1540840a15ea7b136dd9541bb33ca3a834e6ab53b5eb4f55c2ec0e917a0f4ebd

Sharing

Copy URL Twitter E-mail

General

Target

1540840a15ea7b136dd9541bb33ca3a834e6ab53b5eb4f55c2ec0e917a0f4ebd
Size

5.0MB
MD5

fa23be875f697088597056e9d8ee0bd8
SHA1

0126a487ad83033c4447258b92f5086faf0b9c2b
SHA256

1540840a15ea7b136dd9541bb33ca3a834e6ab53b5eb4f55c2ec0e917a0f4ebd
SHA512

7563328c1f5d72ed3622633dbc189da9323cb54d499289e84e34c9a0b54a9b2a3b68e2d7f344d1f3eb11d29d78fa882b7cd945ead31c1a88a10b11728c57f229
SSDEEP

98304:cCibiefYxbGOYCf6Kt2bEXrvH0pbi2zTTD67HJs6Yb2FafbusD3zq:cCibiefYxbGOYCf6Kt2bEXrf0Vi2zTTg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1540840a15ea7b136dd9541bb33ca3a834e6ab53b5eb4f55c2ec0e917a0f4ebd

Files

1540840a15ea7b136dd9541bb33ca3a834e6ab53b5eb4f55c2ec0e917a0f4ebd
.dll windows:5 windows x86

71c31d186b758b6fce322317cf5c7279

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

CancelIo
PurgeComm
QueryPerformanceFrequency
CloseHandle
GetModuleFileNameA
GetComputerNameExA
GetLocalTime
GetVersionExA
GetTickCount
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
InterlockedExchange
EscapeCommFunction
InterlockedExchangeAdd
TlsAlloc
TlsFree
GetProcAddress
LoadLibraryA
WaitForMultipleObjects
GetFileSizeEx
WaitForSingleObjectEx
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcess
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
GetOverlappedResult
ReadFile
CreateEventA
SetCommTimeouts
SetCommState
WriteFile
GetProcessHeap
SetEvent
HeapFree
QueryPerformanceCounter
GetCommState
ClearCommError
HeapAlloc
CreateFileA
SetupComm
lstrcpyA
GetModuleHandleA
GetLastError
SetFilePointerEx
ClearCommBreak
CreateThread
EnterCriticalSection
GetEnvironmentVariableW
GetStringTypeExW
GetStringTypeExA
SetWaitableTimer
CreateWaitableTimerA
GetSystemInfo
ResumeThread
OpenEventA
ResetEvent
AreFileApisANSI
GetFullPathNameW
GetWindowsDirectoryW
GetDiskFreeSpaceExW
MoveFileExW
SetFileAttributesW
SetFileTime
GetFileTime
GetFileAttributesExW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CopyFileW
CreateDirectoryExW
GetFileAttributesW
OutputDebugStringA
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedCompareExchange
SetLastError
TlsGetValue
TlsSetValue
DeleteFiber
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
GetVersion
GetFileType
GetStdHandle
ConvertFiberToThread
GetCurrentProcessId
FreeLibrary
LoadLibraryW
FindNextFileW
FindFirstFileW
FindClose
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
ExitThread
Sleep
InitializeCriticalSection
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCPInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetCommandLineA
RtlUnwind
RaiseException
WriteConsoleW
ExitProcess
GetDriveTypeA
FindFirstFileA
HeapValidate
IsBadReadPtr
LCMapStringA
LCMapStringW
GetStringTypeW
CompareStringW
CompareStringA
GetACP
GetOEMCP
IsValidCodePage
DebugBreak
OutputDebugStringW
GetStringTypeA
SetStdHandle
SetHandleCount
GetStartupInfoA
GetTimeZoneInformation
FlushFileBuffers
GetConsoleCP
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetCurrentDirectoryA
GetFullPathNameA
HeapSize
HeapReAlloc
VirtualAlloc
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
VirtualQuery
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
WaitForMultipleObjectsEx
FormatMessageA
LocalFree
RemoveDirectoryW
DeleteFileW
DeviceIoControl

user32

RegisterClassExA
GetMessageA
PostQuitMessage
SendMessageA
CreateWindowExA
DefWindowProcA
DispatchMessageA
UnregisterDeviceNotification
RegisterDeviceNotificationA
LoadStringA
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
LoadStringW

setupapi

SetupDiGetClassDescriptionA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

secur32

GetUserNameExA

ws2_32

WSACleanup
ntohs
htons
htonl
ntohl
WSAStartup
WSAGetLastError
closesocket
recv
WSASetLastError
send

advapi32

CryptEnumProvidersW
CryptDestroyKey
CryptGetProvParam
CryptAcquireContextW
CryptGetUserKey
CryptExportKey
CryptDestroyHash
CryptSignHashW
CryptSetHashParam
CryptCreateHash
CryptDecrypt
DeregisterEventSource
ReportEventW
RegisterEventSourceW
CryptGenRandom
CryptReleaseContext

crypt32

CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertDuplicateCertificateContext

Exports

Exports

_flashtool_clear_last_errmsg@4
_flashtool_connect_brom_with_handle@20
_flashtool_customize_impl@8
_flashtool_efuse_read_all@8
_flashtool_efuse_write_all@8
_flashtool_generate_gpx@12
_flashtool_is_chiptype_match@20
_flashtool_set_last_errmsg@8
_flashtool_trans_modem_type@12
_meta_start_boot_mode@28
flashtool_cleanup
flashtool_connect_brom
flashtool_connect_da
flashtool_create_session
flashtool_create_session_with_handle
flashtool_destroy_session
flashtool_device_control
flashtool_download
flashtool_download_cert
flashtool_enable_dram
flashtool_firmware_update
flashtool_format
flashtool_format_partition
flashtool_generate_checksum
flashtool_get_com_handle
flashtool_get_device_info
flashtool_get_hrid
flashtool_get_last_errmsg
flashtool_get_lib_info
flashtool_get_rpmb_status
flashtool_get_rsc_cnt
flashtool_get_rsc_info
flashtool_get_scatter_info
flashtool_if_lib_da_match
flashtool_image_checksum
flashtool_memory_test
flashtool_otp_zone_operation
flashtool_pl_chanllenge
flashtool_read_partition_table
flashtool_readback
flashtool_reconnect_com
flashtool_set_boot_flag
flashtool_set_log_folder
flashtool_set_log_level
flashtool_set_rsc_info
flashtool_set_scatter_path
flashtool_set_ufs_config
flashtool_shutdown_device
flashtool_startup
flashtool_switch_com
flashtool_tell_device_change_com
flashtool_test
flashtool_upgrade
flashtool_upload
flashtool_waitfor_com
flashtool_write_data
get_revised_scatter_partitions

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 937KB - Virtual size: 936KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 187KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

71c31d186b758b6fce322317cf5c7279

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

setupapi

secur32

ws2_32

advapi32

crypt32

Exports

Exports

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

.rdata Size: 937KB - Virtual size: 936KB

.data Size: 60KB - Virtual size: 99KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 229KB - Virtual size: 228KB

.text Size: 187KB - Virtual size: 188KB

.text
Size: 3.6MB - Virtual size: 3.6MB

.rdata
Size: 937KB - Virtual size: 936KB

.data
Size: 60KB - Virtual size: 99KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 229KB - Virtual size: 228KB

.text
Size: 187KB - Virtual size: 188KB