LogitechLed[.]dll

Resubmissions

18/04/2023, 15:20

230418-sqr45sea9s 5

Sharing

Copy URL Twitter E-mail

General

Target

LogitechLed.dll
Size

261KB
MD5

5e29d786486a6cbec0ee1f7f094076ea
SHA1

eac824413afad19391696614b0924f875a2f1d06
SHA256

f694ef128027a65df22e56afc82dad9ac35d5c443cf9c5ac09da3f0d8a0cadae
SHA512

37ee84ff976d7bde0c4c6865a02381c2b634f5951dfd3048d6cad4e4c5d2426dd4c06fe7501bb31bbef631a8c2cc979a0ca97c27be67d5e683243dcaef607aef
SSDEEP

6144:LSsQQj0PkVEUC3QvyUts2vs5nklQlDRiiOn8FGgfBLtENi:Dj0QEJ+1s2k5POn8FxFtENi

Score

1^/10

Malware Config

Signatures

Files

LogitechLed.dll
.dll windows x64

4d800f0163ed3ca1d37fb6f0df93db1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceCounter
DisableThreadLibraryCalls
GetCurrentThread
CloseHandle
GetModuleHandleW
VirtualQuery
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
QueryPerformanceFrequency
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InitOnceComplete
InitOnceBeginInitialize
MultiByteToWideChar
GetProcAddress
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
RtlLookupFunctionEntry
EnterCriticalSection

user32

EmptyClipboard
GetClipboardData
SetClipboardData
FindWindowA
SetWindowLongPtrW
CallWindowProcW
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
GetForegroundWindow
GetClientRect
SetCursor
SetCapture
ScreenToClient
GetCapture
ClientToScreen
IsChild
TrackMouseEvent
LoadCursorW

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

d3dcompiler_47

D3DCompile

msvcp140

_Query_perf_counter
_Query_perf_frequency
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
_Thrd_sleep
_Xtime_get_ticks

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
memset
__current_exception_context
__std_exception_copy
__std_exception_destroy
__C_specific_handler
strstr
__std_terminate
__C_specific_handler_noexcept
memchr
memcmp
memcpy
memmove
__current_exception

api-ms-win-crt-stdio-l1-1-0

fclose
fseek
fread
fflush
__stdio_common_vsprintf
ftell
fwrite
_wfopen
__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

terminate
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_beginthreadex
_configure_narrow_argv
_initialize_narrow_environment
abort
_initterm_e
_initterm
_initialize_onexit_table
_register_onexit_function
_cexit
_execute_onexit_table
_crt_atexit

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-math-l1-1-0

cosf
ceilf
acosf
sinf
sqrtf

Sections

.text
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

4d800f0163ed3ca1d37fb6f0df93db1a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

imm32

d3dcompiler_47

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 202KB - Virtual size: 201KB

.rdata Size: 45KB - Virtual size: 45KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 196B

.text
Size: 202KB - Virtual size: 201KB

.rdata
Size: 45KB - Virtual size: 45KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 196B