583f0465b6819b7c720e481e034bd44aaf1f8f693492cce5c9ae4a3a1ccf4f67

Sharing

Copy URL Twitter E-mail

General

Target

583f0465b6819b7c720e481e034bd44aaf1f8f693492cce5c9ae4a3a1ccf4f67
Size

158KB
MD5

81d37525e0772b1cf60f305454b029a5
SHA1

cc6dcc812f381b0cae1d5724ff8fbcf137bd223e
SHA256

583f0465b6819b7c720e481e034bd44aaf1f8f693492cce5c9ae4a3a1ccf4f67
SHA512

462af08af7a684fb9ffbfd8a0d066ff50f4dccd356c74c1659914e249a775cd3e9387fb4e37fb9191a1ee2ab558188f1462843b8f4afe2cb8ad1aed774d8f8ad
SSDEEP

3072:Se7lxQCpowNlZ3GB+FuSpGgkxvVaJYU8:9lxzK0loBGp8zGC

Score

N/A

Malware Config

Signatures

Files

583f0465b6819b7c720e481e034bd44aaf1f8f693492cce5c9ae4a3a1ccf4f67
.dll windows x86

10d843b30a860eabda9a9af0080ad976

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

uibase

?ShowWindow@CBaseWindow@UIBase@@MAEHI@Z
?Show@CBaseWindow@UIBase@@QAEIH@Z
?GetHWnd@CBaseWindow@UIBase@@QAEPAUHWND__@@XZ
?detached@CBaseWindow@UIBase@@MAEXPAUelement@html@@@Z
?OnCloseWindow@CBaseWindow@UIBase@@MAEHXZ
?OnCancel@CBaseWindow@UIBase@@MAEHXZ
?OnOK@CBaseWindow@UIBase@@MAEHXZ
?on_script_call@CBaseWindow@UIBase@@MAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV56@@Z
?CloseWindow@CBaseWindow@UIBase@@UAEHXZ
?SetCloseCallBack@CBaseWindow@UIBase@@QAEXP6AXPAV12@PAX@Z1@Z
?GetParent@CBaseWindow@UIBase@@QAEPAUHWND__@@XZ

baseplugin

?UpdateRecoverDevice@CBasePlugin@@UAGXPAVIDevice@MMobile@@@Z
?UpdateRegState@CBasePlugin@@UAGX_N@Z
?GetWatermark@CBasePlugin@@UAEPAVCWatermark@@XZ
?GetSelectMgr@CBasePlugin@@UAEPAVIDataMgr@MMobile@@XZ
?GetJson@CBasePlugin@@UAEPAVCJson@@XZ
GetUserTools
?GetDevice@CBasePlugin@@UAEPAVIDevice@MMobile@@XZ
?GetDateTime@CBasePlugin@@UAEPAVAuntecDateTime@AuntecBased@@XZ
?on_script_call@CBasePlugin@@MAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV45@@Z
?IsChinese@CLoadPlugin@@SA_NXZ
?ShowRestoreDeviceBtn@CLoadPlugin@@IAEX_N@Z
?CheckBeginBackup@CLoadPlugin@@MAE_NXZ
?StartScan@CLoadPlugin@@MAEPAVITaskCtrl@MMobile@@XZ
?StartBackup@CLoadPlugin@@MAEPAVCAuntecBasedThread@AuntecBased@@XZ
?MessageBoxW@CLoadPlugin@@SAIPAUHWND__@@PB_W1@Z
?IsLoad@CLoadPlugin@@UAG_NPAVIDevice@MMobile@@@Z
?IsScan@CLoadPlugin@@UAG_NXZ
?SetParam@CLoadPlugin@@UAG_NPBDPAX@Z
?Free@CLoadPlugin@@UAGXXZ
?Load@CLoadPlugin@@UAGPAVCBaseWindow@UIBase@@PAUHWND__@@PAVIDevice@MMobile@@P6G_NPAXW4MDType@6@HHPBD@Z2@Z
?RestoreCheck@CBasePlugin@@MAE_N_N@Z
?StartLoad@CBasePlugin@@MAE_NXZ
?Init@CBasePlugin@@MAEXXZ
?GetMediaPlayer@CBasePlugin@@UAEPAVCMediaPlayer@@XZ
?Export@CBasePlugin@@UAGPAVITaskCtrl@MMobile@@PAVImportExportConfigure@3@P6G_NPAXW4MDType@3@HHPBD@Z1@Z
?IsRegSuccess@CBasePlugin@@UAG_NPAH@Z

msgbase

?OnMessage@CBaseMsgPlugin@@MAEJPAUHWND__@@IIJ@Z
?OnListCheck@CBaseMsgPlugin@@MAEXPA_KH@Z
??1CChatManageWnd@@UAE@XZ
?Init@CChatManageWnd@@MAEXXZ
?CloseWindow@CChatManageWnd@@MAEHXZ
?OnMessage@CChatManageWnd@@MAEJPAUHWND__@@IIJ@Z
?ClosePlugin@CBaseMsgPlugin@@MAGXXZ
?OnUpdateContent@CBaseMsgPlugin@@MAEX_K@Z
?GetExportToFileMask@CBaseMsgPlugin@@MAEIXZ
?CheckAll@CBaseMsgPlugin@@MAEX_N@Z
?ShowData@CBaseMsgPlugin@@MAEXXZ
?ClearSearch@CBaseMsgPlugin@@MAEXXZ
?LoadRequest@CBaseMsgPlugin@@MAEXXZ
?SearchRequest@CBaseMsgPlugin@@MAEXPB_W@Z
??1CBaseMsgPlugin@@UAE@XZ
??0CBaseMsgPlugin@@QAE@W4MDType@MMobile@@@Z
??0CChatManageWnd@@QAE@PAUHWND__@@_KPAVCBasePlugin@@@Z

appsetting

GetLanguageSetting

dirconfig

GetI18NConfig

kernel32

HeapReAlloc
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetProcessHeap
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
GetModuleFileNameW
WriteFile
GetStdHandle
HeapSize
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle
LoadLibraryW
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
ReleaseMutex
SetEnvironmentVariableA
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
Sleep
GetStringTypeW
GetLastError
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCurrentThreadId
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCPInfo
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW

user32

GetParent
SendMessageW

Exports

Exports

CreatePlugin

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10d843b30a860eabda9a9af0080ad976

Headers

DLL Characteristics

File Characteristics

Imports

uibase

baseplugin

msgbase

appsetting

dirconfig

kernel32

user32

Exports

Exports

Sections

.text Size: 83KB - Virtual size: 83KB

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 34KB - Virtual size: 34KB

.text
Size: 83KB - Virtual size: 83KB

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 34KB - Virtual size: 34KB