F:\Jobs\Project\CanBus\SPG\FITCANBUSSDK\FITCANBUSSDK_dll_ver3\210728_FITCANBUSSDK_dll_FROM210714_ing\Release\FitCanBusSdk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
FitCanBusSdk.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
FitCanBusSdk.dll
Resource
win10v2004-20240508-en
General
-
Target
FitCanBusSdk.dll
-
Size
377KB
-
MD5
8cba2765512a8447f701f9f20e92b3f4
-
SHA1
840c728f367e8caf4ebaa611fe7c5f829da17d1f
-
SHA256
652691f7e59d9556140e17b53a975c5440a0dad54295f4bbf0db5c6a3e17a534
-
SHA512
7a0c1a6f06372a25fab1965bdc56b7697c4b072e586eef6664926cd123b326daa2bb3326768acc19e3eb94b02bc6b01d71d9650a8b3f55f58b9670ab22da44aa
-
SSDEEP
6144:4ssaGnOoFkz0SGlchMvKBPXuw0hZ5GkmXXXpN95swM6aafoUeRXKoAGqF6tiRP:4VivXuw0hZ5GkmXXD9Kw0HO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FitCanBusSdk.dll
Files
-
FitCanBusSdk.dll.dll windows:6 windows x64 arch:x64
233cf25de1402ed99c012745d4ce365a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
DeviceIoControl
WaitForSingleObject
CreateEventA
Sleep
CreateThread
GetCurrentThreadId
TerminateThread
GetVersionExA
ClearCommError
GetOverlappedResult
SetCommMask
SetCommState
SetCommTimeouts
WaitCommEvent
BuildCommDCBA
FreeLibrary
GetProcAddress
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
WriteFile
ReadFile
GetCommState
CreateFileA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
GetACP
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateFileW
advapi32
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
StartServiceA
Exports
Exports
??0CFitekCanBusControl@FITAPI@@QEAA@XZ
??1CFitekCanBusControl@FITAPI@@QEAA@XZ
??4CFitekCanBusControl@FITAPI@@QEAAAEAV01@AEBV01@@Z
?FintekCanbus_ClearFilter@CFitekCanBusControl@FITAPI@@QEAAJPEAD@Z
?FintekCanbus_Close@CFitekCanBusControl@FITAPI@@QEAAJPEAD@Z
?FintekCanbus_GetBaudRate@CFitekCanBusControl@FITAPI@@QEAAJPEADPEAK@Z
?FintekCanbus_GetCtrlVal@CFitekCanBusControl@FITAPI@@QEAAJPEADPEAE@Z
?FintekCanbus_GetErrorCode@CFitekCanBusControl@FITAPI@@QEAAJPEADPEAK@Z
?FintekCanbus_GetErrorFilter@CFitekCanBusControl@FITAPI@@QEAAJPEADPEAE@Z
?FintekCanbus_GetIdVal@CFitekCanBusControl@FITAPI@@QEAAJPEADPEAE@Z
?FintekCanbus_GetIer@CFitekCanBusControl@FITAPI@@QEAAJPEADPEAE@Z
?FintekCanbus_Open@CFitekCanBusControl@FITAPI@@QEAAJPEAD@Z
?FintekCanbus_Receive@CFitekCanBusControl@FITAPI@@QEAAJPEADP6AXJPEAUCanFrameInfor@12@@Z@Z
?FintekCanbus_Receive_Polling@CFitekCanBusControl@FITAPI@@QEAAJPEADPEAUCanFrameInfor@12@@Z
?FintekCanbus_Reset@CFitekCanBusControl@FITAPI@@QEAAJPEAD@Z
?FintekCanbus_Send@CFitekCanBusControl@FITAPI@@QEAAJPEADPEAUCanFrameInfor@12@@Z
?FintekCanbus_SetAcrAmrFilter@CFitekCanBusControl@FITAPI@@QEAAJPEADDKK@Z
?FintekCanbus_SetBaudRate@CFitekCanBusControl@FITAPI@@QEAAJPEADK@Z
?FintekCanbus_SetCtrlVal@CFitekCanBusControl@FITAPI@@QEAAJPEADE@Z
?FintekCanbus_SetErrorFilter@CFitekCanBusControl@FITAPI@@QEAAJPEADE@Z
?FintekCanbus_SetFilter@CFitekCanBusControl@FITAPI@@QEAAJPEADKK@Z
?FintekCanbus_SetId@CFitekCanBusControl@FITAPI@@QEAAJPEADW4CanFrameFormat@12@K@Z
?FintekCanbus_SetIer@CFitekCanBusControl@FITAPI@@QEAAJPEADE@Z
FintekCanbus_ClearFilter
FintekCanbus_Close
FintekCanbus_GetBaudRate
FintekCanbus_GetCtrlVal
FintekCanbus_GetErrorCode
FintekCanbus_GetErrorFilter
FintekCanbus_GetIdVal
FintekCanbus_GetIer
FintekCanbus_Open
FintekCanbus_Receive
FintekCanbus_Receive_Polling
FintekCanbus_Reset
FintekCanbus_Send
FintekCanbus_SetAcrAmrFilter
FintekCanbus_SetBaudRate
FintekCanbus_SetCtrlVal
FintekCanbus_SetErrorFilter
FintekCanbus_SetFilter
FintekCanbus_SetId
FintekCanbus_SetIer
Sections
.text Size: 281KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ