a6eb2056b9c3ef028d154b8f7579e00825383b1a33a6942db6ddfc42e2f32a65

Sharing

Copy URL Twitter E-mail

General

Target

a6eb2056b9c3ef028d154b8f7579e00825383b1a33a6942db6ddfc42e2f32a65
Size

613KB
MD5

0f2b936efcea4463660939af231c541b
SHA1

761feae5d433e53e123ff748db654b67e4a8a4f2
SHA256

a6eb2056b9c3ef028d154b8f7579e00825383b1a33a6942db6ddfc42e2f32a65
SHA512

960b03cc67baa6922eee7d92dd0dc4a4f22991743c048ab5b73dc315d968d76b8b2b4ba50ace68a2902374bc60a2b7cf43947d5eb85482479eb0035e602301b6
SSDEEP

12288:qDSdjBqpXYiPaOkmXfCJvJvDwnrHTDBNnnXLfDsHjPBZn8:lQBPMm6JpwnrHTbLfDKnn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6eb2056b9c3ef028d154b8f7579e00825383b1a33a6942db6ddfc42e2f32a65

Files

a6eb2056b9c3ef028d154b8f7579e00825383b1a33a6942db6ddfc42e2f32a65
.dll windows x86

8fd1bd5b6cdc2bd66da601b421d9c7f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

CloseHandle
CompareStringA
CreateEventA
CreateFileA
DeleteCriticalSection
DeleteFileA
DeviceIoControl
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDiskFreeSpaceA
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeExA
GetStringTypeW
GetThreadLocale
GetTickCount
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpynA
lstrlenA

user32

CharNextA
EnumThreadWindows
GetKeyboardType
GetSystemMetrics
LoadStringA
MessageBoxA
wsprintfA

oleaut32

SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VarBoolFromStr
VarBstrFromBool
VarBstrFromCy
VarBstrFromDate
VarCyFromStr
VarDateFromStr
VarI4FromStr
VarNeg
VarNot
VarR8FromStr
VariantChangeTypeEx
VariantClear
VariantCopy
VariantCopyInd
VariantInit

Exports

Exports

_SMICloseSWPtestDll
_SMIGetSWPtestDllVersion
_SMIInitSWPtestDll
_SMIPtestAnalysisBadBlock
_SMIPtestLoadDgISP
_SMIPtestProgramDummyAll
_SMIPtestRebuildSysIndex
_SMIPtestSetDriveSerialNumber
_SMIPtestShallowEraseFix
_SMIReadMPInfo
_SMIReadRunBadBlock
_SMIWriteMPInfoEx
_SMI_Erase_Phy_block
_SMI_Program_Phy_Page
_SMI_Read_Phy_Page
_SmiDataInVendorCmdBlkGetDiffAddr
_SmiDataInVendorCmdFlashConnectivityTest
_SmiDataInVendorCmdGreyBoxDeepErase
_SmiDataInVendorCmdGreyBoxDone
_SmiDataInVendorCmdGreyBoxInit
_SmiDataInVendorCmdGreyBoxPre
_SmiDataInVendorCmdGreyBoxTrig
_SmiDataInVendorCmdLba2Pba
_SmiDataInVendorCmdPba2Lba
_SmiDataInVendorCmdReadDistribution
_SmiDataInVendorCmdReadDriveInfo
_SmiDataInVendorCmdReadFlashId
_SmiDataInVendorCmdReadFlashUniqueId
_SmiDataInVendorCmdReadGlobEraseCnt
_SmiDataInVendorCmdReadGlobReadCnt
_SmiDataInVendorCmdReadHmbInfo
_SmiDataInVendorCmdReadPhysicalPage
_SmiDataInVendorCmdReadPhysicalPageForRDT
_SmiDataInVendorCmdReadRam
_SmiDataInVendorCmdReadWproPage
_SmiDataOutVendorCmdDownloadFirmware
_SmiDataOutVendorCmdGreyBoxTrig
_SmiDataOutVendorCmdProgSpiRom
_SmiDataOutVendorCmdWritePhysicalPage
_SmiDataOutVendorCmdWriteRam
_SmiNVMeBusChange
_SmiNVMeClosePCIeDrive
_SmiNVMeFormat
_SmiNVMeIdentifyDevice
_SmiNVMeIssueShutDownNotification
_SmiNVMeOpenPCIeDrive
_SmiNVMePassThrough
_SmiNVMePowerManageDisable
_SmiNVMePowerManageEnable
_SmiNVMeReadLba
_SmiNVMeReadPfaInfo
_SmiNVMeReadSector
_SmiNVMeRecoveryDevDriver
_SmiNVMeSCSICdbPassthru
_SmiNVMeSetDevTimeOut
_SmiNVMeSetFeature
_SmiNVMeStopDevDriver
_SmiNVMeWriteLba
_SmiNVMeWriteSector
_SmiNonDataVendorCmdErasePhysicalBlock
_SmiNonDataVendorCmdJumpCode
_SmiNonDataVendorCmdResetCpu
_SmiPtestCalBadBlockCnt
_SmiPtestCalculateInfoBlockBufSize
_SmiPtestCheckRDTReport
_SmiPtestCheckRunMode
_SmiPtestChkGPIOSetting
_SmiPtestChkProgTime
_SmiPtestCompareInfoCheckSum
_SmiPtestDistinguishGrade
_SmiPtestDownloadIsp
_SmiPtestDownloadMpisp
_SmiPtestDumpSysBlock
_SmiPtestFlashConnectivityTest
_SmiPtestGenBadBlockBitMap
_SmiPtestGenDiffAddrTable
_SmiPtestGenInfoBlockBuf
_SmiPtestGetFlashId
_SmiPtestReadDriveInfo
_SmiPtestReadRomVersion
_SmiPtestRefRTLastBad
_SmiPtestResetDrive
_SmiPtestRomCodeTag
_SmiPtestSaveInfoBlock
_SmiPtestSaveInfoBlockOnly
_SmiPtestSaveOriRdtResult
_SmiPtestSaveRdtResult
_SmiPtestScanEraseBadBlock
_SmiPtestScanOrgBadBlock
_SmiPtestSetCardMode
_SmiPtestSetChCeMap
_SmiPtestSetDiskCapacity
_SmiPtestSetPMIC
_SmiPtestSetSystemBlockAndBoundaryBlock
_SmiPtestSramTest
_SmiPtestSwapInfoBlock
_SmiPtestTranAdj
_SmiPtestTranDriveSettingTableToParamTable
_SmiPtestTranRTC
_SmiPtestWriteMpInfo
___CPPdebugHook

Sections

.text
Size: 449KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fd1bd5b6cdc2bd66da601b421d9c7f1

Headers

File Characteristics

Imports

advapi32

kernel32

user32

oleaut32

Exports

Exports

Sections

.text Size: 449KB - Virtual size: 452KB

.data Size: 123KB - Virtual size: 140KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 4KB - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 8KB

.reloc Size: 25KB - Virtual size: 28KB

.text
Size: 449KB - Virtual size: 452KB

.data
Size: 123KB - Virtual size: 140KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 8KB

.reloc
Size: 25KB - Virtual size: 28KB