a84288bf0208a702c859286c9fbafc22524301439ad6bdfca33dd3888d82ea0e

Sharing

Copy URL Twitter E-mail

General

Target

a84288bf0208a702c859286c9fbafc22524301439ad6bdfca33dd3888d82ea0e
Size

1000KB
MD5

046c98d00da085fc26848f3c7b00dfd0
SHA1

44f67676169b269b8fc13bdb5f3fe2f1dc2a7624
SHA256

a84288bf0208a702c859286c9fbafc22524301439ad6bdfca33dd3888d82ea0e
SHA512

81cb062f1a78e1019451e7fc654f9cd954a255460eccce88d26af65e263246ed61787ecff0b63e1005d3a0ef80d4e671a484ca6cfaeaf281d11f8fc7d912baa7
SSDEEP

12288:/Ea2c8D8z10A8sUTDhVfDlPa44+KEy4YNxPM+FSvec:32c68ziOIPfDZ/KEyTBMD

Score

N/A

Malware Config

Signatures

Files

a84288bf0208a702c859286c9fbafc22524301439ad6bdfca33dd3888d82ea0e
.dll windows x86

b14b15a66c1c2433d56d12258a273868

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

nrapitools

?Lines@CStr@@QAEHXZ
??8CStr@@QBEHABV0@@Z
?Substr@CStr@@QBE?AV1@HH@Z
??9CStr@@QBEHABV0@@Z
?Resize@CStr@@QAEXH@Z
?First@CStr@@QBEHD@Z
?ToLower@CStr@@QAEXXZ
??ACStr@@QAEAADH@Z
??0CStr@@QAE@PBD@Z
?Last@CStr@@QBEHD@Z
??YCStr@@QAEAAV0@PBD@Z
??4CStr@@QAEAAV0@PBD@Z
?Data@CStr@@QAEPADXZ
?Printf@CStr@@QAAHPBDZZ
??BCStr@@QAEPADXZ
??4CStr@@QAEAAV0@ABV0@@Z
??0CStr@@QAE@ABV0@@Z
??1CStr@@UAE@XZ
??0CStr@@QAE@XZ
??YCStr@@QAEAAV0@ABV0@@Z
?Length@CStr@@QBEHXZ

advapi32

RegSetValueExA
RegDeleteKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
GetUserNameA
RegCreateKeyExA

ws2_32

inet_ntoa
recv
inet_addr
WSAStartup
WSACleanup
ntohl
connect
recvfrom
sendto
socket
accept
listen
bind
shutdown
closesocket
getsockname
send
ioctlsocket
WSAGetLastError
setsockopt
select
htonl
gethostname
gethostbyname
htons
ntohs

netapi32

NetApiBufferFree
NetServerGetInfo
Netbios

user32

wsprintfA

imagehlp

ImageLoad
ImageUnload

shell32

SHGetFolderPathA

kernel32

CopyFileA
MoveFileA
GetModuleFileNameA
SetFilePointer
WriteFile
CopyFileExA
GetExitCodeProcess
CreateProcessA
TerminateProcess
CreateFileA
GetFileTime
DosDateTimeToFileTime
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ReadFile
SetFileTime
LocalFileTimeToFileTime
FileTimeToDosDateTime
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExA
GetCurrentDirectoryA
SetCurrentDirectoryA
LoadLibraryA
GetDiskFreeSpaceExA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
FormatMessageA
lstrlenA
GetComputerNameA
FindNextFileA
FindFirstFileA
FindClose
GetLocalTime
LocalAlloc
GetProcAddress
FreeLibrary
ReleaseMutex
CreateMutexA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
CreateFileMappingA
ReleaseSemaphore
CreateSemaphoreA
GetCurrentThreadId
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
CreateThread
ExitThread
WaitForSingleObject
LocalFree
Sleep
CreateEventA
CloseHandle
SetEvent
ResetEvent

msvcr71

memmove
_stricmp
atoi
??2@YAPAXI@Z
_mbsrchr
_mbslwr
fclose
strstr
fgets
fopen
_access
sprintf
isspace
sscanf
_snprintf
fread
ftell
fseek
fwrite
setlocale
_mbctype
strncpy
getenv
rand
srand
_unlink
time
_errno
free
_mkdir
strerror
_tempnam
malloc
vsprintf
fflush
rewind
fputc
fprintf
_fdopen
calloc
_mbsnbcpy
_rmdir
_fsopen
strftime
gmtime
_mbspbrk
_mbsicmp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_mbsstr
_assert
_mbscmp
atof
strtok
printf
_pctype
_iob
_mbstok
_ismbblead
??_U@YAPAXI@Z
wcstombs
strchr
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
__security_error_handler
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
??0exception@@QAE@ABV0@@Z
qsort
_CxxThrowException
__CxxFrameHandler
??_V@YAXPAX@Z
_purecall
??3@YAXPAX@Z
_vsnprintf

msvcp71

?id@?$ctype@G@std@@2V0locale@2@A
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ

Exports

Exports

??0?$LockedList@PAVGInboundPacket@@$0A@@@QAE@ABV0@@Z
??0?$LockedList@PAVGInboundPacket@@$0A@@@QAE@XZ
??0?$LockedList@UtagJOBTASKS@@$0A@@@QAE@ABV0@@Z
??0?$LockedList@UtagJOBTASKS@@$0A@@@QAE@XZ
??0?$gList@K$0A@@@QAE@ABV0@@Z
??0?$gList@K$0A@@@QAE@XZ
??0?$gList@PAVCStr@@$00@@QAE@ABV0@@Z
??0?$gList@PAVCStr@@$00@@QAE@XZ
??0?$gList@PAVGInboundPacket@@$0A@@@QAE@ABV0@@Z
??0?$gList@PAVGInboundPacket@@$0A@@@QAE@XZ
??0?$gList@PAVXMLParser@@$00@@QAE@ABV0@@Z
??0?$gList@PAVXMLParser@@$00@@QAE@XZ
??0?$gList@PAVnrAppDataBase@@$0A@@@QAE@ABV0@@Z
??0?$gList@PAVnrAppDataBase@@$0A@@@QAE@XZ
??0?$gList@PAVnrCJob@@$00@@QAE@ABV0@@Z
??0?$gList@PAVnrCJob@@$00@@QAE@XZ
??0?$gList@PAVnrCServer@@$00@@QAE@ABV0@@Z
??0?$gList@PAVnrCServer@@$00@@QAE@XZ
??0?$gList@PAVnrSysLogCB@@$0A@@@QAE@ABV0@@Z
??0?$gList@PAVnrSysLogCB@@$0A@@@QAE@XZ
??0?$gList@UtagBkbJobServer@@$0A@@@QAE@ABV0@@Z
??0?$gList@UtagBkbJobServer@@$0A@@@QAE@XZ
??0?$gList@UtagErrorMessage@@$0A@@@QAE@ABV0@@Z
??0?$gList@UtagErrorMessage@@$0A@@@QAE@XZ
??0?$gList@UtagJOBTASKS@@$0A@@@QAE@ABV0@@Z
??0?$gList@UtagJOBTASKS@@$0A@@@QAE@XZ
??0?$gList@UtagNRAPI_PLUGLIST@@$0A@@@QAE@ABV0@@Z
??0?$gList@UtagNRAPI_PLUGLIST@@$0A@@@QAE@XZ
??0?$gList@UtagTASK_COLLECTION@@$0A@@@QAE@ABV0@@Z
??0?$gList@UtagTASK_COLLECTION@@$0A@@@QAE@XZ
??0?$gList@Utag_AppDataListItem@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_AppDataListItem@@$0A@@@QAE@XZ
??0?$gList@Utag_BkbArchJobList@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_BkbArchJobList@@$0A@@@QAE@XZ
??0?$gList@Utag_BkbClientInfo@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_BkbClientInfo@@$0A@@@QAE@XZ
??0?$gList@Utag_BkbJobList@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_BkbJobList@@$0A@@@QAE@XZ
??0?$gList@Utag_BkbJobWList@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_BkbJobWList@@$0A@@@QAE@XZ
??0?$gList@Utag_BkbJobhList@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_BkbJobhList@@$0A@@@QAE@XZ
??0?$gList@Utag_BkbMgrPlugList@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_BkbMgrPlugList@@$0A@@@QAE@XZ
??0?$gList@Utag_BkbSrvList@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_BkbSrvList@@$0A@@@QAE@XZ
??0?$gList@Utag_NRRES_PLUGS@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_NRRES_PLUGS@@$0A@@@QAE@XZ
??0?$gList@Utag_NRRES_STRINGS@@$00@@QAE@ABV0@@Z
??0?$gList@Utag_NRRES_STRINGS@@$00@@QAE@XZ
??0?$gList@Utag_NRSYSPATH@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_NRSYSPATH@@$0A@@@QAE@XZ
??0?$gList@Utag_nrModuleInfo@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_nrModuleInfo@@$0A@@@QAE@XZ
??0?$gList@Utag_nrSrvMsgList@@$0A@@@QAE@ABV0@@Z
??0?$gList@Utag_nrSrvMsgList@@$0A@@@QAE@XZ
??0?$gStack@PAVXMLParser@@$00@@QAE@ABV0@@Z
??0?$gStack@PAVXMLParser@@$00@@QAE@XZ
??0CSimpleStream@@QAE@XZ
??0CStr2@@QAE@ABV0@@Z
??0CStr2@@QAE@XZ
??0CStrParse@@QAE@ABV0@@Z
??0CStrParse@@QAE@PBD@Z
??0CStrParse@@QAE@PBDH@Z
??0CStrParse@@QAE@XZ
??0CountingLock@@QAE@ABV0@@Z
??0CountingLock@@QAE@H@Z
??0GInboundPacket@@QAE@ABV0@@Z
??0GInboundPacket@@QAE@UtagPACKET@@AAVGInetAddress@@@Z
??0GInboundPacket@@QAE@XZ
??0GInetAddress@@QAE@ABV0@@Z
??0GInetAddress@@QAE@PAD@Z
??0GInetAddress@@QAE@PADF@Z
??0GInetAddress@@QAE@Uin_addr@@@Z
??0GInetAddress@@QAE@Usockaddr_in@@@Z
??0GInetAddress@@QAE@XZ
??0GInetBroadcastAddress@@QAE@ABV0@@Z
??0GInetBroadcastAddress@@QAE@PAD0F@Z
??0GInetBroadcastAddress@@QAE@PADKF@Z
??0GLoadMonitor@@QAE@ABV0@@Z
??0GLoadMonitor@@QAE@XZ
??0GPacket@@QAE@KPAUtag_GMAC@@PADH@Z
??0GPacket@@QAE@XZ
??0GSockCallBack@@QAE@ABV0@@Z
??0GSockCallBack@@QAE@XZ
??0GSocket@@QAE@ABV0@@Z
??0GSocket@@QAE@HHH@Z
??0GSocket@@QAE@I@Z
??0InterThreadLock@@QAE@XZ
??0InterThreadLockGuard@@QAE@AAVInterThreadLock@@_N@Z
??0MachineState@@QAE@ABV0@@Z
??0MachineState@@QAE@XZ
??0NetworkManager@@QAE@AAV0@@Z
??0NetworkManager@@QAE@XZ
??0NetworkManagerImp@@QAE@AAV0@@Z
??0NetworkManagerImp@@QAE@XZ
??0NetworkServer@@QAE@AAV0@@Z
??0NetworkServer@@QAE@XZ
??0NetworkServerImp@@QAE@AAV0@@Z
??0NetworkServerImp@@QAE@XZ
??0SimpleLock@@QAE@ABV0@@Z
??0SimpleLock@@QAE@XZ
??0SimpleLockGuard@@QAE@AAVSimpleLock@@_N@Z
??0SimpleThread@@QAE@ABV0@@Z
??0SimpleThread@@QAE@XZ
??0SrvErrorMessages@@QAE@ABV0@@Z
??0SrvErrorMessages@@QAE@XZ
??0TCPClient@@QAE@AAVGInetAddress@@@Z
??0TCPClient@@QAE@ABV0@@Z
??0TCPServer@@QAE@ABV0@@Z
??0TCPServer@@QAE@F@Z
??0TCPServer@@QAE@Uin_addr@@F@Z
??0TCPSession@@QAE@ABV0@@Z
??0TCPSession@@QAE@I@Z
??0Timer@@QAE@K@Z
??0UDPClient@@QAE@ABV0@@Z
??0UDPClient@@QAE@XZ
??0UDPServer@@QAE@ABV0@@Z
??0UDPServer@@QAE@F@Z
??0UDPServer@@QAE@Uin_addr@@F@Z
??0UDPServer@@QAE@XZ
??0UDPSession3@@QAE@ABV0@@Z
??0UDPSession3@@QAE@ABVGInetAddress@@PAVgEvent@@@Z
??0UDPSession@@QAE@ABV0@@Z
??0UDPSession@@QAE@FPAVgEvent@@@Z
??0UDPSession@@QAE@PAVgEvent@@@Z
??0UDPSocket@@IAE@XZ
??0UDPSocket@@QAE@ABV0@@Z
??0XMLParser@@QAE@ABV0@@Z
??0XMLParser@@QAE@HPAD00H@Z
??0XMLParser@@QAE@XZ
??0gCMac@@QAE@AAV0@@Z
??0gCMac@@QAE@XZ
??0gEvent@@QAE@ABV0@@Z
??0gEvent@@QAE@_N@Z
??0gFileList@@QAE@ABV0@@Z
??0gFileList@@QAE@XZ
??0gMemMapFile@@QAE@ABV0@@Z
??0gMemMapFile@@QAE@PBD0@Z
??0g_Comp@@QAE@XZ
??0g_DynaLib@@QAE@XZ
??0g_FindFile@@QAE@PAD@Z
??0g_FindFile@@QAE@XZ
??0g_comm@@QAE@ABV0@@Z
??0g_comm@@QAE@H@Z
??0g_comm@@QAE@XZ
??0nrApi@@QAE@ABV0@@Z
??0nrApi@@QAE@XZ
??0nrApiCallBack@@QAE@ABV0@@Z
??0nrApiCallBack@@QAE@XZ
??0nrAppDataBase@@QAE@ABV0@@Z
??0nrAppDataBase@@QAE@XZ
??0nrAppDataBool@@QAE@ABV0@@Z
??0nrAppDataBool@@QAE@XZ
??0nrAppDataCollection2@@QAE@ABV0@@Z
??0nrAppDataCollection2@@QAE@XZ
??0nrAppDataCollection@@QAE@ABV0@@Z
??0nrAppDataCollection@@QAE@XZ
??0nrAppDataList@@QAE@ABV0@@Z
??0nrAppDataList@@QAE@XZ
??0nrAppDataStaticText@@QAE@ABV0@@Z
??0nrAppDataStaticText@@QAE@XZ
??0nrAppDataText@@QAE@ABV0@@Z
??0nrAppDataText@@QAE@XZ
??0nrAppInfo2@@QAE@ABV0@@Z
??0nrAppInfo2@@QAE@XZ
??0nrAppInfo3@@QAE@ABV0@@Z
??0nrAppInfo3@@QAE@XZ
??0nrAppInfo@@QAE@ABV0@@Z
??0nrAppInfo@@QAE@XZ
??0nrCArchJobList@@QAE@AAV0@@Z
??0nrCArchJobList@@QAE@XZ
??0nrCBCollection@@QAE@ABV0@@Z
??0nrCBCollection@@QAE@XZ
??0nrCClient22@@QAE@AAV0@@Z
??0nrCClient22@@QAE@XZ
??0nrCClient23@@QAE@AAV0@@Z
??0nrCClient23@@QAE@XZ
??0nrCClient@@QAE@AAV0@@Z
??0nrCClient@@QAE@XZ
??0nrCClientInfo@@QAE@AAV0@@Z
??0nrCClientInfo@@QAE@PAUtag_BkbClientInfo@@@Z
??0nrCClientInfo@@QAE@XZ
??0nrCClientList@@QAE@AAV0@@Z
??0nrCClientList@@QAE@XZ
??0nrCJob2@@QAE@AAV0@@Z
??0nrCJob2@@QAE@AAVnrXml@@@Z
??0nrCJob2@@QAE@XZ
??0nrCJob3@@QAE@AAV0@@Z
??0nrCJob3@@QAE@AAVnrXml@@@Z
??0nrCJob3@@QAE@XZ
??0nrCJob@@QAE@AAV0@@Z
??0nrCJob@@QAE@AAVnrXml@@@Z
??0nrCJob@@QAE@XZ
??0nrCJobCollection@@QAE@ABV0@@Z
??0nrCJobCollection@@QAE@XZ
??0nrCJobDependency@@QAE@AAV0@@Z
??0nrCJobDependency@@QAE@XZ
??0nrCJobHCollection@@QAE@ABV0@@Z
??0nrCJobHCollection@@QAE@XZ
??0nrCJobInfo@@QAE@AAV0@@Z
??0nrCJobInfo@@QAE@AAVnrXml@@@Z
??0nrCJobInfo@@QAE@XZ
??0nrCJobList@@QAE@AAV0@@Z
??0nrCJobList@@QAE@XZ
??0nrCJobManager@@QAE@ABV0@@Z
??0nrCJobManager@@QAE@PAVNetworkManager@@@Z
??0nrCJobServer@@QAE@ABV0@@Z
??0nrCJobServer@@QAE@PAVNetworkServer@@@Z
??0nrCJobSubmit@@QAE@AAV0@@Z
??0nrCJobSubmit@@QAE@XZ
??0nrCJobWList@@QAE@ABV0@@Z
??0nrCJobWList@@QAE@XZ
??0nrCJobhList@@QAE@AAV0@@Z
??0nrCJobhList@@QAE@XZ
??0nrCMailNotify@@QAE@ABV0@@Z
??0nrCMailNotify@@QAE@XZ
??0nrCManagerInfo@@QAE@AAV0@@Z
??0nrCManagerInfo@@QAE@PAUtag_BkbManagerInfo@@@Z
??0nrCManagerInfo@@QAE@XZ
??0nrCMgrPlugList@@QAE@AAV0@@Z
??0nrCMgrPlugList@@QAE@XZ
??0nrCModuleInfoList@@QAE@AAV0@@Z
??0nrCModuleInfoList@@QAE@XZ
??0nrCNetworkStatus@@QAE@PAUtag_BkbNetStatus@@@Z
??0nrCNetworkStatus@@QAE@XZ
??0nrCNotifyData@@QAE@AAV0@@Z
??0nrCNotifyData@@QAE@XZ
??0nrCServer@@QAE@AAUtag_nrServer@@PAVnrPluginManager@@@Z
??0nrCServer@@QAE@AAV0@@Z
??0nrCServer@@QAE@AAVnrXml@@PAVnrPluginManager@@@Z
??0nrCServer@@QAE@PAVnrPluginManager@@@Z
??0nrCServer@@QAE@PBDPAVnrPluginManager@@@Z
??0nrCServerCollection@@QAE@ABV0@@Z
??0nrCServerCollection@@QAE@XZ
??0nrCServerErrorList@@QAE@AAV0@@Z
??0nrCServerErrorList@@QAE@XZ
??0nrCServerGroup@@AAE@AAV0@@Z
??0nrCServerGroup@@AAE@PAVnrCServerGroupImpl@@@Z
??0nrCServerGroup@@QAE@XZ
??0nrCServerGroupCollection@@QAE@XZ
??0nrCServerList@@QAE@AAV0@@Z
??0nrCServerList@@QAE@XZ
??0nrCServerSchedule@@QAE@AAV0@@Z
??0nrCServerSchedule@@QAE@XZ
??0nrCSrvPlug@@QAE@ABV0@@Z
??0nrCSrvPlug@@QAE@XZ
??0nrCSystemInfo@@QAE@PAUtag_GSYSINFO@@@Z
??0nrCSystemInfo@@QAE@XZ
??0nrFile@@QAE@ABV0@@Z
??0nrFile@@QAE@XZ
??0nrFileVPairs@@QAE@ABV0@@Z
??0nrFileVPairs@@QAE@XZ
??0nrJServerList@@QAE@ABV0@@Z
??0nrJServerList@@QAE@XZ
??0nrJobDepend@@QAE@ABV0@@Z
??0nrJobDepend@@QAE@XZ
??0nrLogMessage@@QAE@ABV0@@Z
??0nrLogMessage@@QAE@HPBD@Z
??0nrLogMessage@@QAE@PBD@Z
??0nrLogMessage@@QAE@XZ
??0nrManagerApi2008@@QAE@ABV0@@Z
??0nrManagerApi2008@@QAE@XZ
??0nrManagerApi22@@QAE@ABV0@@Z
??0nrManagerApi22@@QAE@XZ
??0nrManagerApi23@@QAE@ABV0@@Z
??0nrManagerApi23@@QAE@XZ
??0nrManagerApi@@QAE@ABV0@@Z
??0nrManagerApi@@QAE@XZ
??0nrPlugCollection@@QAE@ABV0@@Z
??0nrPlugCollection@@QAE@PAVnrPluginManager@@@Z
??0nrPlugMgrImp@@QAE@ABV0@@Z
??0nrPlugMgrImp@@QAE@XZ
??0nrPlugin@@QAE@ABV0@@Z
??0nrPlugin@@QAE@XZ
??0nrPluginManager@@QAE@ABV0@@Z
??0nrPluginManager@@QAE@XZ
??0nrResStr@@QAE@ABV0@@Z
??0nrResStr@@QAE@XZ
??0nrResourceMgr@@QAE@ABV0@@Z
??0nrResourceMgr@@QAE@XZ
??0nrSPathImp@@QAE@ABV0@@Z
??0nrSPathImp@@QAE@XZ
??0nrStrList@@QAE@ABV0@@Z
??0nrStrList@@QAE@XZ
??0nrSysLogCB@@QAE@ABV0@@Z
??0nrSysLogCB@@QAE@XZ
??0nrSystemPath@@QAE@ABV0@@Z
??0nrSystemPath@@QAE@XZ
??0nrTaskManager@@QAE@ABV0@@Z
??0nrTaskManager@@QAE@XZ
??0nrXml@@QAE@AAV0@@Z
??0nrXml@@QAE@XZ
??0nrXmlCfgCB@@QAE@ABV0@@Z
??0nrXmlCfgCB@@QAE@XZ
??0nrXmlFile@@QAE@AAV0@@Z
??0nrXmlFile@@QAE@AAVnrXml@@@Z
??0nrXmlFile@@QAE@PBD@Z
??0nrXmlFile@@QAE@XZ
??0nrXmlManagerCfg@@QAE@AAV0@@Z
??0nrXmlManagerCfg@@QAE@XZ
??0nrXmlParse@@QAE@ABV0@@Z
??0nrXmlParse@@QAE@XZ
??0nrXmlServerCfg@@QAE@AAV0@@Z
??0nrXmlServerCfg@@QAE@XZ
??0nrXmlSystemCfg@@QAE@AAV0@@Z
??0nrXmlSystemCfg@@QAE@AAVnrXml@@@Z
??0nrXmlSystemCfg@@QAE@PAD@Z
??0nrXmlSystemCfg@@QAE@XZ
??0nr_apiPluginCollection@@QAE@ABV0@@Z
??0nr_apiPluginCollection@@QAE@XZ
??1?$LockedList@PAVGInboundPacket@@$0A@@@UAE@XZ
??1?$LockedList@UtagJOBTASKS@@$0A@@@UAE@XZ
??1?$gList@K$0A@@@UAE@XZ
??1?$gList@PAVCStr@@$00@@UAE@XZ
??1?$gList@PAVGInboundPacket@@$0A@@@UAE@XZ
??1?$gList@PAVXMLParser@@$00@@UAE@XZ
??1?$gList@PAVnrAppDataBase@@$0A@@@UAE@XZ
??1?$gList@PAVnrCJob@@$00@@UAE@XZ
??1?$gList@PAVnrCServer@@$00@@UAE@XZ
??1?$gList@PAVnrSysLogCB@@$0A@@@UAE@XZ
??1?$gList@UtagBkbJobServer@@$0A@@@UAE@XZ
??1?$gList@UtagErrorMessage@@$0A@@@UAE@XZ
??1?$gList@UtagJOBTASKS@@$0A@@@UAE@XZ
??1?$gList@UtagNRAPI_PLUGLIST@@$0A@@@UAE@XZ
??1?$gList@UtagTASK_COLLECTION@@$0A@@@UAE@XZ
??1?$gList@Utag_AppDataListItem@@$0A@@@UAE@XZ
??1?$gList@Utag_BkbArchJobList@@$0A@@@UAE@XZ
??1?$gList@Utag_BkbClientInfo@@$0A@@@UAE@XZ
??1?$gList@Utag_BkbJobList@@$0A@@@UAE@XZ
??1?$gList@Utag_BkbJobWList@@$0A@@@UAE@XZ
??1?$gList@Utag_BkbJobhList@@$0A@@@UAE@XZ
??1?$gList@Utag_BkbMgrPlugList@@$0A@@@UAE@XZ
??1?$gList@Utag_BkbSrvList@@$0A@@@UAE@XZ
??1?$gList@Utag_NRRES_PLUGS@@$0A@@@UAE@XZ
??1?$gList@Utag_NRRES_STRINGS@@$00@@UAE@XZ
??1?$gList@Utag_NRSYSPATH@@$0A@@@UAE@XZ
??1?$gList@Utag_nrModuleInfo@@$0A@@@UAE@XZ
??1?$gList@Utag_nrSrvMsgList@@$0A@@@UAE@XZ
??1?$gStack@PAVXMLParser@@$00@@UAE@XZ
??1CSimpleStream@@QAE@XZ
??1CStr2@@UAE@XZ
??1CStrParse@@UAE@XZ
??1CountingLock@@UAE@XZ
??1GInboundPacket@@UAE@XZ
??1GInetAddress@@UAE@XZ
??1GInetBroadcastAddress@@UAE@XZ
??1GSocket@@UAE@XZ
??1InterThreadLock@@QAE@XZ
??1InterThreadLockGuard@@QAE@XZ
??1MachineState@@UAE@XZ
??1NetworkManager@@UAE@XZ
??1NetworkManagerImp@@UAE@XZ
??1NetworkServer@@UAE@XZ
??1NetworkServerImp@@UAE@XZ
??1SimpleLock@@UAE@XZ
??1SimpleLockGuard@@QAE@XZ
??1SimpleThread@@UAE@XZ
??1SrvErrorMessages@@UAE@XZ
??1TCPClient@@UAE@XZ
??1TCPServer@@UAE@XZ
??1TCPSession@@UAE@XZ
??1UDPClient@@UAE@XZ
??1UDPServer@@UAE@XZ
??1UDPSession3@@UAE@XZ
??1UDPSession@@UAE@XZ
??1UDPSocket@@UAE@XZ
??1XMLParser@@QAE@XZ
??1gEvent@@UAE@XZ
??1gFileList@@UAE@XZ
??1gMemMapFile@@UAE@XZ
??1g_Comp@@QAE@XZ
??1g_DynaLib@@QAE@XZ
??1g_FindFile@@QAE@XZ
??1g_comm@@UAE@XZ
??1nrApi@@UAE@XZ
??1nrAppDataBase@@UAE@XZ
??1nrAppDataBool@@UAE@XZ
??1nrAppDataCollection2@@UAE@XZ
??1nrAppDataCollection@@UAE@XZ
??1nrAppDataList@@UAE@XZ
??1nrAppDataStaticText@@UAE@XZ
??1nrAppDataText@@UAE@XZ
??1nrAppInfo2@@UAE@XZ
??1nrAppInfo3@@UAE@XZ
??1nrAppInfo@@UAE@XZ
??1nrCArchJobList@@UAE@XZ
??1nrCBCollection@@UAE@XZ
??1nrCClient22@@UAE@XZ
??1nrCClient23@@UAE@XZ
??1nrCClient@@UAE@XZ
??1nrCClientInfo@@UAE@XZ
??1nrCClientList@@UAE@XZ
??1nrCJob2@@UAE@XZ
??1nrCJob3@@UAE@XZ
??1nrCJob@@UAE@XZ
??1nrCJobCollection@@UAE@XZ
??1nrCJobDependency@@UAE@XZ
??1nrCJobHCollection@@UAE@XZ
??1nrCJobInfo@@UAE@XZ
??1nrCJobList@@UAE@XZ
??1nrCJobManager@@UAE@XZ
??1nrCJobServer@@UAE@XZ
??1nrCJobSubmit@@UAE@XZ
??1nrCJobWList@@UAE@XZ
??1nrCJobhList@@UAE@XZ
??1nrCMailNotify@@UAE@XZ
??1nrCManagerInfo@@UAE@XZ
??1nrCMgrPlugList@@UAE@XZ
??1nrCModuleInfoList@@UAE@XZ
??1nrCNotifyData@@UAE@XZ
??1nrCServer@@UAE@XZ
??1nrCServerCollection@@UAE@XZ
??1nrCServerErrorList@@UAE@XZ
??1nrCServerGroup@@QAE@XZ
??1nrCServerGroupCollection@@QAE@XZ
??1nrCServerList@@UAE@XZ
??1nrCServerSchedule@@UAE@XZ
??1nrCSrvPlug@@UAE@XZ
??1nrFile@@UAE@XZ
??1nrFileVPairs@@UAE@XZ
??1nrJServerList@@UAE@XZ
??1nrJobDepend@@UAE@XZ
??1nrLogMessage@@QAE@XZ
??1nrManagerApi2008@@UAE@XZ
??1nrManagerApi22@@UAE@XZ
??1nrManagerApi23@@UAE@XZ
??1nrManagerApi@@UAE@XZ
??1nrPlugCollection@@UAE@XZ
??1nrPlugMgrImp@@UAE@XZ
??1nrPlugin@@UAE@XZ
??1nrPluginManager@@UAE@XZ
??1nrResStr@@UAE@XZ
??1nrResourceMgr@@UAE@XZ
??1nrSPathImp@@UAE@XZ
??1nrStrList@@UAE@XZ
??1nrSystemPath@@UAE@XZ
??1nrTaskManager@@UAE@XZ
??1nrXml@@UAE@XZ
??1nrXmlFile@@UAE@XZ
??1nrXmlManagerCfg@@UAE@XZ
??1nrXmlParse@@UAE@XZ
??1nrXmlServerCfg@@UAE@XZ
??1nrXmlSystemCfg@@UAE@XZ
??1nr_apiPluginCollection@@UAE@XZ
??4?$LockedList@PAVGInboundPacket@@$0A@@@QAEAAV0@ABV0@@Z
??4?$LockedList@UtagJOBTASKS@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@K$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@PAVCStr@@$00@@QAEAAV0@ABV0@@Z
??4?$gList@PAVGInboundPacket@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@PAVXMLParser@@$00@@QAEAAV0@ABV0@@Z
??4?$gList@PAVnrAppDataBase@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@PAVnrCJob@@$00@@QAEAAV0@ABV0@@Z
??4?$gList@PAVnrCServer@@$00@@QAEAAV0@ABV0@@Z
??4?$gList@PAVnrSysLogCB@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@UtagBkbJobServer@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@UtagErrorMessage@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@UtagJOBTASKS@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@UtagNRAPI_PLUGLIST@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@UtagTASK_COLLECTION@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_AppDataListItem@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_BkbArchJobList@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_BkbClientInfo@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_BkbJobList@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_BkbJobWList@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_BkbJobhList@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_BkbMgrPlugList@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_BkbSrvList@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_NRRES_PLUGS@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_NRRES_STRINGS@@$00@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_NRSYSPATH@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_nrModuleInfo@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gList@Utag_nrSrvMsgList@@$0A@@@QAEAAV0@ABV0@@Z
??4?$gStack@PAVXMLParser@@$00@@QAEAAV0@ABV0@@Z
??4CSimpleStream@@QAEAAV0@ABV0@@Z
??4CStr2@@QAEAAV0@ABV0@@Z
??4CStrParse@@QAE?AUtag_GMAC@@U1@@Z
??4CStrParse@@QAE?AUtag_GTIME@@ABU1@@Z
??4CStrParse@@QAEAAV0@ABV0@@Z
??4CStrParse@@QAEFF@Z
??4CStrParse@@QAEGG@Z
??4CStrParse@@QAEHH@Z
??4CStrParse@@QAEJJ@Z
??4CStrParse@@QAEKK@Z
??4CStrParse@@QAEMM@Z
??4CStrParse@@QAENN@Z
??4CountingLock@@QAEAAV0@ABV0@@Z
??4GInboundPacket@@QAEAAV0@ABV0@@Z
??4GInboundPacket@@QAEAAV0@UtagPACKET@@@Z
??4GInetAddress@@QAEAAV0@ABV0@@Z
??4GInetAddress@@QAEAAV0@PAD@Z
??4GInetAddress@@QAEAAV0@Usockaddr_in@@@Z
??4GInetBroadcastAddress@@QAEAAV0@ABV0@@Z
??4GLoadMonitor@@QAEAAV0@ABV0@@Z
??4GPacket@@QAEAAV0@ABV0@@Z
??4GPacket@@QAEAAV0@UtagPACKET@@@Z
??4GSockCallBack@@QAEAAV0@ABV0@@Z
??4GSocket@@QAEAAV0@ABV0@@Z
??4InterThreadLock@@QAEAAV0@ABV0@@Z
??4MachineState@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 628KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b14b15a66c1c2433d56d12258a273868

Headers

File Characteristics

Imports

nrapitools

advapi32

ws2_32

netapi32

user32

imagehlp

shell32

kernel32

msvcr71

msvcp71

Exports

Exports

Sections

.text Size: 628KB - Virtual size: 624KB

.rdata Size: 224KB - Virtual size: 220KB

.data Size: 28KB - Virtual size: 27KB

.idata Size: 12KB - Virtual size: 11KB

.reloc Size: 44KB - Virtual size: 42KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 628KB - Virtual size: 624KB

.rdata
Size: 224KB - Virtual size: 220KB

.data
Size: 28KB - Virtual size: 27KB

.idata
Size: 12KB - Virtual size: 11KB

.reloc
Size: 44KB - Virtual size: 42KB

.rmnet
Size: 60KB - Virtual size: 60KB