E:\Home\mtk14060\Workspace\AutoScript_V6_4.7\Project\WCP2_CleanRoom\DA\Download_Agent_Main\SP_Flashtool_V6\flash-lib-Chimaera\flash\x86_out\release\flash.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5046fb1a7ccfa90426d1b172f8139ebc676ce89c9c8b653cc7946b768feff88d.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5046fb1a7ccfa90426d1b172f8139ebc676ce89c9c8b653cc7946b768feff88d.dll
Resource
win10v2004-20231222-en
General
-
Target
5046fb1a7ccfa90426d1b172f8139ebc676ce89c9c8b653cc7946b768feff88d
-
Size
1.2MB
-
MD5
562dc938fce2b005b670b90898380286
-
SHA1
b1b5bf2dc428c843e2e6e12b36f02bc156f0ebb0
-
SHA256
5046fb1a7ccfa90426d1b172f8139ebc676ce89c9c8b653cc7946b768feff88d
-
SHA512
2d5156e7f0fe03f62f016262190b75f73cdf3ebfa2fc90843e8c1f614721a3e674972f93f297ebbca29456b6bea93fc9b4b6c50cbb61377857727274bd4a2952
-
SSDEEP
24576:S1UYskQ395RZu2iT9qacGoxxpBjurmXxkzqg5KE/BPn+lo7rEH7q:tS9qacGWimXxLbIPn+lo3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5046fb1a7ccfa90426d1b172f8139ebc676ce89c9c8b653cc7946b768feff88d
Files
-
5046fb1a7ccfa90426d1b172f8139ebc676ce89c9c8b653cc7946b768feff88d.dll windows:6 windows x86 arch:x86
eb058655574ec664b449ee06f6906e0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
FormatMessageW
SetEvent
WaitForSingleObjectEx
CloseHandle
LoadLibraryW
LocalFree
FreeLibrary
WideCharToMultiByte
FormatMessageA
CreateEventA
GetProcAddress
MultiByteToWideChar
ReadFile
GetFileSizeEx
WriteFile
CreateFileW
GetLastError
SetFilePointerEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
GetCurrentThreadId
ReleaseSRWLockShared
AcquireSRWLockShared
GetSystemTimeAsFileTime
CancelIo
PurgeComm
WaitForMultipleObjects
SetupComm
CreateEventW
EscapeCommFunction
ClearCommBreak
GetCommState
ClearCommError
SetCommTimeouts
SetCommState
lstrcpyW
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
GetThreadTimes
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ResetEvent
GetModuleHandleW
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
TryEnterCriticalSection
DuplicateHandle
Sleep
SwitchToThread
GetCurrentThread
GetExitCodeThread
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
HeapAlloc
HeapFree
GetProcessHeap
ReleaseSemaphore
OpenEventA
GetLogicalProcessorInformation
GetModuleHandleA
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
GetFileAttributesW
GetFileAttributesExW
RemoveDirectoryW
SetEndOfFile
DeviceIoControl
MoveFileExW
FindClose
FindFirstFileW
FindNextFileW
AreFileApisANSI
WakeAllConditionVariable
SleepConditionVariableSRW
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
HeapReAlloc
SetStdHandle
HeapSize
WriteConsoleW
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
setupapi
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDescriptionW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
Exports
Exports
flashtool_cleanup
flashtool_connect_device
flashtool_create_session
flashtool_destroy_session
flashtool_enter_mode
flashtool_env_set_log
flashtool_execute_command
flashtool_get_last_error_msg
flashtool_scan_device
flashtool_startup
Sections
.text Size: 830KB - Virtual size: 829KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ