75b3c0fd010ca68dafe3a5aa58c9ed121fe04c4fd9a09121934595d72d76acc1

Sharing

Copy URL Twitter E-mail

General

Target

75b3c0fd010ca68dafe3a5aa58c9ed121fe04c4fd9a09121934595d72d76acc1
Size

808KB
MD5

9746b9651232fd663bd5c7e656faac80
SHA1

d67534853445dff0183d2e9ca77aeb151aeb6cc1
SHA256

75b3c0fd010ca68dafe3a5aa58c9ed121fe04c4fd9a09121934595d72d76acc1
SHA512

7ee3d597e670ca68261c3d3932d36b7280cac0e3a0d8464701c56968ab5ea53ffa1e1df0265d913755bced7b0d7be58cb4d93f575f3d6c9e7ac69ec2be810c0f
SSDEEP

12288:1cr2rO88bzoKUcHe+dltsEsG9Je+1xpcXreQLXLqxytQcL:1m2rO88bz1Xd9E+bpcXrbyxyCcL

Score

N/A

Malware Config

Signatures

Files

75b3c0fd010ca68dafe3a5aa58c9ed121fe04c4fd9a09121934595d72d76acc1
.dll windows x86

72871dc14caf1006ad603cc5bcc6bdcc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ycpfoundation

??4YCPError@@QAEAAV0@ABV0@@Z
??1YCPError@@UAE@XZ
?addAtUnLoadFunction@YCPInitializers@@YAXP6AXH@Z@Z
?removeAtUnLoadFunction@YCPInitializers@@YAXP6AXH@ZH@Z
?setUnloading@YCPInitializers@@YAXH@Z
?ycpInit@YCPFoundationLib@@SAXXZ
?toUTF8@YCPString@@QBE?AV?$YCPSharedPtr@V?$YCPBuffer@D@@@@XZ
??0YCPLock@YCPMutex@@QAE@V?$YCPSharedPtr@VYCPMutex@@@@@Z
??1YCPLock@YCPMutex@@UAE@XZ
??_DYCPLock@YCPMutex@@QAEXXZ
??1YCPMutex@@UAE@XZ
??0YCPMutex@@QAE@XZ
??M@YA_NV?$YCPSharedPtr@VYCPString@@@@0@Z
?warn@YCPLogLogger@@QAEXV?$YCPSharedPtr@VYCPString@@@@@Z
?info@YCPLogLogger@@QAEXV?$YCPSharedPtr@VYCPString@@@@@Z
?logFormat@YCPLogLogger@@QAAXW4YCPLogLevel@@PBDZZ
??1YCPTimer@@UAE@XZ
??0YCPObject@@QAE@ABV0@@Z
??0YCPException@@QAE@ABV0@@Z
??0YCPFatalException@@QAE@V?$YCPSharedPtr@VYCPString@@@@@Z
??0YCPFatalException@@QAE@ABV0@@Z
??0YCPTimer@@QAE@V?$YCPWeakPtr@VYCPEventListener@@@@PBDH@Z
??_DYCPFatalException@@QAEXXZ
?eventCode@YCPEventBase@@QBEPBDXZ
?eventParameter@YCPEventBase@@QBEIXZ
?eventData@YCPEvent@@QBE?AV?$YCPSharedPtr@VYCPObject@@@@XZ
??0YCPError@@QAE@PBX@Z
?error@YCPLogLogger@@QAEXV?$YCPSharedPtr@VYCPString@@@@@Z
??0YCPNetworkConnection@@QAE@XZ
?logger@YCPLog@@SA?AV?$YCPSharedPtr@VYCPLogLogger@@@@V?$YCPSharedPtr@VYCPString@@@@@Z
??_DYCPTCPConnection@@QAEXXZ
??0YCPTCPConnection@@QAE@XZ
?setListener@YCPEventEmitter@@QAEXV?$YCPWeakPtr@VYCPEventListener@@@@@Z
?lifeline@YCPRefCounter@@CA?AV?$shared_ptr@UObjectLifeline@YCPRefCounter@@@boost@@PAVYCPObject@@@Z
?append@YCPString@@QAEAAV1@V?$YCPSharedPtr@$$CBVYCPString@@@@@Z
??H@YA?AV?$YCPSharedPtr@VYCPString@@@@V0@0@Z
?make@YCPString@@SA?AV?$YCPSharedPtr@VYCPString@@@@D@Z
?postMessage@YCPNetworkConnection@@UAEXPBDV?$YCPSharedPtr@VYCPObject@@@@I@Z
?exclusiveAddrUse@YCPNetworkConnection@@UBEHXZ
?setExclusiveAddrUse@YCPNetworkConnection@@UAEXHAAVYCPError@@@Z
?keepAlive@YCPNetworkConnection@@UAEHAAVYCPError@@@Z
?setKeepAlive@YCPNetworkConnection@@UAEXHAAVYCPError@@@Z
?sendBufferSize@YCPNetworkConnection@@UAEIAAVYCPError@@@Z
?setSendBufferSize@YCPNetworkConnection@@UAEXIAAVYCPError@@@Z
?recvBufferSize@YCPNetworkConnection@@UAEIAAVYCPError@@@Z
?setRecvBufferSize@YCPNetworkConnection@@UAEXIAAVYCPError@@@Z
?reusePort@YCPNetworkConnection@@UBEHXZ
?setReusePort@YCPNetworkConnection@@UAEXHAAVYCPError@@@Z
?remoteAddress@YCPNetworkConnection@@UBE?AV?$YCPSharedPtr@VYCPIPAddress@@@@AAVYCPError@@@Z
??0YCPEventListener@@QAE@XZ
??0YCPEventEmitter@@QAE@XZ
??0YCPNetworkConnection@@IAE@ABV0@@Z
??1YCPEventEmitter@@UAE@XZ
??1YCPNetworkConnection@@UAE@XZ
??4YCPNetworkConnection@@IAEAAV0@ABV0@@Z
?make@YCPString@@SA?AV?$YCPSharedPtr@VYCPString@@@@PBD@Z
?ReadEvent@YCPNetworkConnection@@2QBDB
?registerNetworkConnectionType@YCPNetworkConnectionFactory@@SAXPBDPAVIYCPNetworkConnectionCreator@@@Z
?FND_commonInvalidParameter@YCPCommonErrors@@3PBXB
??9@YA_NABVYCPError@@0@Z
?FND_none@YCPCommonErrors@@3PBXB
?WriteEvent@YCPNetworkConnection@@2QBDB
?intrusive_ptr_release@YCPRefCounter@@CAHPBVYCPObject@@@Z
?lifeline@YCPObject@@QBEAAV?$shared_ptr@UObjectLifeline@YCPRefCounter@@@boost@@XZ
??0ObjectLock@YCPRefCounter@@QAE@PAUObjectLifeline@1@@Z
?intrusive_ptr_add_ref@YCPRefCounter@@CAXPBVYCPObject@@@Z
??1ObjectLock@YCPRefCounter@@UAE@XZ
?setStringRepresentation@YCPObject@@MAEXPBD@Z
?stringRepresentation@YCPObject@@MBEPBDXZ
?toString@YCPObject@@UBEPBDH@Z
??0YCPObject@@QAE@XZ
?unregisterNetworkConnectionType@YCPNetworkConnectionFactory@@SAPAVIYCPNetworkConnectionCreator@@PBD@Z
??0IYCPNetworkConnectionCreator@@QAE@XZ
??1IYCPNetworkConnectionCreator@@UAE@XZ
??1YCPEventListener@@UAE@XZ
??1YCPObject@@UAE@XZ

advapi32

DeregisterEventSource
ReportEventA
RegisterEventSourceA

ws2_32

closesocket
recv
WSASetLastError
send
shutdown
WSAGetLastError

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr80

_time32
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__clean_type_info_names_internal
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?terminate@@YAXXZ
strstr
signal
fputs
strtoul
sscanf
isupper
isxdigit
fprintf
memchr
_gmtime32
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
getenv
fgets
fseek
ftell
_setmode
fopen
fflush
_crt_debugger_hook
_fileno
_stat32
_CxxThrowException
_purecall
??3@YAXPAX@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
realloc
??2@YAPAXI@Z
memmove
memcpy
free
sprintf
isprint
memset
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
_getch
??0exception@std@@QAE@ABV01@@Z
strncmp
_errno
qsort
strerror
strncpy
strchr
wcsstr
_vsnprintf
vfprintf
_iob
abort
strcmp
tolower
isspace
malloc
isdigit
fclose
fread
fwrite

kernel32

GetModuleHandleA
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
FlushConsoleInputBuffer
GetVersionExA
LoadLibraryA
FreeLibrary
CloseHandle
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetFileType
GetVersion
GetCurrentThreadId
SetLastError
GetLastError
TerminateProcess

user32

GetProcessWindowStation
GetDesktopWindow
MessageBoxIndirectA
GetUserObjectInformationW

Exports

Exports

??0IConnectorCallback@@QAE@ABV0@@Z
??0IConnectorCallback@@QAE@XZ
??0YCPSSLConnection@@IAE@ABV0@@Z
??0YCPSSLConnection@@QAE@V?$YCPSharedPtr@VYCPString@@@@@Z
??0YCPSSLConnector@@QAE@PAVIConnectorCallback@@V?$YCPSharedPtr@VYCPString@@@@@Z
??0YCPSSLInit@@AAE@XZ
??1IConnectorCallback@@UAE@XZ
??1YCPSSLConnection@@UAE@XZ
??1YCPSSLConnector@@UAE@XZ
??1YCPSSLInit@@AAE@XZ
??4IConnectorCallback@@QAEAAV0@ABV0@@Z
??4YCPSSLConnection@@IAEAAV0@ABV0@@Z
??4YCPSSLHMAC@@QAEAAV0@ABV0@@Z
??4YCPSSLHash@@QAEAAV0@ABV0@@Z
??4YCPSSLInit@@QAEAAV0@ABV0@@Z
??4YCPSSLLib@@QAEAAV0@ABV0@@Z
??_7IConnectorCallback@@6B@
??_7YCPSSLConnection@@6BIConnectorCallback@@@
??_7YCPSSLConnection@@6BYCPEventListener@@@
??_7YCPSSLConnection@@6BYCPNetworkConnection@@@
??_7YCPSSLConnection@@6BYCPObject@@@
??_7YCPSSLConnector@@6BYCPEventListener@@@
??_7YCPSSLConnector@@6BYCPObject@@@
??_8YCPSSLConnection@@7B@
??_8YCPSSLConnection@@7BYCPEventEmitter@@@
??_8YCPSSLConnection@@7BYCPEventListener@@@
??_8YCPSSLConnection@@7BYCPNetworkConnection@@@
??_8YCPSSLConnector@@7B0@@
??_8YCPSSLConnector@@7BYCPEventListener@@@
??_DYCPSSLConnection@@QAEXXZ
??_DYCPSSLConnector@@QAEXXZ
??_FYCPSSLConnection@@QAEXXZ
?_ycpDestroy@YCPSSLLib@@CAXH@Z
?_ycpDestroyed@YCPSSLLib@@0HA
?_ycpInit@YCPSSLLib@@CAXXZ
?_ycpInitialized@YCPSSLLib@@0HA
?accept@YCPSSLConnection@@UAE?AV?$YCPSharedPtr@VYCPNetworkConnection@@@@AAVYCPError@@@Z
?accept@YCPSSLConnection@@UAE?AV?$YCPSharedPtr@VYCPNetworkConnection@@@@IAAVYCPError@@@Z
?bind@YCPSSLConnection@@UAEXV?$YCPSharedPtr@$$CBVYCPString@@@@HAAVYCPError@@@Z
?connect@YCPSSLConnection@@UAEXV?$YCPSharedPtr@$$CBVYCPString@@@@HAAVYCPError@@@Z
?connect@YCPSSLConnection@@UAEXV?$YCPSharedPtr@$$CBVYCPString@@@@HIAAVYCPError@@@Z
?createNetworkConnection@YCPSSLConnection@@SA?AV?$YCPSharedPtr@VYCPSSLConnection@@@@V?$YCPSharedPtr@VYCPString@@@@@Z
?createNetworkConnection@YCPSSLConnection@@SA?AV?$YCPSharedPtr@VYCPSSLConnection@@@@XZ
?createNewContext@YCPSSLInit@@CAPAUssl_ctx_st@@V?$YCPSharedPtr@VYCPString@@@@W4SSLMethod@1@@Z
?dataToRead@YCPSSLConnector@@AAEIV?$YCPSharedPtr@V?$YCPBuffer@E@@@@@Z
?dataToWrite@YCPSSLConnector@@AAEIV?$YCPSharedPtr@V?$YCPBuffer@E@@@@@Z
?decrementInitCount@YCPSSLInit@@CAXXZ
?doAsyncSendBuff@YCPSSLConnection@@AAEXXZ
?dumpData@YCPSSLConnection@@AAE?AV?$YCPSharedPtr@VYCPString@@@@V?$YCPSharedPtr@V?$YCPBuffer@E@@@@H@Z
?handleError@YCPSSLConnector@@AAEHH@Z
?hash@YCPSSLHMAC@@SA?AV?$YCPSharedPtr@V?$YCPBuffer@E@@@@PBEI0IW4Type@1@AAVYCPError@@@Z
?hash@YCPSSLHash@@SA?AV?$YCPSharedPtr@V?$YCPBuffer@E@@@@PBEIW4Type@1@AAVYCPError@@@Z
?incrementInitCount@YCPSSLInit@@CAXXZ
?initMutex@YCPSSLInit@@CA?AV?$YCPSharedPtr@VYCPMutex@@@@XZ
?initOpenSsl@YCPSSLInit@@SAXXZ
?isAsynchronous@YCPSSLConnection@@UBEHXZ
?isConnected@YCPSSLConnection@@UBEHXZ
?linger@YCPSSLConnection@@UBEHAAI@Z
?listen@YCPSSLConnection@@UAEXAAVYCPError@@@Z
?localAddress@YCPSSLConnection@@UBE?AV?$YCPSharedPtr@VYCPIPAddress@@@@AAVYCPError@@@Z
?localConnectionString@YCPSSLConnection@@UBE?AV?$YCPSharedPtr@VYCPString@@@@XZ
?m_contextRecords@YCPSSLInit@@0V?$map@U?$pair@V?$YCPSharedPtr@VYCPString@@@@W4SSLMethod@YCPSSLInit@@@std@@PAUssl_ctx_st@@U?$less@U?$pair@V?$YCPSharedPtr@VYCPString@@@@W4SSLMethod@YCPSSLInit@@@std@@@2@V?$allocator@U?$pair@$$CBU?$pair@V?$YCPSharedPtr@VYCPString@@@@W4SSLMethod@YCPSSLInit@@@std@@PAUssl_ctx_st@@@std@@@2@@std@@A
?m_initCount@YCPSSLInit@@0IA
?m_initMutex@YCPSSLInit@@0V?$YCPSharedPtr@VYCPMutex@@@@A
?onDataAvailable@YCPSSLConnection@@EAEXXZ
?performRead@YCPSSLConnector@@AAEXXZ
?performWrite@YCPSSLConnector@@AAEXXZ
?processEvent@YCPSSLConnection@@UAEXV?$YCPSharedPtr@VYCPEvent@@@@@Z
?processEvent@YCPSSLConnector@@UAEXV?$YCPSharedPtr@VYCPEvent@@@@@Z
?read@YCPSSLConnection@@UAEHPADH@Z
?read@YCPSSLConnection@@UAEHPADHI@Z
?readCompleted@YCPSSLConnector@@QAEXV?$YCPSharedPtr@V?$YCPBuffer@E@@@@@Z
?receive@YCPSSLConnector@@QAEHV?$YCPSharedPtr@V?$YCPBuffer@E@@@@@Z
?registerNetworkConnectionCreator@YCPSSLConnection@@SAXXZ
?remoteConnectionString@YCPSSLConnection@@UBE?AV?$YCPSharedPtr@VYCPString@@@@XZ
?reuseAddr@YCPSSLConnection@@UBEHXZ
?runSSL@YCPSSLConnector@@AAEXXZ
?sendPendingData@YCPSSLConnector@@AAEXXZ
?setAcceptState@YCPSSLConnector@@QAEXXZ
?setConnectState@YCPSSLConnector@@QAEXXZ
?setLinger@YCPSSLConnection@@UAEXHIAAVYCPError@@@Z
?setReuseAddr@YCPSSLConnection@@UAEXHAAVYCPError@@@Z
?setTransport@YCPSSLConnection@@UAEXV?$YCPSharedPtr@VYCPNetworkConnection@@@@@Z
?shutdown@YCPSSLConnection@@UAEXXZ
?sslContext@YCPSSLInit@@SAPAUssl_ctx_st@@V?$YCPSharedPtr@VYCPString@@@@W4SSLMethod@1@@Z
?toHex@YCPSSLConnection@@AAE?AV?$YCPSharedPtr@VYCPString@@@@E@Z
?uninitOpenSsl@YCPSSLInit@@SAXXZ
?unregisterNetworkConnectionCreator@YCPSSLConnection@@SAXXZ
?write@YCPSSLConnection@@UAEHPBDH@Z
?write@YCPSSLConnection@@UAEHPBDHI@Z
?write@YCPSSLConnector@@QAEXV?$YCPSharedPtr@V?$YCPBuffer@E@@@@@Z
?writeData@YCPSSLConnection@@EAEXV?$YCPSharedPtr@V?$YCPBuffer@E@@@@@Z
?ycpDestroy@YCPSSLLib@@SAXH@Z
?ycpInit@YCPSSLLib@@SAXXZ
?ycpInternalDestroy@YCPSSLConnection@@SAXH@Z
?ycpInternalInit@YCPSSLConnection@@SAXXZ

Sections

.text
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

72871dc14caf1006ad603cc5bcc6bdcc

Headers

File Characteristics

Imports

ycpfoundation

advapi32

ws2_32

msvcp80

msvcr80

kernel32

user32

Exports

Exports

Sections

.text Size: 480KB - Virtual size: 479KB

.rdata Size: 152KB - Virtual size: 151KB

.data Size: 60KB - Virtual size: 69KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 44KB - Virtual size: 40KB

.text Size: 64KB - Virtual size: 64KB

.text
Size: 480KB - Virtual size: 479KB

.rdata
Size: 152KB - Virtual size: 151KB

.data
Size: 60KB - Virtual size: 69KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 44KB - Virtual size: 40KB

.text
Size: 64KB - Virtual size: 64KB