5b1f4942be271715a0413311a17d81d543100f9d1ef9c6caf5b6710443397b6b

Sharing

Copy URL Twitter E-mail

General

Target

5b1f4942be271715a0413311a17d81d543100f9d1ef9c6caf5b6710443397b6b
Size

363KB
MD5

24281515962be5860dd7c264c6185b76
SHA1

386d3b5d2d05f57f6c4efc0e81caf7ea7f89fe6d
SHA256

5b1f4942be271715a0413311a17d81d543100f9d1ef9c6caf5b6710443397b6b
SHA512

5611e88c42efd2fc7d27ba71e9414dc020006ff7772d663ee4b55eafcefcf9a5bc276fdba5f59c0dafd13dc9c58807ebba8d9b9a3ac0518ab7fe9c28f61b52d9
SSDEEP

6144:CDWkJF0ImPbdR40P8Zwqb4Aoo9MWVSbE1gp9a1AObjmRZ1h:yefAwqb4AoE7V/2U14h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b1f4942be271715a0413311a17d81d543100f9d1ef9c6caf5b6710443397b6b

Files

5b1f4942be271715a0413311a17d81d543100f9d1ef9c6caf5b6710443397b6b
.dll windows:5 windows x86 arch:x86

74445e5221a877d29ddd4233ee6274b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Mr_Chou\source\drivers\dispchip\tcard\mc_dispchip_sm16259s\Win32\Release\mc_dispchip_sm16259s.pdb

Imports

mc_util

mc_util_param_set_val
mc_util_dirvers_get_driver_info
mc_util_logger_write
mc_util_addparam_add_slider
mc_util_addparam_add_edit_step
mc_util_addparam_add_option
mc_util_addparam_add_toggle
mc_util_param_set_func
mc_util_param_get_attr_by_name
mc_util_param_get_value_by_name
mc_util_param_free
mc_util_param_get_cmd
mc_util_param_set_cmd
mc_util_param_init
mc_util_param_set_string
mc_util_param_get_string
mc_util_param_get_func
mc_util_gama_scale_by_brightness_advance
mc_util_drivers_get_ctrlchip_info
mc_util_param_reset

kernel32

InterlockedFlushSList
CreateFileW
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
GetOEMCP
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapAlloc
GetACP
HeapFree
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetCommandLineA

Exports

Exports

access_entry_by_param

Sections

.text
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74445e5221a877d29ddd4233ee6274b5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mc_util

kernel32

Exports

Exports

Sections

.text Size: 261KB - Virtual size: 261KB

.rdata Size: 85KB - Virtual size: 84KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 261KB - Virtual size: 261KB

.rdata
Size: 85KB - Virtual size: 84KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 10KB - Virtual size: 10KB