99e7b8374103640e5531dca70ea07085

Sharing

Copy URL Twitter E-mail

General

Target

99e7b8374103640e5531dca70ea07085
Size

230KB
MD5

99e7b8374103640e5531dca70ea07085
SHA1

4bb03e9281b972bc14c41e9dbda1566ab5885c77
SHA256

e8eaa7bac0fd541b9ee46f41cd8c6e7fb2659dd28a88baac55eb44449b797c34
SHA512

50fd50eafaf414fec3e1da79519e0202702b9681e0a227bfa98453091f1fbedfac2ffd53c5ec8ab20130bbcc7032faef4bb1c789914e487fd2d7103e85e9d693
SSDEEP

3072:hb/BetUVgvduuIsRO4PU1cABXqeAntEENb87/k6pBWPoHk3g1OHckZcwBTR1v:hDBetSewujRO4mcaqBt2/kzakckZBTbv

Score

7^/10

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/TeVii.dll	acprotect

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Devices/Dev_Bda2Driver.int
unpack001/TeVii.dll
unpack001/ttBdaDrvApi_Dll.dll

Files

99e7b8374103640e5531dca70ea07085
.zip
Devices/Dev_Bda2Driver.cfg
Devices/Dev_Bda2Driver.int
.dll windows:5 windows x86 arch:x86

d0e9d2c0b2af47818d28fac706903a51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ksproxy.ax

KsSynchronousDeviceControl

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

ttbdadrvapi_dll

bdaapiGetTuneStats
bdaapiGetDevNameAndFEType
bdaapiClose
bdaapiOpenHWIdx
bdaapiSetDiSEqCMsg

tevii

FindDevices
GetDeviceName
GetDevicePath
OpenDevice
CloseDevice
TuneTransponder
GetSignalStatus
SendDiSEqC

kernel32

LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
ReadFile
GetProcessHeap
SetEndOfFile
FlushFileBuffers
SetStdHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
OutputDebugStringA
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetPrivateProfileStringA
Sleep
lstrcmpW
InterlockedIncrement
InterlockedDecrement
CloseHandle
VirtualFree
GetCurrentProcess
GetCurrentThreadId
VirtualAlloc
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetTickCount
GetLastError
MultiByteToWideChar
GetConsoleCP
SetFilePointer
HeapSize
WriteFile
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
HeapFree
GetCommandLineA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
RaiseException
HeapCreate
HeapDestroy
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError

ole32

CoInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit

Exports

Exports

DvbDeviceControl

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Devices/ReadMe.txt
TeVii.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CloseDevice
FindDevices
GetAPIVersion
GetDeviceName
GetDevicePath
GetSignalStatus
OpenDevice
SendDiSEqC
SetRemoteControl
TuneTransponder

Sections

Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ttBdaDrvApi_Dll.dll
.dll windows:4 windows x86 arch:x86

257eea4a8d05d3853e99b016a11cd492

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
InitializeCriticalSection
TerminateThread
Sleep
GetTickCount
SetEvent
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
CloseHandle
OutputDebugStringA
DeleteCriticalSection
CreateThread
DeviceIoControl
CreateFileA
WaitForSingleObject
CreateEventA
GetLastError
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA

user32

wvsprintfA
wsprintfA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysFreeString

Exports

Exports

bdaapiCIAnswer
bdaapiCIConvertCharBuf
bdaapiCIEnterModuleMenu
bdaapiCIGetSlotStatus
bdaapiCIMenuAnswer
bdaapiCIMultiDecode
bdaapiCIReadDrvDemuxFilterData
bdaapiCIReadPSIFast
bdaapiCIReadPSIFastDrvDemux
bdaapiCIReadPSIFastWithPMT
bdaapiClose
bdaapiCloseCI
bdaapiCloseIR
bdaapiDelDrvDemuxFilter
bdaapiEnumerate
bdaapiGetDVBTAntPwr
bdaapiGetDVBTAutoOffsetMode
bdaapiGetDevNameAndFEType
bdaapiGetDeviceIDs
bdaapiGetDevicePath
bdaapiGetDrvVersion
bdaapiGetHwIdx
bdaapiGetMAC
bdaapiGetProductSellerID
bdaapiGetTuneStats
bdaapiGetUSBHighspeedMode
bdaapiOpen
bdaapiOpenCI
bdaapiOpenCISlim
bdaapiOpenCIWithoutPointer
bdaapiOpenCIext
bdaapiOpenHWIdx
bdaapiOpenIR
bdaapiSetDVBTAntPwr
bdaapiSetDVBTAutoOffsetMode
bdaapiSetDiSEqCMsg
bdaapiSetDrvDemuxFilter
bdaapiSetIRWakeUpCode
bdaapiSetLED
bdaapiSetVideoport
bdaapiTSAnalysisGetGlobals
bdaapiTSAnalysisOnOff
bdaapiTSStartStop
bdaapiTune
bdaapiTuningAnalGet
bdaapiTuningAnalReset
bdaapiUserEEPROM_Read
bdaapiUserEEPROM_Write

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0e9d2c0b2af47818d28fac706903a51

Headers

File Characteristics

Imports

ksproxy.ax

version

ttbdadrvapi_dll

tevii

kernel32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 129KB - Virtual size: 129KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 6KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 10KB

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: - Virtual size: 176KB

Size: 53KB - Virtual size: 56KB

Size: 1KB - Virtual size: 4KB

257eea4a8d05d3853e99b016a11cd492

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 129KB - Virtual size: 129KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 6KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 10KB

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 12KB - Virtual size: 8KB