NEAS[.]83ed2ac90d43a47604a0bbf650bf16e0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.83ed2ac90d43a47604a0bbf650bf16e0.exe
Size

200KB
MD5

83ed2ac90d43a47604a0bbf650bf16e0
SHA1

7fb784bdeccc491a4d6e780d8fda3b1e98b059d7
SHA256

8efe0580a41b38a7b73cd0abc7dd5cf53469cf1cea8564e2faf5c36e7e80557f
SHA512

4dd757df24b6ad503dd884491015f10e25728b38bdbe8623aea9043d20d5eba1561615de87df264e4bfa3a7fa760f8496dd46a4dbf8808a06d24b5a7b57d9a27
SSDEEP

3072:Pm5+vr6zqaUJ6/0OpVNd8chQkm0wxmM63aEFg+s/kOWUJNup+:Pm5vzPUJ6/0O//F8K3+cOWUDt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.83ed2ac90d43a47604a0bbf650bf16e0.exe

Files

NEAS.83ed2ac90d43a47604a0bbf650bf16e0.exe
.dll windows:4 windows x86

215167212f95c03e8ff49a4b07977ccc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

xmlparser

?Load@CXmlParser@@QAE_NPBD@Z
?x_GetTagName@CXmlParser@@IBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?x_GetData@CXmlParser@@IBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?x_GetElemContent@CXmlParser@@IBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?x_AddElem@CXmlParser@@IAE_NPBDHH@Z
?x_SetAttrib@CXmlParser@@IAE_NHPBD0@Z
?x_SetAttrib@CXmlParser@@IAE_NHPBDH@Z
?x_AddSubDoc@CXmlParser@@IAE_NPBDH@Z
?x_GetSubDoc@CXmlParser@@IBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?x_AddNode@CXmlParser@@IAE_NHPBDH@Z
?x_SetData@CXmlParser@@IAE_NHPBDH@Z
?x_SetData@CXmlParser@@IAE_NHH@Z
?x_SetElemContent@CXmlParser@@IAE_NPBD@Z
?x_AllocPosArray@CXmlParser@@IAE_NH@Z
??4CXmlParser@@QAEXABV0@@Z
?IntoElem@CXmlParser@@QAE_NXZ
?OutOfElem@CXmlParser@@QAE_NXZ
?Save@CXmlParser@@QAE_NPBD@Z
?FindChildElem@CXmlParser@@QAE_NPBD@Z
?FindElem@CXmlParser@@QAE_NPBD@Z
?x_AddElem@CXmlParser@@IAE_NPBD0H@Z
?SetDoc@CXmlParser@@QAE_NPBD@Z
?x_GetAttrib@CXmlParser@@IBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HPBD@Z
?Close@CXmlParserEx@XmlParserEx@@QAE_NXZ
??1CXmlParserEx@XmlParserEx@@UAE@XZ

mfc80

ord307
ord876
ord2902
ord1246
ord282
ord1917
ord265
ord781
ord907
ord2322
ord6019
ord1486
ord1489
ord6118
ord299
ord6703
ord3934
ord1481
ord285
ord5710
ord2271
ord297
ord287
ord2468
ord5403
ord2475
ord5529
ord782
ord865
ord6168
ord908
ord3397
ord1263
ord1090
ord4035
ord3997
ord764
ord762
ord1175
ord371
ord1098
ord1084
ord1185
ord1187
ord1191
ord266
ord578
ord1249
ord2131
ord911
ord784
ord310
ord293
ord2130
ord1482
ord577
ord5154
ord300
ord1230
ord304

msvcr80

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_encode_pointer
_unlock
??0exception@std@@QAE@ABV01@@Z
sscanf
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strftime
_ismbblead
_invalid_parameter_noinfo
_wtoi
wcstod
_HUGE
_wcstoui64
_wcstoi64
_errno
_fpclass
swprintf_s
_set_errno
_gcvt_s
_ui64toa_s
_i64toa_s
atoi
iswspace
wcschr
_CxxThrowException
_purecall
_resetstkoflw
isspace
strtol
_recalloc
_splitpath
_msize
_scprintf
strncmp
strcat_s
sprintf_s
strtoul
strncpy_s
calloc
strcpy_s
toupper
_get_errno
strnlen
_ultoa_s
_itoa_s
_strlwr_s
memmove_s
memcpy_s
free
malloc
realloc
_mbsicmp
_mbsnbcpy_s
strchr
memset
__CxxFrameHandler3
wcsncmp

kernel32

HeapSize
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
MultiByteToWideChar
WideCharToMultiByte
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WaitForSingleObject
GetModuleFileNameA
GetProcessHeap
HeapFree
lstrlenA
HeapAlloc
lstrlenW
HeapReAlloc
DeleteFileA
GetSystemTime
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VarDateFromStr
VarUdateFromDate
SysAllocStringLen
VariantClear
VariantInit
SysFreeString

msvcp80

?width@ios_base@std@@QAEHH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBEHXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?eof@ios_base@std@@QBE_NXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?good@ios_base@std@@QBE_NXZ

ws2_32

WSAStartup
WSASocketA
closesocket
WSACreateEvent
WSASetEvent
WSAEventSelect
WSARecv
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSAConnect
WSAEnumNetworkEvents
WSACloseEvent
WSACleanup
WSASetLastError
ntohs
getservbyport
gethostbyaddr
htons
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
WSAGetLastError

dbghelp

MakeSureDirectoryPathExists

Exports

Exports

??0CDataTransferWrapper@@QAE@ABV0@@Z
??0CDataTransferWrapper@@QAE@PBDAAH@Z
??0CDataTransferWrapper@@QAE@XZ
??0CXmlParser@@QAE@ABV0@@Z
??0CXmlParser@@QAE@H@Z
??0CXmlParser@@QAE@PBD@Z
??0CXmlParser@@QAE@XZ
??0CXmlParserEx@XmlParserEx@@QAE@ABV01@@Z
??0CXmlParserEx@XmlParserEx@@QAE@K@Z
??1CDataTransferWrapper@@UAE@XZ
??1CXmlParser@@QAE@XZ
??4CDataTransferWrapper@@QAEAAV0@ABV0@@Z
??4CXmlParserEx@XmlParserEx@@QAEAAV01@ABV01@@Z
??_7CDataTransferWrapper@@6B@
??_7CXmlParserEx@XmlParserEx@@6B@
??_B?1??GetInstance@CDataTransferWrapper@@SAAAV1@XZ@51
??_FCXmlParserEx@XmlParserEx@@QAEXXZ
?AddAttrib@CXmlParser@@QAE_NPBD0@Z
?AddAttrib@CXmlParser@@QAE_NPBDH@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@EV?$allocator@E@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@HV?$allocator@H@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@IV?$allocator@I@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@MV?$allocator@M@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@NV?$allocator@N@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@E@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@H@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@M@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@N@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@EV?$allocator@E@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@FV?$allocator@F@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@HV?$allocator@H@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@JV?$allocator@J@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@MV?$allocator@M@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@NV?$allocator@N@std@@@std@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABVCOleDateTime@ATL@@0@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABVCOleDateTimeSpan@ATL@@@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDH@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDI@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDJ@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDK@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDM@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDN@Z
?AddAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBD_N@Z
?AddChildAttrib@CXmlParser@@QAE_NPBD0@Z
?AddChildAttrib@CXmlParser@@QAE_NPBDH@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@EV?$allocator@E@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@HV?$allocator@H@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@IV?$allocator@I@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@MV?$allocator@M@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@NV?$allocator@N@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@E@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@H@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@M@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@N@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@EV?$allocator@E@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@FV?$allocator@F@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@HV?$allocator@H@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@JV?$allocator@J@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@MV?$allocator@M@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@NV?$allocator@N@std@@@std@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABVCOleDateTime@ATL@@0@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABVCOleDateTimeSpan@ATL@@@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDH@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDI@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDJ@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDK@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDM@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBDN@Z
?AddChildAttribEx@CXmlParserEx@XmlParserEx@@QAE_NPBD_N@Z
?AddChildElem@CXmlParser@@QAE_NPBD0H@Z
?AddChildElem@CXmlParser@@QAE_NPBDHH@Z
?AddChildElem@CXmlParserEx@XmlParserEx@@UAE_NPBD0@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@EV?$allocator@E@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@HV?$allocator@H@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@IV?$allocator@I@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@MV?$allocator@M@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@NV?$allocator@N@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@E@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@F@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@H@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@J@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@M@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@N@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@EV?$allocator@E@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@FV?$allocator@F@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@HV?$allocator@H@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@JV?$allocator@J@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@MV?$allocator@M@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@NV?$allocator@N@std@@@std@@@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABVCOleDateTime@ATL@@0@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDH@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDI@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDJ@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDK@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDM@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDN@Z
?AddChildElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBD_N@Z
?AddChildElemExn@CXmlParserEx@XmlParserEx@@QAE_NPBDABVCOleDateTimeSpan@ATL@@@Z
?AddChildSubDoc@CXmlParser@@QAE_NPBD@Z
?AddElem@CXmlParser@@QAE_NPBD0H@Z
?AddElem@CXmlParser@@QAE_NPBDHH@Z
?AddElem@CXmlParserEx@XmlParserEx@@UAE_NPBD0@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@EV?$allocator@E@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@HV?$allocator@H@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@IV?$allocator@I@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@MV?$allocator@M@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$list@NV?$allocator@N@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@E@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@F@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@H@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@J@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@M@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$valarray@N@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@EV?$allocator@E@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@FV?$allocator@F@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@HV?$allocator@H@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@JV?$allocator@J@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@MV?$allocator@M@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABV?$vector@NV?$allocator@N@std@@@std@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABVCOleDateTime@ATL@@0@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDABVCOleDateTimeSpan@ATL@@@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDH@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDI@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDJ@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDK@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDM@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBDN@Z
?AddElemEx@CXmlParserEx@XmlParserEx@@QAE_NPBD_N@Z
?AddNode@CXmlParser@@QAE_NHPBD@Z
?AddSubDoc@CXmlParser@@QAE_NPBD@Z
?FindChildElem@CXmlParserEx@XmlParserEx@@UAE_NPBD@Z
?FindElem@CXmlParserEx@XmlParserEx@@UAE_NPBD@Z
?GetAttrib@CXmlParser@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?GetAttribBool@CXmlParserEx@XmlParserEx@@QBE_NPBD@Z
?GetAttribDWORD@CXmlParserEx@XmlParserEx@@QBEKPBD@Z
?GetAttribDateTime@CXmlParserEx@XmlParserEx@@QBE?AVCOleDateTime@ATL@@PBD@Z
?GetAttribDouble@CXmlParserEx@XmlParserEx@@QBENPBD@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$list@EV?$allocator@E@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$list@HV?$allocator@H@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$list@MV?$allocator@M@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$list@NV?$allocator@N@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@E@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@H@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@M@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@N@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@EV?$allocator@E@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@FV?$allocator@F@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@HV?$allocator@H@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@JV?$allocator@J@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@MV?$allocator@M@std@@@std@@@Z
?GetAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@NV?$allocator@N@std@@@std@@@Z
?GetAttribFloat@CXmlParserEx@XmlParserEx@@QBEMPBD@Z
?GetAttribInt@CXmlParserEx@XmlParserEx@@QBEHPBD@Z
?GetAttribUINT@CXmlParserEx@XmlParserEx@@QBEIPBD@Z
?GetChildAttrib@CXmlParser@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?GetChildAttribBool@CXmlParserEx@XmlParserEx@@QBE_NPBD@Z
?GetChildAttribDWORD@CXmlParserEx@XmlParserEx@@QBEKPBD@Z
?GetChildAttribDateTime@CXmlParserEx@XmlParserEx@@QBE?AVCOleDateTime@ATL@@PBD@Z
?GetChildAttribDouble@CXmlParserEx@XmlParserEx@@QBENPBD@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$list@EV?$allocator@E@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$list@HV?$allocator@H@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$list@MV?$allocator@M@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$list@NV?$allocator@N@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@E@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@F@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@H@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@J@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@M@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$valarray@N@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@EV?$allocator@E@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@FV?$allocator@F@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@HV?$allocator@H@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@JV?$allocator@J@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@MV?$allocator@M@std@@@std@@@Z
?GetChildAttribEx@CXmlParserEx@XmlParserEx@@QBEXPBDAAV?$vector@NV?$allocator@N@std@@@std@@@Z
?GetChildAttribFloat@CXmlParserEx@XmlParserEx@@QBEMPBD@Z
?GetChildAttribInt@CXmlParserEx@XmlParserEx@@QBEHPBD@Z
?GetChildAttribUINT@CXmlParserEx@XmlParserEx@@QBEIPBD@Z
?GetChildData@CXmlParser@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetChildDataBool@CXmlParserEx@XmlParserEx@@QBE_NXZ
?GetChildDataDWORD@CXmlParserEx@XmlParserEx@@QBEKXZ
?GetChildDataDateTime@CXmlParserEx@XmlParserEx@@QBE?AVCOleDateTime@ATL@@XZ
?GetChildDataDouble@CXmlParserEx@XmlParserEx@@QBENXZ
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@EV?$allocator@E@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@HV?$allocator@H@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@IV?$allocator@I@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@MV?$allocator@M@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@NV?$allocator@N@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@E@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@F@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@H@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@J@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@M@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@N@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@EV?$allocator@E@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@FV?$allocator@F@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@HV?$allocator@H@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@JV?$allocator@J@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@MV?$allocator@M@std@@@std@@@Z
?GetChildDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@NV?$allocator@N@std@@@std@@@Z
?GetChildDataFloat@CXmlParserEx@XmlParserEx@@QBEMXZ
?GetChildDataInt@CXmlParserEx@XmlParserEx@@QBEHXZ
?GetChildDataLong@CXmlParserEx@XmlParserEx@@QBEJXZ
?GetChildDataUINT@CXmlParserEx@XmlParserEx@@QBEIXZ
?GetChildSubDoc@CXmlParser@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetChildTagName@CXmlParser@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetData@CXmlParser@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetDataBool@CXmlParserEx@XmlParserEx@@QBE_NXZ
?GetDataDWORD@CXmlParserEx@XmlParserEx@@QBEKXZ
?GetDataDateTime@CXmlParserEx@XmlParserEx@@QBE?AVCOleDateTime@ATL@@XZ
?GetDataDouble@CXmlParserEx@XmlParserEx@@QBENXZ
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@EV?$allocator@E@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@HV?$allocator@H@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@IV?$allocator@I@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@MV?$allocator@M@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$list@NV?$allocator@N@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@E@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@F@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@H@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@J@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@M@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$valarray@N@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@EV?$allocator@E@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@FV?$allocator@F@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@HV?$allocator@H@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@JV?$allocator@J@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@MV?$allocator@M@std@@@std@@@Z
?GetDataEx@CXmlParserEx@XmlParserEx@@QBEXAAV?$vector@NV?$allocator@N@std@@@std@@@Z
?GetDataFloat@CXmlParserEx@XmlParserEx@@QBEMXZ
?GetDataInt@CXmlParserEx@XmlParserEx@@QBEHXZ
?GetDataUINT@CXmlParserEx@XmlParserEx@@QBEIXZ
?GetDoc@CXmlParser@@QBEABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetDocFlags@CXmlParser@@QBEHXZ
?GetElemContent@CXmlParser@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetError@CXmlParser@@QBEABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetInstance@CDataTransferWrapper@@SAAAV1@XZ
?GetNameSpace@CXmlParserEx@XmlParserEx@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetNodeType@CXmlParser@@QAEHXZ
?GetSubDoc@CXmlParser@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?InitDocFlags@CXmlParser@@IAEXXZ
?InsertChildElem@CXmlParser@@QAE_NPBD0H@Z
?InsertChildElem@CXmlParser@@QAE_NPBDHH@Z
?InsertChildSubDoc@CXmlParser@@QAE_NPBD@Z
?InsertElem@CXmlParser@@QAE_NPBD0H@Z
?InsertElem@CXmlParser@@QAE_NPBDHH@Z
?InsertNode@CXmlParser@@QAE_NHPBD@Z
?InsertSubDoc@CXmlParser@@QAE_NPBD@Z
?IsCreateMode@CXmlParserEx@XmlParserEx@@QBE_NXZ
?IsLoading@CXmlParserEx@XmlParserEx@@QBE_NXZ
?IsMustFindNameMode@CXmlParserEx@XmlParserEx@@QBE_NXZ
?IsOpen@CXmlParserEx@XmlParserEx@@QBE_NXZ
?IsStoring@CXmlParserEx@XmlParserEx@@QBE_NXZ
?IsZipping@CXmlParserEx@XmlParserEx@@QBE_NXZ
?Release@CDataTransferWrapper@@QAEXXZ
?ReportFile@CDataTransferWrapper@@QAEHPBDH@Z
?ReportTKYData@CDataTransferWrapper@@QAEHUtagTKYXmlData@@@Z
?ReportTKYStatus@CDataTransferWrapper@@QAEHUtagTKYDeviceStatus@@@Z
?ResetChildPos@CXmlParser@@QAEXXZ
?ResetMainPos@CXmlParser@@QAEXXZ
?ResetPos@CXmlParser@@QAEXXZ
?SetAttrib@CXmlParser@@QAE_NPBD0@Z
?SetAttrib@CXmlParser@@QAE_NPBDH@Z
?SetChildAttrib@CXmlParser@@QAE_NPBD0@Z
?SetChildAttrib@CXmlParser@@QAE_NPBDH@Z
?SetChildData@CXmlParser@@QAE_NH@Z
?SetChildData@CXmlParser@@QAE_NPBDH@Z
?SetData@CXmlParser@@QAE_NH@Z
?SetData@CXmlParser@@QAE_NPBDH@Z
?SetDocFlags@CXmlParser@@QAEXH@Z
?SetElemContent@CXmlParser@@QAE_NPBD@Z
?SetEncodingString@CXmlParserEx@XmlParserEx@@QAEXPBD@Z
?SetModeFlag@CXmlParserEx@XmlParserEx@@QAEXK@Z
?SetNameSpace@CXmlParserEx@XmlParserEx@@QAE_NPBD@Z
?SetUrl@CDataTransferWrapper@@QAEHPBD@Z
?Test@CDataTransferWrapper@@QAEHXZ
?instance@?1??GetInstance@CDataTransferWrapper@@SAAAV2@XZ@4V2@A
?x_GetFreePos@CXmlParser@@IAEHXZ
?x_SetPos@CXmlParser@@IAEXHHH@Z

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

215167212f95c03e8ff49a4b07977ccc

Headers

File Characteristics

Imports

xmlparser

mfc80

msvcr80

kernel32

ole32

oleaut32

msvcp80

ws2_32

dbghelp

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 120KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 124KB - Virtual size: 120KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 12KB