43b6aad652a53570bc4c08dc09e2628bcfdcf15b117aa53a597adfac7355ea7a

Sharing

Copy URL

Twitter E-mail

General

Target

43b6aad652a53570bc4c08dc09e2628bcfdcf15b117aa53a597adfac7355ea7a
Size

248KB
MD5

9d6495f396a60ff1ea6efcf9fb362ef0
SHA1

2c1c0cfae320b93155d0a02ccd3ea7c7c8914af1
SHA256

43b6aad652a53570bc4c08dc09e2628bcfdcf15b117aa53a597adfac7355ea7a
SHA512

418c94003d65bb9e3ce7e812c5c598ed1245204375fa60df313c791b448d9b256e8be34d521eee7227b10b073744a7f83e2229e0eeda4e3005a756d1df50f6f5
SSDEEP

3072:V+LOjHRo7qoWUowa9jQgG1sChZVGm5RYJ5RLVnG5zmbqbFbyaDZiL8vGZm1VY4Yj:BHe7qoWw3kaDULMemtE8oU9SA1+

Score

N/A

Malware Config

Signatures

Files

43b6aad652a53570bc4c08dc09e2628bcfdcf15b117aa53a597adfac7355ea7a
.dll windows x86

10db2f3cade3c523435ce13390de63cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

telephone

ClientConnectInit
ConnectStop
ConnectStart
ServerConnectInit
TeleRecvPacketStreamAsync
TeleRecvResponseCode
TeleSendResponseCode
TeleSendRequestPacket
TeleRecvString
TeleSendPacketStreamAsync
Telegetack
Teleack
TeleSendPacketBinaryAsync
TeleRecvPacketBinaryAsync
ServerOfferingAnser
TeleSendString
TeleRecvRequestPacket

avifil32

AVISaveOptions
AVIStreamRelease
AVIFileRelease
AVIFileExit
AVIFileCreateStreamA
AVIFileOpenA
AVIFileInit
AVIStreamWrite
AVIStreamSetFormat
AVIMakeCompressedStream

msvfw32

ord2

vcodec

TermAudioDecode
InitAudioDecode
AudioDecode
AudioEncode
InitAudioEncode
TermAudioEncode

wsock32

inet_addr

jpgcodec

TermEncode
Encode
Decode
InitDecode
TermDecode
InitEncode

wscs

SendResponseCode
RecvString
RecvResponseCode
SendString
RecvRequestPacket
RecvPacketBinaryAsync
SendPacketBinaryAsync
ack
getack
SendPacketStreamAsync
RecvPacketStreamAsync
TermWinsock
DisconnectSocket
ConnectSocket
FindHost
InitWinsock
DestroySocket
WaitForClientRequest
CreateSocket
SendRequestPacket

winmm

timeKillEvent
timeSetEvent
timeGetTime

kernel32

GetStringTypeA
GetStringTypeW
LCMapStringW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LCMapStringA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetCurrentProcess
TerminateProcess
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
FlushFileBuffers
ExitProcess
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetStdHandle
SetHandleCount
SetFilePointer
GetFileType
SetStdHandle
WriteFile
SetEndOfFile
GetVersion
CloseHandle
TerminateThread
CreateThread
LeaveCriticalSection
GetLocalTime
EnterCriticalSection
Sleep
InitializeCriticalSection
SetEvent
DeleteCriticalSection
GetWindowsDirectoryA
GetModuleFileNameA
CreateEventA
WaitForMultipleObjects
WaitForSingleObject
GetDiskFreeSpaceExA
GetDriveTypeA
GetPrivateProfileIntA
WritePrivateProfileStringA
ResetEvent
DeleteFileA
GetLastError
ResumeThread
CreateWaitableTimerA
SetWaitableTimer
SetThreadPriority
GetDateFormatA
FreeLibrary
GetProcAddress
LoadLibraryA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
GetCurrentProcessId
ReleaseMutex
GetTempPathA
GetTempFileNameA
CreateDirectoryA
GetProcessHeap
HeapFree
CopyFileA
GetPrivateProfileStringA
WinExec
CreateFileA
DeviceIoControl
GetCommandLineA
RemoveDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileA
FindFirstFileA
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GetFileAttributesA
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadFile
HeapAlloc

user32

SetTimer
wvsprintfA
SendMessageTimeoutA
MessageBoxA
MsgWaitForMultipleObjects
FindWindowA
SendMessageA
KillTimer
GetDC
FillRect
OffsetRect
DrawTextA
ReleaseDC
SetRect
FrameRect
wsprintfA

gdi32

GetDeviceCaps
SetPixel
CreateCompatibleDC
CreateBitmap
SelectObject
DeleteDC
DeleteObject
GetPixel
GetStockObject
SetTextColor
SetBkMode

Exports

Exports

ActivateOverlay
AttatchUserData
BroadcastServerStatus
ClearOverlayScreen
CreatePlayer
CreateSimpleWebPage
DeletePlayer
DisableDibData
DrawMotionZone
EnableCaptureEx
EnableDibData
EnableFastBackwardPlay
EnableMotionDetection
EnableRecording
EnableSensor
EnableStorageRecycle
EnterAviWriterMode
ExitAviWriterMode
GetBoardId
GetHardwareSpec
GetLastDibFrame
GetLastDibFrameEx
GetRgbData
GetSensorInput
GetStorageStatus
InitDvr2
InitDvr2Driver
InitOverlay
InitSoundPlay
IsLiveBoardInstalled
IsLiveBoardVideoPresent
IsOverlaySupported
IsSoundCardInstalled
LockDayTimeTable
Login
Logout
MoveOverlay
PauseCapture
PlugIn_SetEvent
RequestEchoTest
RequestRemoteProc
ResetStorage
ResumeCapture
SetActiveAudioChannel
SetAgc
SetAlarmOut
SetAudioGainValue
SetBuzzer
SetCaptureColor
SetDate
SetDisplayMode
SetDvrpServerOption
SetExtMonitorOutput
SetExtMonitorOutput2
SetMinute
SetMonth
SetMotionDetectZone
SetPlayerBrightness
SetPlayerSharpBlur
SetRecordingFrameRate
SetRemoteBufferingUnit
SetSensorType
SetVideoSourceType
SetVisibleChannels
StartAviWriter
StartBackup
StartCapture
StartRecording
StartRemoteCaptureImage
StopAviWriter
StopCapture
StopRecording
StopRemoteCaptureImage
TermDvr2
TermDvr2Driver
TermOverlay
TermSoundPlay
UnlockDayTimeTable
play

Sections

.text
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sseg
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10db2f3cade3c523435ce13390de63cd

Headers

File Characteristics

Imports

telephone

avifil32

msvfw32

vcodec

wsock32

jpgcodec

wscs

winmm

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 173KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 36KB - Virtual size: 1.0MB

.sseg Size: 4KB - Virtual size: 2KB

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 176KB - Virtual size: 173KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 36KB - Virtual size: 1.0MB

.sseg
Size: 4KB - Virtual size: 2KB

.reloc
Size: 16KB - Virtual size: 14KB