07bf0492632222619bbf55b209ecb80981253141661ccc089c69c07bc26c9987

Sharing

Copy URL Twitter E-mail

General

Target

07bf0492632222619bbf55b209ecb80981253141661ccc089c69c07bc26c9987
Size

12.5MB
MD5

034d6d543e13f64f0992b94bee6d16b9
SHA1

ff3b468d7d8fac5001c627027a57fd01f58c1298
SHA256

07bf0492632222619bbf55b209ecb80981253141661ccc089c69c07bc26c9987
SHA512

30479e127c849ff5ef762b20beae8e92cc6249b404a9aa01599ee7513dd28dda238f107423fe5f19956078410b6b6bb427b07eeeee3721ec54f4d68e039a0d4c
SSDEEP

98304:UP+OJ5o4PxLwzlSboVMguzJ0w9jKS5ciK2tbBZcID1feqTTari4:uBJulPSF9jKS5lK2tlOIBSri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07bf0492632222619bbf55b209ecb80981253141661ccc089c69c07bc26c9987

Files

07bf0492632222619bbf55b209ecb80981253141661ccc089c69c07bc26c9987
.exe windows:6 windows x64

0f955d7619b8445037bb548d6c9f6f43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

webview2loader

CreateCoreWebView2EnvironmentWithOptions

winmm

PlaySoundW
sndPlaySoundW
waveOutGetVolume
waveOutSetVolume
waveInUnprepareHeader
waveInStop
waveInReset
waveInClose
waveOutOpen
waveOutReset
waveOutClose
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutGetErrorTextW
timeBeginPeriod
timeEndPeriod

ws2_32

inet_ntoa
WSAAddressToStringW
freeaddrinfo
WSACleanup
socket
getaddrinfo
htons
bind
shutdown
closesocket
inet_addr
WSACreateEvent
WSAEventSelect
connect
WSACloseEvent
send
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
recv
select
__WSAFDIsSet
inet_ntop
WSAAddressToStringA
ioctlsocket
ntohl
setsockopt
WSAGetLastError
getsockname
getsockopt
ntohs
recvfrom
sendto
inet_pton
gethostname
WSASetLastError
WSAStartup
htonl

avcodec-58

av_bitstream_filter_close
av_bitstream_filter_filter
av_bitstream_filter_init
av_free_packet
av_init_packet
av_new_packet
av_packet_alloc
av_packet_free
av_packet_free_side_data
av_packet_unref
av_parser_close
av_parser_init
av_parser_parse2
avcodec_alloc_context3
avcodec_decode_audio4
avcodec_decode_video2
avcodec_encode_video2
avcodec_fill_audio_frame
avcodec_find_decoder
avcodec_find_encoder
avcodec_free_context
avcodec_open2
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_receive_packet
avcodec_register_all
avcodec_send_frame
avcodec_send_packet
avpicture_fill
avpicture_get_size

avutil-56

av_frame_alloc
av_frame_free
av_frame_unref
av_free
av_freep
av_get_channel_layout_nb_channels
av_get_default_channel_layout
av_image_alloc
av_image_fill_arrays
av_image_get_buffer_size
av_malloc
av_rescale_q
av_rescale_q_rnd
av_samples_get_buffer_size
av_strerror

avformat-58

av_dump_format
av_find_best_stream
av_find_input_format
av_guess_format
av_interleaved_write_frame
av_read_frame
av_write_trailer
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_new_stream
avformat_open_input
avformat_write_header
avio_alloc_context
avio_close
avio_open

swresample-3

swr_alloc
swr_alloc_set_opts
swr_close
swr_convert
swr_free
swr_init

swscale-5

sws_freeContext
sws_getContext
sws_scale

dvrsdk

SetTimeDateCB
GetDVRInfo
SendDVRCommand
BindDVR
ReleaseDVR
SetFrameCB
SetEventCB
SendPTZCtrl
SetPTZCtrlChannel
ReleaseAllDVR
InitDvrSdk
DestroyDvrSdk
SetRecDataCB

sqlite3_64

sqlite3_open16
sqlite3_close
sqlite3_column_text16
sqlite3_column_int64
sqlite3_column_int
sqlite3_column_name16
sqlite3_free
sqlite3_column_count
sqlite3_reset
sqlite3_step
sqlite3_prepare16_v2
sqlite3_busy_timeout
sqlite3_bind_blob
sqlite3_exec
sqlite3_config
sqlite3_column_text
sqlite3_prepare_v2
sqlite3_finalize

x2dll

ord3
ord2
ord4

x2winui

ord3
ord1
ord4
ord2

kernel32

GetDriveTypeW
GetCurrentProcessId
GetCurrentProcess
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalUnlock
CloseHandle
K32GetProcessMemoryInfo
GlobalMemoryStatusEx
CreateFileMappingW
LocalAlloc
LocalFree
MultiByteToWideChar
GetExitCodeThread
TerminateThread
OutputDebugStringW
CreateFileA
CopyFileA
FindNextFileW
DeleteFileA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleHandleW
GetCurrentThreadId
InitializeCriticalSection
TryEnterCriticalSection
GetFileAttributesW
GetFileTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileSizeEx
CreateDirectoryW
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetTimeZoneInformation
lstrlenW
GetOverlappedResult
GetFileAttributesExW
FormatMessageW
RemoveDirectoryW
SetFileAttributesW
SetFilePointerEx
FlushFileBuffers
ResetEvent
CreateEventW
SetEvent
WaitForSingleObject
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcmpiW
GetSystemDirectoryW
lstrcmpW
InitializeCriticalSectionEx
MulDiv
HeapFree
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
GetProcessHeap
GetCommandLineW
CreateMutexW
ReleaseMutex
CreateProcessW
RegisterApplicationRestart
UnregisterApplicationRestart
SwitchToThread
GetModuleHandleExW
LoadLibraryExW
SetThreadErrorMode
GlobalSize
SetLastError
GlobalFree
GetVolumeInformationW
LockFile
UnlockFile
OutputDebugStringA
DuplicateHandle
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
GetThreadLocale
EncodePointer
FreeResource
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
ReleaseSemaphore
CreateSemaphoreW
GetProfileIntW
SetThreadPriority
SuspendThread
ResumeThread
lstrcmpA
GetVersionExW
GetCurrentThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
SetErrorMode
GlobalGetAtomNameW
GetLocaleInfoW
GetSystemDefaultUILanguage
GlobalFlags
VirtualProtect
GetCurrentDirectoryW
GetTempFileNameW
GetUserDefaultLCID
FindResourceExW
GetTempPathW
GetWindowsDirectoryW
SearchPathW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
WriteFile
SetFilePointer
CreateFileW
FindResourceW
LoadResource
LockResource
SizeofResource
WritePrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileIntW
GetComputerNameA
GetPrivateProfileStringA
MoveFileW
DeleteFileW
GetTickCount64
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
GlobalAlloc
GetModuleFileNameA
GetTickCount
FindClose
FindFirstFileW
SetEndOfFile
WritePrivateProfileStringW
GetModuleFileNameW
GetUserDefaultUILanguage
GetPrivateProfileIntA
Sleep
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpyW
GetUserDefaultLocaleName
VerSetConditionMask
VerifyVersionInfoW
WideCharToMultiByte
CopyFileW
ReadFile
GetFullPathNameW
LCMapStringW
GetStringTypeW
GetCPInfo
GetSystemTime
SwitchToFiber
DeleteFiber
CreateFiber
GetStdHandle
GetEnvironmentVariableW
GetFileType
ConvertFiberToThread
ConvertThreadToFiber
LoadLibraryA
GetConsoleMode
SetConsoleMode
ReadConsoleA
GetFileSize
ReadConsoleW
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
MoveFileExW
ExitProcess
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
HeapQueryInformation
SetStdHandle
GetFileInformationByHandle
PeekNamedPipe
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetConsoleOutputCP
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetModuleHandleA
VirtualFree
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
RtlUnwind
SystemTimeToFileTime

user32

IsZoomed
DeleteMenu
MessageBeep
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
UnionRect
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
CopyAcceleratorTableW
InvalidateRgn
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
WaitMessage
PostThreadMessageW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
SetCursorPos
SetParent
SetClassLongPtrW
CharUpperBuffW
CopyIcon
EnumDisplayMonitors
HideCaret
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetUpdateRect
SubtractRect
CreateMenu
DestroyCursor
GetComboBoxInfo
GetWindowRgn
RealChildWindowFromPoint
GetSysColorBrush
ShowOwnedPopups
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetIconInfo
GetNextDlgGroupItem
GetAsyncKeyState
DestroyMenu
SetWindowRgn
CharNextW
GetMessageW
IsClipboardFormatAvailable
SetRectEmpty
SendDlgItemMessageA
GetActiveWindow
GetNextDlgTabItem
CreateDialogIndirectParamW
MapVirtualKeyW
GetKeyNameTextW
WindowFromPoint
GetWindowDC
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassLongPtrW
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ScrollWindow
EndPaint
BeginPaint
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExW
RegisterClassW
GetMessageTime
RegisterWindowMessageW
GetWindowThreadProcessId
IsWindowEnabled
CharUpperW
GetMenuState
GetMenuStringW
CheckMenuItem
ModifyMenuW
EnableMenuItem
GetKeyState
TranslateAcceleratorW
DrawIcon
LoadAcceleratorsW
GetSystemMenu
GetLastActivePopup
BringWindowToTop
GetDlgCtrlID
SetClassLongW
GetClassLongW
IsRectEmpty
CloseWindow
IsIconic
GetForegroundWindow
EnableScrollBar
GetMenuItemID
GetMenuItemInfoW
GetMenuItemCount
DrawStateW
InflateRect
GetMessagePos
InvertRect
DefWindowProcW
UnregisterClassW
GetClassInfoW
GetScrollPos
GetScrollRange
SetScrollPos
SetScrollRange
GetDlgItemTextA
SetDlgItemTextA
DrawIconEx
GetFocus
DrawFrameControl
CallWindowProcW
GetClassNameW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindow
CreatePopupMenu
CopyImage
LockWindowUpdate
DestroyIcon
InsertMenuW
RemoveMenu
GetSubMenu
LoadMenuW
SetForegroundWindow
SetLayeredWindowAttributes
SetWindowLongW
SystemParametersInfoW
DispatchMessageW
TranslateMessage
PeekMessageW
wsprintfW
IsCharAlphaNumericW
AppendMenuW
DestroyWindow
CreateWindowExW
GetWindowLongW
ReleaseDC
GetDC
ClipCursor
SendMessageTimeoutW
IsWindowVisible
IntersectRect
UpdateWindow
SetCursor
LoadCursorW
ReleaseCapture
SetCapture
GetDesktopWindow
MessageBoxW
RedrawWindow
ScreenToClient
SetActiveWindow
SetWindowPos
ClientToScreen
ValidateRect
GetCursorPos
EqualRect
ShowScrollBar
SetDlgItemTextW
KillTimer
SetTimer
SendDlgItemMessageW
LoadIconW
GetWindowTextW
DrawEdge
DrawFocusRect
EndDialog
GetWindowLongPtrW
GetDlgItemTextW
SetFocus
GetDlgItem
SetWindowLongPtrW
DialogBoxIndirectParamW
IsWindow
GetWindowRect
PtInRect
SetRect
MonitorFromRect
GetMonitorInfoW
MonitorFromPoint
QueryDisplayConfig
GetDisplayConfigBufferSizes
GetSystemMetrics
LoadImageW
LoadBitmapW
OffsetRect
GetParent
SendMessageW
FillRect
CopyRect
GetSysColor
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetClientRect
TrackMouseEvent
InvalidateRect
EnableWindow
PostMessageW
FindWindowW
GetProcessWindowStation
GetUserObjectInformationW
SetWindowTextW
FrameRect

gdi32

ExtFloodFill
SetPaletteEntries
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
SetPixelV
GetTextFaceW
GetSystemPaletteEntries
SetTextAlign
SetROP2
OffsetViewportOrgEx
GetPaletteEntries
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
RectVisible
PtVisible
BitBlt
GetObjectW
GetNearestPaletteIndex
SetDIBitsToDevice
CreatePalette
OffsetRgn
GetBitmapDimensionEx
StretchBlt
GetTextColor
DeleteDC
CreateRectRgnIndirect
CombineRgn
CreateSolidBrush
EnumFontFamiliesExW
SetPolyFillMode
Polyline
RealizePalette
OffsetWindowOrgEx
SetPixel
GetRgnBox
CreateRoundRectRgn
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
GetWindowOrgEx
FillRgn
CreateRectRgn
RectInRegion
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
LPtoDP
Ellipse
CreateEllipticRgn
GetBkColor
DPtoLP
SetRectRgn
GetMapMode
ScaleWindowExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetTextColor
SetBkColor
GetStockObject
GetDeviceCaps
StartDocW
StartPage
EndPage
EndDoc
GetTextExtentPoint32W
CreateFontIndirectW
ExtCreatePen
GetDIBits
Rectangle
Polygon
CreateFontW
GetTextMetricsW
SetDIBColorTable
CreateDIBSection
SetStretchBltMode
GetDIBColorTable
CreatePen
CreatePolygonRgn
MoveToEx
LineTo
CreateBitmap
CreateDIBitmap
RoundRect
CopyMetaFileW
CreateDCW
CreateHatchBrush
CreatePatternBrush
ExcludeClipRect
GetClipBox
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
TextOutW
ExtTextOutW
Escape
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
PatBlt

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetOpenFileNameW
GetSaveFileNameW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegFlushKey
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegEnumKeyExW

shell32

DragFinish
SHAppBarMessage
DragQueryFileW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
SHGetDesktopFolder
SHGetFolderPathW
Shell_NotifyIconW
SHFileOperationW

comctl32

InitCommonControlsEx
ImageList_Remove
ImageList_SetBkColor
_TrackMouseEvent
ImageList_AddMasked
ImageList_SetImageCount
ImageList_Replace
ImageList_GetImageCount
ImageList_ReplaceIcon

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
StrFormatKBSizeW
PathFileExistsA
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryEmptyW
PathIsUNCW

uxtheme

GetThemePartSize
GetThemeSysColor
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
SetWindowTheme
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData

ole32

CoCreateGuid
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemAlloc
OleDuplicateData
ReleaseStgMedium
CoTaskMemFree
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoDisconnectObject
CLSIDFromString
CoInitializeEx
CLSIDFromProgID
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
CoRegisterMessageFilter
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning

oleaut32

VariantCopy
VariantInit
SysFreeString
VariantClear
LoadTypeLi
VarBstrFromDate
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VariantChangeType
OleCreateFontIndirect
SysStringLen
SafeArrayDestroy

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipDrawPath
GdipAddPathLineI
GdipDrawLineI
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipCreateFromHWND
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipDeletePath
GdipCreatePath
GdipDrawRectangleI
GdipFillPieI
GdipDrawPieI
GdipSetPenWidth
GdipSetPenDashStyle
GdipSetPenColor
GdipDeletePen
GdipCreatePen1
GdipResetClip
GdipFillRectangleI
GdipSetSolidFillColor
GdipSetPageUnit
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImage
GdipCloneBitmapArea
GdipDrawImageRect
GdipLoadImageFromFile
GdipCreateBitmapFromResource
GdipDrawString
GdipFillRectangle
GdipCreateLineBrushFromRect
GdipGetImageGraphicsContext
GdipSetTextRenderingHint
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFont
GdipMeasureString
GdipCreateBitmapFromGraphics
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipFillPath

msvfw32

DrawDibClose
DrawDibDraw
DrawDibOpen

libcurl

curl_easy_setopt
curl_easy_init
curl_easy_cleanup
curl_mime_free
curl_easy_perform
curl_easy_send2
curl_slist_append
curl_slist_free_all
curl_easy_getinfo

imv1

?Update@IMV_CameraInterface@@QEAAKXZ
??0IMV_CameraInterface@@QEAA@XZ
?SetLens@IMV_CameraInterface@@QEAAKPEAD@Z
?SetThreadCount@IMV_CameraInterface@@QEAAKH@Z
?SetACS@IMV_CameraInterface@@QEAAKPEAD@Z
?GetPositionFromInputVideoPoint@IMV_CameraInterface@@QEAAKHHPEAM0@Z
?GetPosition@IMV_CameraInterface@@QEAAKPEAM00K@Z
?GetOutputVideoPointFromPosition@IMV_CameraInterface@@QEAAKMMPEAH0K@Z
?GetPositionFromOutputVideoPoint@IMV_CameraInterface@@QEAAKHHPEAM0@Z
??1IMV_CameraInterface@@QEAA@XZ
?SetFiltering@IMV_CameraInterface@@QEAAKK@Z
?SetPosition@IMV_CameraInterface@@QEAAKPEAM00KK@Z
?SetZoomLimits@IMV_CameraInterface@@QEAAKMM@Z
?SetVideoParams@IMV_CameraInterface@@QEAAKPEAUIMV_Buffer@@0KKK@Z

d3dx9_43

D3DXCreateFontW
D3DXCreateLine
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromResourceExW

d3d9

Direct3DCreate9

d2d1

ord1

dwrite

DWriteCreateFactory

wsdapi

WSDXMLCreateContext
WSDCreateDiscoveryProvider

rpcrt4

UuidCreate

pdh

PdhAddEnglishCounterW
PdhEnumObjectItemsW
PdhOpenQueryW
PdhCloseQuery
PdhGetFormattedCounterValue
PdhRemoveCounter
PdhCollectQueryData

c2c

NTIL_SendCommandByRtp
NTIL_TerminateConnection
NTIL_StartConnection
NTIL_AudioPutInData
NTIL_DeInitialize

iphlpapi

SendARP

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertDuplicateCertificateContext

vcomp140

_vcomp_for_static_simple_init
_vcomp_for_static_end
_vcomp_for_dynamic_next
_vcomp_for_dynamic_init
_vcomp_fork
_vcomp_set_num_threads

Exports

Exports

cJSON_AddArrayToObject
cJSON_AddBoolToObject
cJSON_AddFalseToObject
cJSON_AddItemReferenceToArray
cJSON_AddItemReferenceToObject
cJSON_AddItemToArray
cJSON_AddItemToObject
cJSON_AddItemToObjectCS
cJSON_AddNullToObject
cJSON_AddNumberToObject
cJSON_AddObjectToObject
cJSON_AddRawToObject
cJSON_AddStringToObject
cJSON_AddTrueToObject
cJSON_Compare
cJSON_CreateArray
cJSON_CreateArrayReference
cJSON_CreateBool
cJSON_CreateDoubleArray
cJSON_CreateFalse
cJSON_CreateFloatArray
cJSON_CreateIntArray
cJSON_CreateNull
cJSON_CreateNumber
cJSON_CreateObject
cJSON_CreateObjectReference
cJSON_CreateRaw
cJSON_CreateString
cJSON_CreateStringArray
cJSON_CreateStringReference
cJSON_CreateTrue
cJSON_Delete
cJSON_DeleteItemFromArray
cJSON_DeleteItemFromObject
cJSON_DeleteItemFromObjectCaseSensitive
cJSON_DetachItemFromArray
cJSON_DetachItemFromObject
cJSON_DetachItemFromObjectCaseSensitive
cJSON_DetachItemViaPointer
cJSON_Duplicate
cJSON_GetArrayItem
cJSON_GetArraySize
cJSON_GetErrorPtr
cJSON_GetObjectItem
cJSON_GetObjectItemCaseSensitive
cJSON_GetStringValue
cJSON_HasObjectItem
cJSON_InitHooks
cJSON_InsertItemInArray
cJSON_IsArray
cJSON_IsBool
cJSON_IsFalse
cJSON_IsInvalid
cJSON_IsNull
cJSON_IsNumber
cJSON_IsObject
cJSON_IsRaw
cJSON_IsString
cJSON_IsTrue
cJSON_Minify
cJSON_Parse
cJSON_ParseWithOpts
cJSON_Print
cJSON_PrintBuffered
cJSON_PrintPreallocated
cJSON_PrintUnformatted
cJSON_ReplaceItemInArray
cJSON_ReplaceItemInObject
cJSON_ReplaceItemInObjectCaseSensitive
cJSON_ReplaceItemViaPointer
cJSON_SetNumberHelper
cJSON_Version
cJSON_free
cJSON_malloc

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f955d7619b8445037bb548d6c9f6f43

Headers

DLL Characteristics

File Characteristics

Imports

webview2loader

winmm

ws2_32

avcodec-58

avutil-56

avformat-58

swresample-3

swscale-5

dvrsdk

sqlite3_64

x2dll

x2winui

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

msvfw32

libcurl

imv1

d3dx9_43

d3d9

d2d1

dwrite

wsdapi

rpcrt4

pdh

c2c

iphlpapi

oleacc

imm32

crypt32

vcomp140

Exports

Exports

Sections

.text Size: 7.6MB - Virtual size: 7.6MB

.rdata Size: 2.2MB - Virtual size: 2.2MB

.data Size: 101KB - Virtual size: 176KB

.pdata Size: 279KB - Virtual size: 279KB

.gehcont Size: 512B - Virtual size: 40B

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 122KB - Virtual size: 122KB

.text
Size: 7.6MB - Virtual size: 7.6MB

.rdata
Size: 2.2MB - Virtual size: 2.2MB

.data
Size: 101KB - Virtual size: 176KB

.pdata
Size: 279KB - Virtual size: 279KB

.gehcont
Size: 512B - Virtual size: 40B

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 122KB - Virtual size: 122KB