BR-929776_Software[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

BR-929776_Software.rar
Size

54.8MB
MD5

b0d26a9b0cfdda08710c430671c19079
SHA1

12f7f5127fe59f79264b1d301f86cfc9375c74cb
SHA256

246c5176f65f3c4938c9091b498a179b1298fcb26433fd1b520c8610a64e2d51
SHA512

ce36103ea02ba6f5b8727710cc54ce19a650ce1e22bc6a14872d0e2913d1a05ef9754843c5e9a69f896ba0a654e63de57354b1866b064432c410933a16b4ce3a
SSDEEP

786432:/5rKxbBfxOzRddVNQ3XBcEjOgK6NG2QN9VK4XJdI6qC4EMOyHPMP:xQlfxOz5VyhjOgKJH64jIVOGPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Spectrum Hesix Software_V1.0 20200103/Spectrum Hesix Software.exe

Files

BR-929776_Software.rar
.rar
Spectrum Hesix Software_V1.0 20200103/AudioConfig.cfg
Spectrum Hesix Software_V1.0 20200103/AudioControlSetup_Background.bmp
Spectrum Hesix Software_V1.0 20200103/DLL3S_UsbAudio16xx_x32.dll
.dll windows x86

3a1590c192586af3e3ca5c44e56269de

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04/03/2014, 00:00

Not After

03/03/2024, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0f:5f:9a:b3:79:48:e7:98:26:d6:12:a2:da:94:8a:c0
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/04/2018, 00:00

Not After

02/04/2020, 23:59

Subject

SERIALNUMBER=16766959,CN=Solid State System Co.\, Ltd.,OU=RD,O=Solid State System Co.\, Ltd.,L=Hsinchu,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074873696e636875,1.3.6.1.4.1.311.60.2.1.2=#13074873696e636875,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04/03/2014, 00:00

Not After

03/03/2024, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0f:5f:9a:b3:79:48:e7:98:26:d6:12:a2:da:94:8a:c0
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/04/2018, 00:00

Not After

02/04/2020, 23:59

Subject

SERIALNUMBER=16766959,CN=Solid State System Co.\, Ltd.,OU=RD,O=Solid State System Co.\, Ltd.,L=Hsinchu,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074873696e636875,1.3.6.1.4.1.311.60.2.1.2=#13074873696e636875,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

28:60:32:b2:85:ab:13:dc:76:5e:a9:4f:ba:7b:3f:a8:a0:47:0e:c3:19:5b:91:02:50:78:29:f9:7d:ae:a7:89
Signer

Actual PE Digest

28:60:32:b2:85:ab:13:dc:76:5e:a9:4f:ba:7b:3f:a8:a0:47:0e:c3:19:5b:91:02:50:78:29:f9:7d:ae:a7:89

Digest Algorithm

sha256

PE Digest Matches

true

d9:cf:a7:5a:bd:12:e8:e1:53:b0:7b:a4:35:85:21:a3:27:78:e3:cb
Signer

Actual PE Digest

d9:cf:a7:5a:bd:12:e8:e1:53:b0:7b:a4:35:85:21:a3:27:78:e3:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

psapi

GetModuleFileNameExW

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW

ole32

CoUninitialize
CoCreateInstance
CoCreateGuid
PropVariantClear
CoTaskMemFree
CoInitialize

user32

LoadCursorW
UnregisterDeviceNotification
RegisterDeviceNotificationW
keybd_event
DispatchMessageW
DefWindowProcW
CreateWindowExW
SendMessageTimeoutW
ShowWindow
PeekMessageW
LoadIconW
RegisterClassExW
TranslateMessage
PostMessageW
RegisterWindowMessageW

hid

HidD_GetPreparsedData
HidD_GetHidGuid
HidD_SetOutputReport
HidD_GetInputReport
HidD_GetAttributes
HidP_GetCaps
HidD_FreePreparsedData

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW

winmm

mixerGetLineControlsW
mixerOpen
mixerGetControlDetailsW
mixerClose
mixerGetLineInfoW
mixerGetDevCapsW
mixerGetNumDevs
mixerSetControlDetails

dsound

ord3
ord8

kernel32

HeapReAlloc
SetFilePointerEx
LoadLibraryExW
SetStdHandle
WriteConsoleW
FlushFileBuffers
LCMapStringW
ResetEvent
InitializeCriticalSection
SetEvent
GetStringTypeW
CreateFileW
GetCurrentProcess
WideCharToMultiByte
GetNativeSystemInfo
OutputDebugStringW
GetModuleHandleW
FormatMessageW
GetModuleFileNameW
lstrlenW
GetLastError
GetProcAddress
LocalAlloc
LocalFree
CreateProcessW
WaitForSingleObject
GetTickCount
GetSystemDirectoryW
CloseHandle
CreateThread
CreateMutexW
MapViewOfFile
UnmapViewOfFile
Sleep
OpenMutexW
CreateFileMappingW
QueryDosDeviceW
OpenFileMappingW
GetCurrentThreadId
ReleaseMutex
GetVersion
GetCurrentProcessId
GetCPInfo
DeviceIoControl
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
HeapSize
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP

advapi32

CryptDecrypt
RegCreateKeyExW
CryptDestroyKey
CryptImportKey
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

Exports

Exports

DLL3S_AudioCommand
DLL3S_AudioGetAll
DLL3S_AudioGetCommand
DLL3S_AudioGetOnOff
DLL3S_AudioGetParameters
DLL3S_AudioGetScalar
DLL3S_AudioReset
DLL3S_AudioResetAll
DLL3S_AudioResetParameters
DLL3S_AudioSetAll
DLL3S_AudioSetCommand
DLL3S_AudioSetOnOff
DLL3S_AudioSetParameters
DLL3S_AudioSetScalar
DLL3S_CheckDriver
DLL3S_CheckDriverEx
DLL3S_Config3D
DLL3S_Config3D_ById
DLL3S_ConfigEQ
DLL3S_ConfigEQ_ById
DLL3S_DumpDevices_Debug
DLL3S_Get3D
DLL3S_Get3D_ById
DLL3S_GetAP_VersionA
DLL3S_GetAP_VersionW
DLL3S_GetActive_Device
DLL3S_GetDLL_VersionA
DLL3S_GetDLL_VersionW
DLL3S_GetDRC
DLL3S_GetDRC_Parameters
DLL3S_GetDataFromMCU
DLL3S_GetDataFromMCU_ById
DLL3S_GetEQ
DLL3S_GetEQ_ById
DLL3S_GetEQ_CurrentBank_ById
DLL3S_GetEQ_DB
DLL3S_GetEQ_DB_ById
DLL3S_GetEQ_GainValueByDB
DLL3S_GetEQ_GainValueByGainIndex
DLL3S_GetEcho
DLL3S_GetEcho_Parameters
DLL3S_GetEffect_Mode
DLL3S_GetEnc
DLL3S_GetEncOnOff
DLL3S_GetEnc_Level
DLL3S_GetEnc_Parameters
DLL3S_GetEnc_Scalar
DLL3S_GetFirmwareVersion
DLL3S_GetFirmwareVersion_ById
DLL3S_GetGpio
DLL3S_GetGpioEx_ById
DLL3S_GetGpioModeEx_ById
DLL3S_GetGpioMode_ById
DLL3S_GetGpio_ById
DLL3S_GetInputReport
DLL3S_GetInputReportLength
DLL3S_GetMagicSoundOnOff
DLL3S_GetMagicSound_Level
DLL3S_GetManufacturerID
DLL3S_GetManufacturerID_ById
DLL3S_GetMicBoost
DLL3S_GetMicMute
DLL3S_GetMicVolume
DLL3S_GetNoiseClean
DLL3S_GetNoiseClean_Parameters
DLL3S_GetOutputReportLength
DLL3S_GetRGB_Brightness
DLL3S_GetRGB_Brightness_ById
DLL3S_GetRGB_Color
DLL3S_GetRGB_Color_ById
DLL3S_GetRGB_Mode
DLL3S_GetRGB_Mode_ById
DLL3S_GetRGB_SingleColor
DLL3S_GetRGB_SingleColor_ById
DLL3S_GetRGB_Step
DLL3S_GetRGB_Step_ById
DLL3S_GetReportType
DLL3S_GetSoundField
DLL3S_GetSpeakerChannelVolume
DLL3S_GetSpeakerMasterVolume
DLL3S_GetSpeakerMasterVolumeMute
DLL3S_GetSwEQ
DLL3S_GetSwEqOnOff
DLL3S_GetVirtual7ch1
DLL3S_GetVirtual7ch1_Parameters
DLL3S_GetVirtual7ch1_Scalar
DLL3S_Is3D_Enable
DLL3S_Is3D_Enable_ById
DLL3S_IsDRC_Enable
DLL3S_IsEQ_Enable
DLL3S_IsEQ_Enable_ById
DLL3S_IsEcho_Enable
DLL3S_IsEnc_Enable
DLL3S_IsNoiseClean_Enable
DLL3S_IsSoundField_Enable
DLL3S_IsVirtual7ch1_Enable
DLL3S_PWM_GetBREATHING_ActionMode_ById
DLL3S_PWM_GetBREATHING_ButtonMode_ById
DLL3S_PWM_GetBREATHING_Cycle_ById
DLL3S_PWM_GetBREATHING_DataMode_ById
DLL3S_PWM_GetBREATHING_Duty_ById
DLL3S_PWM_GetBREATHING_OffActionMode_ById
DLL3S_PWM_GetBREATHING_OnActionMode_ById
DLL3S_PWM_GetBREATHING_PinOutActiveMode_ById
DLL3S_PWM_GetBREATHING_Speed_ById
DLL3S_PWM_GetConfig_ById
DLL3S_PWM_GetLED_ButtonMode_ById
DLL3S_PWM_GetRGB_ActionMode_ById
DLL3S_PWM_GetRGB_Brightness_ById
DLL3S_PWM_GetRGB_ButtonMode_ById
DLL3S_PWM_GetRGB_ColorMode_ById
DLL3S_PWM_GetRGB_ColorSelect_ById
DLL3S_PWM_GetRGB_Color_ById
DLL3S_PWM_GetRGB_Cycle_ById
DLL3S_PWM_GetRGB_DataMode_ById
DLL3S_PWM_GetRGB_OffActionMode_ById
DLL3S_PWM_GetRGB_OffColorMode_ById
DLL3S_PWM_GetRGB_OffColorSelect_ById
DLL3S_PWM_GetRGB_OnActionMode_ById
DLL3S_PWM_GetRGB_OnColorMode_ById
DLL3S_PWM_GetRGB_OnColorSelect_ById
DLL3S_PWM_GetRGB_Period_ById
DLL3S_PWM_GetRGB_PinOutActiveMode_ById
DLL3S_PWM_GetRGB_Speed_ById
DLL3S_PWM_GetSpeedUnit_ById
DLL3S_PWM_SetBREATHING_ActionMode_ById
DLL3S_PWM_SetBREATHING_ButtonMode_ById
DLL3S_PWM_SetBREATHING_Cycle_ById
DLL3S_PWM_SetBREATHING_DataMode_ById
DLL3S_PWM_SetBREATHING_Duty_ById
DLL3S_PWM_SetBREATHING_OffActionMode_ById
DLL3S_PWM_SetBREATHING_OnActionMode_ById
DLL3S_PWM_SetBREATHING_PinOutActiveMode_ById
DLL3S_PWM_SetBREATHING_Speed_ById
DLL3S_PWM_SetConfig_ById
DLL3S_PWM_SetLED_ButtonMode_ById
DLL3S_PWM_SetRGB_ActionMode_ById
DLL3S_PWM_SetRGB_Brightness_ById
DLL3S_PWM_SetRGB_ButtonMode_ById
DLL3S_PWM_SetRGB_ColorMode_ById
DLL3S_PWM_SetRGB_ColorSelect_ById
DLL3S_PWM_SetRGB_Color_ById
DLL3S_PWM_SetRGB_Cycle_ById
DLL3S_PWM_SetRGB_DataMode_ById
DLL3S_PWM_SetRGB_OffActionMode_ById
DLL3S_PWM_SetRGB_OffColorMode_ById
DLL3S_PWM_SetRGB_OffColorSelect_ById
DLL3S_PWM_SetRGB_OnActionMode_ById
DLL3S_PWM_SetRGB_OnColorMode_ById
DLL3S_PWM_SetRGB_OnColorSelect_ById
DLL3S_PWM_SetRGB_Period_ById
DLL3S_PWM_SetRGB_PinOutActiveMode_ById
DLL3S_PWM_SetRGB_Speed_ById
DLL3S_PWM_SetSpeedUnit_ById
DLL3S_ReadChipId
DLL3S_ReadChipId_ById
DLL3S_ReadEfuse
DLL3S_ReadEfuse_ById
DLL3S_ReadI2C_ByMode
DLL3S_ReadI2C_ByMode_ById
DLL3S_Read_EEPROM
DLL3S_Read_EEPROM_ById
DLL3S_Read_I2C
DLL3S_Read_I2C_ById
DLL3S_Read_Register
DLL3S_Read_Register_ById
DLL3S_Reset3D
DLL3S_Reset3D_ById
DLL3S_ScanButton
DLL3S_ScanButton_ById
DLL3S_Search_Present_Device
DLL3S_Set3D
DLL3S_Set3D_ById
DLL3S_Set3D_OnOff
DLL3S_Set3D_OnOff_ById
DLL3S_SetActive_Device
DLL3S_SetDRC
DLL3S_SetDRC_OnOff
DLL3S_SetDRC_Parameters
DLL3S_SetDataToMCU
DLL3S_SetDataToMCU_ById
DLL3S_SetEQ
DLL3S_SetEQ_ById
DLL3S_SetEQ_DB
DLL3S_SetEQ_DB_ById
DLL3S_SetEQ_OnOff
DLL3S_SetEQ_OnOff_ById
DLL3S_SetEcho
DLL3S_SetEcho_OnOff
DLL3S_SetEcho_Parameters
DLL3S_SetEffect_Mode
DLL3S_SetEffect_Mode_Sharkoon
DLL3S_SetEnc
DLL3S_SetEncOnOff
DLL3S_SetEnc_Level
DLL3S_SetEnc_OnOff
DLL3S_SetEnc_Parameters
DLL3S_SetEnc_Scalar
DLL3S_SetFanOrMotor
DLL3S_SetFanOrMotor_ById
DLL3S_SetGpio
DLL3S_SetGpioEx_ById
DLL3S_SetGpioMode
DLL3S_SetGpioModeEx
DLL3S_SetGpioModeEx_ById
DLL3S_SetGpioMode_ById
DLL3S_SetGpio_ById
DLL3S_SetListen2Device
DLL3S_SetMagicSoundOnOff
DLL3S_SetMagicSound_Level
DLL3S_SetMicBoost
DLL3S_SetMicMute
DLL3S_SetMicVolume
DLL3S_SetNoiseClean
DLL3S_SetNoiseClean_OnOff
DLL3S_SetNoiseClean_Parameters
DLL3S_SetOnDeviceChangeCallback
DLL3S_SetOutputReport
DLL3S_SetRGB_Brightness
DLL3S_SetRGB_Brightness_ById
DLL3S_SetRGB_Color
DLL3S_SetRGB_Color_ById
DLL3S_SetRGB_Mode
DLL3S_SetRGB_Mode_ById
DLL3S_SetRGB_SingleColor
DLL3S_SetRGB_SingleColor_ById
DLL3S_SetRGB_Step
DLL3S_SetRGB_Step_ById
DLL3S_SetScanTime
DLL3S_SetSoundField
DLL3S_SetSoundField_OnOff
DLL3S_SetSpeakerChannelVolume
DLL3S_SetSpeakerMasterVolume
DLL3S_SetSpeakerMasterVolumeMute
DLL3S_SetSwEQ
DLL3S_SetSwEqOnOff
DLL3S_SetVirtual7ch1
DLL3S_SetVirtual7ch1_OnOff
DLL3S_SetVirtual7ch1_Parameters
DLL3S_SetVirtual7ch1_Scalar
DLL3S_SpeakerVolumeKey
DLL3S_StoreOrClearRGB_Color
DLL3S_StoreOrClearRGB_Color_ById
DLL3S_UART_Read_Blocking_ById
DLL3S_UART_SetOnUartReceiveCallback_ById
DLL3S_UART_SetParams_ById
DLL3S_UART_Write_ById
DLL3S_Uninstall_SDK
DLL3S_Uninstall_SDK_Ex
DLL3S_UsbHidSlave_GetDataFromMCU_Ex
DLL3S_UsbHidSlave_GetFanCurrent_Ex
DLL3S_UsbHidSlave_GetFanSpeed_Ex
DLL3S_UsbHidSlave_GetFanVoltage_Ex
DLL3S_UsbHidSlave_GetFirmwareVersion_Ex
DLL3S_UsbHidSlave_GetManufacturerID_Ex
DLL3S_UsbHidSlave_GetRegisterData_Ex
DLL3S_UsbHidSlave_ReadI2C_Ex
DLL3S_UsbHidSlave_SetDataToMCU_Ex
DLL3S_UsbHidSlave_SetFanOrMotor_Ex
DLL3S_UsbHidSlave_SetRGB_Brightness_Ex
DLL3S_UsbHidSlave_SetRGB_Color_Ex
DLL3S_UsbHidSlave_SetRGB_Mode_Ex
DLL3S_UsbHidSlave_SetRGB_SingleColor_Ex
DLL3S_UsbHidSlave_SetRGB_Step_Ex
DLL3S_UsbHidSlave_SetRegisterData_Ex
DLL3S_UsbHidSlave_StoreOrClearRGB_Color_Ex
DLL3S_UsbHidSlave_WriteI2C_Ex
DLL3S_WaitI2CReady_ById
DLL3S_WriteI2C_ByMode
DLL3S_WriteI2C_ByMode_ById
DLL3S_Write_EEPROM
DLL3S_Write_EEPROM_ById
DLL3S_Write_I2C
DLL3S_Write_I2C_ById
DLL3S_Write_Register
DLL3S_Write_Register_ById

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Spectrum Hesix Software_V1.0 20200103/DefaultProfile.ini
Spectrum Hesix Software_V1.0 20200103/Language/EN/Language.ini
Spectrum Hesix Software_V1.0 20200103/Language/SP/Language.ini
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_AlphaDep.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_AlphaDep.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_AlphaIndep.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_AlphaIndep.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_AlphaInv.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_AlphaInv.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Bar.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Bar.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_BetaDep.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_BetaDep.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_BetaIndep.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_BetaIndep.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_BetaInv.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_BetaInv.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_ButtonLine.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_ButtonLine.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Connection.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Connection.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Graduation.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Graduation.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_LChannel.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_LChannel.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_RChannel.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_RChannel.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Slider.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Slider.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Value.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/3D_Value.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/MainForm_RightPic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/MainForm_RightPic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/3D/Thumbs.db
Spectrum Hesix Software_V1.0 20200103/Skin/Black/AboutLogo.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/Aboutlogo.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/CompanyName.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/CompanyName.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/CompanyName.psd
Spectrum Hesix Software_V1.0 20200103/Skin/Black/ENC/ENC_Bar.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/ENC/ENC_CheckButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/ENC/ENC_CheckButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/ENC/ENC_Slider.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/ENC/ENC_Value.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_Bar.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_Bar.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_ButtonLine.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_ButtonLine.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_Graduation.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_Graduation.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_Slider.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_Slider.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_Value.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_Value.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_under_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_under_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_under_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_under_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_upper_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_upper_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_upper_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/EQ_upper_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/MainForm_RightPic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/MainForm_RightPic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/EQ/Thumbs.db
Spectrum Hesix Software_V1.0 20200103/Skin/Black/Game.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Close_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Close_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Close_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Close_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_DeviceActive.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_DeviceActive.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_DeviceNon.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_DeviceNon.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Frame.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Frame.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Frame.rgn
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_LeftPic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_LeftPic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Menu_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Menu_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Menu_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Menu_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Mini_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Mini_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Mini_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_Mini_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_RightPic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_RightPic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_RightPic_1.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_SyncLight.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/MainForm_SyncLight.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/Movie.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/Music.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/None.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/SkinSetting.ini
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_BabyButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_BabyButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_BoyButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_BoyButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_CheckButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_CheckButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_GirlButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_GirlButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_MonsterButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_MonsterButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_NoneButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/VM/VM_NoneButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Bathroom.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Bathroom.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_ButtonLine.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_ButtonLine.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Corridor.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Livingroom.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Livingroom.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Non.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Non.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_StoneGallery.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_StoneGallery.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Theater.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Effect_Theater.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/MainForm_RightPic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/MainForm_RightPic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/effect/Thumbs.db
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/.DS_Store
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Bar.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Bar.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_ButtonLine.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_ButtonLine.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Gain.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Gain.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Graduation.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Graduation.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Pic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Pic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Progress.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Progress.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Slider.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Slider.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Value.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MIC_Value.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MainForm_RightPic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/MainForm_RightPic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/mic/Thumbs.db
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/MainForm_RightPic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/MainForm_RightPic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Thumbs.db
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonDown.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonDown.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonDown_.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonDown_.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonLine.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonLine.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonUp.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonUp.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonUp_.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_ButtonUp_.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_C.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_C.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_L.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_L.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_LB.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_LB.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_LS.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_LS.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_Non.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_Non.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_Pic.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_Pic.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_R.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_R.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_RB.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_RB.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_RS.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_RS.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_Sub.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_Sub.png
.png
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_Tital.bmp
Spectrum Hesix Software_V1.0 20200103/Skin/Black/virtual/Virtual_Tital.png
.png
Spectrum Hesix Software_V1.0 20200103/Spectrum Hesix Software.exe
.exe windows x86

8794fbf435f6e089fe609899875be980

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceRegistryPropertyW

advapi32

AdjustTokenPrivileges
CloseServiceHandle
ControlService
CryptAcquireContextW
CryptDecrypt
CryptDestroyKey
CryptImportKey
CryptReleaseContext
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegConnectRegistryW
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegLoadKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
RegUnLoadKeyW
StartServiceW

kernel32

Beep
CloseHandle
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoW
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FormatMessageW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCPInfoExW
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDrives
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetThreadLocale
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MulDiv
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ResetEvent
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
SwitchToThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringW
lstrcmpW
lstrlenW
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
HeapSize

mpr

WNetGetConnectionW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winspool.drv

ClosePrinter
DocumentPropertiesW
EnumPrintersW
ord203
OpenPrinterW

comctl32

FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
ord17
InitializeFlatSB
_TrackMouseEvent

gdi32

AbortDoc
AngleArc
Arc
ArcTo
BitBlt
Chord
CombineRgn
CopyEnhMetaFileW
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateFontIndirectW
CreateHalftonePalette
CreateICW
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
EnumFontFamiliesExW
EnumFontsW
ExcludeClipRect
ExtFloodFill
ExtTextOutW
FrameRgn
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
Pie
PlayEnhMetaFile
PolyBezier
PolyBezierTo
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
ResizePalette
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetMapMode
SetPixel
SetROP2
SetRectRgn
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWinMetaFileBits
SetWindowOrgEx
StartDocW
StartPage
StretchBlt
StretchDIBits
UnrealizeObject

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
Shell_NotifyIconW

shfolder

SHGetFolderPathW

user32

ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
CharLowerBuffW
CharLowerW
CharNextW
CharUpperBuffW
CharUpperW
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CopyIcon
CopyImage
CreateAcceleratorTableW
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextExW
DrawTextW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndMenu
EndPaint
EnumChildWindows
EnumDisplayMonitors
EnumThreadWindows
EnumWindows
ExitWindowsEx
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetCapture
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameW
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgCtrlID
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextW
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessageExtraInfo
GetMessagePos
GetMonitorInfoW
GetParent
GetPropW
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InsertMenuItemW
InsertMenuW
InvalidateRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadKeyboardLayoutW
LoadStringW
LockWindowUpdate
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendMessageA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
WaitMessage
WindowFromPoint
wsprintfA

ole32

CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
IsEqualGUID
OleInitialize
OleUninitialize

oleaut32

GetErrorInfo
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantInit

Exports

Exports

@@Ubackgroundform@Finalize
@@Ubackgroundform@Initialize
@@Umainform@Finalize
@@Umainform@Initialize
TMethodImplementationIntercept
_BackgroundForm
_MainForm
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 182KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 76.4MB - Virtual size: 76.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Spectrum Hesix Software_V1.0 20200103/Spectrum Hesix Software.ico

Sharing

General

Malware Config

Signatures

Files

3a1590c192586af3e3ca5c44e56269de

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49Certificate

Extended Key Usages

Key Usages

0f:5f:9a:b3:79:48:e7:98:26:d6:12:a2:da:94:8a:c0Certificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49Certificate

Extended Key Usages

Key Usages

0f:5f:9a:b3:79:48:e7:98:26:d6:12:a2:da:94:8a:c0Certificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

28:60:32:b2:85:ab:13:dc:76:5e:a9:4f:ba:7b:3f:a8:a0:47:0e:c3:19:5b:91:02:50:78:29:f9:7d:ae:a7:89Signer

d9:cf:a7:5a:bd:12:e8:e1:53:b0:7b:a4:35:85:21:a3:27:78:e3:cbSigner

Headers

DLL Characteristics

File Characteristics

Imports

version

psapi

shell32

ole32

user32

hid

setupapi

winmm

dsound

kernel32

advapi32

Exports

Exports

Sections

.text Size: 199KB - Virtual size: 198KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 37KB - Virtual size: 2.8MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 10KB - Virtual size: 10KB

8794fbf435f6e089fe609899875be980

Headers

File Characteristics

Imports

setupapi

advapi32

kernel32

mpr

version

winspool.drv

comctl32

gdi32

shell32

shfolder

user32

ole32

oleaut32

Exports

Exports

Sections

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

0f:5f:9a:b3:79:48:e7:98:26:d6:12:a2:da:94:8a:c0
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

0f:5f:9a:b3:79:48:e7:98:26:d6:12:a2:da:94:8a:c0
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

28:60:32:b2:85:ab:13:dc:76:5e:a9:4f:ba:7b:3f:a8:a0:47:0e:c3:19:5b:91:02:50:78:29:f9:7d:ae:a7:89
Signer

d9:cf:a7:5a:bd:12:e8:e1:53:b0:7b:a4:35:85:21:a3:27:78:e3:cb
Signer

.text
Size: 199KB - Virtual size: 198KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 37KB - Virtual size: 2.8MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 10KB - Virtual size: 10KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 182KB - Virtual size: 224KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 15KB - Virtual size: 16KB

.didata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 76.4MB - Virtual size: 76.4MB

.reloc
Size: 219KB - Virtual size: 220KB