1c11e814ca6f22aa0af6e2d3d355239f21839b574903dcd20000e48ffd912e82

Sharing

Copy URL Twitter E-mail

General

Target

1c11e814ca6f22aa0af6e2d3d355239f21839b574903dcd20000e48ffd912e82
Size

620KB
MD5

2416fa963c4fb693a508979189488058
SHA1

837b23ad674299a1c4e25e023c18ad513023f6e1
SHA256

1c11e814ca6f22aa0af6e2d3d355239f21839b574903dcd20000e48ffd912e82
SHA512

3d7b28e87aa2489d6d62b490bbf446079516f2632ba50dedc8353bc19e15f744ea1b7e5d85edf838e4a5f58b108be246aaf81427b98a831639e5817ef7a2bbe2
SSDEEP

3072:KOEH/IQ6SII9BISbjo3YL4xqBZAvghfzDqCvz:KOrg9Bl+04QBZAaD

Score

N/A

Malware Config

Signatures

Files

1c11e814ca6f22aa0af6e2d3d355239f21839b574903dcd20000e48ffd912e82
.dll windows x86

2c4712f68f00f62a7ee51d8dd01b5126

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA

kernel32

RemoveDirectoryA
Beep
Sleep
CreateThread
DeleteFileA
CreateDirectoryA
GetLocalTime
GetDateFormatA
GetTimeFormatA
lstrlenA
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetCurrentDirectoryA
TerminateProcess
ExitProcess
SetEnvironmentVariableA
CompareStringA
InterlockedIncrement
CompareStringW
GetStringTypeW
GetStringTypeA
InterlockedDecrement
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetOEMCP
GetACP
SetEndOfFile
GetTimeZoneInformation
GetCPInfo
SetFilePointer
FlushFileBuffers
CreateFileA
RtlUnwind
SetStdHandle
VirtualAlloc
VirtualFree
GetLastError
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFullPathNameA
GetDriveTypeA
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
CloseHandle
WriteFile
InitializeCriticalSection
ReadFile
DeleteCriticalSection
GetStdHandle
HeapReAlloc
HeapAlloc
GetFileType
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetEnvironmentStrings
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapCreate

user32

GetDC
InvalidateRect
CopyRect
DrawTextA
FillRect
OffsetRect
GetClientRect
GetSysColor
MoveWindow
InvalidateRgn
SetFocus
KillTimer
GetSystemMetrics
GetWindowRect
PostMessageA
SetTimer
LoadStringA
LoadImageA
MessageBeep
SendMessageA
FrameRect
InflateRect
PtInRect
wsprintfA
LoadBitmapA
ReleaseDC

gdi32

SetTextColor
SetBkMode
SelectObject
CreateFontA
DeleteObject
CreateSolidBrush
GetStockObject
SetBkColor
CreateFontIndirectA
DeleteDC
BitBlt
StretchBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectA

comdlg32

ChooseFontA

dvr2kern

PlugIn_SetEvent

Exports

Exports

AddEvent
BltAndDeleteMemoryBitmap
ButtonHitTest
CDispBoxDraw
CDispBoxDrawCapture
CFDispBoxDraw
CFDispBoxDrawCapture
CenterDlg
CloseUI
CreateMemoryBitmap
DrawAdjustButtonDisable
DrawAdjustButtonEnable
DrawAllButton
DrawAllButtonDisable
DrawAutoSwitchingButton
DrawClock1
DrawConsoleMode
DrawDlgHeader
DrawEmapDisable
DrawImageLogos
DrawImageModels
DrawNetWorkDisable
DrawPlayMode
DrawPtzAutoButton
DrawPtzButtonDisable
DrawPtzButtonEnable
DrawPtzLightButton
DrawPushButtonDisable
DrawSearchClock
DrawSelectCamera
DrawTextOutlineEnhance
DrawTextOutlineOSD
DrawTextOutlineTransOSD
DrawWebCamDisable
EnableAlarm
EnableCamera
FileAllDeleteEventLog
FileDeleteEventLog
FileReadEventLog
FileReadEventLogEnd
FileWriteEventLog
FontChange
GetBrightness
GetContrast
GetCurTime
GetCurrentPath
GetEventDirName
GetHddStat
GetHue
GetSaturation
InitDrawModelsLogos
LoadImageDll
MoveDlg
OpenUI
RDispBoxDraw
RDispBoxDrawReplay
RFDispBoxDraw
RFDispBoxDrawReplay
RemoteUiOnCheck
ResetEventLog
ScrollHitTest
ScrollHitTest1
SetAlarmStat
SetBackGround
SetBrightness
SetContrast
SetHue
SetMotionStat
SetRecordingStat
SetSaturation
SetSenSorStat
StartClock
StartHdd
StopClock
StopHdd
StringLoad
TabChange
TermDrawModelsLogos
UpdateSearchClock

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 520KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c4712f68f00f62a7ee51d8dd01b5126

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

dvr2kern

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 77KB

.rsrc Size: 520KB - Virtual size: 518KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 77KB

.rsrc
Size: 520KB - Virtual size: 518KB

.reloc
Size: 12KB - Virtual size: 8KB