6425b164093f94671d5496138ebb34c1f2f80381541a6fd04c01fb4067921cc9

Sharing

Copy URL Twitter E-mail

General

Target

6425b164093f94671d5496138ebb34c1f2f80381541a6fd04c01fb4067921cc9
Size

108KB
MD5

4217c515661a07229ee75f376fb28313
SHA1

da53c13b3847f71162cd3d54f4451ff66c8e43e5
SHA256

6425b164093f94671d5496138ebb34c1f2f80381541a6fd04c01fb4067921cc9
SHA512

a8211bd96c0e424fc39c5149fd3aed5234e804cfab98627f658d8310cfb3c07a314d71bd33de6fdaf08bdbef78131645064b61236f84b887540833880ea07a7f
SSDEEP

3072:skyjcxG+LTmD+fVYmfZ4xMLUKQI63r0omdn:NlNbtQlg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6425b164093f94671d5496138ebb34c1f2f80381541a6fd04c01fb4067921cc9

Files

6425b164093f94671d5496138ebb34c1f2f80381541a6fd04c01fb4067921cc9
.dll windows:4 windows x86 arch:x86

b3f54a7cc7d8aee3ac06732078563e51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA

colormunki

ord9
ord6
ord18
ord17
ord1
ord14
ord7
ord11
ord8
ord5
ord2

i1d3sdk

i1d3SetCalibration
i1d3Initialize
i1d3GetNumberOfDevices
i1d3GetDeviceHandle
i1d3DeviceClose
i1d3SetSupportFilePath
i1d3DeviceOpen
i1d3OverrideDeviceDefaults
i1d3GetToolkitVersion
i1d3GetSerialNumber
i1d3GetCalibrationList
i1d3SetLEDControl
i1d3GetCalibration
i1d3ReadDiffuserPosition
i1d3Measure
i1d3SetMeasurementMode
i1d3SetTargetLCDTime
i1d3SetIntegrationTime
i1d3GetLastMeasurement
i1d3MeasureAmbient
i1d3Destroy

dccmtr

DC_ReadAmbientLightLevel
DC_WriteAmbientLightControlRegVal
DC_SetLED
DC_Shutdown
DC_UseCalibration
DC_GetDetailedError
DC_Authorize
DC_Startup
DC_GetXYZ

lg_acb8300

LG_Calibrator_GetAPIVersion
LG_Calibrator_GetFWVersion
LG_Calibrator_DeviceOpen
LG_Calibrator_GetXYZ
LG_Calibrator_DeviceClose
LG_Calibrator_SetMonitorType
LG_Calibrator_StartWaitButton
LG_Calibrator_CloseWaitButton

mfc42

ord3147
ord3259
ord4465
ord3136
ord2985
ord2976
ord3830
ord3825
ord3079
ord4080
ord4424
ord614
ord2623
ord290
ord825
ord4622
ord4226
ord2486
ord4003
ord3237
ord3831
ord823
ord1799
ord2982

msvcrt

__CxxFrameHandler
_purecall
toupper
sprintf
_ftol
memmove
strncmp
printf
strstr
fclose
fscanf
fopen
strrchr
__dllonexit
_onexit
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
_CxxThrowException
clock

kernel32

LocalAlloc
CloseHandle
lstrlenA
MultiByteToWideChar
GetLastError
CreateMutexA
InterlockedIncrement
LocalFree
InterlockedDecrement
OutputDebugStringA
WaitForSingleObject
ReleaseMutex
FreeLibrary
GetModuleFileNameA
GetVersionExA
Sleep
GetProcAddress
LoadLibraryA
GetCurrentProcess
GetModuleHandleA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey

ole32

CoInitialize
CoCreateInstance
CoUninitialize
OleRun

oleaut32

SysAllocString
VariantClear
GetErrorInfo
SysFreeString

msvcp60

?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

Exports

Exports

??4CCalibrationHandler@@QAEAAV0@ABV0@@Z
?GetCalibratorHandler@@YA?AW4T_ERROR_MCC@@PAPAVIColorimeterDeviceManager@@@Z
?ReleaseCalibratorHandler@@YA?AW4T_ERROR_MCC@@PAVIColorimeterDeviceManager@@@Z

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3f54a7cc7d8aee3ac06732078563e51

Headers

File Characteristics

Imports

setupapi

colormunki

i1d3sdk

dccmtr

lg_acb8300

mfc42

msvcrt

kernel32

advapi32

ole32

oleaut32

msvcp60

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 32KB - Virtual size: 35KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 32KB - Virtual size: 35KB

.reloc
Size: 8KB - Virtual size: 6KB