA
GetProcAddress
VirtualFree
FreeLibrary

user32

EndDialog
CreateDialogIndirectParamA
RegisterClipboardFormatA
PostThreadMessageA
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
ShowWindow
MoveWindow
IsDialogMessageA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
SetForegroundWindow
UpdateWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
ReleaseCapture
LoadCursorA
GetCapture
SetCapture
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
CharUpperA
GetDesktopWindow
ClientToScreen
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
GetWindowTextA
SetWindowTextA
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnregisterClassA
DestroyMenu
MessageBeep
PostQuitMessage
PostMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
SendMessageA
GetParent
GetFocus
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
SetCursor
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetWindowThreadProcessId
SetWindowPos
MapDialogRect
SetWindowContextHelpId
GetWindow
MapWindowPoints

gdi32

ExtSelectClipRgn
DeleteDC
GetStockObject
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
GetBkColor
CreateBitmap
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectA
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetDeviceCaps
TextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HUAWEI3G/Install.log
HUAWEI3G/LocateDevice.dll
.dll windows x86

54bc18f7d2d1329aef303a5b18faf0b5

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0f:f1:a4:a7:1b:6a:ff:9c:25:e5:00:6e:24:7c:d0:38
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

25-07-2012 00:00

Not After

24-08-2014 23:59

Subject

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

12:f0:a0:c4:1e:bd:b2:44:fc:21:4e:3c:4c:8d:8a:a3:7d:8c:77:55
Signer

Actual PE Digest

12:f0:a0:c4:1e:bd:b2:44:fc:21:4e:3c:4c:8d:8a:a3:7d:8c:77:55

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

31-12-2013 02:17
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Locate_DevNodeA
CM_Reenumerate_DevNode

kernel32

GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentThreadId

Exports

Exports

LocateDevice

Sections

.text
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HUAWEI3G/devsetup32.exe
.exe windows x86

3fa3057a83cd607141300db7f7ca6e3f

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0f:f1:a4:a7:1b:6a:ff:9c:25:e5:00:6e:24:7c:d0:38
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

25-07-2012 00:00

Not After

24-08-2014 23:59

Subject

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:3e:de:ea:52:84:7f:bb:39:11:8e:8b:e1:00:9f:51:9b:b2:46:69
Signer

Actual PE Digest

3d:3e:de:ea:52:84:7f:bb:39:11:8e:8b:e1:00:9f:51:9b:b2:46:69

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

16-08-2013 08:03
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiCallClassInstaller
CM_Get_DevNode_Status
CM_Get_Child
SetupDiSetDeviceRegistryPropertyA
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiGetINFClassA
SetupCopyOEMInfA

shlwapi

SHDeleteKeyA
StrToIntA
SHDeleteValueA
PathFileExistsA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
HeapAlloc
GlobalFlags
HeapReAlloc
VirtualAlloc
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLocalTime
GetTimeZoneInformation
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
ExitProcess
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetCurrentThreadId
GetThreadLocale
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
SetLastError
FindNextFileA
GetFileSize
ReadFile
FindFirstFileA
CopyFileA
FindClose
lstrcpynA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
QueryDosDeviceA
Sleep
VerSetConditionMask
VerifyVersionInfoA
LocalFree
LocalAlloc
OutputDebugStringA
WaitForSingleObject
GetExitCodeProcess
GetModuleFileNameA
CreateFileA
DeviceIoControl
GetFileAttributesA
SetFileAttributesA
DeleteFileA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
CompareStringW
CompareStringA
CreateSemaphoreA
CloseHandle
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
HeapFree

user32

PostQuitMessage
DestroyMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowPos
SetWindowLongA
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SendMessageA
GetWindowThreadProcessId
UnhookWindowsHookEx
GetSysColorBrush
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
IsWindow

gdi32

SetMapMode
GetStockObject
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
DeleteObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegEnumValueA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
QueryServiceConfigA
ControlService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ChangeServiceConfigA

shell32

ShellExecuteExA

oleaut32

VariantInit
VariantClear
VariantChangeType

ws2_32

htons
htonl

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HUAWEI3G/devsetup64.exe
.exe windows x64

119b7330d5757caae24937e99dc6e629

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0f:f1:a4:a7:1b:6a:ff:9c:25:e5:00:6e:24:7c:d0:38
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

25-07-2012 00:00

Not After

24-08-2014 23:59

Subject

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b8:77:63:70:f1:4a:cb:13:29:32:07:0b:ca:76:d6:6f:3d:9b:7a:3a
Signer

Actual PE Digest

b8:77:63:70:f1:4a:cb:13:29:32:07:0b:ca:76:d6:6f:3d:9b:7a:3a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Huawei Technologies Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Huawei Technologies Co.\, Ltd.,L=Shenzhen,ST=Guangdong,C=CN

16-08-2013 08:03
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiCallClassInstaller
CM_Get_DevNode_Status
CM_Get_Child
SetupDiSetDeviceRegistryPropertyA
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiGetINFClassA
SetupCopyOEMInfA

shlwapi

SHDeleteKeyA
StrToIntA
SHDeleteValueA
PathFileExistsA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GlobalFindAtomA
GlobalAddAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
HeapAlloc
HeapFree
HeapReAlloc
GlobalDeleteAtom
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RaiseException
RtlPcToFileHeader
GetLocalTime
GetTimeZoneInformation
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
ExitProcess
GetStdHandle
HeapSetInformation
HeapCreate
RtlVirtualUnwind
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
lstrcmpW
GetVersionExA
GlobalFlags
GetCurrentThreadId
GetThreadLocale
lstrcmpA
GlobalGetAtomNameA
GetModuleHandleA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
SetLastError
FindNextFileA
GetFileSize
ReadFile
FindFirstFileA
CopyFileA
FindClose
lstrcpynA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
Sleep
QueryDosDeviceA
VerSetConditionMask
VerifyVersionInfoA
LocalFree
LocalAlloc
OutputDebugStringA
WaitForSingleObject
GetExitCodeProcess
GetModuleFileNameA
CreateFileA
DeviceIoControl
GetFileAttributesA
SetFileAttributesA
DeleteFileA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
CompareStringW
CompareStringA
CreateSemaphoreA
CloseHandle
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar

user32

PostQuitMessage
DestroyMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowPos
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
GetWindowLongA
SendMessageA
GetWindowThreadProcessId
UnhookWindowsHookEx
GetSysColorBrush
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor

gdi32

SetMapMode
GetStockObject
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
GetDeviceCaps
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegEnumValueA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
QueryServiceConfigA
ControlService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ChangeServiceConfigA

shell32

ShellExecuteExA

oleaut32

VariantInit
VariantClear
VariantChangeType

ws2_32

htons
htonl

Sections

.text
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HUAWEI3G/release notes.txt

Sharing

General

Malware Config

Signatures

Files

cc5018e235a4bdab3c3d361ebe86307a

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

61:14:2c:a7:00:00:00:00:00:06Certificate

Extended Key Usages

Key Usages

61:14:2c:a7:00:00:00:00:00:06Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:02:30:7e:00:00:00:00:00:06Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88Certificate

Extended Key Usages

Key Usages

31:71:27:67:11:3a:7f:fc:dd:98:9e:a8:a8:14:0c:40:79:51:69:2dSigner

Signature Validations

Verification

27-03-2008 23:51 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

setupapi

kernel32

advapi32

crypt32

wintrust

shell32

user32

ole32

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 57KB

.data Size: 1KB - Virtual size: 18KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 512B - Virtual size: 270B

e0cd26c2ab5c50387e18b3c102808740

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

usbd.sys

Sections

.text Size: 113KB - Virtual size: 112KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 384B - Virtual size: 312B

.pdata Size: 2KB - Virtual size: 2KB

INIT Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 960B

.reloc Size: 128B - Virtual size: 60B

04a34afdc3286df7a48eb3be1bc637da

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

ndis.sys

usbd.sys

Sections

.text Size: 120KB - Virtual size: 120KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 896B - Virtual size: 816B

.pdata Size: 2KB - Virtual size: 2KB

INIT Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 968B

.reloc Size: 128B - Virtual size: 60B

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

61:14:2c:a7:00:00:00:00:00:06
Certificate

61:14:2c:a7:00:00:00:00:00:06
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:02:30:7e:00:00:00:00:00:06
Certificate

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

31:71:27:67:11:3a:7f:fc:dd:98:9e:a8:a8:14:0c:40:79:51:69:2d
Signer

27-03-2008 23:51
Valid: false

.text
Size: 58KB - Virtual size: 57KB

.data
Size: 1KB - Virtual size: 18KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 512B - Virtual size: 270B

.text
Size: 113KB - Virtual size: 112KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 384B - Virtual size: 312B

.pdata
Size: 2KB - Virtual size: 2KB

INIT
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 128B - Virtual size: 60B

.text
Size: 120KB - Virtual size: 120KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 896B - Virtual size: 816B

.pdata
Size: 2KB - Virtual size: 2KB

INIT
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 128B - Virtual size: 60B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 716B

.data
Size: 512B - Virtual size: 4KB

.pdata
Size: 512B - Virtual size: 360B

PAGE
Size: 9KB - Virtual size: 8KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 512B - Virtual size: 96B

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 1KB

.pdata
Size: 2KB - Virtual size: 1KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 256B - Virtual size: 192B

.text
Size: 78KB - Virtual size: 78KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 4KB

.pdata
Size: 3KB - Virtual size: 2KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 512B - Virtual size: 132B

.text
Size: 87KB - Virtual size: 87KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 4KB

.pdata
Size: 2KB - Virtual size: 2KB

PAGE
Size: 8KB - Virtual size: 8KB

INIT
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 312B

.text
Size: 59KB - Virtual size: 58KB

.rdata
Size: 2KB - Virtual size: 1KB