51d0b8a33e1e9e4711307932f25723d7f15b6f94efa1e2736c9bbc02f2fa308c

Sharing

Copy URL

Twitter E-mail

General

Target

51d0b8a33e1e9e4711307932f25723d7f15b6f94efa1e2736c9bbc02f2fa308c
Size

3.3MB
MD5

af00b49775ce1f70dc173b41c65db25d
SHA1

7d366b7f4bd8914efaad7ab9a14134017742d9cb
SHA256

51d0b8a33e1e9e4711307932f25723d7f15b6f94efa1e2736c9bbc02f2fa308c
SHA512

12878cbbfaf21b2f4a1bd76102653f83fa2c6b279a0c55bbd6566f5806240753f43cdeb064efeb2f8b0240527326d5ec1be5bd17637d1e109f6e6e2cc86e4b10
SSDEEP

49152:5UzEZBdjSzS7z2pHTBEtS3Gw3wQfwqJpWupkva0CMk3P/GHzFF7QB:5UAZjV7z2pzBEtqGw3TwypzAa0CMNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51d0b8a33e1e9e4711307932f25723d7f15b6f94efa1e2736c9bbc02f2fa308c

Files

51d0b8a33e1e9e4711307932f25723d7f15b6f94efa1e2736c9bbc02f2fa308c
.dll windows:4 windows x86 arch:x86

baace2b9edadab47b254e8c72573ae5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

setupapi

SetupDiDestroyDriverInfoList
SetupDiClassGuidsFromNameA
SetupDiDestroyDeviceInfoList
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA

kernel32

UnhandledExceptionFilter
IsBadCodePtr
CreateFileW
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
GetTickCount
GetLastError
SetCommTimeouts
GetCommTimeouts
PurgeComm
EscapeCommFunction
SetCommState
GetCommState
Sleep
GetVersionExA
FlushFileBuffers
ReadFile
WriteFile
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
TlsSetValue
TlsGetValue
GetPrivateProfileSectionA
CloseHandle
GetCommProperties
CreateFileA
QueryDosDeviceA
ClearCommBreak
SetupComm
ClearCommError
CancelIo
GetModuleFileNameA
TlsAlloc
LoadLibraryA
GetFileAttributesExA
DeleteFileA
GetTempFileNameA
GetFullPathNameA
FindClose
FindNextFileA
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
FindFirstFileW
FindFirstFileA
GetFileAttributesW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
OutputDebugStringA
EnterCriticalSection
GetPrivateProfileStringA
CreateMutexA
WaitForSingleObject
ReleaseMutex
CreateSemaphoreA
ReleaseSemaphore
LocalFree
FormatMessageA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetWindowsDirectoryA
GetTempPathA
HeapAlloc
SetEnvironmentVariableA
ExitProcess
DebugBreak
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
SetEndOfFile
SetConsoleCtrlHandler
GetLocaleInfoW
TlsFree
GetProcessHeap
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapFree
RaiseException
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
IsBadReadPtr
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
FatalAppExitA
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetTimeZoneInformation
HeapSize
SetLastError
GetCurrentThread
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetProcAddress
GetACP
GetOEMCP
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings

user32

MessageBoxA
PostMessageA

advapi32

RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA

Exports

Exports

AUTH_Create
AUTH_Destroy
AUTH_GetInfo
AUTH_IsReady
AUTH_Load
AUTH_SetCallback
AUTH_Unload
BBChipTypeToName
Boot_FlashTool
Boot_MAUI
Boot_META
Brom_Checksum16Cmd
Brom_Connect
Brom_Connect_Ex
Brom_Create
Brom_DebugClear
Brom_DebugOff
Brom_DebugOn
Brom_Debug_SetLogFilename
Brom_Debug_SetLogPrefix
Brom_Destroy
Brom_DisConnect
Brom_DownloadData
Brom_EnableWatchDogTimeout
Brom_GetDLLInfo
Brom_GetDLLVer
Brom_GetHR_ID
Brom_GetME_ID
Brom_JumpCmd
Brom_JumpCmd_Ex
Brom_Read16Cmd
Brom_Read32Cmd
Brom_ReadEfuseAll
Brom_StartCmd
Brom_StartCmd_Ex
Brom_Write16Cmd
Brom_Write32Cmd
Brom_WriteEfuseCommon
Brom_WriteEfuseLock
Brom_WriteEfuseSecure
ComPortEnumerate
ComPortEnumerateEx
ComPortEnumerateWithFilterBCDDevice
ComPortEnumerateWithFilterHardwareID
ComPortEnumerateWithPrefix
ConvertDAReportToString
DA_Create
DA_Destroy
DA_GetInfo
DA_IsReady
DA_Load
DA_LoadBuf
DA_SetCallback
DA_SetDefaultStartAddr
DA_Unload
DL_AddHandleToList
DL_AutoLoadByScatRegionName
DL_AutoLoadROMFiles
DL_BL_EXT_Load
DL_BL_EXT_LoadBuf
DL_BL_GetInfo
DL_BL_IsReady
DL_BL_Load
DL_BL_LoadBuf
DL_BL_SetAutoLoadFileName
DL_BL_SetEnableAttr
DL_CheckHandleInList
DL_CheckHandleSameSWVersionInList
DL_Clone
DL_CloneList
DL_Create
DL_CreateList
DL_CreateROMEntries
DL_DeleteHandleFromList
DL_Destroy
DL_DestroyList
DL_GetBBChipName
DL_GetBBChipType
DL_GetBMTPoolAddress
DL_GetBootType
DL_GetCount
DL_GetCount_Ex
DL_GetCustomName
DL_GetDRAMSetting
DL_GetFlashDeviceCode
DL_GetFlashDeviceCode_Ex
DL_GetFlashName
DL_GetHandle
DL_GetHandleNumber
DL_GetInfo
DL_GetInfo_Ex
DL_GetJumpTableInfo
DL_GetProjectId
DL_IsEnctrypedBin
DL_IsNFB
DL_IsReady
DL_IsReady_Ex
DL_LoadScatter
DL_ResourceProjectIdComparisonSetting
DL_Rom_GetInfo
DL_Rom_GetInfoAll
DL_Rom_GetInfoAll_Ex
DL_Rom_GetInfo_Ex
DL_Rom_GetResInfo
DL_Rom_Load
DL_Rom_LoadBuf_Ex
DL_Rom_Load_Ex
DL_Rom_SetEnableAttr
DL_Rom_SetEnableAttr_Ex
DL_Rom_Unload
DL_Rom_UnloadAll
DL_Rom_Unload_Ex
DL_SetCallback
DL_SetPacketLength
DL_UpdateHandleToList
EraseFlagToString
ExtClockToName
FlashDownload
FlashDownload_ByhCOM
FlashEnableBoot
FlashEnableBoot_ByhCOM
FlashFormat
FlashFormat_ByhCOM
FlashFormat_Ex
FlashParameter
FlashParameter_ByhCOM
FlashReadback
FlashReadback_ByhCOM
FlashTool_CBR_GetInfo
FlashTool_CBR_Raw_Write
FlashTool_CBR_Read
FlashTool_CBR_Write
FlashTool_ChangeBaudrate
FlashTool_Connect
FlashTool_Connect_ByhCOM
FlashTool_CustPara_GetInfo
FlashTool_CustPara_Read
FlashTool_CustPara_Write
FlashTool_Disconnect
FlashTool_Download
FlashTool_EnableBoot
FlashTool_EnableDRAM
FlashTool_EnableSRAM
FlashTool_EnableWatchDogTimeout
FlashTool_EnableWatchDogTimeoutAndResetToNormalMode
FlashTool_EraseFirstBlock
FlashTool_Format
FlashTool_Format_Ex
FlashTool_GetFATRanges
FlashTool_GetFATRanges_Ex
FlashTool_GetProjectId
FlashTool_MemoryTest
FlashTool_OTP_CheckDevice
FlashTool_OTP_GetSize
FlashTool_OTP_Lock
FlashTool_OTP_LockCheckStatus
FlashTool_OTP_Read
FlashTool_OTP_Write
FlashTool_PostProcess
FlashTool_ReadFlashMemory
FlashTool_ReadPartitionCount
FlashTool_ReadPartitionInfo
FlashTool_Readback
FlashTool_RelayDA
FlashTool_SecRO_GetInfo
FlashTool_SecRO_Read
FlashTool_SecRO_Write
FlashTool_UpdateConfig
FlashTool_WriteFlashMemory
FlashTool_WriteFlashMemory_Internal
GetBromDLLInfo
GetBromDLLVersion
GetComHandleFromFTHandle
GetExternalMemorySetting
GetExternalMemorySettingFromBuffer
GetNandFlashNameByTypeId
GetNorFlashNameByTypeId
GetROMSetting
GetROMSettingFromBuffer
GetReadyToPowerOnWinAppMsgID
HWChipSelectToString
HWRamTypeToString
HWStorageTypeToString
MSPErrCodeToString
OTPOpToString
PART_Create
PART_Destroy
PART_GetCount
PART_GetInfo
ParamOpToString
RB_Append
RB_Append_ReadToBuf
RB_ClearAll
RB_Create
RB_Delete
RB_Destroy
RB_GetCount
RB_GetInfo
RB_GetInfoAll
RB_IsReady
RB_SetEnableAttr
RB_SetFilepath
RB_SetPacketLength
RB_SetReadbackAddr
RB_SetReadbackFlag
RB_SetReadbackLength
ROOTCERT_Create
ROOTCERT_Destroy
ROOTCERT_GetInfo
ROOTCERT_IsReady
ROOTCERT_Load
ROOTCERT_SetCallback
ROOTCERT_SyncWithDLHandle
ROOTCERT_Unload
ReadFlagToString
RepairTool_GetDIRInfo
RepairTool_GetExceptionRecord
SCERT_Create
SCERT_Destroy
SCERT_GetInfo
SCERT_IsReady
SCERT_Load
SCERT_SetCallback
SCERT_Unload
SetReadyToPowerOnWinAppMsgID
StatusToString
UpdateMMAAEnable
UsbComPortEnumerate

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 440KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baace2b9edadab47b254e8c72573ae5b

Headers

File Characteristics

Imports

version

setupapi

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 228KB - Virtual size: 227KB

.data Size: 440KB - Virtual size: 1.8MB

.idata Size: 8KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 176KB - Virtual size: 175KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 228KB - Virtual size: 227KB

.data
Size: 440KB - Virtual size: 1.8MB

.idata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 176KB - Virtual size: 175KB

.rmnet
Size: 60KB - Virtual size: 60KB