502adbcbfe016fd9aa9ab746b94db1ce_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

502adbcbfe016fd9aa9ab746b94db1ce_JaffaCakes118
Size

2.2MB
MD5

502adbcbfe016fd9aa9ab746b94db1ce
SHA1

8a0fba88a9569be90013f67e51db1af4e51e7602
SHA256

74b51684c4d737dce2198f443644202669de907c314b1d12bdbff25bbb529bec
SHA512

25dd81409ee680a8c4c7f03a94aa0e8f03ff61c1b38e7b36911b522cbe75d609b100a7bf0c35584e0794721302d737429eebf6055da1742dc494f4fefccff2ef
SSDEEP

49152:bLdaUZx9JGb+oIS4gOtS69Pfiuwz119htqfhtqXA00pMbq3I55JAvO/LI:bhlZxebJIScS4P6519IeA00pD3o5kOTI

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/SMI32X2K.SYS
unpack001/smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/SMIInfUpdate.exe
unpack001/smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/smi32xPC.sys
unpack001/smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win98/SMI320.SYS
unpack001/smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win98/Setup98Factory.exe
unpack001/smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/SMI32X2K.SYS
unpack001/smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/SMIInfUpdate.exe
unpack001/smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/smi32xPC.sys
unpack003/autorun.exe
unpack001/smi_mptool_v2.03.20_v5_j0326/sm32Xtest.exe

Files

502adbcbfe016fd9aa9ab746b94db1ce_JaffaCakes118
.rar
smi_mptool_v2.03.20_v5_j0326/123.ini
smi_mptool_v2.03.20_v5_j0326/Boot.Bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD310A600_H27U8G8F2MTR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD314B600_H27U8G8T2BTR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD5182D04_F41_16G_X3.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD551A600_H27UBG8H5MTR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD5942534_H27UAG8T2ATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD5952500_H27UCG8VFATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD7183504_H2EUCG8N1MYR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD7183504_H2EUDG8P1MXR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD755B600_H27UCG8V5MTR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD7942544_H27UBG8T2MYR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD7949A74_H27UBG8T2ATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADD7952548_H27UCG8V5ATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/ADDE959A78_H27UDG8V5ATR-1plane.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-F41_16G_X3.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27U8G8F2MTR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27U8G8T2BTR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27UAG8T2ATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27UBG8H5MTR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27UBG8T2ATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27UBG8T2MYR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27UCG8V5ATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27UCG8V5MTR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27UCG8VFATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H27UDG8V5ATR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H2EUCG8N1MYR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Hynix/boot-H2EUDG8P1MXR.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/8948044685_29F16G08AAMD2.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/8968044689_29F32G08AAMDB.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/896808568A_29F32G08EBAAAWP.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/8968244689_29F32G08AAMDB_NewFlashID.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/8988244BA9_29F64G08AAME1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/89D3902E64_29F08G08AANC1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/89D5903E00_29F16G08AAND1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/89D5943E00_29F16G08AAMC1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/89D5D12E68_29F32G08FANC1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/89D7943E84_29F32G08AAMD1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/89D7D13E00_29F32G08BAND1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/89D7D53E00_29F64G08FAMC1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F08G08AANC1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F16G08AAMC1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F16G08AAMD2.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F16G08AAND1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F32G08AAMD1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F32G08AAMDB.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F32G08AAMDB_NewFlashID.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F32G08BAND1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F32G08FANC1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F64G08AAME1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Intel/boot-29F64G08FAMC1.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C28002685_MT29F8G08ABABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C48002689_MT29F16G08ABABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C48044685_MT29F16G08CBABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C6801A689_MT29F64G08AJABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C68044689_MT29F32G08CBABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C6808568A_MT29F32G08EBAAAWP.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C88044BA9_MT29F64G08CBAAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C8805C689_MT29F128G08CJABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C8809D600_MT29F128G08EJAAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2C8824CB00_MT29F64G08CBAAA-NEW.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2CA805CB00_MT29F256G08CJAAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2CD3906400_MT29F8G08AAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2CD5943E00_MT29F16G08MAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2CD5D16800_MT29F32G08FAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2CD7943E84_MT29F32G08MAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2CD7D53E00_MT29F64G08TAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/2CD9D53E88_MT29F128G08TAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F128G08CJABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F128G08EJAAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F128G08TAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F16G08ABABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F16G08CBABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F16G08MAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F256G08CJAAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F32G08CBABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F32G08EBAAAWP.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F32G08FAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F32G08MAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F64G08AJABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F64G08CBAAA-NEW.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F64G08CBAAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F64G08TAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F8G08AAA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Micron/boot-MT29F8G08ABABA.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD310A664_K9F8G08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD314A564_K9G8G08U0A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD3519558_K9WAG08U1A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD514B674_k9GAG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD551A668_K9WBG08U1M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD5847200_K9GAG08U0E.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD5942934_K9GAG08U0D.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD5943600_K9GAG08U0A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD59835F4_KLE8G4ZUMM.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD5987154_K9AAG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD755B678_K9LBG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD7947254_K9GBG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD798C654_K9ABG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD798CA54_K9ABG08U0A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD79935F8_KLEAG8ZUMM.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD7D52900_K9LBG08U0D.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECD7D52938_K9HCG08U1D.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/ECDED57258_K9PFG08U5M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9AAG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9ABG08U0A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9ABG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9F8G08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9G8G08U0A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9GAG08U0A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9GAG08U0D.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9GAG08U0E.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9GBG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9HCG08U1D.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9LBG08U0D.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9LBG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9PFG08U5M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9WAG08U1A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-K9WBG08U1M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-KLE8G4ZUMM.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-KLEAG8ZUMM.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Samsung/boot-k9GAG08U0M.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/SanDisk/454A9AB27E_SDTNMNCHSM_016G.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/SanDisk/45C598B276_SDTNMNAHEM_002G.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/SanDisk/45C798B276_SDTNMNAHEM_004G.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/SanDisk/45CE99B27A_SDTNMNBHSM_008G.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/SanDisk/boot-SDTNMNAHEM_002G.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/SanDisk/boot-SDTNMNAHEM_004G.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/SanDisk/boot-SDTNMNBHSM_008G.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/SanDisk/boot-SDTNMNCHSM_016G.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D394BA00_TH58NVG4D1DTG00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D5943276_TC58NVG4D2ETA00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D594BA74_TH58NVG4D1DTG00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D598B276_TC58NVG4T2ETA00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D7943276_TH58NVG5D2FTA10.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D795327A_TH58NVG6D2ETA20.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D795BA00_TH58NVG6D1DTG20.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D798B276_TC58NVG5T2ETA00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98D799B27A_TH58NVG6T2EA2A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/98DE953200_TH58NVG7D2ETA48.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TC58NVG4D2ETA00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TC58NVG4T2ETA00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TC58NVG5T2ETA00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TH58NVG4D1DTG00.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TH58NVG5D2FTA10.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TH58NVG6D1DTG20.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TH58NVG6D2ETA20.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TH58NVG6T2EA2A.bin
smi_mptool_v2.03.20_v5_j0326/CardMode/Toshiba/boot-TH58NVG7D2ETA48.bin
smi_mptool_v2.03.20_v5_j0326/DEFAULT.INI
smi_mptool_v2.03.20_v5_j0326/ForceFlash-J0325.SET
smi_mptool_v2.03.20_v5_j0326/Release note/SM32X-Release-Note.pdf
.pdf
smi_mptool_v2.03.20_v5_j0326/UFD_3255AA/SM3255AAISP.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_3255AA/SM3255AAISP_Samsung32_TLC.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_3255AA/SM3255AAISP_Samsung42_TLC.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_3255AA/SM3255AAPTEST.bin
smi_mptool_v2.03.20_v5_j0326/UFD_3255AB/SM3255ABISP.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_3255AB/SM3255ABPTEST.bin
smi_mptool_v2.03.20_v5_j0326/UFD_ALL_DBF/flash_3255AA.dbf
smi_mptool_v2.03.20_v5_j0326/UFD_ALL_DBF/flash_3255AB.dbf
smi_mptool_v2.03.20_v5_j0326/UFD_ALL_ForceFW/SM3255AA.FFW
smi_mptool_v2.03.20_v5_j0326/UFD_MP/DBSIZE.INI
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Documents_for_SMI_Driver.doc
.doc windows office2003
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/SMI32X2K.INF
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/SMI32X2K.SYS
.sys windows:5 windows x86 arch:x86

e7e92af7d4c5c9e3413e974e3309137c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoOpenDeviceRegistryKey
RtlAppendUnicodeToString
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
RtlFreeUnicodeString
KeInitializeSpinLock
KeInitializeEvent
IoCreateDevice
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
ExFreePool
ExAllocatePoolWithTag
RtlWriteRegistryValue
KeSetEvent
InterlockedDecrement
ZwClose
InterlockedIncrement
IoIsWdmVersionAvailable
IofCompleteRequest
IoDeleteDevice
IoDetachDevice
IoAttachDeviceToDeviceStack
RtlInitUnicodeString
PoRequestPowerIrp
PoCallDriver
PoStartNextPowerIrp
IoFreeIrp
IoAllocateIrp
IoBuildPartialMdl
IoAllocateMdl
IoFreeMdl
IoCancelIrp
IofCallDriver

hal

KfAcquireSpinLock
KfReleaseSpinLock

usbd.sys

USBD_CreateConfigurationRequest
USBD_GetUSBDIVersion
_USBD_ParseConfigurationDescriptorEx@28

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 800B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 416B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/SMIInfUpdate.exe
.exe windows:4 windows x86 arch:x86

9b2ee96defb4f26e103e94b3bad9c7b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

GetTickCount
GetFileSize
GetFileTime
FormatMessageA
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
FileTimeToLocalFileTime
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToSystemTime
GetProfileStringA
GetModuleFileNameA
GetVersionExA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
GetFileAttributesA
CopyFileA
GetWindowsDirectoryA
SetLastError
lstrlenA
LocalAlloc
LocalFree
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
SetCurrentDirectoryA
GetCurrentDirectoryA
FindClose
FindNextFileA
lstrcatA
lstrcpyA
FindFirstFileA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
CloseHandle
GetFullPathNameA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
MulDiv
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource

user32

GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GetDesktopWindow
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
LoadIconA
UnregisterClassA
ScreenToClient
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
PtInRect
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowUnicode
SendMessageA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
wsprintfA
CharUpperA
KillTimer
EnableWindow
PostMessageA
PostQuitMessage
SetCursor
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
BitBlt
CreateCompatibleDC
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/Win2000/usbstor.inf
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/smi32xPC.INF
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win2000/smi32xPC.sys
.sys windows:5 windows x86 arch:x86

a342e1b14cc1cfc5bc791290b1a682c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\0000_00_ActiveProject\Driver\sys_xp0303\objfre\i386\bulkusb.pdb

Imports

ntoskrnl.exe

IoDetachDevice
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
PoSetPowerState
KeInitializeEvent
KeInitializeSpinLock
IoCreateDevice
memmove
ExAllocatePoolWithTag
RtlQueryRegistryValues
wcslen
KeSetEvent
KeClearEvent
InterlockedIncrement
InterlockedDecrement
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoFreeWorkItem
KeInitializeTimerEx
InterlockedExchange
IoDeleteDevice
IoSetDeviceInterfaceState
IoQueueWorkItem
IoAllocateWorkItem
KeSetTimerEx
PoStartNextPowerIrp
PoCallDriver
PoRequestPowerIrp
IoCancelIrp
IoFreeIrp
IoAllocateIrp
IoWMIRegistrationControl
RtlInitUnicodeString
IoFreeMdl
IoBuildPartialMdl
IoAllocateMdl
RtlAppendUnicodeToString
IoOpenDeviceRegistryKey
RtlWriteRegistryValue
IoIsWdmVersionAvailable
KeCancelTimer
KeInitializeDpc
ZwClose
IofCompleteRequest
ExFreePool

hal

KfAcquireSpinLock
KfReleaseSpinLock

wmilib.sys

WmiSystemControl
WmiCompleteRequest

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win98/SMI320.INF
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win98/SMI320.SYS
.sys windows:4 windows x86 arch:x86

141f854148474ed338533c115038d4b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoOpenDeviceRegistryKey
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
RtlWriteRegistryValue
ZwClose
RtlAppendUnicodeToString
RtlFreeUnicodeString
IoCreateDevice
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
ExFreePool
ExAllocatePoolWithTag
KeInitializeSpinLock
KeSetEvent
KeInitializeEvent
InterlockedDecrement
InterlockedIncrement
IofCallDriver
IofCompleteRequest
IoDeleteDevice
IoDetachDevice
IoAttachDeviceToDeviceStack
RtlInitUnicodeString
PoRequestPowerIrp
PoCallDriver
PoStartNextPowerIrp
IoFreeIrp
IoAllocateIrp
IoBuildPartialMdl
IoAllocateMdl
IoFreeMdl
IoIsWdmVersionAvailable

hal

KfReleaseSpinLock
KfAcquireSpinLock

usbd.sys

USBD_CreateConfigurationRequest
USBD_GetUSBDIVersion
_USBD_ParseConfigurationDescriptorEx@28

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 544B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 800B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 448B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/Win98/Setup98Factory.exe
.exe windows:4 windows x86 arch:x86

95aed137474d924b19ef6dd11a729068

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetACP
GetTimeZoneInformation
FormatMessageA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
HeapReAlloc
HeapSize
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetLastError
GetEnvironmentStringsW
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringW
SetEnvironmentVariableA
GetTickCount
GetFileTime
GetFileSize
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
FindClose
GetVolumeInformationA
FindFirstFileA
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
SetErrorMode
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType
SizeofResource
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetWindowsDirectoryA
GetModuleHandleA
GetModuleFileNameA
SetFileAttributesA
DeleteFileA
CopyFileA
GetFileAttributesA
CreateDirectoryA
GetProcessVersion
LCMapStringA
WritePrivateProfileStringA
GetProfileStringA
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CloseHandle
LCMapStringW
GetStringTypeA
HeapDestroy
CompareStringA
GetVersionExA

user32

SetRect
MessageBeep
InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
PtInRect
GetClassNameA
GetDesktopWindow
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
CopyAcceleratorTableA
GetNextDlgGroupItem
CopyRect
GetTopWindow
IsChild
wsprintfA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
GetSysColorBrush
CharNextA
AdjustWindowRectEx
ScreenToClient
GetClassInfoA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
WinHelpA
GetCapture
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
GetStockObject
DeleteDC
SaveDC
SetBkColor
SetTextColor
GetObjectA
GetClipBox
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/SMI32X2K.INF
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/SMI32X2K.SYS
.sys windows:5 windows x86 arch:x86

a342e1b14cc1cfc5bc791290b1a682c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\WORK\sys_xp2\objfre\i386\bulkusb.pdb

Imports

ntoskrnl.exe

IoDetachDevice
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
PoSetPowerState
KeInitializeEvent
KeInitializeSpinLock
IoCreateDevice
memmove
ExAllocatePoolWithTag
RtlQueryRegistryValues
wcslen
KeSetEvent
KeClearEvent
InterlockedIncrement
InterlockedDecrement
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoFreeWorkItem
KeInitializeTimerEx
InterlockedExchange
IoDeleteDevice
IoSetDeviceInterfaceState
IoQueueWorkItem
IoAllocateWorkItem
KeSetTimerEx
PoStartNextPowerIrp
PoCallDriver
PoRequestPowerIrp
IoCancelIrp
IoFreeIrp
IoAllocateIrp
IoWMIRegistrationControl
RtlInitUnicodeString
IoFreeMdl
IoBuildPartialMdl
IoAllocateMdl
RtlAppendUnicodeToString
IoOpenDeviceRegistryKey
RtlWriteRegistryValue
IoIsWdmVersionAvailable
KeCancelTimer
KeInitializeDpc
ZwClose
IofCompleteRequest
ExFreePool

hal

KfAcquireSpinLock
KfReleaseSpinLock

wmilib.sys

WmiSystemControl
WmiCompleteRequest

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/SMIInfUpdate.exe
.exe windows:4 windows x86 arch:x86

9b2ee96defb4f26e103e94b3bad9c7b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

GetTickCount
GetFileSize
GetFileTime
FormatMessageA
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
FileTimeToLocalFileTime
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToSystemTime
GetProfileStringA
GetModuleFileNameA
GetVersionExA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
GetFileAttributesA
CopyFileA
GetWindowsDirectoryA
SetLastError
lstrlenA
LocalAlloc
LocalFree
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
SetCurrentDirectoryA
GetCurrentDirectoryA
FindClose
FindNextFileA
lstrcatA
lstrcpyA
FindFirstFileA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
CloseHandle
GetFullPathNameA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
MulDiv
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource

user32

GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GetDesktopWindow
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
LoadIconA
UnregisterClassA
ScreenToClient
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
PtInRect
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowUnicode
SendMessageA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
wsprintfA
CharUpperA
KillTimer
EnableWindow
PostMessageA
PostQuitMessage
SetCursor
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
BitBlt
CreateCompatibleDC
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/WinXP/usbstor.bak
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/WinXP/usbstor.inf
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/smi32xPC.INF
smi_mptool_v2.03.20_v5_j0326/UFD_MP/FactoryDriver/WinXP/smi32xPC.sys
.sys windows:5 windows x86 arch:x86

a342e1b14cc1cfc5bc791290b1a682c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\0000_00_ActiveProject\Driver\sys_xp0303\objfre\i386\bulkusb.pdb

Imports

ntoskrnl.exe

IoDetachDevice
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
PoSetPowerState
KeInitializeEvent
KeInitializeSpinLock
IoCreateDevice
memmove
ExAllocatePoolWithTag
RtlQueryRegistryValues
wcslen
KeSetEvent
KeClearEvent
InterlockedIncrement
InterlockedDecrement
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoFreeWorkItem
KeInitializeTimerEx
InterlockedExchange
IoDeleteDevice
IoSetDeviceInterfaceState
IoQueueWorkItem
IoAllocateWorkItem
KeSetTimerEx
PoStartNextPowerIrp
PoCallDriver
PoRequestPowerIrp
IoCancelIrp
IoFreeIrp
IoAllocateIrp
IoWMIRegistrationControl
RtlInitUnicodeString
IoFreeMdl
IoBuildPartialMdl
IoAllocateMdl
RtlAppendUnicodeToString
IoOpenDeviceRegistryKey
RtlWriteRegistryValue
IoIsWdmVersionAvailable
KeCancelTimer
KeInitializeDpc
ZwClose
IofCompleteRequest
ExFreePool

hal

KfAcquireSpinLock
KfReleaseSpinLock

wmilib.sys

WmiSystemControl
WmiCompleteRequest

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
smi_mptool_v2.03.20_v5_j0326/UFD_MP/Image.iso
.iso
autorun.exe
.exe windows:4 windows x86 arch:x86

b167c936a5840d8cd91f401b087acf08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

setsockopt
WSAStartup
WSACleanup
htons
htonl
gethostbyname
ioctlsocket

ole32

CoUninitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance

oleaut32

SysFreeString

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle

kernel32

FindFirstFileA
FindNextFileA
FindClose
GetSystemDirectoryA
CreateMutexA
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTickCount
WaitForSingleObject
WideCharToMultiByte
GetModuleFileNameA
GetFileSize
CreateThread
ExitThread
GlobalUnlock
GlobalLock
IsDBCSLeadByteEx
lstrlenA
SetEndOfFile
CopyFileA
ExitProcess
GetModuleHandleA
GetCommandLineA
GetProcessTimes
GetCurrentProcess
SetThreadPriority
CreateEventA
SetEvent
InterlockedIncrement
InterlockedDecrement
ResetEvent
WaitForMultipleObjects
GetThreadPriority
GetCurrentThread
SetFilePointer
GetTempPathA
GetTempFileNameA
WriteFile
ReadFile
CreateFileA
CreateDirectoryA
RemoveDirectoryA
MoveFileA
DeleteFileA
GetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetTimeZoneInformation
LeaveCriticalSection
GetSystemDefaultLangID
FreeLibrary
GetUserDefaultLangID
GetLastError
GetStartupInfoA
CreateProcessA
CloseHandle
GetCurrentThreadId
GetLocaleInfoA
SetErrorMode
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
QueryPerformanceFrequency
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
GetVersionExA
GlobalFree
GlobalAlloc
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
Sleep

user32

EndPaint
BeginPaint
GetMenu
DestroyWindow
GetFocus
CreateWindowExA
IsWindow
DefWindowProcA
GetWindowLongA
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
SetClipboardData
EmptyClipboard
SetWindowPos
GetWindowRect
GetWindow
UnregisterClassA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RegisterClassA
LoadIconA
UpdateWindow
ShowWindow
PostQuitMessage
DialogBoxParamA
EndDialog
MoveWindow
GetDesktopWindow
SetDlgItemTextA
EnableWindow
GetDlgItemTextA
GetWindowTextLengthA
GetDlgItem
SetMenu
PostThreadMessageA
GetQueueStatus
PeekMessageA
MsgWaitForMultipleObjects
RegisterWindowMessageA
LoadCursorA
SetCursor
KillTimer
SetTimer
PostMessageA
GetSubMenu
LoadMenuA
GetMenuItemID
DeleteMenu
ClientToScreen
TrackPopupMenu
DestroyMenu
SetFocus
SetCapture
ReleaseCapture
SystemParametersInfoA
ScreenToClient
GetCapture
GetCursorPos
WindowFromPoint
GetClientRect
LoadStringA
EnableMenuItem
CheckMenuItem
InvalidateRect
SetWindowLongA
WaitForInputIdle
MapVirtualKeyA
GetKeyState
MessageBoxA
GetMenuItemInfoA
InsertMenuItemA
GetSystemMetrics
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
GetKeyboardLayout
GetDC
ReleaseDC
GetDoubleClickTime
GetMenuItemCount
FillRect

gdi32

StartPage
GetCurrentObject
SelectClipPath
FillPath
ExtCreatePen
StrokePath
EndDoc
EndPath
PolyBezierTo
SetBkColor
StartDocA
LPtoDP
GetClipBox
CreateSolidBrush
GetSystemPaletteEntries
CreatePalette
GetBkColor
LineTo
MoveToEx
SetPolyFillMode
BeginPath
RestoreDC
SaveDC
GdiFlush
DeleteObject
SelectObject
StretchDIBits
SetDIBitsToDevice
CreateCompatibleBitmap
GetObjectA
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
BitBlt
RealizePalette
SelectPalette
EnumFontFamiliesA
SetBkMode
SetTextAlign
IntersectClipRect
SelectClipRgn
ExtTextOutA
ExtTextOutW
SetTextColor
GetTextMetricsA
CreateFontIndirectA
CreatePen
GetClipRgn
CreateRectRgn
GetTextAlign
GetBkMode
GetTextColor
DPtoLP
GetTextExtentPoint32A
GetTextExtentPoint32W
EndPage

comdlg32

GetOpenFileNameA
GetSaveFileNameA
PrintDlgA

advapi32

RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCloseKey
RegSetValueExA

shell32

DragQueryFileA
DragAcceptFiles

winmm

waveOutReset
waveOutWrite
waveOutPrepareHeader
waveInGetDevCapsA
waveOutGetNumDevs
waveOutUnprepareHeader
waveOutClose
waveOutOpen
waveOutGetDevCapsA
waveInGetNumDevs
waveInStart
waveInAddBuffer
waveInStop
waveInPrepareHeader
waveInOpen
waveInClose
waveInUnprepareHeader
waveInReset
timeGetTime
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeSetEvent
timeKillEvent

Sections

.text
Size: 784KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 829KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
autorun.inf
smi_mptool_v2.03.20_v5_j0326/UFD_MP/LEDPROC.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_MP/LocalSetting.INI
smi_mptool_v2.03.20_v5_j0326/UFD_MP/LogFile.INI
smi_mptool_v2.03.20_v5_j0326/UFD_MP/MSusbHub.cfg
smi_mptool_v2.03.20_v5_j0326/UFD_MP/SM3255ABOut_0_ISP.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_MP/SM3255ABOut_1_ISP.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_MP/SM3255ABOut_2_ISP.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_MP/SM3255ABOut_3_ISP.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_MP/SM3255ABOut_4_ISP.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_MP/SM3255ABOut_5_ISP.BIN
smi_mptool_v2.03.20_v5_j0326/UFD_MP/Setting.set
smi_mptool_v2.03.20_v5_j0326/UFD_MP/arg.set
smi_mptool_v2.03.20_v5_j0326/UFD_MP/default_testlog.txt
smi_mptool_v2.03.20_v5_j0326/UFD_MP/oopatts_testlog.txt
smi_mptool_v2.03.20_v5_j0326/UFD_MP/usbhub.cfg
smi_mptool_v2.03.20_v5_j0326/oopatts.ini
smi_mptool_v2.03.20_v5_j0326/sm32Xtest.exe
.exe windows:4 windows x86 arch:x86

5202f4e15990537f71e32a89c3daf53a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Remove_SubTree
CM_Locate_DevNodeA
CM_Get_DevNode_Registry_PropertyA
CM_Get_Child
CM_Get_Sibling
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
CM_Get_Parent
CM_Request_Device_EjectW
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

lstrlenW
GetCurrentThread
GetFileTime
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
GetFileType
GetTimeZoneInformation
ExitProcess
TerminateProcess
GetStartupInfoA
RaiseException
ExitThread
GetACP
HeapSize
HeapReAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetSystemDirectoryA
MoveFileExA
SuspendThread
LocalUnlock
GetProfileStringA
GetProcAddress
GetModuleHandleA
Sleep
MulDiv
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
GetCommTimeouts
CreateFileA
ReadFile
WriteFile
SetThreadPriority
CreateThread
CreateEventA
SetPriorityClass
GetCurrentProcess
WaitForSingleObject
SetEvent
ResetEvent
CopyFileA
GetFileSize
GetTickCount
CreateDirectoryA
GetFileAttributesA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenA
GlobalSize
DeleteFileA
GetModuleFileNameA
GetLocalTime
OutputDebugStringA
DeviceIoControl
MoveFileA
GetCommandLineA
GetComputerNameA
GetSystemTime
QueryDosDeviceA
GetDriveTypeA
GetVersionExA
GetVolumeInformationA
FlushFileBuffers
LoadLibraryA
FreeLibrary
SetVolumeLabelW
WideCharToMultiByte
LocalLock
GetVolumeInformationW
GetDriveTypeW
MultiByteToWideChar
lstrcatA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree
FormatMessageA
RemoveDirectoryA
SetFileAttributesA
GetCurrentDirectoryA
GetWindowsDirectoryA
SetLastError
ResumeThread
GlobalReAlloc
lstrcmpA
GetThreadLocale
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
GlobalFree
lstrcpynA
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
LocalAlloc

user32

CopyAcceleratorTableA
CharNextA
GetSysColorBrush
DestroyMenu
MapDialogRect
SetWindowContextHelpId
SetCursor
PostQuitMessage
IsClipboardFormatAvailable
GetMessageA
ValidateRect
GetDesktopWindow
LoadStringA
EndPaint
BeginPaint
GetWindowDC
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
GetParent
EnableWindow
CharUpperA
FindWindowExA
EnumWindows
SetWindowPos
LoadCursorA
RegisterClassA
CreateWindowExA
DestroyWindow
DefWindowProcA
ModifyMenuA
GetMenuItemID
GetMenuItemCount
PostThreadMessageA
GetScrollInfo
ScreenToClient
GetMenuState
IsIconic
GetSystemMenu
SetMenu
GetMenu
LoadMenuA
RemoveMenu
GetSubMenu
EnableMenuItem
CheckMenuItem
ReleaseCapture
PostMessageA
GetKeyState
GetSysColor
SetRect
DrawFocusRect
OffsetRect
WindowFromPoint
MapWindowPoints
GetCursorPos
GetCapture
ClientToScreen
GetNextDlgGroupItem
DispatchMessageA
TranslateMessage
PeekMessageA
RedrawWindow
SetWindowLongA
GetWindowLongA
GetKeyNameTextA
LoadImageA
IsWindow
InflateRect
LoadBitmapA
ReleaseDC
GetDC
GetClientRect
UpdateWindow
ShowWindow
FindWindowA
FillRect
DrawEdge
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowRgn
AppendMenuA
DrawIcon
GetSystemMetrics
EnumChildWindows
GetWindowTextA
IsWindowVisible
IsWindowEnabled
MessageBoxA
GetMessagePos
LockWindowUpdate
CopyRect
LoadIconA
GetClassNameA
GetClipboardData
ShowCaret
SetCaretPos
CreateCaret
PtInRect
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
DragDetect
SetScrollPos
DestroyCaret
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindow
MessageBeep
CallWindowProcA
wsprintfA
GetFocus
SetCapture
KillTimer
SetTimer
InvalidateRect
GetWindowRect

gdi32

RectVisible
Rectangle
RoundRect
StretchBlt
GetPixel
TextOutA
ExtTextOutA
GetTextExtentPoint32A
GetTextMetricsA
Escape
CreateFontA
GetCharWidthA
SetBoundsRect
GetClipBox
SetTextColor
SetBkColor
PatBlt
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
PtVisible
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
CreateHatchBrush
CopyMetaFileA
GetTextColor
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreatePen
SelectPalette
GetTextExtentPointA
RealizePalette
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectA
CreateBitmap
CreateSolidBrush
SelectObject
CreateRectRgn
GetStockObject
DeleteObject
GetObjectA
SelectClipRgn
SetWindowExtEx
CreateDIBitmap
CombineRgn

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
OleDuplicateData
CoTaskMemAlloc
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
CreateILockBytesOnHGlobal

olepro32

ord253

oleaut32

LoadTypeLi
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
OleLoadPicturePath
SysStringLen

wsock32

htons
ioctlsocket
socket
WSAStartup
recv
send
listen
WSASetLastError
WSAGetLastError
connect
accept
bind
htonl
WSAAsyncSelect
inet_ntoa
recvfrom
sendto
closesocket
WSACleanup

odbc32

ord18
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord13
ord61
ord16
ord5
ord10

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7e92af7d4c5c9e3413e974e3309137c

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

usbd.sys

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 288B - Virtual size: 280B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 800B - Virtual size: 800B

.reloc Size: 416B - Virtual size: 392B

9b2ee96defb4f26e103e94b3bad9c7b9

Headers

File Characteristics

Imports

setupapi

newdev

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 152KB - Virtual size: 148KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 20KB - Virtual size: 34KB

.rsrc Size: 16KB - Virtual size: 32KB

a342e1b14cc1cfc5bc791290b1a682c6

Headers

File Characteristics

PDB Paths

Imports

ntoskrnl.exe

hal

wmilib.sys

usbd.sys

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 384B - Virtual size: 375B

.data Size: 128B - Virtual size: 24B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 940B

141f854148474ed338533c115038d4b5

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

usbd.sys

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 544B - Virtual size: 544B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 800B - Virtual size: 800B

.reloc Size: 448B - Virtual size: 424B

95aed137474d924b19ef6dd11a729068

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 288B - Virtual size: 280B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 800B - Virtual size: 800B

.reloc
Size: 416B - Virtual size: 392B

.text
Size: 152KB - Virtual size: 148KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 20KB - Virtual size: 34KB

.rsrc
Size: 16KB - Virtual size: 32KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 384B - Virtual size: 375B

.data
Size: 128B - Virtual size: 24B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 940B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 544B - Virtual size: 544B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 800B - Virtual size: 800B

.reloc
Size: 448B - Virtual size: 424B

.text
Size: 136KB - Virtual size: 132KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 16KB - Virtual size: 32KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 384B - Virtual size: 348B

.data
Size: 128B - Virtual size: 24B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 940B

.text
Size: 152KB - Virtual size: 148KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 20KB - Virtual size: 34KB

.rsrc
Size: 16KB - Virtual size: 32KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 384B - Virtual size: 375B

.data
Size: 128B - Virtual size: 24B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 940B