LogitechLedEnginesWrapper[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

LogitechLedEnginesWrapper.dll
Size

17KB
MD5

96837ea82fa468483e3acae7acf37f1c
SHA1

8326dc7138482edcf16ce584c3888df4349c5708
SHA256

d6f0d46f86fd144114040b29ebe7ecf3dcc64ff45c402db623ad0a07888c34cc
SHA512

ff160fb899430ed64e97b8f37654c44f9ab8fcce3106459a54ae8c8c0095ddf567e9f4687516301b734c8321dd63fa884fd86f2faebf56b313a4dcb54a72e032
SSDEEP

192:rGk1EDLx9MaRlWj27ybErGKI+f3XUjKcBCbLYHHOLWwsUJZscF8Bd1LPK6CYzkAh:rGk8LcYgOGrYEjKKCw9SZsHLPK6jzkk

Score

1^/10

Malware Config

Signatures

Files

LogitechLedEnginesWrapper.dll
.dll windows:6 windows x86 arch:x86

d0299db702a12562e73d33f5a483ea90

Code Sign

04:5f:7b:84:0f:b7:4d:1c:d3:fd:99:20:33:5a:93:a0
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

20/04/2015, 00:00

Not After

24/04/2018, 12:00

Subject

SERIALNUMBER=C1067879,CN=Logitech Inc,O=Logitech Inc,POSTALCODE=94560,STREET=7600 Gateway Blvd,L=Newark,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:44:a5:a6:ff:a6:9a:2f:a6:0b:63:67:31:43:2d:3d:26:3f:e5:23
Signer

Actual PE Digest

5a:44:a5:a6:ff:a6:9a:2f:a6:0b:63:67:31:43:2d:3d:26:3f:e5:23

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\BuildAgent\work\973e5fcef1adb603\Src\SDKs\LED\LogitechLedEnginesWrapper\Release\LogitechLedEnginesWrapper.pdb

Imports

kernel32

LoadLibraryW
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
DisableThreadLibraryCalls

advapi32

RegQueryValueExW
RegOpenKeyExW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

msvcr120

_malloc_crt
_initterm
_initterm_e
free
__crtUnhandledException
__crtTerminateProcess
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_except_handler4_common
_amsg_exit
__CppXcptFilter
??3@YAXPAX@Z
??2@YAPAXI@Z
_crt_debugger_hook

Exports

Exports

LogiLedExcludeKeysFromBitmap
LogiLedFlashLighting
LogiLedFlashSingleKey
LogiLedGetConfigOptionBool
LogiLedGetConfigOptionColor
LogiLedGetConfigOptionKeyInput
LogiLedGetConfigOptionNumber
LogiLedGetSdkVersion
LogiLedInit
LogiLedPulseLighting
LogiLedPulseSingleKey
LogiLedRestoreLighting
LogiLedRestoreLightingForKey
LogiLedSaveCurrentLighting
LogiLedSaveLightingForKey
LogiLedSetConfigOptionLabel
LogiLedSetLighting
LogiLedSetLightingForKeyWithHidCode
LogiLedSetLightingForKeyWithKeyName
LogiLedSetLightingForKeyWithQuartzCode
LogiLedSetLightingForKeyWithScanCode
LogiLedSetLightingFromBitmap
LogiLedSetTargetDevice
LogiLedShutdown
LogiLedStopEffects
LogiLedStopEffectsOnKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0299db702a12562e73d33f5a483ea90

Code Sign

04:5f:7b:84:0f:b7:4d:1c:d3:fd:99:20:33:5a:93:a0Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

5a:44:a5:a6:ff:a6:9a:2f:a6:0b:63:67:31:43:2d:3d:26:3f:e5:23Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

version

msvcr120

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 492B

04:5f:7b:84:0f:b7:4d:1c:d3:fd:99:20:33:5a:93:a0
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

5a:44:a5:a6:ff:a6:9a:2f:a6:0b:63:67:31:43:2d:3d:26:3f:e5:23
Signer

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 492B