?NET_DEV_N9KSDK_Initial@@YA_NG@Z
?NET_DEV_N9KSDK_Quit@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
9120ed0e81957e005c6d204c4f18b7afa96ae24cdc8b9d5bcd7ec4db2bf0561b.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9120ed0e81957e005c6d204c4f18b7afa96ae24cdc8b9d5bcd7ec4db2bf0561b.dll
Resource
win10v2004-20230703-en
Target
9120ed0e81957e005c6d204c4f18b7afa96ae24cdc8b9d5bcd7ec4db2bf0561b
Size
1.6MB
MD5
46600cd1c140cbe719f7c1ae315279b6
SHA1
d0e1d8de9ac18a0bba3dad98a43a39560f1abe55
SHA256
9120ed0e81957e005c6d204c4f18b7afa96ae24cdc8b9d5bcd7ec4db2bf0561b
SHA512
c55c505222aab9da4ef358f3377f372b30fd4802ec15d320a1f19a82f4f736884e8e21979463cdffded66e7d2b01fc34d85d5f5eefb6ce4224c5bb4821f9b211
SSDEEP
24576:p83qHrILTZzrmSPY8LDI/8jcwNcLtwhELZjo/L5Zabc1kpaGH2Yx:NILTN6SPYWIkjetlRw/abJpaGH2Yx
Checks for missing Authenticode signature.
resource |
---|
9120ed0e81957e005c6d204c4f18b7afa96ae24cdc8b9d5bcd7ec4db2bf0561b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord3633
ord3581
ord3356
ord2801
ord3024
ord3106
?GetLevel@CLogWrapper@@SA?BW4LOG_LEVEL@1@XZ
?Log@CLogWrapper@@SAXW4LOG_LEVEL@1@PBD11H@Z
?SHARESDK_DestroyThread@@YAXPAXPBDH@Z
?SHARESDK_NormalOutput@@YAXPBD0I@Z
?SHARESDK_AbnormalOutput@@YAXPBD0I@Z
?SHARESDK_CreateRunOneThread@@YAPAXP6AXPAX@Z0_NPBDH3@Z
??1CCmdProcParamPlayStreamTWDevice@@UAE@XZ
?HasNext@CNetIteratorBase@@UAE_NXZ
?GetNext@CNetIteratorBase@@UAEPAVCNetNode@@XZ
??1NET_NODE_INFO@@QAE@XZ
??0CCmProcParamAlarmInfo@@QAE@U_GUID@@IIEEPAVCCmdProcParameter@@@Z
??1CCmdProcParam@@UAE@XZ
??0CCmdProcParam@@QAE@PAVCCmdProcParameter@@PBXI_N@Z
??0CAllNetNodeIterator@@QAE@XZ
?NET_COMM_SetConnectState@@YAXU_GUID@@I0_N@Z
?HasReply@CCmdProcObject@@QAE_NXZ
?GetRequestCommand@CCmdProcObject@@QBE?AW4_net_protocol_cmd_def_@NVMS_NET_PROTOCOL@@XZ
?GetRouteGUID@CCmdProcObject@@QAE?AU_GUID@@XZ
??0CCmdProcParamPlayStreamTWDevice@@QAE@AAU_GUID@@U1@1PBXIPAVCCmdProcParameter@@_N@Z
?GetTaskGUID@CCmdProcObject@@QBE?AU_GUID@@XZ
??0CCmdProcParamTrajectRect@@QAE@U_GUID@@PAVCCmdProcParameter@@@Z
??0CCmdProcParamIPCPushSmartData@@QAE@PAVCCmdProcParameter@@PBDH@Z
??0CCmdProcParamFrNvrPushSmartData@@QAE@PAVCCmdProcParameter@@PBDH@Z
??0CCmdProcParamPassevent@@QAE@U_GUID@@PAVCCmdProcParameter@@@Z
??1CCmdProcParamIPCPushSmartData@@UAE@XZ
??1CCmdProcParamTrajectRect@@UAE@XZ
??1CCmdProcParamFrNvrPushSmartData@@UAE@XZ
??1CCmdProcParamPassevent@@UAE@XZ
??1CCmProcParamAlarmInfo@@UAE@XZ
??1CCmdProcParamNewOnlineChnUpdate@@UAE@XZ
??1CAllNetNodeIterator@@UAE@XZ
?NET_COMM_AddLiveData@@YAXPBDIAAU_GUID@@@Z
?NET_COMM_SetDevRecordState@@YAXU_GUID@@I0I@Z
??0CCmdProcParamNewOnlineChnUpdate@@QAE@U_GUID@@PAVCCmdProcParameter@@@Z
??1CNetProtocolProc@@UAE@XZ
??0CNetProtocolProc@@QAE@XZ
?AddReference@CCmdProcObject@@QAEHH@Z
?GetSrcID@CCmdProcObject@@QAE?AU_GUID@@XZ
?DecReference@CCmdProcObject@@QAEHH@Z
?NET_COMM_RegistDevProtocolProcObject@@YA_NIPAVCNetProtocolProc@@@Z
?NET_SOCKET_Stop@@YAXH@Z
?NET_SOCKET_UnRegisterNode@@YAXH@Z
?NET_SOCKET_DestroyHNetCommunication@@YAXH@Z
?NET_SOCKET_Start@@YA_NH@Z
?NET_SOCKET_RegisterNode@@YA_NHPAVCSocketDataObserver@@PAXHH@Z
?MEM_POOL_GetContent@@YA_NIAAV?$CChildPairContainer@PAEH@@@Z
?MEM_POOL_DecReference@@YAHIH@Z
?MEM_POOL_GetLength@@YAHI@Z
?MEM_POOL_Delete@@YAXI@Z
?MEM_POOL_AddReference@@YAHIH@Z
?MEM_POOL_New@@YAIPBXHH@Z
?HasNext@CIteratorBase@@QAE_NXZ
??CCOneNodeIterator@@QAEPAVCLocalNode@@XZ
?GetNodeType@CLocalNode@@QBEIXZ
??0CDevCombinationAlarmIterator@@QAE@ABU_GUID@@@Z
??BCOneNodeIterator@@QAEPAVCLocalNode@@XZ
?GetNext@CIteratorBase@@QAEPAVCLocalNode@@XZ
??1COneNodeIterator@@QAE@XZ
??0COneNodeIterator@@QAE@ABU_GUID@@@Z
??0CDevSensorIterator@@QAE@ABU_GUID@@@Z
??1CDevCombinationAlarmIterator@@UAE@XZ
??1CDevSensorIterator@@UAE@XZ
??0CVoiceBroadcastItemIterator@@QAE@ABU_GUID@@@Z
?GetNext@CVoiceBroadcastItemIterator@@QAEPAVCCommonFileNode@@XZ
??1CVoiceBroadcastItemIterator@@QAE@XZ
?HasNext@CVoiceBroadcastItemIterator@@QAE_NXZ
CloseHandle
LocalFree
GetLastError
GetTimeZoneInformation
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EnterCriticalSection
GetLocalTime
GetSystemInfo
GetTickCount64
Sleep
GetCurrentThreadId
TerminateProcess
DeleteCriticalSection
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
CoCreateGuid
VariantClear
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_Xbad_alloc@std@@YAXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
inet_addr
memcmp
__RTDynamicCast
memchr
__std_type_info_destroy_list
memcpy
memmove
memset
_except_handler4_common
__CxxFrameHandler3
strstr
_purecall
strchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_seh_filter_dll
terminate
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_register_onexit_function
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
free
_callnewh
malloc
atoi
strtol
_strtoui64
isalpha
isspace
_strnicmp
strncmp
isdigit
strncpy
tolower
toupper
rand
_localtime64_s
_mktime64
_gmtime64_s
_tzset
_mkgmtime64
_except1
?NET_DEV_N9KSDK_Initial@@YA_NG@Z
?NET_DEV_N9KSDK_Quit@@YAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ