LtPhoneRec[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

LtPhoneRec.dll
Size

144KB
MD5

f3914a6df0d66424d6f3830942b957cf
SHA1

24c08d00fd6f6b83581e874dc0d48c7240fc14c9
SHA256

a823c7d90d96da6d43e409ec4286309fbb174042d678ad10e10664cb2a5c5bab
SHA512

d802fa6e07874ea194eb4ac8613991ff95e2ab3e443846ebcf5e9ba815b1a71a92e5b5833ed849b690fa13c200a8ba8becdb08ef0ce67040ec310afbfeece272
SSDEEP

1536:3n7jTmCIE9TY6Lyiia4puGM2iyGJhjPgJW3p80ahIjrCCUnhMcl6P:37jTDZTRVi1PiyUV6hIjr1UnhMck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LtPhoneRec.dll

Files

LtPhoneRec.dll
.dll windows:4 windows x86 arch:x86

f0371cd41e4b6d58b5ce2046ce43880c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
waveInReset
waveInClose
waveOutReset
waveOutClose
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveOutOpen
waveInStart
waveInGetNumDevs
waveInGetDevCapsA
timeKillEvent
timeEndPeriod
timeBeginPeriod
timeSetEvent

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA

mfc42

ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord5300
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord715
ord5620
ord1081
ord823
ord5823
ord3664
ord415
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord3663
ord825
ord1871
ord1200
ord1199
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord2985

msvcrt

??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
_EH_prolog
__CxxFrameHandler
_strdate
_strtime
_itoa
srand
rand
fseek
_ltoa
strstr
strchr
fprintf
sprintf
fopen
fwrite
fread
fclose
_ftol
printf
_getch
_strlwr
_kbhit
time

kernel32

WriteFile
DeleteFileA
MoveFileA
CreateFileA
ReadFile
CloseHandle
LoadLibraryA
CreateThread
LocalAlloc
GetCurrentProcess
GetVersionExA
GetLocaleInfoA
GetFileSize
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
GlobalAlloc
GetModuleHandleA
SetFilePointer
GlobalLock
GlobalHandle
GlobalFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ExitThread
GetOverlappedResult
GetLastError
DeviceIoControl
ResetEvent
CreateEventA
lstrcpyA
SetThreadPriority
LocalFree
Sleep

user32

CharUpperBuffA
DefWindowProcA
RegisterDeviceNotificationA
ShowWindow
CreateWindowExA
PeekMessageA
UnregisterClassA
DestroyWindow
UnregisterDeviceNotification
PostMessageA
GetMessageA
PostThreadMessageA
MessageBoxA
RegisterClassA
ExitWindowsEx

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

Exports

Exports

Lt_Adder
Lt_AgcRecordFile
Lt_CheckPlayFileEnd
Lt_CheckRecordFileEnd
Lt_CheckSilenceDelay
Lt_ConvertRecordFileToPcmWaveFile
Lt_ConvertRecordFileToWavFile
Lt_DecodeWaveFileData
Lt_DesDec
Lt_Dial
Lt_ExtLine_Card_Detect
Lt_ExtLine_GetBusyToneStatus
Lt_ExtLine_PhoneHookDetect
Lt_ExtLine_PhoneRingDetect
Lt_ExtLine_PolarityReversalDetect
Lt_GetBusyStatus
Lt_GetCallerIDRawStr
Lt_GetCallerIDStr
Lt_GetCardClass
Lt_GetCardError
Lt_GetCardNumber
Lt_GetCidCode
Lt_GetCidStr
Lt_GetDefaultCidRcvGain
Lt_GetDefaultDialRcvGain
Lt_GetDialState
Lt_GetDtmfStr
Lt_GetLineIdNumber
Lt_GetPcControlHookState
Lt_GetSpaekState
Lt_GetVadData
Lt_GetVoiceActive
Lt_Gsm2WaveFile
Lt_InitCidBuf
Lt_InitialCard
Lt_LineDetect
Lt_MakePci365Eeprom
Lt_OnOffSpeaker
Lt_OpenWaveFile
Lt_PhoneIsPickUp
Lt_PhoneIsRing
Lt_PickUpPhone
Lt_PostMessageToApp
Lt_Read24LC02
Lt_ReadByte24LC02
Lt_ReadCheckSum
Lt_ReadDesData
Lt_ReadSerialNum
Lt_ReadUserKey
Lt_ReadWaveFileData
Lt_ReadyReceiveCid
Lt_ReadyReceiveDtmf
Lt_RecordFileToWaveFile
Lt_RegisteAppMainWndHandle
Lt_ReleaseCard
Lt_SetAgcMode
Lt_SetBusyPara
Lt_SetCidRcvGain
Lt_SetDialRcvGain
Lt_SetDropLineDetectThreshold
Lt_SetDtmfAttenuate
Lt_SetDtmfThreshold
Lt_SetPhoneRingThreshold
Lt_SetPlayDevice
Lt_SetRingDetectDelayTime
Lt_SetSenseValue
Lt_SetSigPara
Lt_SetSpkVol
Lt_SetTonePara
Lt_SetWaveFilePosition
Lt_StartListenLine
Lt_StartNetListen
Lt_StartPlayFile
Lt_StartRecordFile
Lt_StartSigCheck
Lt_StartSilenceCheck
Lt_StartToneSigCheck
Lt_StopListenLine
Lt_StopNetListen
Lt_StopPlayFile
Lt_StopRecordFile
Lt_StopSigCheck
Lt_StopSilenceCheck
Lt_StopToneSigCheck
Lt_UserCheck
Lt_Wave2GsmFile
Lt_Write24LC02
Lt_WriteByte24LC02
Lt_WriteDesKeyAndData
Lt_WritePage24LC02
Lt_WriteSerialNum
Lt_WriteSoftFlag
Lt_WriteUserKey

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0371cd41e4b6d58b5ce2046ce43880c

Headers

File Characteristics

Imports

winmm

setupapi

mfc42

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 92KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 2.7MB

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 96KB - Virtual size: 92KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 2.7MB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 16KB - Virtual size: 14KB