8c00ed320be9d058618f4c585fa74d3fda1ed6f1edba58e338ac8051aa3b04fb

Sharing

Copy URL Twitter E-mail

General

Target
8c00ed320be9d058618f4c585fa74d3fda1ed6f1edba58e338ac8051aa3b04fb
Size 1.2MB
Sample260930-v5fe1ast7r
SHA256 8c00ed320be9d058618f4c585fa74d3fda1ed6f1edba58e338ac8051aa3b04fb
MD5 75eb9eef9cd859b0aa991c36dc0dcd56
SHA1 4a328d646e99da448b1f1283e5d29b6ccb0e81a5
SHA512 9510606f2a255e971aecd881e08f49e16d9a30d11769c88c46c65e356fb79eb9fe74ab62d861851153fedecb86e2474cf4944b1efb9a7475f6c3348492bb1c54
SSDEEP 24576:C9Py26SjghCmMI3eHKU/XhBdyPCHg5heWYv0O+uZGj4a:yqSUhCmMIOHfvnHg5heWYv0O+We4a
TLSH
T10A55AE01B582C075E89E02B0626CABBF877C5634073845EBA7D45E6C9E386D37A73E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c00ed320be9d058618f4c585fa74d3fda1ed6f1edba58e338ac8051aa3b04fb

File Explorer

8c00ed320be9d058618f4c585fa74d3fda1ed6f1edba58e338ac8051aa3b04fb

.dll 1.2MB

8c00ed320be9d058618f4c585fa74d3fda1ed6f1edba58e338ac8051aa3b04fb

IMPHASH 49a4413d64be5f20d8cfc71ba84dec9d
SHA256 8c00ed320be9d058618f4c585fa74d3fda1ed6f1edba58e338ac8051aa3b04fb
MD5 75eb9eef9cd859b0aa991c36dc0dcd56
SHA1 4a328d646e99da448b1f1283e5d29b6ccb0e81a5
SHA512 9510606f2a255e971aecd881e08f49e16d9a30d11769c88c46c65e356fb79eb9fe74ab62d861851153fedecb86e2474cf4944b1efb9a7475f6c3348492bb1c54
SSDEEP 24576:C9Py26SjghCmMI3eHKU/XhBdyPCHg5heWYv0O+uZGj4a:yqSUhCmMIOHfvnHg5heWYv0O+We4a
TLSH
T10A55AE01B582C075E89E02B0626CABBF877C5634073845EBA7D45E6C9E386D37A73E17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

770892

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

libliquid

fft_create_plan fft_destroy_plan fft_execute fft_shift firfilt_crcf_create firfilt_crcf_create_kaiser firfilt_crcf_destroy firfilt_crcf_execute firfilt_crcf_freqresponse firfilt_crcf_groupdelay firfilt_crcf_push firfilt_crcf_reset firfilt_crcf_set_scale iirfilt_crcf_create iirfilt_crcf_create_lowpass iirfilt_crcf_destroy iirfilt_crcf_execute iirfilt_crcf_reset liquid_hann modem_create modem_destroy modem_modulate resamp_crcf_create resamp_crcf_destroy resamp_crcf_execute_block resamp_crcf_get_delay resamp_crcf_reset

setupapi

SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList

kernel32

GetStartupInfoW RtlUnwind GetStringTypeW GetLocaleInfoEx SetEndOfFile CreateFileW SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose OutputDebugStringW GetTimeZoneInformation ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer EnterCriticalSection LeaveCriticalSection PostQueuedCompletionStatus GetLastError TlsAlloc LocalFree TlsFree FormatMessageA WideCharToMultiByte CreateEventW SetWaitableTimer TlsSetValue SetLastError CreateWaitableTimerW WaitForMultipleObjects InitializeCriticalSectionAndSpinCount GetQueuedCompletionStatus WaitForSingleObject GetModuleHandleA Sleep SetEvent TerminateThread CloseHandle LoadLibraryW QueueUserAPC GetProcAddress DeleteCriticalSection SleepEx TlsGetValue CreateIoCompletionPort FreeLibrary GetModuleFileNameW MultiByteToWideChar GetModuleHandleW CreateFileA DeviceIoControl CreateEventA GetOverlappedResult GetDateFormatW HeapFree GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetFilePointerEx GetFileSizeEx HeapSize HeapReAlloc HeapAlloc ExitProcess ReadFile WriteConsoleW GetFileType GetStdHandle FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW InterlockedFlushSList ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead QueryPerformanceFrequency RaiseException InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx TryEnterCriticalSection FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW InitOnceComplete InitOnceBeginInitialize

user32

RegisterDeviceNotificationA MessageBoxA UnregisterDeviceNotification

vcomp140

omp_get_max_threads _vcomp_for_static_end _vcomp_for_static_simple_init _vcomp_fork _vcomp_set_num_threads

ws2_32

__WSAFDIsSet accept bind WSAIoctl closesocket WSASend select ntohl shutdown listen WSASocketW getsockname ntohs connect WSARecv getsockopt htonl htons ioctlsocket setsockopt WSAGetLastError WSACleanup WSAStartup

?Device_QueryEIOTemperature_Realtime@@YAHPAPAXPAF@Z ?VNA_Calibration@@YAHPAPAXW4VNA_Calibration_TypeDef@@@Z ?VNA_Calibration_Done@@YAHPAPAX@Z ?VNA_Configuration@@YAHPAPAXPAUVNA_Profile_TypeDef@@1PAUVNA_Info_TypeDef@@@Z ?VNA_GetFullSweep@@YAHPAPAXQAN11@Z ?VNA_GetIQStream@@YAHPAPAXPAN111HPAH@Z ?VNA_GetPartialSweep@@YAHPAPAXPAN11PAH@Z ?VNA_LoadCalibrationData@@YAHPAPAXPBD@Z ?VNA_ProfileDeInit@@YAHPAPAXPAUVNA_Profile_TypeDef@@@Z ?VNA_SaveCalibrationData@@YAHPAPAXPBD@Z ?VSG_Assign_IQFileInfo@@YAHPAPAXPBDPAUVSG_IQStreamInfo_TypeDef@@@Z ?VSG_Assign_IQFilesInfo@@YAHPAPAXQAY0IA@DPAUVSG_IQStreamInfo_TypeDef@@I@Z ?VSG_Assign_IQStreamInfo@@YAHPAPAXPAUVSG_IQStreamInfo_TypeDef@@@Z ?VSG_Assign_IQStreamInfos@@YAHPAPAXQAUVSG_IQStreamInfo_TypeDef@@I@Z ?VSG_BusTriggerStart@@YAHPAPAX@Z ?VSG_BusTriggerStop@@YAHPAPAX@Z ?VSG_Configuration@@YAHPAPAXPAUVSG_Profile_TypeDef@@1PAUVSG_Info_TypeDef@@@Z ?VSG_DeInit_IQStreamInfo@@YAHPAPAXPAUVSG_IQStreamInfo_TypeDef@@@Z ?VSG_DeInit_IQStreamInfos@@YAHPAPAXPAUVSG_IQStreamInfo_TypeDef@@I@Z ?VSG_Download_AlternIQData@@YAHPAPAXPAFIPAI2@Z ?VSG_Download_AlternIQStream@@YAHPAPAXPAFPAUVSG_IQStreamInfo_TypeDef@@@Z ?VSG_Download_IQData@@YAHPAPAXPAF1IPAI2@Z ?VSG_Download_IQFile@@YAHPAPAXPBDPAUVSG_IQStreamInfo_TypeDef@@@Z ?VSG_Download_IQFiles@@YAHPAPAXQAY0IA@DPAUVSG_IQStreamInfo_TypeDef@@I@Z ?VSG_Download_IQStream@@YAHPAPAXPAF1PAUVSG_IQStreamInfo_TypeDef@@@Z ?VSG_Download_SetStartAddress@@YAHPAPAXI@Z ?VSG_EZConfiguration@@YAHPAPAXPAUVSG_EZProfile_TypeDef@@1@Z ?VSG_EZDownload_IQStream@@YAHPAPAXPAF1H@Z ?VSG_PrivateParamDeInit@@YAHPAPAXPAUVSG_PrivateParam_TypeDef@@@Z ?VSG_ProfileDeInit@@YAHPAPAXPAUVSG_Profile_TypeDef@@@Z ?VSG_RepeatIQStream@@YAHPAPAXI@Z ?VSG_UpdateHeaderTailSize@@YAHPAPAXPAI1@Z ?VSG_UpdatePrivateParam@@YAHPAPAXPAUVSG_PrivateParam_TypeDef@@@Z ADM_AMDemod ADM_AMDemod_PM1 ADM_Close ADM_FMDemod ADM_FMDemod_PM1 ADM_Open APISupportFirmwareVersions ASD_AMDemodulation ASD_Close ASD_Demodulate_AM ASD_Demodulate_FM ASD_FMDemodulation ASD_GenerateAMWaveform ASD_GenerateFMWaveform ASD_GeneratePulseWaveform ASD_GenerateSignalWaveform ASD_Open ASG_BusTriggerStart ASG_BusTriggerStop ASG_Configuration ASG_ProfileDeInit CAL_Configuration_FreqPrecision CAL_Configuration_FreqPrecision_v2 CAL_Configuration_IFGain CAL_Configuration_IFResponse CAL_Configuration_IQCaliBration CAL_Configuration_RFResponse CAL_Configuration_Simple CAL_GetFullTrace CAL_GetIFResponse CAL_GetIQCalibration CAL_GetIQStream CAL_GetIQStream_v2 CAL_GetPartialTrace CAL_GetRFResponse CAL_QDC_GetOptParam CAL_UpdateIF1Band CTest_FFM_ModeSwitchTest CTest_SWP_Configuration Cal_DeviceOpen Cal_QueryTemp Cal_Query_DeviceInfo DET_BusTriggerStart DET_BusTriggerStop DET_Configuration DET_EZConfiguration DET_EZProfileDeInit DET_GetPowerStream DET_ProfileDeInit DET_SyncTimer DET_SyncTimerByExtTrigger_Single DSP_AudioAnalysis DSP_Close DSP_Convolution DSP_DDC_Configuration DSP_DDC_DeInit DSP_DDC_Execute DSP_DDC_GetDelay DSP_DDC_Reset DSP_Decimate DSP_FFT_Configuration DSP_FFT_DeInit DSP_FFT_IQSToSpectrum DSP_GenerateSineWaveform DSP_GetWhiteGaussianNoise DSP_GetWindowCoefficient DSP_IFCalibration DSP_InterceptSpectrum DSP_LPF_Configuration DSP_LPF_DeInit DSP_LPF_Execute_Complex DSP_LPF_Execute_Real DSP_LPF_Reset DSP_NCO_Execute DSP_Open DSP_SpecOccuAnalysis DSP_TraceAnalysis_ACPR DSP_TraceAnalysis_ChannelPower DSP_TraceAnalysis_IM2 DSP_TraceAnalysis_IM3 DSP_TraceAnalysis_OBW DSP_TraceAnalysis_PhaseNoise DSP_TraceAnalysis_XdBBW DSP_TraceSmooth DSP_Windowing Demod_Check Demod_Close Demod_Configuration Demod_DeInit Demod_Execute Demod_GenSymbolMap Demod_GetVersion Demod_Open Demod_Reset Devcie_SetFreqResponseCompensation Devcie_SetFreqResponseCompensation_PM1 Device_AnysisGNSSTime Device_BBFlash_Erase Device_BBFlash_GetFileList_INFO Device_BBFlash_Prepare Device_BBFlash_ReadContent Device_BBFlash_ResetFileList Device_BBFlash_WriteFile Device_BBFlash_WriteFile_v2 Device_CalibrateRefClock Device_ChangeIPAddr Device_Close Device_ConvertEpochToReadable Device_GPIOBandSwitch Device_GPIOResetBits Device_GPIOSetBits Device_GenerateLinearIFCalibration Device_GetAmpAttenState Device_GetDOCXOWorkMode Device_GetDOCXOWorkMode_Realtime Device_GetFreqPlanning Device_GetFullUID Device_GetGNSSAltitude Device_GetGNSSAltitude_Realtime Device_GetGNSSAntennaState Device_GetGNSSAntennaState_Realtime Device_GetGNSSConstellation_Realtime Device_GetGNSSInfo Device_GetGNSSInfo_Realtime Device_GetGNSS_SatDate Device_GetGNSS_SatDate_Realtime Device_GetGNSSxpps Device_GetHardwareState Device_GetIPAddr Device_GetLocalTime Device_GetNetworkDeviceList Device_GetphyInterfaceXferRate Device_InitIFAGC Device_Interest Device_List Device_Open Device_Open_WithClass Device_PrintBootInformation Device_QueryBootInfo Device_QueryBootInfos Device_QueryDeviceInfo Device_QueryDeviceInfoWithBus Device_QueryDeviceInfo_Realtime Device_QueryDeviceState Device_QueryDeviceState_Realtime Device_QueryEIO_Version_UID Device_QueryPowerSupplyState Device_QueryVersion_AGU Device_QueryVersion_PMU Device_ReEnumerate Device_Reboot Device_RestartNetwork Device_SetBBCtrlSource Device_SetDOCXOWorkMode Device_SetFanState Device_SetFreqScan Device_SetGNSSAntennaState Device_SetGNSSConstellation Device_SetGNSSDataSource Device_SetGNSSxpps Device_SetIFAGCPeriod Device_SetIFAGCTarget Device_SetIFOutput Device_SetIPAddr Device_SetMcuSysPowerState Device_SetNetworkDeviceIP Device_SetNetworkDeviceIP_PM1 Device_SetSysPowerState Get_APIVersion IQS_BusTriggerStart IQS_BusTriggerStop IQS_Configuration IQS_EZConfiguration IQS_EZProfileDeInit IQS_GetIQStream IQS_GetIQStream_Data IQS_GetIQStream_PM1 IQS_GetIQStream_PM2 IQS_MultiDevice_Run IQS_MultiDevice_WaitExternalSync IQS_ProfileDeInit IQS_SyncTimer IQS_SyncTimerByExtTrigger_Single List_Disable List_Enable List_Start MEAS_DataCorrect MEAS_DataCorrect_InsertLoss MEAS_DataCorrect_TX MEAS_FullSpanPeakSearch MEAS_GetIFCal MEAS_LoadFile_CorrectData MEAS_LoadFile_CorrectData_InsertLoss MEAS_LoadFile_CorrectData_TX MEAS_LoadFile_TimeBase MEAS_PeakSearch MPS_DET_Configuration MPS_IQS_Configuration MPS_RTA_Configuration MSCAN_Configuration MSCAN_GetData MSCAN_ProfileDeinit MSCAN_Start MSCAN_Stop PNM_AutoSearch PNM_Configuration PNM_GetPartialUpdatedFullTrace PNM_Preset_FrameDetRatio PNM_ProfileDeInit PNM_Set_FrameDetRatio PNM_StartMeasure PNM_StopMeasure PTEST_ConfigAGC PTEST_ConfigDANLTest PTEST_ConfigFreqAmpTest PTEST_ConfigIFIM PTEST_ConfigIQBIFFTest PTEST_ConfigPhaseNoiseTest PTEST_ConfigSpurTest PTEST_ConfigSweepAmpTest PTEST_ConfigSweepAmpTest_V2 PTEST_GetAGCResult PTEST_GetDANLTestData PTEST_GetFreqAmpTestData PTEST_GetIFIM PTEST_GetIFandImageFreq PTEST_GetIQBIFFTestData PTEST_GetPhaseNoiseTestData PTEST_GetSpurTestData PTEST_GetSweepAmpTestData PTEST_GetSweepAmpTestData_V2 Pulse_Close Pulse_Detect Pulse_Detect_PM1 Pulse_Open RTA_BusTriggerStart RTA_BusTriggerStop RTA_Configuration RTA_EZConfiguration RTA_EZProfileDeInit RTA_GetIQStream RTA_GetRealTimeSpectrum RTA_GetRealTimeSpectrum_Raw RTA_ProfileDeInit RTA_SetDataFormat RTA_SetLookBackCmd RTA_SpectrumMaskTrigger_Run RTA_SpectrumMaskTrigger_SetMask RTA_SpectrumMaskTrigger_Stop RTA_SyncTimer RTA_SyncTimerByExtTrigger_Single RTA_TriggerStart SIG_BusTriggerStart SIG_BusTriggerStop SIG_Configuration SIG_DownloadCalibrationData SIG_ProfileDeInit SIG_SendIQStream SIG_UpdateHeaderTailSize SWP_AutoSet SWP_Configuration SWP_EZConfiguration SWP_EZProfileDeInit SWP_GetAmplitudeCalibrationTrace SWP_GetDebugInfo SWP_GetFullSweep SWP_GetPartialSweep SWP_GetPartialSweep_PM1 SWP_GetPartialUpdatedFullSweep SWP_MaxHoldReset SWP_ProfileDeInit SWP_ResetTraceHold ZSP_Configuration ZSP_ProfileDeInit emi_config_measure emi_config_scan emi_get_measure_result emi_get_partial_trace emi_reset_measure emi_search emi_start_measure emi_stop_measure sys_getBatteryState

Sharing

General

Malware Config

Signatures

File Explorer

8c00ed320be9d058618f4c585fa74d3fda1ed6f1edba58e338ac8051aa3b04fb

libliquid

setupapi

kernel32

user32

vcomp140

ws2_32

generic