d856933801ead984ed31a57efabebee0e5cf8c83c95bfef7e3091ac86327ccfa

Sharing

Copy URL Twitter E-mail

General

Target

d856933801ead984ed31a57efabebee0e5cf8c83c95bfef7e3091ac86327ccfa
Size

1.8MB
MD5

dae69dfee0be0429b771454196002269
SHA1

ea7f848f6f3dc65d94d96a1a34c27443526cfccf
SHA256

d856933801ead984ed31a57efabebee0e5cf8c83c95bfef7e3091ac86327ccfa
SHA512

f3c4dda1a189bad6791032136e7094b2e0f82755271f6bebcf0e2c2c9a0f794fb46b152b08a7f620d6964d22fee8569dba8482906443f28cdeb465d9f7f6a1b5
SSDEEP

24576:RocfBbF+JD/0lHcJD/0sJbvEJbvb6PzI/JbU/JbU/m0hvguc00hvguc00hvgucOw:xbFfCUy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d856933801ead984ed31a57efabebee0e5cf8c83c95bfef7e3091ac86327ccfa

Files

d856933801ead984ed31a57efabebee0e5cf8c83c95bfef7e3091ac86327ccfa
.dll windows:4 windows x86

9f7ffb06514957b955f0e9a1ce93e4af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiOpenDevRegKey
SetupOpenInfFileA
SetupCloseInfFile
SetupFindNextLine
SetupGetFieldCount
SetupGetStringFieldA
SetupFindFirstLineA
CM_Get_DevNode_Status_Ex
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
SetupDiDestroyDeviceInfoList

kernel32

GlobalFlags
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
MoveFileA
GetThreadLocale
ReadFile
SetFilePointer
FlushFileBuffers
GetFullPathNameA
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCurrentDirectoryA
GetProcessHeap
RaiseException
ExitProcess
HeapSize
GetACP
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
WritePrivateProfileStringA
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcessId
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GlobalFree
GlobalLock
GlobalUnlock
FormatMessageA
GetModuleHandleA
GetProcAddress
GetSystemDefaultLangID
GetUserDefaultLangID
SetFileAttributesA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
Sleep
SetLastError
GetCurrentThread
GetCurrentProcess
GlobalAlloc
GetWindowsDirectoryA
lstrcatA
LoadLibraryA
GetFileSize
WriteFile
FreeLibrary
lstrlenA
CompareStringW
CompareStringA
LocalFree
LocalAlloc
CreateFileA
DeviceIoControl
CloseHandle
GetVersionExA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetCommandLineA

user32

ShowWindow
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetDlgCtrlID
GetWindowRect
GetClassNameA
GetWindowTextA
SetWindowTextA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
GetWindow
PtInRect
GetSystemMetrics
CharUpperA
wsprintfA
TabbedTextOutA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DestroyMenu
RealGetWindowClassA
GetDesktopWindow
PostMessageA
MessageBoxA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
UnhookWindowsHookEx
PostQuitMessage
CheckMenuItem
EnableMenuItem
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
SendMessageA
ModifyMenuA

gdi32

DeleteDC
GetStockObject
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
GetClipBox

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueExA
GetUserNameA
OpenThreadToken
OpenProcessToken
GetTokenInformation
LookupPrivilegeNameA
RegOpenKeyExA
RegEnumKeyExA
RegCreateKeyA
RegOpenKeyA
RegEnumValueA
RegCloseKey
RegSetValueExA

shlwapi

PathFindExtensionA
PathFindFileNameA

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

ChkAPOSupportDolbyPCEE4_DAA
ChkAPOSupportDolbyPCEE4_DHT
ChkBroadComID
ChkDellAlienwareModel
ChkDellControlinStartMenu
ChkDolbyPCEE4_SelectorDemoOnly_Supported
ChkDolbyPCEE4_SelectorEditorOnly_Supported
ChkDolbyPCEE4_SelectorOnly_Supported
ChkDolbyPCEE4_SetupPCEE4Prog_NoDemo
ChkDolbyPCEE4_SetupPCEE4Prog_NoEditor
ChkDolbyPCEE4_SetupPCEE4Prog_NoSelector
ChkHDMISupported
ChkLoadDrvPrivilege
ChkRtkCPLSupported
ChkRtkNewGUISupported
ChkRtkRegKeyEmpty_x64_CU
ChkRtkRegKeyEmpty_x64_LM
ChkRtkRegKeyEmpty_x86_CU
ChkRtkRegKeyEmpty_x86_LM
ChkSupportAPODTSAPOUltraPCBoost
ChkSupportAPOSupportSonceFocus30
ChkSupportAPOSupportSonceFocus30_NoSonicFocusGUI
ChkSupportAPOSupportSonceFocus30_SonicFocusGUI
ChkSupportAPOSupportSonceFocus30_SonicMasterGUI
ChkSupportDolbySpruce
ChkSupportDolby_DS1_DAA
ChkSupportDolby_DS1_DHT
ChkSupportHP_AIO
ChkSupportHP_AIO_SonicFocusBeats
ChkSupportMaxxAudio30
ChkSupportMaxxVolumeSD
ChkSupportSoundRoom
Chk_AsusOnlySupportSonicRadar3
Chk_AudioMgrShortcutW81_Supported
Chk_DTSEntryLevelForSetupProgram
Chk_DolbyFlex3_UseDS1PCF
Chk_ExecuteDTSStudioSoundInstallers
Chk_GUISubType_RTGS_HP_BEATS_Supported
Chk_GUISubType_RTGS_HP_BEATS_TOWER_Supported
Chk_GUISubType_RTGS_HP_BanO_DTS_Supported
Chk_GUISubType_RTGS_HP_BanO_DTS_TOWER_Supported
Chk_GUISubType_RTGS_HP_BanO_Supported
Chk_GUISubType_RTGS_HP_BanO_TOWER_Supported
Chk_HP_AIO_Model_Customized01_Supported
Chk_HP_ShortcutFolderNameReq
Chk_MAXX_MA3TCelticUI_Supported
Chk_SRSAPO3Support
Chk_SRS_GUISubType_Supported
Chk_SRS_HPPremiumBlackSkin_RTGS_HPDTS_SOUND_Supported
Chk_SRS_HPPremiumBlackSkin_Supported
Chk_SSTEnableDTS
Chk_SSTEnableDolbyAX2
Chk_SetupDS1Prog_AddEditorShortcut
Chk_SupportDTSHPX
Chk_SupportDolbyDAX2
Chk_SupportNahimicAPO_Supported
Chk_SupportNahimicSonicRadar20_Supported
Chk_SupportSonicMapper2
Chk_SupportSonicMapper3
Chk_SupportYamahaAPO
Chk_SupportYamahaAPO2
Chk_VistaNoDoblyUI_Official_Supported
ConfirmRtkDrv
DelIncorrectUserFile
DrvInfVerCompare
ExtractBANG_OLUFSENIcon
ExtractBOPlayIcon
ExtractBeatsIcon
ExtractDTSIcon
ExtractHideWin
ExtractRtkIcon
ExtractSRSIcon
ExtractSetupService
GetAudioInterface
GetDrvPolicy
GetHDASubID
GetOSVersion
GetRtkHDAudioGlobalPolicy
GetRtkHDAudioGlobalPolicy_APODTSAPOUltraPCBoost_All
GetRtkHDAudioGlobalPolicy_APOSupportSonicFocus30
GetRtkHDAudioGlobalPolicy_APOSupportSonicFocus30_SF3GUIType
GetRtkHDAudioGlobalPolicy_APOUseMaxx30
GetRtkHDAudioGlobalPolicy_APOUseMaxxVolumeSD
GetRtkHDAudioGlobalPolicy_HPAIOModel
GetRtkHDAudioGlobalPolicy_SonicFocusBeats
GetRtkHDAudioGlobalPolicy_SoundRoom
GetRtkHDAudioGlobalPolicy_SupDSpruce
HideISWizardWin
IdentifyDrvSupport
IsMediaCenterOS
IsServerOS
SetCDfmt
SetDSHWAcceleration_BasicLv

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f7ffb06514957b955f0e9a1ce93e4af

Headers

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 163KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 28KB - Virtual size: 25KB

.text
Size: 164KB - Virtual size: 163KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 28KB - Virtual size: 25KB