com[.]dell[.]DPM[.]Firmware[.]KB7221W_LiteOn[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

com.dell.DPM.Firmware.KB7221W_LiteOn.zip
Size

1.6MB
MD5

94310b33087c20ffdfa4e0d6b4d70b57
SHA1

8a1203578bbbdfa06ba13e75571993b33a1a0e62
SHA256

5c298c7baf9baae591bc0e9389567535f0b1baa242cdc98e7e58adda254dca54
SHA512

20a396e6a4972637acdbf7ac7e5b1de85b5fea5f0aae827e2451f91757595e18f332d7c54b17716a08abb26d2dd05ef847b0ddf2f810efa8b9548344ed8267c4
SSDEEP

49152:sy9VOobVUYwKbeLfa3hGK3iLTUvuPhj4V/:zqMUYwKbeLf20KyL6uPl+/

Score

1^/10

Malware Config

Signatures

Files

com.dell.DPM.Firmware.KB7221W_LiteOn.zip
.zip
AfxDLL.dll
.dll windows:5 windows x86 arch:x86

aef0a59d21b03509d4a17d61d9e6c458

Code Sign

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

31/08/2017, 00:00

Not After

17/10/2020, 23:59

Subject

CN=LITE-ON TECHNOLOGY CORP.,O=LITE-ON TECHNOLOGY CORP.,L=Taipei City,ST=TAIWAN,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

31/08/2017, 00:00

Not After

17/10/2020, 23:59

Subject

CN=LITE-ON TECHNOLOGY CORP.,O=LITE-ON TECHNOLOGY CORP.,L=Taipei City,ST=TAIWAN,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f5:16:d4:df:c3:8f:5a:6f:62:9d:eb:75:b1:0b:cf:5d:be:22:ed:79:47:ab:ba:50:35:9c:26:d4:0e:f2:6e:31
Signer

Actual PE Digest

f5:16:d4:df:c3:8f:5a:6f:62:9d:eb:75:b1:0b:cf:5d:be:22:ed:79:47:ab:ba:50:35:9c:26:d4:0e:f2:6e:31

Digest Algorithm

sha256

PE Digest Matches

true

4d:fa:88:04:89:58:85:51:47:00:db:5b:c2:13:5a:1c:6c:84:3d:66
Signer

Actual PE Digest

4d:fa:88:04:89:58:85:51:47:00:db:5b:c2:13:5a:1c:6c:84:3d:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Work\Test\AfxDLL\Release\AfxDLL.pdb

Imports

kernel32

SetFilePointerEx
HeapSize
WriteConsoleW
GetConsoleCP
FlushFileBuffers
CreateFileW
SetStdHandle
DecodePointer
lstrcmpiA
GetExitCodeThread
CreateThread
WaitForSingleObject
CreateEventA
SetEvent
ReadFile
CreateFileA
GetLastError
CloseHandle
lstrlenA
WriteFile
GetConsoleMode
lstrcpyA
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
HeapFree
HeapAlloc
GetACP
GetStringTypeW
GetStdHandle
GetFileType
HeapReAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
RaiseException

user32

DefWindowProcA
PostMessageA
wsprintfA
DestroyWindow
RegisterDeviceNotificationA
CreateWindowExA
RegisterClassExA
SetTimer
KillTimer
UnregisterDeviceNotification

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

hid

HidD_GetIndexedString
HidD_GetFeature
HidD_SetFeature
HidD_SetOutputReport
HidP_MaxUsageListLength
HidP_GetSpecificValueCaps
HidP_GetSpecificButtonCaps
HidP_GetCaps
HidD_GetAttributes
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetHidGuid
HidP_GetScaledUsageValue
HidP_GetUsageValue
HidP_UsageListDifference
HidP_GetUsages
HidD_GetProductString

shlwapi

StrStrIA

Exports

Exports

GetDeviceDescription
GetLightData
GetLightingCapabilities
GetNumLights
Initialize
Release
RestoreDefaultColors
SetLightActionColor
SetLightColor
SkHidClose
SkHidGetFeature
SkHidGetIndexString
SkHidGetNumberDevices
SkHidGetProductString
SkHidGetVersion
SkHidInit
SkHidInitEx
SkHidInitEx2
SkHidSetCallback
SkHidSetDesiredDevInfo
SkHidSetFeature
SkHidSetOutput
SkHidWrite

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shrawda
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BLECmd.dll
.dll windows:6 windows x86 arch:x86

a8a9b62bfe40d84df4c6642022298d46

Code Sign

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

31/08/2017, 00:00

Not After

17/10/2020, 23:59

Subject

CN=LITE-ON TECHNOLOGY CORP.,O=LITE-ON TECHNOLOGY CORP.,L=Taipei City,ST=TAIWAN,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

46:c6:4f:5b:0b:02:5b:30:09:35:0d:3c:31:7c:c2:be:16:43:ec:18:17:09:7b:50:68:51:d8:70:9b:7f:55:55
Signer

Actual PE Digest

46:c6:4f:5b:0b:02:5b:30:09:35:0d:3c:31:7c:c2:be:16:43:ec:18:17:09:7b:50:68:51:d8:70:9b:7f:55:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Work\Test Program\DFU_DellOTA_BleTest\Rel_SK8193\BLECmd.pdb

Imports

kernel32

VerSetConditionMask
VerifyVersionInfoW
Sleep
CreateFileW
GetFileSize
ReadFile
CloseHandle
CreateThread
GetExitCodeThread
HeapAlloc
GetProcessHeap
HeapFree
lstrlenW
CreateDirectoryW
GetModuleFileNameW
K32GetModuleBaseNameW
GetCurrentProcess
GetLocalTime
GetTickCount
lstrcpyW
lstrcatW
WriteConsoleW
SetEndOfFile
HeapSize
SetStdHandle
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ReadConsoleW
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetFileType
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlUnwind
RaiseException
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW

user32

DispatchMessageW
IsWindow
wvsprintfW
TranslateMessage
PeekMessageW
wsprintfW

shell32

SHGetFolderPathW
SHCreateDirectoryExW

ota

OTA_Init
OTA_Close
OTA_SetDesiredDevInfo
OTA_SetFeature
OTA_GetFeature

bcrypt

BCryptCreateHash
BCryptDestroyHash
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptHashData
BCryptSetProperty
BCryptGenerateSymmetricKey
BCryptExportKey
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptFinishHash
BCryptEncrypt
BCryptDeriveKeyPBKDF2

Exports

Exports

?_log_to_caller_folder@@YAXPB_WZZ
?_log_to_user_appdata@@YAXPB_WZZ
BLECmd_Close
BLECmd_CmpFileHash
BLECmd_E2_RespCode
BLECmd_E2_RespCode_EV2Samp
BLECmd_E3_XferFWInfo
BLECmd_E4_XferFWFile
BLECmd_E5_Reset
BLECmd_GetDevInfo
BLECmd_GetProcessCount
BLECmd_Init
BLECmd_SetDesiredDevIndex

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DellOTA.exe
.exe windows:6 windows x86 arch:x86

9ccb7fac119e18835efc7780d78878b5

Code Sign

0b:30:13:86:92:60:e2:7b:93:44:c1:55:2b:ec:8c:c0
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/09/2020, 00:00

Not After

11/09/2023, 23:59

Subject

SERIALNUMBER=24741969,CN=I3D Technology Inc.,O=I3D Technology Inc.,POSTALCODE=114664,STREET=Neihu District+STREET=4F.\, No.35\, Ln. 76\, Ruiguang Road,L=Taipei City,ST=Taipei,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:30:13:86:92:60:e2:7b:93:44:c1:55:2b:ec:8c:c0
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/09/2020, 00:00

Not After

11/09/2023, 23:59

Subject

SERIALNUMBER=24741969,CN=I3D Technology Inc.,O=I3D Technology Inc.,POSTALCODE=114664,STREET=Neihu District+STREET=4F.\, No.35\, Ln. 76\, Ruiguang Road,L=Taipei City,ST=Taipei,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:34:07:12:5b:c1:ad:26:00:ad:ae:cc:a0:36:f6:73:78:48:88:e9:35:d7:dc:db:ec:e1:e5:5b:bf:dd:22:1b
Signer

Actual PE Digest

36:34:07:12:5b:c1:ad:26:00:ad:ae:cc:a0:36:f6:73:78:48:88:e9:35:d7:dc:db:ec:e1:e5:5b:bf:dd:22:1b

Digest Algorithm

sha256

PE Digest Matches

true

5d:ff:77:b6:1e:f3:1e:37:86:80:e5:29:e4:cd:ee:d2:17:97:56:cb
Signer

Actual PE Digest

5d:ff:77:b6:1e:f3:1e:37:86:80:e5:29:e4:cd:ee:d2:17:97:56:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsW
FormatMessageW
GetFileAttributesExW
OutputDebugStringW
GetCurrentThread
TerminateThread
QueryPerformanceFrequency
DeleteFileW
LoadLibraryW
ResetEvent
GetCurrentDirectoryW
GetProcAddress
ReplaceFileW
DeleteCriticalSection
ExitProcess
CreateProcessW
FreeLibrary
QueryPerformanceCounter
MoveFileW
GetDriveTypeW
IsDebuggerPresent
SetUnhandledExceptionFilter
FlushFileBuffers
AttachConsole
GlobalSize
GlobalAlloc
GlobalLock
GetCurrentProcessId
GlobalUnlock
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
GetConsoleOutputCP
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapFree
GetLocaleInfoW
GetTimeZoneInformation
GetFullPathNameW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
RaiseException
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
UnmapViewOfFile
GetLocaleInfoEx
GetModuleHandleW
GetSystemTimeAsFileTime
LCMapStringEx
MultiByteToWideChar
DecodePointer
EncodePointer
WideCharToMultiByte
WaitForSingleObjectEx
InitializeCriticalSectionEx
FindClose
CreateMutexW
GetTempPathW
SetEndOfFile
SetFilePointer
InitializeCriticalSection
CreatePipe
LeaveCriticalSection
SetThreadPriority
GetModuleFileNameW
RemoveDirectoryW
TerminateProcess
GetModuleHandleExW
GetCurrentProcess
FindNextFileW
EnterCriticalSection
SetHandleInformation
FindFirstFileW
GetCommandLineW
GetVolumeInformationW
TryEnterCriticalSection
SetThreadAffinityMask
CreateDirectoryW
GetConsoleMode
SetConsoleMode
GetStdHandle
FindStringOrdinal
GetTickCount
lstrcmpiW
GetExitCodeProcess
WaitForSingleObject
Sleep
SetEvent
CancelIo
WaitForMultipleObjects
GetOverlappedResult
ConnectNamedPipe
CreateEventW
DisconnectNamedPipe
OutputDebugStringA
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetModuleHandleA
GetSystemDirectoryW
ReleaseMutex
GetCurrentThreadId
GetStringTypeW
SetNamedPipeHandleState
ReadFile
CloseHandle
GetLastError
WriteFile
GetFileAttributesW
CreateFileW
HeapAlloc
WriteConsoleW

user32

TranslateMessage
SetFocus
EnumWindows
PeekMessageW
DispatchMessageW
GetFocus
SendMessageTimeoutW
PostMessageW
GetMessageW
ReleaseDC
GetDC
EndPaint
BeginPaint
GetCursorPos
SetCursorPos
InvalidateRect
SetForegroundWindow
ReleaseCapture
GetParent
GetWindowTextW
GetWindowThreadProcessId
ShowCaret
DrawIconEx
UpdateLayeredWindow
GetClientRect
SetCursor
ToUnicode
SetClipboardData
SetCapture
DestroyCaret
LoadCursorW
FindWindowW
GetClipboardData
SetLayeredWindowAttributes
GetMessageTime
GetForegroundWindow
TrackMouseEvent
CreateCaret
IsChild
EmptyClipboard
CloseClipboard
EnableMenuItem
AttachThreadInput
CreateIconIndirect
GetMonitorInfoW
GetWindowInfo
DestroyIcon
RedrawWindow
GetCapture
OpenClipboard
GetAsyncKeyState
IsWindow
ShowWindow
SystemParametersInfoW
UnregisterClassW
DestroyWindow
SetWindowLongW
CreateWindowExW
RegisterClassExW
GetWindowLongW
RegisterDeviceNotificationW
DefWindowProcW
GetDesktopWindow
GetActiveWindow
GetSystemMenu
GetMessageExtraInfo
GetUpdateRgn
GetMessagePos
MapVirtualKeyW
FindWindowExW
GetWindowRect
IsWindowVisible
SetWindowPos
MessageBoxW
EnumChildWindows
EnumDisplayMonitors
GetIconInfo
ScreenToClient
SendMessageW
EndDialog
GetSystemMetrics
SetWindowTextW
MessageBeep
WindowFromPoint
GetWindowPlacement
DestroyCursor
GetKeyboardState
SetCaretPos

gdi32

RemoveFontMemResourceEx
SetMapMode
CreateFontIndirectW
DeleteObject
GetGlyphOutlineW
StretchDIBits
GetGlyphIndicesW
SetMapperFlags
SaveDC
CreateDIBSection
CreateRectRgnIndirect
CreateRectRgn
GetRegionData
GetObjectW
ExcludeClipRect
RestoreDC
CreateBitmap
CombineRgn
SelectObject
GetKerningPairsW
CreateCompatibleDC
EnumFontFamiliesExW
GetDeviceCaps
GetTextMetricsW
DeleteDC
GetOutlineTextMetricsW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCreateKeyExW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumKeyExW
RegQueryValueExW
GetUserNameW
RegOpenKeyExW
RegCloseKey

shell32

ExtractAssociatedIconW
SHGetPathFromIDListW
CommandLineToArgvW
SHGetMalloc
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
SHBrowseForFolderW

ole32

CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemAlloc
DoDragDrop
RegisterDragDrop
RevokeDragDrop

hid

HidP_GetCaps
HidD_GetPreparsedData
HidD_SetFeature
HidD_GetHidGuid
HidD_FreePreparsedData
HidD_GetFeature
HidD_GetAttributes

cfgmgr32

CM_Get_Sibling
CM_Get_Child
CM_Get_Device_IDW

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDevicePropertyW

wininet

HttpEndRequestW
FtpOpenFileW
InternetCloseHandle
InternetConnectW
InternetSetOptionW
InternetCrackUrlW
InternetOpenW
InternetWriteFile
HttpOpenRequestW
HttpSendRequestExW
HttpQueryInfoW
InternetReadFile
InternetSetFilePointer

ws2_32

accept
send
inet_ntoa
getsockopt
htonl
htons
freeaddrinfo
sendto
ioctlsocket
setsockopt
WSAStartup
__WSAFDIsSet
getaddrinfo
select
closesocket
recv
bind
inet_addr

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shlwapi

PathStripToRootW

winmm

timeGetTime
timeKillEvent
timeBeginPeriod

imm32

ImmSetCandidateWindow
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmNotifyIME

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FW/Init.dat
FW/nrf52832.hex
OTA.dll
.dll windows:6 windows x86 arch:x86

47bb8bb0d0450c5321b12cf971ce676c

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:20:13:65:27:55:67:c6:39:5e:6e:21:05:9d:75:40
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

28/09/2020, 00:00

Not After

21/11/2023, 12:00

Subject

CN=LITE-ON TECHNOLOGY CORP.,O=LITE-ON TECHNOLOGY CORP.,L=NEIHU district,ST=TAIPEI city,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

45:c6:a5:fb:78:db:26:8e:ca:17:16:b9:c6:da:41:d9:0e:47:23:41:71:2b:27:3e:09:45:be:fe:6a:4a:25:9c
Signer

Actual PE Digest

45:c6:a5:fb:78:db:26:8e:ca:17:16:b9:c6:da:41:d9:0e:47:23:41:71:2b:27:3e:09:45:be:fe:6a:4a:25:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\work\DellOTA_RF\Release\OTA.pdb

Imports

kernel32

CloseHandle
WriteConsoleW
CreateFileW
GetExitCodeThread
SetFilePointerEx
CreateThread
CreateEventW
Sleep
GetTickCount
ResetEvent
WaitForSingleObject
SetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
DecodePointer

user32

PeekMessageW
wsprintfW
PostMessageW
TranslateMessage
DispatchMessageW

afxdll

SkHidGetNumberDevices
SkHidSetCallback
SkHidClose
SkHidInit
SkHidGetFeature
SkHidSetFeature
SkHidSetDesiredDevInfo

Exports

Exports

OTA_Close
OTA_GetFeature
OTA_GetNumberDevices
OTA_Init
OTA_SendCmd
OTA_SendCmdThenGetData
OTA_SendCmdThenGetFeat
OTA_SetDesiredDevInfo
OTA_SetFeature
_Thread_INData@4
_Thread_INMoreData@4

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OTACmd.dll
.dll windows:6 windows x86 arch:x86

74a58e8ed3c5011fd493458ad13bf6d4

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:20:13:65:27:55:67:c6:39:5e:6e:21:05:9d:75:40
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

28/09/2020, 00:00

Not After

21/11/2023, 12:00

Subject

CN=LITE-ON TECHNOLOGY CORP.,O=LITE-ON TECHNOLOGY CORP.,L=NEIHU district,ST=TAIPEI city,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

36:7d:d8:f1:6d:db:bb:8f:05:cc:ef:05:4e:57:3d:41:a0:e3:97:46:45:25:3c:8b:26:4a:37:79:0f:f0:2b:b7
Signer

Actual PE Digest

36:7d:d8:f1:6d:db:bb:8f:05:cc:ef:05:4e:57:3d:41:a0:e3:97:46:45:25:3c:8b:26:4a:37:79:0f:f0:2b:b7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\work\DellOTA_RF\Rel_SK8193\OTACmd.pdb

Imports

kernel32

CreateFileW
GetFileSize
ReadFile
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
lstrlenW
Sleep
GetTickCount
CreateThread
GetExitCodeThread
GetModuleFileNameW
WriteConsoleW
ReadConsoleW
SetEndOfFile
SetFilePointerEx
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
DecodePointer

user32

wsprintfW
PeekMessageW
TranslateMessage
DispatchMessageW
IsWindow

bcrypt

BCryptDestroyKey
BCryptCloseAlgorithmProvider
BCryptExportKey
BCryptDecrypt
BCryptSetProperty
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptDeriveKeyPBKDF2
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptGenerateSymmetricKey
BCryptDestroyHash
BCryptEncrypt

ota

OTA_SendCmdThenGetData
OTA_GetFeature
_Thread_INMoreData@4
OTA_GetNumberDevices
OTA_Close
OTA_Init
OTA_SetFeature
OTA_SendCmd

Exports

Exports

OTACmd_A0_EnterOTAMode
OTACmd_A1_XferFWInfo
OTACmd_A3_XferFWFile
OTACmd_A4_ExitOTAMode
OTACmd_A5_Abort
OTACmd_A6_RespCode
OTACmd_Close
OTACmd_CmpFileHash
OTACmd_GetDevInfo
OTACmd_GetNumberDevices
OTACmd_GetPairedDevNum
OTACmd_GetProcessCount
OTACmd_Init

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aef0a59d21b03509d4a17d61d9e6c458

Code Sign

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

f5:16:d4:df:c3:8f:5a:6f:62:9d:eb:75:b1:0b:cf:5d:be:22:ed:79:47:ab:ba:50:35:9c:26:d4:0e:f2:6e:31Signer

4d:fa:88:04:89:58:85:51:47:00:db:5b:c2:13:5a:1c:6c:84:3d:66Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

setupapi

hid

shlwapi

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 75KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 160B

.shrawda Size: 512B - Virtual size: 65B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

a8a9b62bfe40d84df4c6642022298d46

Code Sign

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

46:c6:4f:5b:0b:02:5b:30:09:35:0d:3c:31:7c:c2:be:16:43:ec:18:17:09:7b:50:68:51:d8:70:9b:7f:55:55Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

f5:16:d4:df:c3:8f:5a:6f:62:9d:eb:75:b1:0b:cf:5d:be:22:ed:79:47:ab:ba:50:35:9c:26:d4:0e:f2:6e:31
Signer

4d:fa:88:04:89:58:85:51:47:00:db:5b:c2:13:5a:1c:6c:84:3d:66
Signer

.text
Size: 75KB - Virtual size: 75KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 160B

.shrawda
Size: 512B - Virtual size: 65B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

14:d2:53:77:48:f5:c9:30:1b:a1:b0:c0:7f:a8:a1:d9
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

46:c6:4f:5b:0b:02:5b:30:09:35:0d:3c:31:7c:c2:be:16:43:ec:18:17:09:7b:50:68:51:d8:70:9b:7f:55:55
Signer

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 8KB

0b:30:13:86:92:60:e2:7b:93:44:c1:55:2b:ec:8c:c0
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

0b:30:13:86:92:60:e2:7b:93:44:c1:55:2b:ec:8c:c0
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

36:34:07:12:5b:c1:ad:26:00:ad:ae:cc:a0:36:f6:73:78:48:88:e9:35:d7:dc:db:ec:e1:e5:5b:bf:dd:22:1b
Signer

5d:ff:77:b6:1e:f3:1e:37:86:80:e5:29:e4:cd:ee:d2:17:97:56:cb
Signer

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 363KB - Virtual size: 362KB

.data
Size: 48KB - Virtual size: 54KB

.rsrc
Size: 67KB - Virtual size: 67KB

.reloc
Size: 103KB - Virtual size: 103KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0e:20:13:65:27:55:67:c6:39:5e:6e:21:05:9d:75:40
Certificate