a26c0d7236b17979002dad582ef608b10016943e6f77a94222aea7a150e4f225

Sharing

Copy URL

Twitter E-mail

General

Target

a26c0d7236b17979002dad582ef608b10016943e6f77a94222aea7a150e4f225
Size

2.4MB
MD5

98d51bc19d0df9ee2a6f8421d98064ca
SHA1

87da4c49eea2a2d8d7af818b95adc0c790c813d6
SHA256

a26c0d7236b17979002dad582ef608b10016943e6f77a94222aea7a150e4f225
SHA512

ff885e4e79886e2713a84d04fc0835db442f51a5ebdaaf2b636634362df503f8b86979225c8270169930c5c233604cf76b05cb73cd765206b9ed6f933ab54d04
SSDEEP

49152:Xqm6jb/apsYx3EIv1M5eqhiGrZ6UYrGDtPDvSrtfFZnYyw:Xqm6jb/ssaPN8eqhiGdR+ypvSrtt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a26c0d7236b17979002dad582ef608b10016943e6f77a94222aea7a150e4f225

Files

a26c0d7236b17979002dad582ef608b10016943e6f77a94222aea7a150e4f225
.dll windows:5 windows x86

b5e2b5afb06da9b0c63eaf2e522974e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
FindResourceExW
FindResourceW
GetModuleHandleW
SizeofResource
LoadResource
CreateThread
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
OutputDebugStringW
InitializeSListHead
DisableThreadLibraryCalls
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SystemTimeToFileTime
GetSystemTime
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
GetModuleHandleExW
ReadConsoleA
LockResource
CancelIoEx
SetCommTimeouts
SetCommState
PurgeComm
GetCommTimeouts
GetCommState
SetupComm
CancelIo
CreateFileA
LoadLibraryA
CreateEventW
CloseHandle
ReadFile
WriteFile
WaitForMultipleObjects
ResetEvent
SetEvent
GetOverlappedResult
GetProcAddress
FreeLibrary
Sleep
WaitForSingleObject
GetExitCodeProcess
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetEnvironmentVariableW
TerminateProcess
ReadConsoleW
SetConsoleMode
GetCurrentProcess
GetConsoleMode
FormatMessageA
DebugBreak
LocalFree
CreateSemaphoreW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetNativeSystemInfo
ReleaseSemaphore
InitializeCriticalSection
ResumeThread
InterlockedCompareExchange
SleepConditionVariableCS
WakeConditionVariable
InitializeConditionVariable
SetThreadPriority
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
MoveFileW
CopyFileW
FindNextFileW
FindFirstFileW
DeleteFileA
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetTempPathW
lstrcmpW
FindClose
CreateFileW
GetLocalTime
VerifyVersionInfoW
GetModuleHandleA
VerSetConditionMask
PeekNamedPipe
GetFileType
GetStdHandle
GetEnvironmentVariableA
GetSystemTimeAsFileTime
CompareFileTime
WaitForSingleObjectEx
MoveFileExW
MultiByteToWideChar
GetTickCount
QueryPerformanceCounter
LoadLibraryW
GetSystemDirectoryW
QueryPerformanceFrequency
SleepEx
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
FormatMessageW
SetLastError

user32

DispatchMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
TranslateMessage
GetUserObjectInformationW
GetProcessWindowStation
DestroyWindow
MessageBoxW
GetMessageW
UnregisterClassW
PostThreadMessageW
UnregisterDeviceNotification
RegisterDeviceNotificationW

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

wldap32

ord219
ord117
ord46
ord14
ord216
ord208
ord41
ord145
ord147
ord133
ord79
ord142
ord167
ord127
ord27
ord26
ord301

advapi32

CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteExW

msvcp140

_Mtx_current_owns
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_signal
_Cnd_timedwait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ

bcrypt

BCryptGenRandom

vcruntime140

__RTDynamicCast
__CxxFrameHandler3
memchr
memset
memcpy
_CxxThrowException
wcschr
wcsrchr
__std_exception_copy
strstr
memmove
strchr
__std_terminate
strrchr
wcsstr
__vcrt_InitializeCriticalSectionEx
_purecall
_except_handler4_common
__std_type_info_destroy_list
__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

__sys_nerr
__sys_errlist
abort
system
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_seh_filter_dll
_getpid
terminate
_beginthreadex
strerror_s
raise
_exit
signal
_errno
_invalid_parameter_noinfo
_initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

free
calloc
_recalloc
_callnewh
malloc
realloc

api-ms-win-crt-stdio-l1-1-0

_write
_read
_close
ferror
_setmode
__stdio_common_vsscanf
fputs
fread
_chsize_s
fopen
_fileno
_wfreopen_s
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fputc
_ftelli64
fgetpos
fgetc
fflush
fclose
_lseeki64
_get_stream_buffer_pointers
__stdio_common_vswprintf_s
fgets
__stdio_common_vswprintf
__stdio_common_vfprintf
_wopen
__acrt_iob_func
_wfopen
__stdio_common_vsprintf
ftell
fseek
feof
_wfopen_s

api-ms-win-crt-convert-l1-1-0

strtoll
strtoul
atoi
strtol
wcstombs

api-ms-win-crt-string-l1-1-0

wcspbrk
tolower
strpbrk
strcspn
strcpy_s
_wcsdup
strncpy
_wcsupr_s
wmemcpy_s
strspn
isspace
_stricmp
_strdup
strcmp
_strnicmp
strncmp
strncpy_s

api-ms-win-crt-utility-l1-1-0

srand
qsort
rand

api-ms-win-crt-filesystem-l1-1-0

_wstat64
_waccess
_stat64i32
_fstat64
_unlink
_unlock_file
_wmkdir
_lock_file

api-ms-win-crt-math-l1-1-0

_except1

api-ms-win-crt-time-l1-1-0

_time64
_mktime64
_localtime64_s
_ftime64
_utime64
_gmtime64_s
_gmtime64
strftime

api-ms-win-crt-environment-l1-1-0

getenv

ws2_32

select
__WSAFDIsSet
accept
WSAWaitForMultipleEvents
closesocket
WSAGetLastError
WSAIoctl
htonl
listen
getaddrinfo
freeaddrinfo
WSAResetEvent
WSAEventSelect
recvfrom
WSAEnumNetworkEvents
WSACloseEvent
send
sendto
ioctlsocket
getnameinfo
gethostname
shutdown
WSACleanup
WSAStartup
recv
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
socket
WSASetLastError
WSACreateEvent

crypt32

CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertOpenSystemStoreW
CryptEncodeObjectEx
CryptDecodeObjectEx
CryptStringToBinaryA
CryptBinaryToStringA
CertOpenStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty

Exports

Exports

??0SecurityChipKey@TeaInsideSdk@@QAE@ABV01@@Z
??0SecurityChipKey@TeaInsideSdk@@QAE@XZ
??0TeaInside3rdDeviceApi@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInside3rdDeviceApi@TeaInsideSdk@@QAE@XZ
??0TeaInside3rdDeviceEventCbDelegate@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInside3rdDeviceEventCbDelegate@TeaInsideSdk@@QAE@XZ
??0TeaInsideAdvancedApi@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInsideAdvancedApi@TeaInsideSdk@@QAE@XZ
??0TeaInsideApi@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInsideApi@TeaInsideSdk@@QAE@PBD@Z
??0TeaInsideChipKeyEventCbDelegate@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInsideChipKeyEventCbDelegate@TeaInsideSdk@@QAE@XZ
??0TeaInsideDeviceConnectStateUpdateCbDelegate@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInsideDeviceConnectStateUpdateCbDelegate@TeaInsideSdk@@QAE@XZ
??0TeaInsideDeviceExceptionCbDelegate@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInsideDeviceExceptionCbDelegate@TeaInsideSdk@@QAE@XZ
??0TeaInsideDeviceUserStateUpdateCbDelegate@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInsideDeviceUserStateUpdateCbDelegate@TeaInsideSdk@@QAE@XZ
??0TeaInsideEventCbDelegate@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInsideEventCbDelegate@TeaInsideSdk@@QAE@XZ
??0TeaInsideProductionApi@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaInsideProductionApi@TeaInsideSdk@@QAE@PBD@Z
??0TeaSpecialInsideApi@TeaInsideSdk@@QAE@ABV01@@Z
??0TeaSpecialInsideApi@TeaInsideSdk@@QAE@XZ
??1SecurityChipKey@TeaInsideSdk@@UAE@XZ
??1TeaInside3rdDeviceApi@TeaInsideSdk@@UAE@XZ
??1TeaInside3rdDeviceEventCbDelegate@TeaInsideSdk@@UAE@XZ
??1TeaInsideAdvancedApi@TeaInsideSdk@@UAE@XZ
??1TeaInsideApi@TeaInsideSdk@@UAE@XZ
??1TeaInsideChipKeyEventCbDelegate@TeaInsideSdk@@UAE@XZ
??1TeaInsideDeviceConnectStateUpdateCbDelegate@TeaInsideSdk@@UAE@XZ
??1TeaInsideDeviceExceptionCbDelegate@TeaInsideSdk@@UAE@XZ
??1TeaInsideDeviceUserStateUpdateCbDelegate@TeaInsideSdk@@UAE@XZ
??1TeaInsideEventCbDelegate@TeaInsideSdk@@UAE@XZ
??1TeaInsideProductionApi@TeaInsideSdk@@UAE@XZ
??1TeaSpecialInsideApi@TeaInsideSdk@@UAE@XZ
??4SecurityChipKey@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInside3rdDeviceApi@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInside3rdDeviceEventCbDelegate@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInsideAdvancedApi@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInsideApi@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInsideChipKeyEventCbDelegate@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInsideDeviceConnectStateUpdateCbDelegate@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInsideDeviceExceptionCbDelegate@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInsideDeviceUserStateUpdateCbDelegate@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInsideEventCbDelegate@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaInsideProductionApi@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??4TeaSpecialInsideApi@TeaInsideSdk@@QAEAAV01@ABV01@@Z
??_7SecurityChipKey@TeaInsideSdk@@6B@
??_7TeaInside3rdDeviceApi@TeaInsideSdk@@6B@
??_7TeaInside3rdDeviceEventCbDelegate@TeaInsideSdk@@6B@
??_7TeaInsideAdvancedApi@TeaInsideSdk@@6B@
??_7TeaInsideApi@TeaInsideSdk@@6B@
??_7TeaInsideChipKeyEventCbDelegate@TeaInsideSdk@@6B@
??_7TeaInsideDeviceConnectStateUpdateCbDelegate@TeaInsideSdk@@6B@
??_7TeaInsideDeviceExceptionCbDelegate@TeaInsideSdk@@6B@
??_7TeaInsideDeviceUserStateUpdateCbDelegate@TeaInsideSdk@@6B@
??_7TeaInsideEventCbDelegate@TeaInsideSdk@@6B@
??_7TeaInsideProductionApi@TeaInsideSdk@@6B@
??_7TeaSpecialInsideApi@TeaInsideSdk@@6B@
??_FTeaInsideApi@TeaInsideSdk@@QAEXXZ
??_FTeaInsideProductionApi@TeaInsideSdk@@QAEXXZ
?ChangeInsideMicArrayName@TeaInsideAdvancedApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBD@Z
?ChangeInsidePidVid@TeaInsideAdvancedApi@TeaInsideSdk@@QAE?AW4ErrorCode@@GG@Z
?DeleteSpecificDevicesLog@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@HPAPBD@Z
?DeviceOTAState@TeaInsideApi@TeaInsideSdk@@QAE?AW4OTAState@@XZ
?EnterBootloaderMode@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@XZ
?FreeChipEncryptKey@SecurityChipKey@TeaInsideSdk@@QAEXPAPAE@Z
?GetAllDeviceInformation@TeaInsideApi@TeaInsideSdk@@QAEPBDXZ
?GetAllDeviceInformation@TeaInsideProductionApi@TeaInsideSdk@@QAEPBDXZ
?GetAllDevicesSoundCardParams@TeaInsideApi@TeaInsideSdk@@QAEPBDXZ
?GetAllSpecialDeviceInformation@TeaSpecialInsideApi@TeaInsideSdk@@QAEPBDXZ
?GetAsyncChipEncryptKey@SecurityChipKey@TeaInsideSdk@@QAE?AW4ResultCode@12@HPBDPBEI1I@Z
?GetAudioDump@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@JPBD@Z
?GetDeviceInformation@TeaInsideApi@TeaInsideSdk@@QAEPBDXZ
?GetDeviceLog@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBD@Z
?GetDeviceMicrophoneOverallMute@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@AA_N@Z
?GetDeviceMicrophoneSelected@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDAA_N@Z
?GetDeviceMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4DeviceOperationMode@@XZ
?GetDeviceMute@TeaInsideApi@TeaInsideSdk@@QAE_NW4AvStreamType@@@Z
?GetDeviceOrientationMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDAAW4DeviceOrientationMode@@@Z
?GetDeviceOverallWorkingMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@AAW4DeviceWorkingMode@@@Z
?GetDevicePreprocessOverallAiNsAggressiveness@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@AAM@Z
?GetDevicePreprocessOverallMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@AAW4DevicePreprocessMode@@@Z
?GetDevicePreprocessOverallTranditionalNsAggressiveness@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@AAM@Z
?GetDevicePreprocessRangeMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDAAW4DevicePreprocessRangeMode@@@Z
?GetDevicePreprocessZoomingMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDAAW4DevicePreprocessZoomingMode@@@Z
?GetDeviceSerialNumber@TeaInsideProductionApi@TeaInsideSdk@@QAEPBDXZ
?GetDeviceSpeakerMaxVolume@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDAAM@Z
?GetDeviceSpeakerMute@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDAA_N@Z
?GetDeviceSpeakerOverallEqMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@AAW4DeviceSpeakerEqMode@@@Z
?GetDeviceSpeakerOverallVolume@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@AAM@Z
?GetDeviceStatus@TeaInsideApi@TeaInsideSdk@@QAE?AW4DeviceStatus@@XZ
?GetDeviceVersion@TeaInsideApi@TeaInsideSdk@@QAEPBDXZ
?GetDevicesCount@TeaInsideApi@TeaInsideSdk@@QAEHXZ
?GetDevicesCount@TeaInsideProductionApi@TeaInsideSdk@@QAEHXZ
?GetEncryptKeyCount@SecurityChipKey@TeaInsideSdk@@QAE?AW4ResultCode@12@PBDAAI@Z
?GetHidDeviceParams@TeaInsideApi@TeaInsideSdk@@QAEXPAUHidDeviceParams@2@@Z
?GetInsideDeviceType@TeaSpecialInsideApi@TeaInsideSdk@@QAE?AW4InsideDeviceType@@XZ
?GetLastErrorCode@SecurityChipKey@TeaInsideSdk@@QAEHXZ
?GetSDKLastErrorCode@TeaInsideApi@TeaInsideSdk@@QAE?AW4SDKLastErrorCode@@XZ
?GetSDKState@TeaInsideApi@TeaInsideSdk@@QAE?AW4SDKState@@XZ
?GetSpecialDeviceInformation@TeaSpecialInsideApi@TeaInsideSdk@@QAEPBDXZ
?GetSyncChipEncryptKey@SecurityChipKey@TeaInsideSdk@@QAE?AW4ResultCode@12@HPBDPBEI1IPAPAEAAI@Z
?Init@SecurityChipKey@TeaInsideSdk@@QAE?AW4ResultCode@12@PBD@Z
?Init@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PAUTEASdkParams@2@@Z
?Init@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PAUTEASdkParams@2@@Z
?Init@TeaSpecialInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDPAUTEASdkParams@2@@Z
?ReInit@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PAUTEASdkParams@2@@Z
?ReInit@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PAUTEASdkParams@2@@Z
?RebootDevice@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@XZ
?Register3rdEventCb@TeaInside3rdDeviceApi@TeaInsideSdk@@QAEXPAVTeaInside3rdDeviceEventCbDelegate@2@@Z
?RegisterDeviceConnectStateUpdateEvent@TeaInsideApi@TeaInsideSdk@@QAEXPAVTeaInsideDeviceConnectStateUpdateCbDelegate@2@@Z
?RegisterDeviceUserStateUpdateEvent@TeaInsideApi@TeaInsideSdk@@QAEXPAVTeaInsideDeviceUserStateUpdateCbDelegate@2@@Z
?RegisterEvent@SecurityChipKey@TeaInsideSdk@@QAEXPAVTeaInsideChipKeyEventCbDelegate@2@@Z
?RegisterEvent@TeaInsideApi@TeaInsideSdk@@QAEXPAVTeaInsideEventCbDelegate@2@@Z
?RegisterEvent@TeaInsideProductionApi@TeaInsideSdk@@QAEXPAVTeaInsideEventCbDelegate@2@@Z
?ReportKeyBurnResult@SecurityChipKey@TeaInsideSdk@@QAE?AW4ResultCode@12@PBDPBEIH@Z
?SetDeviceDoaUploadEnable@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@_N@Z
?SetDeviceMicrophoneOverallMute@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@_N@Z
?SetDeviceMicrophoneSelected@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBD_N@Z
?SetDeviceMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@W4DeviceOperationMode@@@Z
?SetDeviceMute@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@W4AvStreamType@@_N@Z
?SetDeviceOrientationMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDW4DeviceOrientationMode@@@Z
?SetDeviceOverallWorkingMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@W4DeviceWorkingMode@@@Z
?SetDevicePreprocessOverallAiNsAggressiveness@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@M@Z
?SetDevicePreprocessOverallMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@W4DevicePreprocessMode@@@Z
?SetDevicePreprocessOverallTranditionalNsAggressiveness@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@M@Z
?SetDevicePreprocessRangeMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDW4DevicePreprocessRangeMode@@@Z
?SetDevicePreprocessZoomingMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDW4DevicePreprocessZoomingMode@@@Z
?SetDeviceSerialNumber@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBD@Z
?SetDeviceSpeakerMaxVolume@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDM@Z
?SetDeviceSpeakerMute@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBD_N@Z
?SetDeviceSpeakerOverallEqMode@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@W4DeviceSpeakerEqMode@@@Z
?SetDeviceSpeakerOverallVolume@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@M@Z
?SetDeviceTimeMs@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@_J@Z
?SetDeviceType@SecurityChipKey@TeaInsideSdk@@QAEXW4KeyDeviceType@12@@Z
?SetLogCb@SecurityChipKey@TeaInsideSdk@@QAEXP6AXPBD@Z@Z
?SetLogCb@TeaInsideApi@TeaInsideSdk@@QAEXP6AXPBD@Z@Z
?SetSpecialDeviceLogCb@TeaSpecialInsideApi@TeaInsideSdk@@QAEXP6AXPBD@Z@Z
?SetSpecificDevicesDumpConfigs@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@HPAPBDH0@Z
?SpecialDeviceNormalUpgrade@TeaSpecialInsideApi@TeaInsideSdk@@QAEHPBDH000@Z
?SpecialDeviceStandardUpgrade@TeaSpecialInsideApi@TeaInsideSdk@@QAEHPBD0@Z
?SpecificDevicesControl@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@W4InsideDeviceControlCommand@@HPAPBDPBXH@Z
?StartDeviceOTA@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBD0@Z
?StartUploadDeviceAudioPcm@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@XZ
?StopUploadDeviceAudioPcm@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@XZ
?SyncMasterDeviceDebugFilesToHost@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDW4InsideDeviceDebugFileType@@W4InsideDeviceTransportType@@@Z
?SyncSpecificDevicesDumpToMasterDevice@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@HPAPBDH0@Z
?SyncSpecificDevicesLogToMasterDevice@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@HPAPBD_N@Z
?ThirdPartyDeviceControl@TeaInside3rdDeviceApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBDIPBXI@Z
?ThirdPartyDeviceUpgrade@TeaInside3rdDeviceApi@TeaInsideSdk@@QAE?AW4ErrorCode@@PBD00@Z
?UnInit@SecurityChipKey@TeaInsideSdk@@QAE?AW4ResultCode@12@XZ
?UnInit@TeaInsideApi@TeaInsideSdk@@QAE?AW4ErrorCode@@XZ
?UnInit@TeaInsideProductionApi@TeaInsideSdk@@QAE?AW4ErrorCode@@XZ
?UnInit@TeaSpecialInsideApi@TeaInsideSdk@@QAEXXZ
?UnRegisterEvent@SecurityChipKey@TeaInsideSdk@@QAEXPAVTeaInsideChipKeyEventCbDelegate@2@@Z
?UnRegisterEvent@TeaInsideApi@TeaInsideSdk@@QAEXPAVTeaInsideEventCbDelegate@2@@Z
?UnRegisterEvent@TeaInsideProductionApi@TeaInsideSdk@@QAEXPAVTeaInsideEventCbDelegate@2@@Z
?Version@TeaInsideApi@TeaInsideSdk@@QAEPBDXZ
TEAInsideChipKeyAdvancedDecrypter
TEAInsideChipKeyAdvancedProducer
TEAInsideChipKeyDecrypter
TEAInsideChipKeyFree
TEAInsideChipKeyProducer

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5e2b5afb06da9b0c63eaf2e522974e4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

setupapi

wldap32

advapi32

shell32

msvcp140

bcrypt

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

ws2_32

crypt32

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 515KB - Virtual size: 515KB

.data Size: 21KB - Virtual size: 2.6MB

.tls Size: 512B - Virtual size: 13B

.gfids Size: 512B - Virtual size: 72B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 76KB - Virtual size: 76KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 515KB - Virtual size: 515KB

.data
Size: 21KB - Virtual size: 2.6MB

.tls
Size: 512B - Virtual size: 13B

.gfids
Size: 512B - Virtual size: 72B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 76KB - Virtual size: 76KB