afb61b0aa68ebcda0c0009ca9cfdbc5486f3826be00f6e3d90a96a394d2eec27

Sharing

Copy URL Twitter E-mail

General

Target

afb61b0aa68ebcda0c0009ca9cfdbc5486f3826be00f6e3d90a96a394d2eec27
Size

106KB
MD5

46d99fcf2be1e8f90a18e7f32262085e
SHA1

737652280034b231e597f149b9cc958b8c69fc03
SHA256

afb61b0aa68ebcda0c0009ca9cfdbc5486f3826be00f6e3d90a96a394d2eec27
SHA512

2563ce350547af2e886020b15892ce674a45f1100b2f6d2d8e356eada6a2827643e553125d25400361391f8cc7efa426c0d24ee0e0636f28e4db5bfeca4382c3
SSDEEP

1536:J40UJo16SIF6+Um7DINQ+soST7ctb+5l4:9s7H+Nw7ccm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afb61b0aa68ebcda0c0009ca9cfdbc5486f3826be00f6e3d90a96a394d2eec27

Files

afb61b0aa68ebcda0c0009ca9cfdbc5486f3826be00f6e3d90a96a394d2eec27
.dll windows:6 windows x86 arch:x86

c1856e1670adbce6c40b9684bab5cb1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
WaitForSingleObjectEx
Sleep
CreateEventA
ResetEvent
SystemTimeToFileTime
GetLocalTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WriteFile
GetLastError
CloseHandle
WaitForSingleObject
GetTickCount
TerminateThread
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringEx
LoadLibraryW
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleFileNameA
InitOnceExecuteOnce
InitializeCriticalSectionAndSpinCount
GetFileType
GetModuleHandleW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
FlsFree
EncodePointer
DecodePointer
HeapFree
HeapAlloc
HeapReAlloc
CreateThread
GetCurrentThreadId
ExitThread
GetProcAddress
LoadLibraryExW
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
InterlockedDecrement
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
HeapSize
GetStdHandle
GetModuleFileNameW
GetProcessHeap
SetLastError
InterlockedIncrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
CreateFileW

user32

PeekMessageA
DispatchMessageA
TranslateMessage

seegull

Lx_Close_Scanner
Lx_Inquiry_Req
Lx_Init_Scanner_V2
Lx_Reset_Req
Lx_Stop_Scan_Msg_Req
Lx_Store_EventHandle
Ex_Enhanced_Power_Scan_Req
Lx_Spectrum_Analysis_Msg_Req
Lx_Reset_EventHandle
Lx_Pilot_Scan_Msg_Rsp
Ex_Enhanced_Top_N_Signal_Scan_Msg_Rsp
Lx_Scan_Data_Msg_Rsp_V2
Ex_Color_Code_CCH_Scan_Data_Msg_Rsp
Ex_Enhanced_Top_N_Signal_Scan_Msg_Req
Lx_Scan_Msg_Req_V2
Lx_Scan_Data_Msg_Req_V2
Ex_Top_N_Signal_Scan_Data_Msg_Req
Ex_Top_N_Pilot_Scan_Msg_Req_V2
Lx_Top_N_Pilot_Scan_Data_Msg_Req
Lx_Scan_Msg_Rsp_V2
Lx_Pilot_Scan_Data_Msg_Rsp
Lx_GetDeviceDataStatus
Lx_Stop_Scan_Msg_Rsp
Ex_Enhanced_Power_Scan_Data_Rsp
Lx_Spectrum_Analysis_Data_Msg_Req
Lx_Spectrum_Analysis_Data_Msg_Rsp
Lx_Top_N_Pilot_Scan_Msg_Rsp
Ex_Enhanced_Power_Scan_Data_Req
Ex_Color_Code_CCH_Scan_Msg_Req
Lx_Color_Code_CCH_Scan_Msg_Rsp
Ex_Top_N_Pilot_Scan_Data_Msg_Rsp_V2
Ex_Enhanced_Top_N_Signal_Scan_Data_Msg_Rsp
Lx_Spectrum_Analysis_Msg_Rsp

Exports

Exports

ConnectDevice
CreateDeviceHandle
DisconnectDevice
FreeDeviceHandle
GainVersion
GetDeviceState
PauseLog
ReadBuffer
ReadedData
RestoreLog
ResumeLog
SetDeviceConfigs
SetReadIOInterval
StartLog
StopLog

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1856e1670adbce6c40b9684bab5cb1c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

seegull

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 14KB - Virtual size: 13KB