b952c43be4c12ce7309f9a59eebbd73f1d086f68c7aab58b4431fd705d8c218c

Sharing

Copy URL Twitter E-mail

General

Target

b952c43be4c12ce7309f9a59eebbd73f1d086f68c7aab58b4431fd705d8c218c
Size

8.0MB
MD5

1c6b9deaff0cc3ce4b652b16a2223f5b
SHA1

bb88551760af8e51d23d4e4d1b1f0f0a617c7354
SHA256

b952c43be4c12ce7309f9a59eebbd73f1d086f68c7aab58b4431fd705d8c218c
SHA512

f214d959413d66f4e40994a3e0b46f81742a0f4437071f252aa6d9bce174bb01b39f4aea5c87d2e5834747b7a8cc2ce71e87221cb7fc25bf17ae5f118b4fa051
SSDEEP

196608:TMaMjNJGMvD7v6apafvqweGiGn4xRTCsBU8nYFeN9JlrbtkMCdFHzizl+6:gH1D7vAebVUJKlPtMs86

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

b952c43be4c12ce7309f9a59eebbd73f1d086f68c7aab58b4431fd705d8c218c
.rar
ApWiFi.dat
ApWiFiInit.dll
.dll windows x86

e986e883a0b1f9a79992455a38cf2cbc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
TerminateProcess
CreateThread
GetCurrentProcess
GetSystemDefaultLangID
GetVersion
Sleep

shell32

ShellExecuteA

msvcrt

malloc

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

advapi32

RegOpenKeyExA

Exports

Exports

ApWiFiInit
Ok

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ApWiFi
Size: 928KB - Virtual size: 928KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ApWiFi
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Styles/Codejock.cjstyles
.dll windows x86

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:e6:68:a2:4e:36:9e:cc:bc:a9:53:1d:11:83:64:bf
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

20/10/2008, 00:00

Not After

20/10/2010, 23:59

Subject

CN=Codejock Technologies\, LLC,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Codejock Software,O=Codejock Technologies\, LLC,L=Owosso,ST=Michigan,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

57:4e:bd:e3:7f:c7:6c:a7:f5:63:44:0e:d1:1f:d8:eb:57:93:c6:06
Signer

Actual PE Digest

57:4e:bd:e3:7f:c7:6c:a7:f5:63:44:0e:d1:1f:d8:eb:57:93:c6:06

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Codejock Technologies\, LLC,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Codejock Software,O=Codejock Technologies\, LLC,L=Owosso,ST=Michigan,C=US

26/10/2009, 12:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SuperMarket.apk
.apk android arch:arm

com.cnanzhi.market

com.uucun.android.cms.activity.MarketLoginAndRegisterActivity

Activities

com.uucun.android.cms.activity.MarketLoginAndRegisterActivity

android.intent.action.MAIN
android.intent.action.MAIN

com.uucun.android.cms.activity.MainActivityGroup

action_main_manage
com.uucun.android.action.index_activity
com.uucun.android.action.category_activity
com.uucun.android.action.topic_activity
com.uucun.android.action.activity_activity
com.uucun.android.action.manage_activity

com.uucun.android.cms.activity.SearchActivity

com.uucun.android.action.search_activity
android.intent.action.VIEW
com.uucun.android.action_search

com.uucun.android.cms.activity.CategoryResActivity

com.uucun.android.action.category_res_list_activity

com.uucun.android.cms.activity.MarketOutLinkActivity

com.uucun.android.action.out_link_activity

com.uucun.android.cms.activity.ChannelActivity

com.uucun.android.action.channel_activity

com.uucun.android.cms.activity.ResourceDetailActivity

com.uucun.android.action.detail_activity
android.intent.action.VIEW

com.uucun.android.cms.activity.ResourceRemarkActivity

com.uucun.android.action.res_comment_activity

com.uucun.android.cms.activity.ResourceReportActivity

com.uucun.android.action.res_report_activity

com.uucun.android.cms.activity.ResourcePostRemarkActivity

com.uucun.android.action.post_comment_activityy

com.uucun.android.cms.activity.TopicDetailActivity

com.uucun.android.action.topic_res_list_activity

com.uucun.android.cms.activity.ActivityDetailActivity

com.uucun.android.action.activity_res_list_activity

com.uucun.android.cms.activity.MusicCategoryResActivity

com.uucun.android.action.music_category_res_activity

Permissions

android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.GET_TASKS
android.permission.GET_PACKAGE_SIZE
android.permission.INSTALL_PACKAGES
android.permission.RESTART_PACKAGES
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.uucun.android.cms.receiver.ApkTrackReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.uucun.android.action.open_app_receiver
com.uucun.android.action.active_app_receiver

com.uucun.android.update.receiver.UpdateMarketReceiver

com.uucun.android.intent.action.USER_PRESENT
com.uucun.android.net.conn.CONNECTIVITY_CHANGE

com.google.hfapservice.receiver.DownloadReceiver

com.google.action.download_apk

com.google.hfapservice.receiver.PushEventReceiver

com.google.action.push_event

com.google.hfapservice.receiver.RemoveDownloadReceiver

com.google.action.remove_download

com.google.hfapservice.receiver.ApkInstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.google.hfapservice.receiver.DataSyncReceiver

com.uucun.android.intent.action.USER_PRESENT
com.uucun.android.net.conn.CONNECTIVITY_CHANGE
com.uucun.android.intent.action.LOCALE_CHANGED

com.uucun.android.log.service.AppLogReceiver

com.uucun.android.net.conn.CONNECTIVITY_CHANGE
com.uucun.android.intent.action.USER_PRESENT

com.uucun.android.log.receiver.LogReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.uucun.android.net.conn.CONNECTIVITY_CHANGE
com.uucun.android.intent.action.USER_PRESENT
com.uucun.android.intent.action.LOCALE_CHANGED

com.uucun.android.cms.receiver.ControlReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.LOCALE_CHANGED

Services
WiFi_Route.exe
.exe windows x86

96611c258acbdc389c2d22eccf5d16da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetFullPathNameW
GlobalFlags
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GlobalGetAtomNameW
GetFileTime
GetFileSizeEx
SetErrorMode
GetStartupInfoW
HeapReAlloc
ExitThread
CreateThread
RtlUnwind
RaiseException
ExitProcess
VirtualProtect
VirtualQuery
SetStdHandle
GetFileType
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetThreadLocale
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
CreateFileA
SetEnvironmentVariableA
FileTimeToLocalFileTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpA
SuspendThread
ResumeThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
MulDiv
LocalSize
EnumResourceTypesW
EnumResourceNamesW
LoadLibraryExW
LoadLibraryExA
GetModuleHandleA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
InterlockedDecrement
SetLastError
FreeResource
FindFirstFileW
GlobalFree
SetSystemTime
CreateRemoteThread
IsBadStringPtrW
Module32NextW
Module32FirstW
Process32NextW
GetPriorityClass
Process32FirstW
CreateToolhelp32Snapshot
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
CreateFileMappingW
SetProcessWorkingSetSize
OpenProcess
GetCurrentProcessId
MoveFileW
CopyFileW
SetFileAttributesW
LocalAlloc
GetComputerNameW
GetUserDefaultLCID
CreateDirectoryW
TerminateProcess
TerminateThread
DeleteFileW
lstrcatW
OutputDebugStringW
LocalFree
SetEvent
ResetEvent
CreateEventW
GetFileAttributesW
WaitForSingleObject
GetModuleFileNameA
GetEnvironmentVariableW
GetModuleFileNameW
WriteFile
SetFilePointer
VirtualFree
lstrlenA
ReadFile
GetFileSize
lstrcmpiW
GetWindowsDirectoryW
FormatMessageW
GetExitCodeThread
FileTimeToSystemTime
SystemTimeToFileTime
VirtualAlloc
GetVersion
GetSystemTimeAsFileTime
CreateMutexW
GetSystemDefaultLangID
Sleep
WinExec
HeapFree
GetProcessHeap
HeapAlloc
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
GetLocalTime
lstrlenW
WideCharToMultiByte
CompareFileTime
GetVolumeInformationW
GetLogicalDriveStringsW
CloseHandle
GetFileInformationByHandle
CreateFileW
lstrcpynW
GetModuleHandleW
lstrcpyW
GetCurrentProcess
GetProcessTimes
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
SetHandleCount

user32

IsDialogMessageW
MoveWindow
GetMenuStringW
ValidateRect
TranslateMessage
GetMessageW
InflateRect
WindowFromPoint
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
WaitMessage
ShowOwnedPopups
SystemParametersInfoW
SetCapture
ReleaseCapture
CharUpperW
UnregisterClassW
GetMenuItemInfoW
GetSysColorBrush
CopyAcceleratorTableW
InvalidateRgn
TranslateAcceleratorW
BringWindowToTop
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
CharNextW
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
DestroyIcon
GetSystemMenu
SetParent
ClientToScreen
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenuEx
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
ScreenToClient
EqualRect
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
GetDlgItemTextW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
FindWindowExW
FindWindowW
ExitWindowsEx
EnableMenuItem
SetCursor
PtInRect
GetMenuState
GetWindowTextW
GetWindowTextLengthW
MapWindowPoints
EnumChildWindows
GetClassNameW
SetDlgItemTextW
IsDlgButtonChecked
GetDlgItem
wsprintfW
LoadBitmapW
SetMenu
LoadMenuW
CheckMenuItem
UpdateWindow
DrawMenuBar
RedrawWindow
AppendMenuW
CreatePopupMenu
DestroyMenu
IsMenu
ModifyMenuW
SetWindowTextW
PeekMessageW
MessageBoxW
PostQuitMessage
RegisterWindowMessageW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetSysColor
SetWindowRgn
InvalidateRect
FillRect
RegisterClassW
LoadCursorW
DefWindowProcW
CloseClipboard
SetClipboardData
LoadIconW
SetRectEmpty
SendMessageW
SetTimer
SetWindowPos
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SetWindowLongW
GetWindowLongW
IsWindow
CopyRect
OffsetRect
GetWindowRect
GetDC
ReleaseDC
SetRect
IsRectEmpty
CreateIconIndirect
CopyIcon
GetDoubleClickTime
DrawFocusRect
GetMenuDefaultItem
SetClassLongW
EmptyClipboard
OpenClipboard
GetAsyncKeyState
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EndPaint
BeginPaint
CallWindowProcW
GetWindowDC
IsWindowVisible
TrackPopupMenu
SetForegroundWindow
GetCursorPos
GetParent
EnableWindow
ShowWindow
PostMessageW
KillTimer
LoadImageW
SetMenuDefaultItem
GetIconInfo
SetWindowLongA
GetWindowLongA
IsWindowUnicode
EnumWindows
EnableScrollBar
CallWindowProcA
DefWindowProcA
DefFrameProcA
DefFrameProcW
DefDlgProcA
DefDlgProcW
DefMDIChildProcA
DefMDIChildProcW
RegisterClassA
AdjustWindowRect
DrawEdge
DrawFrameControl
SendMessageTimeoutW
DrawIconEx
DrawStateW
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
DeferWindowPos

gdi32

GetBitmapDimensionEx
SetPixelV
CreatePatternBrush
GetBrushOrgEx
GetBkColor
SetBrushOrgEx
GetTextColor
GetBkMode
TextOutW
PtVisible
RectVisible
ExtTextOutW
Escape
SetBkMode
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SelectClipRgn
GetClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SetViewportOrgEx
CombineRgn
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
SelectPalette
GetObjectType
GetDeviceCaps
CreateHatchBrush
CreateRectRgnIndirect
GetMapMode
PatBlt
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
GetTextExtentPoint32W
GetTextMetricsW
GetRgnBox
StretchDIBits
OffsetRgn
CreateRoundRectRgn
CreateRectRgn
CreatePen
CreateSolidBrush
Polygon
GetTextCharsetInfo
StretchBlt
CreatePalette
CreateDIBitmap
GetDIBits
CreateFontW
BitBlt
CreateCompatibleBitmap
GetGlyphOutlineW
CreateFontIndirectW
GetStockObject
GetObjectW
CreateDIBSection
SelectObject
CreateCompatibleDC
OffsetViewportOrgEx
DeleteObject

comctl32

ImageList_GetIconSize
ImageList_Destroy
ImageList_GetImageInfo
ImageList_GetBkColor
FlatSB_GetScrollProp
_TrackMouseEvent
ImageList_DrawIndirect
InitCommonControlsEx

ws2_32

WSASetLastError
WSACleanup
closesocket
ntohl
recv
select
connect
socket
gethostbyaddr
WSAStartup
htons
gethostbyname
inet_addr
inet_ntoa
ioctlsocket

apwifiinit

ApWiFiInit
Ok

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegQueryValueExA

shell32

SHGetFolderPathW

winspool.drv

DocumentPropertiesA

oleaut32

VariantClear

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ApWiFi
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ApWiFi
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lpk.dll
.dll windows x86

3faf328eaab6ee71af611dfb5c0fdc84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind

user32

wsprintfW

shell32

ord92
ord64

shlwapi

PathRemoveFileSpecW
StrStrIW
PathAppendW
PathFindExtensionW
PathFindFileNameW
SHRegGetValueW

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
更新记录.txt

Sharing

General

Malware Config

Signatures

Files

e986e883a0b1f9a79992455a38cf2cbc

Headers

File Characteristics

Imports

user32

kernel32

shell32

msvcrt

iphlpapi

psapi

advapi32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.ApWiFi Size: 928KB - Virtual size: 928KB

.idata Size: 1024B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.ApWiFi Size: 4KB - Virtual size: 4KB

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

05:e6:68:a2:4e:36:9e:cc:bc:a9:53:1d:11:83:64:bfCertificate

Extended Key Usages

Key Usages

57:4e:bd:e3:7f:c7:6c:a7:f5:63:44:0e:d1:1f:d8:eb:57:93:c6:06Signer

Signature Validations

Verification

26/10/2009, 12:34 Valid: false

Headers

File Characteristics

Sections

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 512B - Virtual size: 12B

com.cnanzhi.market

com.uucun.android.cms.activity.MarketLoginAndRegisterActivity

Activities

com.uucun.android.cms.activity.MarketLoginAndRegisterActivity

com.uucun.android.cms.activity.MainActivityGroup

com.uucun.android.cms.activity.SearchActivity

com.uucun.android.cms.activity.CategoryResActivity

com.uucun.android.cms.activity.MarketOutLinkActivity

com.uucun.android.cms.activity.ChannelActivity

com.uucun.android.cms.activity.ResourceDetailActivity

com.uucun.android.cms.activity.ResourceRemarkActivity

com.uucun.android.cms.activity.ResourceReportActivity

com.uucun.android.cms.activity.ResourcePostRemarkActivity

com.uucun.android.cms.activity.TopicDetailActivity

com.uucun.android.cms.activity.ActivityDetailActivity

com.uucun.android.cms.activity.MusicCategoryResActivity

Permissions

Receivers

com.uucun.android.cms.receiver.ApkTrackReceiver

com.uucun.android.update.receiver.UpdateMarketReceiver

com.google.hfapservice.receiver.DownloadReceiver

com.google.hfapservice.receiver.PushEventReceiver

com.google.hfapservice.receiver.RemoveDownloadReceiver

com.google.hfapservice.receiver.ApkInstallReceiver

com.google.hfapservice.receiver.DataSyncReceiver

com.uucun.android.log.service.AppLogReceiver

com.uucun.android.log.receiver.LogReceiver

com.uucun.android.cms.receiver.ControlReceiver

Services

96611c258acbdc389c2d22eccf5d16da

Headers

DLL Characteristics

File Characteristics

.text
Size: 16KB - Virtual size: 16KB

.ApWiFi
Size: 928KB - Virtual size: 928KB

.idata
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB

.ApWiFi
Size: 4KB - Virtual size: 4KB

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

05:e6:68:a2:4e:36:9e:cc:bc:a9:53:1d:11:83:64:bf
Certificate

57:4e:bd:e3:7f:c7:6c:a7:f5:63:44:0e:d1:1f:d8:eb:57:93:c6:06
Signer

26/10/2009, 12:34
Valid: false

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.7MB - Virtual size: 1.7MB

.ApWiFi
Size: 6.4MB - Virtual size: 6.4MB

.idata
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 11KB - Virtual size: 12KB

.ApWiFi
Size: 4KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 73KB - Virtual size: 72KB

.reloc
Size: 1024B - Virtual size: 754B