d4840f1fb746e769ff909fba8833496cd59215e2ff4fd99bda9324d2780d8246

Sharing

Copy URL Twitter E-mail

General

Target

d4840f1fb746e769ff909fba8833496cd59215e2ff4fd99bda9324d2780d8246
Size

527KB
MD5

043f732f58fa0fc5a12d6a7f9458e090
SHA1

2ff4ce1341ef8a93fb2ba1d46a221b35d7a36f7e
SHA256

d4840f1fb746e769ff909fba8833496cd59215e2ff4fd99bda9324d2780d8246
SHA512

3cf69ee474a77fd2d5f0ebffbe418007f6d593fd833c76727191bfd2ca90c99b0a9aae8bcf54c58a03ff90def83e48ff6c9e5eca36788567a0d4201f025ed8dc
SSDEEP

12288:QPiZLoH+NAMdRENgutVBVtugIdXwd2Fxn/nvuEEb65pm8f17:QPiZL82Fl/nWEEbOm8f1

Score

N/A

Malware Config

Signatures

Files

d4840f1fb746e769ff909fba8833496cd59215e2ff4fd99bda9324d2780d8246
.dll windows x86

f38e5b7802cedbfb935c2098a0659ec3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

uuid

??8UUId@@QBE_NABV0@@Z
??MUUId@@QBE_NABV0@@Z
?setValue@UUId@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?generateValue@UUId@@QAEXXZ
??0UUId@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0UUId@@QAE@XZ
??1UUId@@QAE@XZ
??4UUId@@QAEAAV0@ABV0@@Z
?getValue@UUId@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

serializer

??0InteliPath@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?bootStrapCreate@@YAPAUIXMLTool@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVany@boost@@@Z
?registerSerializer@Serializer@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVITypeSerializer@@@Z
?getInstance@Serializer@@SAPAV1@XZ
?bootStrapCreate@@YAPAUIXMLTool@@XZ

corepersistenceapi

?getRawData@KeyValueSchema@@ABE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?get@KeyValueSchema@@QBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@Vinternal_proxy@Schema@@V?$allocator@Vinternal_proxy@Schema@@@std@@@3@@Z
?_set@KeyValueSchema@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??0PersistenceHelper@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00_N1@Z
?remove@PersistenceHelper@@QBE?AW4ReturnCode@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@PersistenceHelper@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?flush@PersistenceHelper@@QBE?AW4ReturnCode@1@XZ

localmessage

?setPayload@LocalMessage@@QAEXV?$shared_ptr@VISerializable@@@boost@@@Z
??0LocalMessage@@QAE@VCommonMessageProperties@@@Z
?getMessageType@LocalMessage@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0CommonMessageProperties@@QAE@XZ
??1CommonMessageProperties@@UAE@XZ
?getReplyTopic@LocalMessage@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

logger

?getDefaultInstance@Logger@@SAPAV1@XZ

configurationmanager

?getDefaultInstance@ConfigurationManager@@SAPAV1@ABW4Scope@1@@Z

dispatcher

?getInstance@MessageDispatcher@@SAPAV1@XZ

libeay32

ord269
ord267
ord3315
ord2821
ord268

qtcore4

??1QString@@QAE@XZ
?fromStdString@QString@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@QFile@@SA_NABVQString@@@Z
?fromBase64@QByteArray@@SA?AV1@ABV1@@Z
??1QByteArray@@QAE@XZ
??0QByteArray@@QAE@PBD@Z

kernel32

QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
GetProcessHeap
HeapFree
ReleaseMutex
TlsAlloc
TlsFree
TlsGetValue
CreateMutexA
ResetEvent
TlsSetValue
SystemTimeToFileTime
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerA
GetFileAttributesA
TerminateProcess
CreateEventA
CloseHandle
WaitForSingleObject
SetEvent
GetSystemTimeAsFileTime
GetTickCount
ReleaseSemaphore
DuplicateHandle
GetCurrentProcess
CreateSemaphoreA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
lstrlenA
FormatMessageA
LocalFree
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryA
GetProcAddress
FreeLibrary
FindNextFileA
FindClose
SetErrorMode
GetLastError
FindFirstFileA

ole32

CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoUninitialize

oleaut32

VariantChangeType
SysFreeString
SysAllocString
VariantClear

wintrust

WinVerifyTrust

crypt32

CertComparePublicKeyInfo
CertCompareIntegerBlob
CertCompareCertificateName
CertEnumCertificatesInStore
CertCloseStore
CryptQueryObject
CryptMsgClose

systeminfo

?getOSVersion@SystemInfo@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getOSType@SystemInfo@@QAEHXZ
?instance@?$Singleton@VSystemInfo@@@@SAPAVSystemInfo@@XZ
??0SystemInfoWMI@@QAE@XZ
?getCimData@ISystemInfo@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z

payload

??0OSInformation@@QAE@XZ
??0StartRequestPayload@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@000_N0H1@Z
??0ProcessStartInfo@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?setVersion@OSInformation@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setOSType@OSInformation@@QAEXH@Z

msvcr90

_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
__clean_type_info_names_internal
?terminate@@YAXXZ
??_U@YAPAXI@Z
??8type_info@@QBE_NABV0@@Z
_CxxThrowException
__CxxFrameHandler3
remove
fclose
_fileno
fopen
_read
calloc
free
sprintf
_time64
strrchr
??_V@YAXPAX@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
memmove_s
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_invalid_parameter_noinfo
_wassert
_gmtime64
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
abort
memset
strerror
malloc
memcpy
__RTDynamicCast

msvcp90

?_Decref@facet@locale@std@@QAEPAV123@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEX_NI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?id@?$ctype@D@std@@2V0locale@2@A
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?uncaught_exception@std@@YA_NXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?setf@ios_base@std@@QAEHHH@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??1locale@std@@QAE@XZ
??0locale@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tolower@?$ctype@D@std@@QBEDD@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z

Exports

Exports

??0ErrorTypePayload@@QAE@XZ
??0KeyValuePayload@@QAE@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
??0KeyValuePayload@@QAE@XZ
??0LUPlatform@@QAE@XZ
??0MessageHandler@@QAE@XZ
??0StartRequestPayload@@QAE@XZ
??0UnencodedString@@QAE@ABV0@@Z
??1ErrorTypePayload@@UAE@XZ
??1KeyValuePayload@@UAE@XZ
??1LUConfigurationItem@@UAE@XZ
??1LUDeliverable@@UAE@XZ
??1LUEula@@UAE@XZ
??1LUFile@@UAE@XZ
??1LUManifest@@UAE@XZ
??1LUMirror@@UAE@XZ
??1LUOSInfo@@UAE@XZ
??1LUPlatform@@UAE@XZ
??1MessageHandler@@UAE@XZ
??1OSInformation@@UAE@XZ
??1StartRequestPayload@@UAE@XZ
??1StatusReportPayload@@UAE@XZ
??1UnencodedString@@QAE@XZ
??4DispatcherHelper@@QAEAAV0@ABV0@@Z
??4UnencodedString@@QAEAAV0@ABV0@@Z
??_7MessageHandler@@6B@
??_FInteliPath@@QAEXXZ
??_FProcessStartInfo@@QAEXXZ
?NO_TIMEOUT@MessageHandler@@2HB
?buildMessage@DispatcherHelper@@CA?AV?$shared_ptr@VLocalMessage@@@boost@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0V?$shared_ptr@VISerializable@@@3@VUUId@@@Z
?fixMetaData@DeviceProfileMgr@@SAXXZ
?getBytesPerSecond@ProgressReportPayload@@QBE_KXZ
?getCode@ErrorTypePayload@@QBEHXZ
?getCode@StatusReportPayload@@QBEHXZ
?getCurrentBytes@ProgressReportPayload@@QBE_KXZ
?getData@DeviceProfileMgr@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAUDPValue@@_N@Z
?getDestinationFolder@StartRequestPayload@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getDictionary@KeyValuePayload@@QBE?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?getExceptionType@ErrorTypePayload@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getFileHash@StartRequestPayload@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getHashAlgorithm@StartRequestPayload@@QBEHXZ
?getIsResumable@StartRequestPayload@@QBE_NXZ
?getMessage@StatusReportPayload@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getPassword@StartRequestPayload@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getProperties@LUFile@@QBE?AV?$multimap@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?getSerializableType@CIDownloadStatus@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@CrashEventPayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ErrorTypePayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@KeyValuePayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@LUConfigurationItem@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@LUFile@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@LUManifest@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@LURequest@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@NamedKeyValuePayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ProcessStartInfo@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ProgressReportPayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ProvisioningInfoRequest@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ProvisioningLiteErrorPayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ProvisioningLitePayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ProvisioningManifest@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ProvisioningRequest@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@RawEventPayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@ServiceOfferingEntity@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@StartRequestPayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSerializableType@StatusReportPayload@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getStatusReport@CIDownloadStatus@@QBE?BVStatusReportPayload@@XZ
?getTemplateInfo@DeviceProfileMgr@@SA_NABVUUId@@AAUTemplateInfo@@@Z
?getTotalBytes@ProgressReportPayload@@QBE_KXZ
?getUrl@StartRequestPayload@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getUseAuthData@StartRequestPayload@@QBE_NXZ
?getUserMessage@ErrorTypePayload@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getUserName@StartRequestPayload@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getValues@LUPlatform@@QBE?AV?$multimap@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?getVersionlabel@LUConfigurationItem@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getconfigurationItem@CIDownloadStatus@@QBE?BVLUConfigurationItem@@XZ
?init@DeviceProfileMgr@@SA_NXZ
?receiveMessage@MessageHandler@@UAEXV?$shared_ptr@VLocalMessage@@@boost@@@Z
?sendAndWait@DispatcherHelper@@SA?AV?$shared_ptr@VLocalMessage@@@boost@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0V?$shared_ptr@VISerializable@@@3@HVUUId@@@Z
?sendAndWait@DispatcherHelper@@SA?AV?$shared_ptr@VLocalMessage@@@boost@@V23@H@Z
?sendMessage@DispatcherHelper@@SA?AV?$shared_ptr@VMessageHandler@@@boost@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0V?$shared_ptr@VISerializable@@@3@VUUId@@@Z
?sendMsgAndWait@DispatcherHelper@@SA?AV?$shared_ptr@VLocalMessage@@@boost@@V23@H@Z
?setBytesPerSecond@ProgressReportPayload@@QAEX_K@Z
?setCode@ErrorTypePayload@@QAEXH@Z
?setCode@StatusReportPayload@@QAEXH@Z
?setConfigurationItems@LUManifest@@QAEXABV?$list@VLUConfigurationItem@@V?$allocator@VLUConfigurationItem@@@std@@@std@@@Z
?setConfigurationItems@LURequest@@QAEXABV?$list@VLUConfigurationItem@@V?$allocator@VLUConfigurationItem@@@std@@@std@@@Z
?setConfigurationItems@ProvisioningInfoRequest@@QAEXABV?$list@VLUConfigurationItem@@V?$allocator@VLUConfigurationItem@@@std@@@std@@@Z
?setCurrentBytes@ProgressReportPayload@@QAEX_K@Z
?setDeliverables@LUConfigurationItem@@QAEXABV?$list@VLUDeliverable@@V?$allocator@VLUDeliverable@@@std@@@std@@@Z
?setDestinationFolder@StartRequestPayload@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setDictionary@KeyValuePayload@@QAEXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?setEULAs@LUDeliverable@@QAEXABV?$list@VLUEula@@V?$allocator@VLUEula@@@std@@@std@@@Z
?setExceptionType@ErrorTypePayload@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setFileHash@StartRequestPayload@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setFiles@LUDeliverable@@QAEXABV?$list@VLUFile@@V?$allocator@VLUFile@@@std@@@std@@@Z
?setHashAlgorithm@StartRequestPayload@@QAEXABH@Z
?setIsResumable@StartRequestPayload@@QAEX_N@Z
?setMessage@StatusReportPayload@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setMirrors@LUFile@@QAEXABV?$list@VLUMirror@@V?$allocator@VLUMirror@@@std@@@std@@@Z
?setPassword@StartRequestPayload@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setProperties@LUFile@@QAEXABV?$multimap@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?setStatusReport@CIDownloadStatus@@QAEXABVStatusReportPayload@@@Z
?setTotalBytes@ProgressReportPayload@@QAEX_K@Z
?setUrl@StartRequestPayload@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setUseAuthData@StartRequestPayload@@QAEX_N@Z
?setUserMessage@ErrorTypePayload@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setUserName@StartRequestPayload@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setValues@LUPlatform@@QAEXABV?$multimap@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?setVersionlabel@LUConfigurationItem@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setconfigurationItem@CIDownloadStatus@@QAEXABVLUConfigurationItem@@@Z
?shutdown@DeviceProfileMgr@@SAXXZ
?updateData@DeviceProfileMgr@@SA_NXZ
?updateProfile@DeviceProfileMgr@@SA_NXZ
?waitForResponse@MessageHandler@@QAE?AV?$shared_ptr@VLocalMessage@@@boost@@H@Z

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f38e5b7802cedbfb935c2098a0659ec3

Headers

DLL Characteristics

File Characteristics

Imports

uuid

serializer

corepersistenceapi

localmessage

logger

configurationmanager

dispatcher

libeay32

qtcore4

kernel32

ole32

oleaut32

wintrust

crypt32

systeminfo

payload

msvcr90

msvcp90

Exports

Exports

Sections

.text Size: 321KB - Virtual size: 321KB

.rdata Size: 96KB - Virtual size: 96KB

.data Size: 8KB - Virtual size: 9KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 42KB - Virtual size: 41KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 321KB - Virtual size: 321KB

.rdata
Size: 96KB - Virtual size: 96KB

.data
Size: 8KB - Virtual size: 9KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 42KB - Virtual size: 41KB

.rmnet
Size: 56KB - Virtual size: 60KB