0c5621401075046442f00817376edb9a2430320761dd917839a14e9994c2845a

Sharing

Copy URL Twitter E-mail

General

Target

0c5621401075046442f00817376edb9a2430320761dd917839a14e9994c2845a
Size

228KB
MD5

6c9d7a12c5cb1aec66fecae2a7282010
SHA1

a39e5e3af616f36f096fd760acad4a862d799767
SHA256

0c5621401075046442f00817376edb9a2430320761dd917839a14e9994c2845a
SHA512

9324386fd7680d1873782cdd9725063d183e65df8c5f8d85765d8e269f3a5005f0314779a0d4b1c767f2130cbbe771631ea70391624642b7ff856254e72b4c4d
SSDEEP

6144:G6enbFX/Rcnr0L1WZecHXrPcjj2t+YlfcjMoTVjs0dZ620:grpyeU7PK6t+YlqMoBzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c5621401075046442f00817376edb9a2430320761dd917839a14e9994c2845a

Files

0c5621401075046442f00817376edb9a2430320761dd917839a14e9994c2845a
.dll windows x86

e1405859d909f2a1182c40e459065ce8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc120u

ord7884
ord14526
ord6251
ord14528
ord6253
ord14527
ord6252
ord3809
ord5821
ord12114
ord12122
ord8099
ord10314
ord12126
ord12094
ord12799
ord5157
ord5454
ord5664
ord9231
ord5430
ord5667
ord5160
ord5316
ord5137
ord7609
ord7610
ord7600
ord5314
ord2444
ord12402
ord9090
ord6758
ord6404
ord290
ord266
ord4772
ord265
ord280
ord286
ord492
ord296
ord1518
ord1506
ord1138
ord1042
ord4546
ord8364
ord951
ord7881
ord992
ord5262
ord8206
ord12736
ord8268
ord1467
ord1348
ord819
ord7542
ord14326
ord11858
ord11857
ord1992
ord7825
ord12818
ord4047
ord4109
ord9279
ord14454
ord7806
ord14448
ord12413
ord10131
ord12412
ord5019
ord8352
ord2948
ord8101
ord3806
ord1509
ord325
ord1050
ord2323
ord2204
ord324
ord1049
ord2366
ord2369
ord2334
ord2368
ord485
ord2226
ord2332
ord2142
ord2258
ord2357
ord1698
ord2343
ord2347
ord1447
ord973
ord14311
ord1508

msvcr120

_itoa
_CxxThrowException
memcpy
__dllonexit
__clean_type_info_names_internal
_except_handler4_common
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_onexit
_except1
_calloc_crt
_unlock
_lock
__CxxFrameHandler3
memset
free
vsprintf_s
strcpy_s
_wtof
swscanf_s
_mktime64
_localtime64_s
sprintf
srand
fclose
fflush
vfprintf
fprintf
_localtime64
memmove
rand
fopen
_time64

kernel32

OutputDebugStringW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
CreateThread
Sleep
WaitForSingleObject
CloseHandle
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
LocalFree
LocalAlloc
SetEvent
DecodePointer
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
TerminateThread
GetExitCodeThread

msvcp120

?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z

ws2_32

htonl
send
select
connect
htons
inet_addr
socket
closesocket
recv
ntohs
ioctlsocket
WSAGetLastError
WSAStartup

iphlpapi

SendARP

sensapi

IsNetworkAlive

Exports

Exports

APPGetStatistics
AccumulationValue
AddStream
AudioAccumulationValue
CloseAllByInterface
CloseByInterface
DownloadCaptureData
DuoSimCaptureSetting
EnaleOrDisableFEC
EndDownloadLateData
EndLearn
FirstCard
GetCaptureFlag
GetCardMode
GetChassisMacAddr
GetConnectIP
GetDelayCheck
GetDevCount
GetHardWareVersionReg
GetHardWareVersion_nx
GetNXPacketDmsStatistics
GetP2PStatistics
GetP2PStatisticsOne
GetPingStatistics
GetPingStatisticsOne
GetPortCount
GetPortIPG
GetPortSpeed
GetPortstreamstatic
GetRTSPStatistics
GetRTSPStatisticsOne
GetStatistics
GetStreamNewRandomAvr
GetSvrStatus
GetVoIPStatisticsOne
GetVoipStatistics
GetnNXhardVersion
Getstreamstatic_mutex
IPG40GControl
InsertprbsBiterror
MacLearn
MemeryCtrl
NextCard
OpenAllByInterface
PauseTest
PhyReset
ReleasePort
ReplyArp
ReplyIpv6
RequestArp
RequestIcmpv6
RequestIpv6
RequestPort
RequestRarp
RequestVlanArp
ResetAllDevice
ResetDevice
ResetPort
ResumeTest
RunAllTestShare
RunDuoSimTest
RunFtpTest
RunP2PTest
RunPingTest
RunRtspTest
RunTcpTest
RunTest
RunTrigger
RunVoipTest
SendNXPacket_dms_Stream
SendPacket
SendPacket2
SendPacketTo
SendPacket_41
SendPrbsData
SendProtocolPacket
SendReadCommand_1S
SendReadFtpCommand
SendReadP2PCommand
SendReadPingCommand
SendReadRtspCommand
SendReadVoIPCommand
SendRtspClientDescribePacket
SendRtspClientSetupPacket
SendRtspPacket
SendRtspSdpPacket
SendRtspServerSetupReplyPacket
SendVoipInvitePacket
SendVoipPacket
SendVoipServerReply200_OkSdpPacket
Set0_0Reg
Set10gPhyConfig
SetBasicRecv
SetBert
SetBertConfig
SetCaptureFlag
SetCaptureRule
SetCardMode
SetClocksync
SetCustomIpg
SetFlowCtl
SetFpgaPHY_MAC
SetHosts
SetIpAddress
SetIpRange
SetMacAddress
SetNXPacket_dms_Bert
SetNXPacket_dms_Cap
SetNXPacket_dms_GL
SetNXPacket_dms_GL_618
SetNXPacket_dms_IPG
SetNXPacket_dms_Latency
SetNXPacket_dms_Stream
SetNXPacket_dms_frameloss
SetNXPacket_dms_frameoutseq
SetNXPacket_dms_framerepeat
SetNXPacket_dms_frametext
SetNetWorker
SetPortConfig
SetPortCreateGrouptype
SetPortInterface
SetPortLoopback
SetPortRFC2554Teststate
SetPortStatus
SetReal
SetSendMode
Setcalrxframe
Setsoftflag
SettwinaxOrfober
StartConfig
StartDownloadLateData
StartLearn
StartResetConfig
StartRfcTest
StartStatistics
StartTest
StopCapturePacket
StopHardwareCapture
StopStatistics
StopTest
TimerSyn
UpdateStreamStatics
UserdefRequsetPort
WriteData
ZeroStatistics

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1405859d909f2a1182c40e459065ce8

Headers

DLL Characteristics

File Characteristics

Imports

mfc120u

msvcr120

kernel32

msvcp120

ws2_32

iphlpapi

sensapi

Exports

Exports

Sections

.text Size: 199KB - Virtual size: 198KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 512B - Virtual size: 7KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 199KB - Virtual size: 198KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 512B - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB