49c45f204c9b1604b5016f09c83145d4311a60235fb37e58aed534fc9e862dd0

General

Target

49c45f204c9b1604b5016f09c83145d4311a60235fb37e58aed534fc9e862dd0
Size

130KB
MD5

6c2a522d970ba93c3491828b9f42b8b0
SHA1

ccc5a9910048d12fa48953a9fc80bab301ca7017
SHA256

49c45f204c9b1604b5016f09c83145d4311a60235fb37e58aed534fc9e862dd0
SHA512

886333e251a906485c6b01fc443f539b2515fb6e3f6e6b820f9a856f45f938da98bd74c2a41b683c1dab10fdda8e0fe7d8e80474e12485bab0069a74ef5b0df4
SSDEEP

3072:qrR1OIK7cl0S1fZsW1meNwWlwXxfCdoUHZ/4ClK9XSzfH1cjqFEpRX:QR1OMfNjOxSr/4zYd+

Score

N/A

Malware Config

Signatures

Files

49c45f204c9b1604b5016f09c83145d4311a60235fb37e58aed534fc9e862dd0
.dll windows x86

faa1051dc5e8c860ed787839acbf8c3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

ReleaseCapture

gdi32

ScaleWindowExtEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegSetValueExA

shlwapi

PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject

oleaut32

VariantClear

Exports

Exports

Play_BMPChannelCapturePicture
Play_ChangeWndNum
Play_CloseSound
Play_EditDVRColor
Play_Fullscreen
Play_GetChannelName
Play_GetColor
Play_GetDeviceState
Play_Init
Play_Login
Play_Logout
Play_Move
Play_OnBntEntermenu
Play_OnBntStart3DPos
Play_OpenSound
Play_PTZCtrlGotoPreset
Play_PTZCtrlSetPreset
Play_PTZCtrlStart
Play_PTZCtrlStop
Play_PTZCtrlTour
Play_PTZEditTure
Play_PlayAll
Play_RebootServer
Play_SetCallBack
Play_SetColor
Play_SetSpecialParam
Play_SetSpecialParamEx
Play_SetSpecialParamEx2
Play_ShowClientConfig
Play_ShowDeviceConfig
Play_ShowLog
Play_ShowPlayBack
Play_Snap
Play_StartRealPlay
Play_StartRecordByChannel
Play_StartTalk
Play_StopPlayReal
Play_StopRealPlayAll
Play_StopRecordBychannel
Play_StopTalk
Play_Translate
Play_UnInit
Play_Wnd
Play_startRecordAll
Play_stopRecordAll

Sections

.text
Size: 120KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

faa1051dc5e8c860ed787839acbf8c3b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 120KB - Virtual size: 332KB

.rsrc Size: 9KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 120KB - Virtual size: 332KB

.rsrc
Size: 9KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 4KB