NEAS[.]b945825d6eec20614f5c7c04faf8acb0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b945825d6eec20614f5c7c04faf8acb0.exe
Size

172KB
MD5

b945825d6eec20614f5c7c04faf8acb0
SHA1

aa3f03cc4beabf1a6abb48f9f925749fdfc9b509
SHA256

5808d1b305667c0c89e4d91a74eaf468a8709587b2ce7595161013e299f9c03a
SHA512

54c7b8edd4f8b155cc79864e4eac00b0ed8c0d128066316027f5a89594c57ea2ad17fd030e28578fec17162ba1e9e1150efac2f03ae4f97d9515fec071d7784b
SSDEEP

3072:9LLr1OAJyjgjQCjrcNgJAAitldofQXBei4h:9LLr1bjbjYUAAYMfouh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b945825d6eec20614f5c7c04faf8acb0.exe

Files

NEAS.b945825d6eec20614f5c7c04faf8acb0.exe
.dll windows:4 windows x86

75196f593b1dd6044e08e79726fb76cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

tls7712d

?toLower@RWCString@@IAEXII@Z
??0RWCRegexp@@QAE@PBD@Z
??RRWCString@@QAE?AVRWCSubString@@ABVRWCRegexp@@@Z
??4RWCSubString@@QAEAAV0@PBD@Z
??4RWCRegexp@@QAEAAV0@PBD@Z
??1RWCRegexp@@QAE@XZ
??YRWCString@@QAEAAV0@PBD@Z
?assertElement@RWCString@@IBEXI@Z
??YRWCString@@QAEAAV0@ABV0@@Z
?index@RWCString@@QBEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IW4caseCompare@1@@Z
?first@RWCString@@QBEIPBD@Z
?strip@RWCString@@QAE?AVRWCSubString@@W4stripType@1@D@Z
?contains@RWCString@@QBE_NPBDW4caseCompare@1@@Z
??YRWCString@@QAEAAV0@D@Z
?replace@RWCString@@QAEAAV1@IIPBD@Z
?insert@RWCString@@QAEAAV1@IPBD@Z
??0RWCString@@QAE@PBD@Z
?prepend@RWCString@@QAEAAV1@PBD@Z
?append@RWCString@@QAEAAV1@PBD@Z
??0RWCString@@IAE@ABV0@0@Z
?toUpper@RWCString@@IAEXII@Z
?subString@RWCString@@QAE?AVRWCSubString@@PBDIW4caseCompare@1@@Z
??0RWCString@@QAE@ABVRWCSubString@@@Z
??4RWCString@@QAEAAV0@PBD@Z
??0RWCString@@QAE@XZ
??4RWCString@@QAEAAV0@ABV0@@Z
??0RWCString@@QAE@ABV0@@Z
??1RWCString@@QAE@XZ

sdiingredients

?setFeatureSet@BDevice@@QAEXABVFeatureSet@@@Z
??0Dot11Mode@@QAE@XZ
?getdot11Mode@BDevice@@QAE_NAAVDot11Mode@@@Z
?setdot11Mode@BDevice@@QAE_NABVDot11Mode@@@Z
?getdot11NetworkName@BDevice@@QAE_NAAVDot11NetworkName@@@Z
?setdot11NetworkName@BDevice@@QAE_NABVDot11NetworkName@@@Z
??0Dot11EncryptionSettings@@QAE@XZ
?getdot11EncryptionSettings@BDevice@@QAE_NAAVDot11EncryptionSettings@@@Z
?setEncryptionMode@Dot11EncryptionSettings@@QAE_NW4teDot11EncryptionMode@1@@Z
?setdot11EncryptionSettings@BDevice@@QAE_NABVDot11EncryptionSettings@@@Z
??0Dot11Authentication@@QAE@XZ
?getdot11Authentication@BDevice@@QAE_NAAVDot11Authentication@@@Z
?setEAP8021XAuthentication@Dot11Authentication@@QAE_NW4teDot11EAP8021XAuthentication@1@_N@Z
?setdot11Authentication@BDevice@@QAE_NABVDot11Authentication@@@Z
??0Dot11Channel@@QAE@XZ
?getdot11Channel@BDevice@@QAE_NAAVDot11Channel@@@Z
?set@Dot11Channel@@QAE_NI@Z
?setdot11Channel@BDevice@@QAE_NABVDot11Channel@@@Z
?getIpConfigurationSource@BDevice@@QAE_NAAW4teHPIPConfigurationSource@@@Z
?setIpConfigurationSource@BDevice@@QAE_NW4teHPIPConfigurationSource@@@Z
??0BDeviceIDString@@QAE@XZ
??1Dot11Authentication@@UAE@XZ
??1Dot11EncryptionSettings@@UAE@XZ
??1Dot11Mode@@UAE@XZ
?setActiveWepKey@Dot11EncryptionSettings@@QAE_NI@Z
?set@Dot11WEPKey@@QAE_NI@Z
?setWepKey@Dot11EncryptionSettings@@QAE_NABVDot11WEPKey@@I@Z
?setUsername@Dot11Authentication@@QAE_NABVRWCString@@@Z
?setServerId@Dot11Authentication@@QAE_NABVRWCString@@@Z
?setServerIdRequireExactMatch@Dot11Authentication@@QAEX_N@Z
?setEncryptionStrength@Dot11Authentication@@QAE_NW4teDot11EncryptionStrength@1@@Z
?setDot11DevicePopulated@BDevice@@QAEX_N@Z
?isSet@Dot11NetworkName@@QAE_NXZ
??0FeatureSet@@QAE@XZ
?isDot11DevicePopulated@BDevice@@QAE_NXZ
?getFeatureSet@BDevice@@QAEXAAVFeatureSet@@@Z
??1FeatureSet@@UAE@XZ
?get@Dot11Mode@@QAE_NAAW4teDot11Mode@1@@Z
?get@Dot11NetworkName@@QAE_NAA_N@Z
?getAuthenticationMode@Dot11Authentication@@QAE_NAAW4teDot11AuthenticationMode@1@@Z
?getEAP8021XAuthentication@Dot11Authentication@@QAE_NW4teDot11EAP8021XAuthentication@1@AA_N@Z
?getUsername@Dot11Authentication@@QAE_NAAVRWCString@@@Z
??1BDeviceIDString@@UAE@XZ
??0BDeviceIDString@@QAE@ABV0@@Z
??4BDeviceIDString@@QAEAAV0@ABV0@@Z
?setDeviceModel@BDevice@@QAEXAAVRWCString@@@Z
?parseModel@BDeviceIDString@@SA_NAAVRWCString@@0@Z
?setDeviceManufacture@BDevice@@QAEXAAVRWCString@@@Z
?parseManufacture@BDeviceIDString@@SA_NAAVRWCString@@0@Z
?getDeviceModel@BDevice@@QAE_NAAVRWCString@@@Z
?getDeviceManufacture@BDevice@@QAE_NAAVRWCString@@@Z
??1Dot11Channel@@UAE@XZ
?isPasswordChanged@Dot11Authentication@@QAE_NXZ
?getPassword@Dot11Authentication@@QAE_NAAVRWCString@@@Z
??1BDevice@@UAE@XZ
??0BDevice@@QAE@ABV0@@Z
??4BDevice@@QAEAAV0@ABV0@@Z
??1BIPAddress@@UAE@XZ
??1BMACAddress@@UAE@XZ
?get@BMACAddress@@UAE_NAAVRWCString@@@Z
?get@BIPAddress@@UAE_NAAVRWCString@@@Z
?getMAC@BDevice@@QAE_NAAVBMACAddress@@@Z
?getIP@BDevice@@QAE_NAAVBIPAddress@@@Z
??0BMACAddress@@QAE@XZ
??0BIPAddress@@QAE@XZ
??1BIPXAddress@@UAE@XZ
?get@BIPXAddress@@UAE_NAAVRWCString@@@Z
?getIPX@BDevice@@QAE_NAAVBIPXAddress@@@Z
??0BIPXAddress@@QAE@XZ
?setPort@BDevice@@QAEXH@Z
?hasIPXAddress@BDevice@@QAE_NXZ
?hasIPAddress@BDevice@@QAE_NXZ
?getServerId@Dot11Authentication@@QAE_NAAVRWCString@@@Z
?getServerIdRequireExactMatch@Dot11Authentication@@QAEXAA_N@Z
?getEncryptionStrength@Dot11Authentication@@QAE_NAAW4teDot11EncryptionStrength@1@@Z
?getEncryptionMode@Dot11EncryptionSettings@@QAE_NAAW4teDot11EncryptionMode@1@@Z
?getActiveWepKey@Dot11EncryptionSettings@@QAE_NAAI@Z
??0Dot11WEPKey@@QAE@XZ
?getWepKey@Dot11EncryptionSettings@@QAE_NAAVDot11WEPKey@@I@Z
?isChanged@Dot11WEPKey@@QAE_NXZ
?getKeyLength@Dot11WEPKey@@QAE?BIXZ
?get@Dot11WEPKey@@QAEPBEXZ
??1Dot11WEPKey@@UAE@XZ
?isDot11iEncryptionEnabled@Dot11EncryptionSettings@@QAE_NXZ
?isBroadcastKeysEnabled@Dot11EncryptionSettings@@QAE_NW4teDot11DynamicEncryption@1@@Z
?getRSNPassPhrase@Dot11EncryptionSettings@@QAE_NAAVRWCString@@@Z
?get@Dot11Channel@@QAE_NAAI@Z
??1Dot11BssidEntry@@UAE@XZ
?clear@Dot11BssidEntryPtrVector@@QAEXXZ
??0Dot11BssidEntry@@QAE@XZ
?setXML@Dot11BssidEntry@@QAE_NABVRWCString@@@Z
?insert@Dot11BssidEntryPtrVector@@QAEXPAVDot11BssidEntry@@@Z
??0Dot11NetworkNamePtrVector@@QAE@XZ
?entries@Dot11NetworkNamePtrVector@@QAEIXZ
??ADot11NetworkNamePtrVector@@QAEAAPAVDot11NetworkName@@I@Z
?get@Dot11NetworkName@@QAE_NAAVRWCString@@@Z
?set@Dot11BssidEntry@@QAE_NABVRWCString@@@Z
??1Dot11NetworkNamePtrVector@@UAE@XZ
??4Dot11BssidEntry@@UAEAAV0@ABV0@@Z
??1Dot11NetworkName@@UAE@XZ
?clear@Dot11NetworkNamePtrVector@@QAEXXZ
??0Dot11NetworkName@@QAE@XZ
?insert@Dot11NetworkNamePtrVector@@QAEXPAVDot11NetworkName@@@Z
??4Dot11NetworkName@@UAEAAV0@ABV0@@Z
?set@Dot11NetworkName@@QAE_NABVRWCString@@@Z
?set@Dot11NetworkName@@QAEX_N@Z
?set@Dot11Mode@@QAE_NW4teDot11Mode@1@@Z
?resetToDefaults@Dot11Authentication@@QAEXXZ
?setAuthenticationMode@Dot11Authentication@@QAE_NW4teDot11AuthenticationMode@1@@Z
?set@X509Certificate@@QAE_NPAE@Z
?clear@FeatureSet@@QAEXXZ
?setFeatures@FeatureSet@@QAEXJ_N@Z
?supports@FeatureSet@@QAE_NJ_N@Z
?setIP@BDevice@@QAE_NAAVBIPAddress@@@Z
?setMAC@BDevice@@QAE_NAAVBMACAddress@@@Z
?hasLevel3And2@BDevice@@QAE_NXZ
?getPort@BDevice@@QAEHXZ
??0BDevice@@QAE@XZ
?set@BIPXAddress@@UAE_NAAVRWCString@@@Z
?setIPX@BDevice@@QAE_NAAVBIPXAddress@@@Z
?print@BDevice@@QAEXXZ

snmpnet_pp

??4OctetStr@@QAEAAV0@ABV0@@Z
??8@YAHABVOctetStr@@PBD@Z
??YOctetStr@@QAEAAV0@E@Z
??YOctetStr@@QAEAAV0@ABV0@@Z
??0OctetStr@@QAE@ABV0@@Z
?set_value@Vb@@QAEXH@Z
??0OctetStr@@QAE@PBD@Z
??0OctetStr@@QAE@PBEK@Z
?set_value@Vb@@QAEXPBD@Z
?get_value@Vb@@QAEHPAEAAKK@Z
?get_value@Vb@@QAEHAAK@Z
??0SnmpInt32@@QAE@J@Z
?data@OctetStr@@QBEPAEXZ
?get_value@Vb@@QAEHAAH@Z
??0SnmpInt32@@QAE@XZ
??BSnmpInt32@@QAEJXZ
?len@OctetStr@@QBEKXZ
??AOctetStr@@QAEAAEH@Z
??4OctetStr@@QAEAAV0@PBD@Z
??9@YAHABVOctetStr@@PBD@Z
??0OctetStr@@QAE@XZ
?get_printable@OctetStr@@UAEPADXZ
??1OctetStr@@UAE@XZ
??4IpAddress@@QAEAAV0@ABV0@@Z
??1SnmpInt32@@UAE@XZ
??0IpAddress@@QAE@XZ
?get_printable@IpAddress@@UAEPADXZ
??0SnmpUInt32@@QAE@XZ
??BSnmpUInt32@@QAEKXZ
??0IpAddress@@QAE@PBD@Z
??1IpAddress@@UAE@XZ
?set_value@Vb@@QAEXABVSnmpSyntax@@@Z
?set_vblist@Pdu@@QAEHPAVVb@@H@Z
?get_vb_count@Pdu@@QBEHXZ
?get_error_index@Pdu@@QAEHXZ
?get_request_id@Pdu@@QAEKXZ
?get_vblist@Pdu@@QAEHPAVVb@@H@Z
??0Vb@@QAE@XZ
??0Oid@@QAE@ABV0@@Z
?set_oid@Vb@@QAEXVOid@@@Z
??0Oid@@QAE@XZ
?get_oid@Vb@@QBEXAAVOid@@@Z
?len@Oid@@QBEKXZ
?nCompare@Oid@@QBEHKABV1@@Z
??4Vb@@QAEAAV0@ABV0@@Z
??0Oid@@QAE@PBD@Z
??0Vb@@QAE@ABVOid@@@Z
??1SnmpUInt32@@UAE@XZ
?valid@Address@@UBEHXZ
??1Address@@UAE@XZ
??1SnmpTarget@@UAE@XZ
?get_notify_filter@Snmp@@UAEHAAV?$SnmpCollection@VOid@@@@AAV?$SnmpCollection@VCTarget@@@@@Z
?notify_unregister@Snmp@@UAEHXZ
?notify_register@Snmp@@UAEHABV?$SnmpCollection@VOid@@@@ABV?$SnmpCollection@VCTarget@@@@Q6AXHPAV1@AAVPdu@@AAVSnmpTarget@@PAX@ZPBX@Z
?notify_register@Snmp@@UAEHABV?$SnmpCollection@VOid@@@@ABV?$SnmpCollection@VCTarget@@@@ABV?$SnmpCollection@VGenAddress@@@@Q6AXHPAV1@AAVPdu@@AAVSnmpTarget@@PAX@ZPBX@Z
?inform@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?inform@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z
?trap@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?get_bulk@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@HH@Z
?get_bulk@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@HHQ6AXHPAV1@01PAX@ZPBX@Z
?set@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?set@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z
?get_next@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?get_next@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z
?get@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z
?get@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z
?cancel@Snmp@@UAEHK@Z
??1Vb@@QAE@XZ
??1CTarget@@UAE@XZ
??1Snmp@@QAE@XZ
?get_value@Vb@@QAEHAAVSnmpSyntax@@@Z
?get_vb@Pdu@@QBEHAAVVb@@H@Z
??1IpxAddress@@UAE@XZ
?set_address@CTarget@@UAEHAAVAddress@@@Z
??0IpxAddress@@QAE@PBD@Z
?error_msg@Snmp@@QAEPADH@Z
?get_error_status@Pdu@@QAEHXZ
??YPdu@@QAEAAV0@AAVVb@@@Z
??0Snmp@@QAE@AAHG@Z
?set_timeout@SnmpTarget@@QAEXK@Z
?set_retry@SnmpTarget@@QAEXH@Z
??0CTarget@@QAE@ABVAddress@@PBD1@Z
??0GenAddress@@QAE@PBD@Z
??1Pdu@@QAE@XZ
??1GenAddress@@UAE@XZ
??0GenAddress@@QAE@XZ
??0Pdu@@QAE@XZ
??1Oid@@UAE@XZ

sdiencryption

??0RSAEncryption@@QAE@XZ
??1RSAEncryption@@UAE@XZ
?setPublicKey@RSAEncryption@@QAE_NPBEJ@Z
?encryptData@RSAEncryption@@QAE_NPBEJPAPBEAAJ@Z

hpzjut02

?isIPProtocolPresent@sysNetwork@@QAE_NXZ
?isIPXProtocolPresent@sysNetwork@@QAE_NXZ
??1sysNetwork@@UAE@XZ
?iToRWCString@@YA?AVRWCString@@HH@Z
?disableCommunications@BHost@@QAE_NVRWCString@@@Z
??0BHost@@QAE@XZ
?enableCommunications@BHost@@QAE_NVRWCString@@_N0@Z
??1BHost@@UAE@XZ
?entries@BStringVector@@QBEIXZ
??0sysNetwork@@QAE@XZ

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
OutputDebugStringA

sdinetware

?getTypedFQName@BNWNDSObj@@QAE_NAAVRWCString@@@Z
?getTypelessName@BNWNDSObj@@QBE_NAAVRWCString@@@Z
?getServerName@BNWBPServer@@QAE_NAAVRWCString@@@Z
?setServerName@BNWBPServer@@QAE_NAAVRWCString@@@Z
?setOriginalPSName@BNWNDSObj@@QAEXAAVRWCString@@@Z
?treeNameMatches@BNWNDS@@QAE?AW4teError@1@AAVRWCString@@AA_N@Z
?objectAlreadyExists@BNWNDSObj@@QAE?AW4teError@1@AA_N@Z
?getAssociatedPrinters@BNWNDS@@QAE?AW4teError@1@AAVBNWPServer@@AAVBStringVector@@@Z
?clearName@BNWNDSObj@@QAEXXZ
?getName@BNWNDSObj@@QAE_NAAVRWCString@@@Z
?getContext@BNWNDSObj@@QAE_NAAVRWCString@@@Z
?getTree@BNWNDSObj@@QBE_NAAVRWCString@@@Z
?setOriginalPSName@BNWBinderyObj@@QAEXAAVRWCString@@@Z
?clearName@BNWBinderyObj@@QAEXXZ
?getPrimaryConnHandle@BNWUser@@QAE_NAAI@Z
?objectAlreadyExists@BNWBinderyObj@@QAE?AW4teError@1@IAA_NVRWCString@@G@Z
?getName@BNWBPServer@@QAE_NAAVRWCString@@@Z

msvcp71

?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Id_cnt@id@locale@std@@0HA
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?id@?$ctype@G@std@@2V0locale@2@A
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Nomemory@std@@YAXXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?is@?$ctype@G@std@@QBE_NFG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?clear@ios_base@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ

msvcr71

sprintf
_strtime
??3@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
__CxxFrameHandler
_CxxThrowException
_purecall
??_V@YAXPAX@Z
_sleep
strtok
_mbslwr
fgets
fclose
fopen
malloc
_callnewh
__security_error_handler
_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
free
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
_itoa

Exports

Exports

??0Address@@QAE@ABV0@@Z
??0Address@@QAE@XZ
??0BJDAndBinderyConfig@@QAE@ABV0@@Z
??0BJDAndBinderyConfig@@QAE@XZ
??0BJDAndNDSConfig@@QAE@ABV0@@Z
??0BJDAndNDSConfig@@QAE@XZ
??0BJetDirect@@QAE@ABV0@@Z
??0BJetDirect@@QAE@XZ
??0BModelExcluder@@QAE@ABV0@@Z
??0BModelExcluder@@QAE@XZ
??0BPrinter@@QAE@ABV0@@Z
??0BPrinter@@QAE@XZ
??0BSNMPCommunicator@@QAE@ABV0@@Z
??0BSNMPCommunicator@@QAE@XZ
??0Snmp@@QAE@ABV0@@Z
??0SnmpSyntax@@QAE@ABV0@@Z
??0SnmpSyntax@@QAE@XZ
??0SnmpTarget@@QAE@ABV0@@Z
??0SnmpTarget@@QAE@XZ
??1BJDAndBinderyConfig@@UAE@XZ
??1BJDAndNDSConfig@@UAE@XZ
??1BJetDirect@@UAE@XZ
??1BModelExcluder@@UAE@XZ
??1BPrinter@@UAE@XZ
??1BSNMPCommunicator@@UAE@XZ
??1Counter32@@UAE@XZ
??1SnmpSyntax@@UAE@XZ
??4Address@@QAEAAV0@AAV0@@Z
??4BJDAndBinderyConfig@@QAEAAV0@ABV0@@Z
??4BJDAndNDSConfig@@QAEAAV0@ABV0@@Z
??4BJetDirect@@QAEAAV0@ABV0@@Z
??4BModelExcluder@@QAEAAV0@ABV0@@Z
??4BPrinter@@QAEAAV0@ABV0@@Z
??4BSNMPCommunicator@@QAEAAV0@ABV0@@Z
??4Snmp@@QAEAAV0@ABV0@@Z
??4SnmpSyntax@@UAEAAV0@AAV0@@Z
??4SnmpTarget@@QAEAAV0@ABV0@@Z
??_7Address@@6B@
??_7BJDAndBinderyConfig@@6B@
??_7BJDAndNDSConfig@@6B@
??_7BJetDirect@@6B@
??_7BModelExcluder@@6B@
??_7BPrinter@@6B@
??_7BSNMPCommunicator@@6B@
??_7Snmp@@6B@
??_7SnmpSyntax@@6B@
??_7SnmpTarget@@6B@
?INFDeviceIDGet@BPrinter@@SA?AW4teHPJDComError@@AAVRWCString@@@Z
?IPAddressGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBIPAddress@@@Z
?IPAddressSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBIPAddress@@@Z
?IPConfigSourceGet@BJetDirect@@QAE?AW4teHPJDComError@@AAW4teHPIPConfigurationSource@@@Z
?IPConfigSourceSet@BJetDirect@@QAE?AW4teHPJDComError@@VSnmpInt32@@@Z
?IPDirectSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBIPAddress@@AAVBSubnetMask@@0@Z
?IPXBinderySet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWBPServer@@@Z
?IPXDirectSet@BJetDirect@@QAE?AW4teHPJDComError@@XZ
?IPXNDSSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWPServer@@@Z
?ModelToExclude@BModelExcluder@@QAE_NVRWCString@@@Z
?NDSTreeNameGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWPServer@@@Z
?NDSTreeNameSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWPServer@@@Z
?PmlOidToSnmpOid@BSNMPCommunicator@@SA?AVRWCString@@V2@@Z
?RWAddrGet@BJetDirect@@QAE?AVRWCString@@XZ
?SNMP2JDComError@BSNMPCommunicator@@SA?AW4teHPJDComError@@H@Z
?SNMPBulkGet@BSNMPCommunicator@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@ABVRWCString@@QAVVb@@AAIAAV5@5HK@Z
?SNMPFQFormat@BJetDirect@@CA?AVOctetStr@@VRWCString@@H@Z
?SNMPGet@BSNMPCommunicator@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@AAVRWCString@@AAVSnmpSyntax@@22HK@Z
?SNMPParseIPX@BJetDirect@@AAE_NAAVRWCString@@@Z
?SNMPSet@BSNMPCommunicator@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@AAVRWCString@@AAVSnmpSyntax@@22HK@Z
?SNMPVbGet@BSNMPCommunicator@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@QAVVb@@IAAVRWCString@@3HK@Z
?SNMPVbSet@BSNMPCommunicator@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@QAVVb@@IAAVRWCString@@3HK@Z
?ScanningDevicePMLObjectGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVRWCString@@@Z
?StringParser@BModelExcluder@@QAEPADPAD@Z
?abbreviateModel@BPrinter@@SAXAAVRWCString@@@Z
?activeFrontplanesGet@BJetDirect@@QAE?AW4teHPJDComError@@AAH@Z
?changeProtocol@BJetDirect@@QAE_NW4teHPJDComProtocol@@@Z
?dataMemberIPAddrGet@BJetDirect@@QAE_NAAVBIPAddress@@@Z
?dataMemberIPXAddrGet@BJetDirect@@QAE_NAAVBIPXAddress@@@Z
?dataMemberMACAddrGet@BJetDirect@@QAE_NAAVBMACAddress@@@Z
?determinePreferredProtocol@BJetDirect@@SA?AW4teHPJDComProtocol@@AAVBDevice@@HK@Z
?deviceIDGet@BPrinter@@QAE?AW4teHPJDComError@@AAVRWCString@@@Z
?deviceIDGet@BPrinter@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@HHKVRWCString@@2@Z
?deviceManufactureGet@BPrinter@@QAE?AW4teHPJDComError@@AAVRWCString@@@Z
?deviceManufactureGet@BPrinter@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@HHKVRWCString@@2@Z
?devicePrint@BJetDirect@@QAEXXZ
?deviceStringGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVRWCString@@@Z
?deviceStringGet@BJetDirect@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@AAVRWCString@@HHKV5@3@Z
?disableComToDevice@BSNMPCommunicator@@CAXPAVBDevice@@@Z
?dot11AuthenticationGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVDot11Authentication@@@Z
?dot11CheckRefreshSSIDListCompleted@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?dot11ConfigSourceGet@BJetDirect@@QAE?AW4teHPJDComError@@AAW4teHPDot11ConfigurationSource@@@Z
?dot11DirectSet@BJetDirect@@QAE?AW4teHPJDComError@@PAVBDevice@@PAVDot11Mode@@PAVDot11NetworkName@@PAVDot11Authentication@@PAVDot11EncryptionSettings@@PAVDot11Channel@@HPAVBIPAddress@@PAVBSubnetMask@@6@Z
?dot11ModeGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVDot11Mode@@@Z
?dot11PhoneHomeSetForINPWWirelessConfigured@BJetDirect@@QAE?AW4teHPJDComError@@XZ
?dot11RefreshSSIDList@BJetDirect@@QAE?AW4teHPJDComError@@XZ
?dot11SSIDGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVDot11NetworkName@@@Z
?dot11SSIDListGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVDot11BssidEntryPtrVector@@@Z
?dot11SSIDListGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVDot11NetworkNamePtrVector@@@Z
?enableComToDevice@BSNMPCommunicator@@CAXPAVBDevice@@@Z
?enableDot11Radio@BJetDirect@@QAE?AW4teHPJDComError@@_N@Z
?enabledProtocolsGet@BJetDirect@@AAE?AW4teHPJDComError@@AAJ@Z
?enabledProtocolsSet@BJetDirect@@AAE?AW4teHPJDComError@@J@Z
?estimateDot11SetTimeout@BJetDirect@@SAKPAVDot11Mode@@PAVDot11NetworkName@@PAVDot11Authentication@@PAVDot11EncryptionSettings@@@Z
?featuresetGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVFeatureSet@@@Z
?fullyQualifiedNameGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWPServer@@@Z
?fullyQualifiedNameSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWPServer@@@Z
?gatewayGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBIPAddress@@@Z
?gatewaySet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBIPAddress@@@Z
?getJDName@BJDAndBinderyConfig@@AAE_NAAVRWCString@@@Z
?getJDName@BJDAndNDSConfig@@AAE_NAAVRWCString@@0@Z
?getJDTree@BJDAndNDSConfig@@AAE_NAAVRWCString@@@Z
?getMaxPossiblePorts@BJetDirect@@QAE?AW4teHPJDComError@@AAH@Z
?getOid@BJetDirect@@AAE?AW4teHPJDComError@@AAVRWCString@@AAVSnmpSyntax@@@Z
?getOriginalUnitName@BJDAndBinderyConfig@@AAE_NAAVRWCString@@@Z
?getProtocolUsed@BJetDirect@@QAE?AW4teHPJDComProtocol@@XZ
?getUserTree@BJDAndNDSConfig@@AAE_NAAVRWCString@@@Z
?hashFunction@Address@@UBEIXZ
?init@BJDAndBinderyConfig@@QAEXPAVBNWUser@@@Z
?initializeAndPopulateDot11BDevice@BJetDirect@@QAE_NAAVBDevice@@W4teHPJDComProtocol@@AAVRWCString@@HK@Z
?initializeWithBDevice@BJetDirect@@QAE_NAAVBDevice@@W4teHPJDComProtocol@@@Z
?initializeWithBDeviceParameters@BJetDirect@@QAE_NAAVBIPAddress@@AAVBMACAddress@@H@Z
?initializeWithBDeviceParameters@BJetDirect@@QAE_NAAVBIPXAddress@@AAVBMACAddress@@H@Z
?isCACertificateInstalled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isCommunityNameSet@BJetDirect@@SA_NAAVBDevice@@W4teHPJDComProtocol@@HHK@Z
?isConfigured@BJDAndBinderyConfig@@QAE_NPAVBJetDirect@@PAVBNWBPServer@@PAVBNWPServer@@@Z
?isConfigured@BJDAndNDSConfig@@QAE_NPAVBJetDirect@@PAVBNWPServer@@PAVBNWNDS@@AAVBStringVector@@@Z
?isDot11JetDirect@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isDot11RadioEnabled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isDot11WepEnabled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isDot3CableIn@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isEapTlsCertificateInstalled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isIPAddressConfigured@BJetDirect@@QAE_NXZ
?isIPProtocolEnabled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isIPXProtocolEnabled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isJetDirectPasswordSet@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isJetdirectCertificateInstalled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isOperatingFromShortStack@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isPreviousBinderyConfiguration@BJDAndNDSConfig@@AAE_NAAVRWCString@@@Z
?isPublicKeyEncryptionSupported@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isQueueServerBinderyServiceEnabled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isQueueServerNDSServiceEnabled@BJetDirect@@QAE?AW4teHPJDComError@@AA_N@Z
?isScanningDevice@BPrinter@@QAE?AW4teHPJDComError@@AA_N@Z
?isServiceEnabled@BJetDirect@@AAE?AW4teHPJDComError@@KAA_N@Z
?isTreeConfigured@BJDAndNDSConfig@@QAE_NPAVBJetDirect@@PAVBNWPServer@@@Z
?isValid@BJetDirect@@QAE_NXZ
?isValid@BPrinter@@QAE_NXZ
?jdCommError2RWCString@BJetDirect@@SA?AVRWCString@@W4teHPJDComError@@@Z
?jetDirectSet@BPrinter@@QAEXAAVBJetDirect@@@Z
?jetdirectCertificateGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVX509Certificate@@@Z
?makeLittleEndian@BJetDirect@@CA_NHPADH@Z
?populateDot11BDevice@BJetDirect@@SA?AW4teHPJDComError@@AAVBDevice@@W4teHPJDComProtocol@@AAVRWCString@@HK@Z
?portNumberGet@BJetDirect@@QAEHXZ
?portNumberSet@BJetDirect@@QAE_NH@Z
?printerStatusGet@BJetDirect@@QAE?AW4teHPJDComPrinterStatus@@XZ
?readCommunityNameGet@BJetDirect@@QAE?AVRWCString@@XZ
?readCommunityNameSet@BJetDirect@@QAEXAAVRWCString@@@Z
?recommendCommunicationProtocol@BJetDirect@@SA?AW4teHPJDComError@@AAVBDevice@@AAW4teHPJDComProtocol@@HKVRWCString@@@Z
?retryGet@BJetDirect@@QAEHXZ
?retrySet@BJetDirect@@QAEXH@Z
?serverNameGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWBPServer@@@Z
?serverNameSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWBPServer@@@Z
?setSDICommunicationsLogFile@@YAXP6AXPBDPAX@Z1@Z
?setSDICommunicationsLogLevel@@YAXW4teLevel@LogInterface@@@Z
?setValidationTimer@BJetDirect@@QAE?AW4teHPJDComError@@I@Z
?statusGet@BPrinter@@QAE?AW4teHPJDComPrinterStatus@@XZ
?subnetMaskGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBSubnetMask@@@Z
?subnetMaskSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBSubnetMask@@@Z
?timeoutGet@BJetDirect@@QAEKXZ
?timeoutSet@BJetDirect@@QAE_NK@Z
?treesMatch@BJDAndNDSConfig@@AAE_NAAVRWCString@@@Z
?unitNameGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWBPServer@@@Z
?unitNameGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWPServer@@@Z
?unitNameGet@BJetDirect@@QAE?AW4teHPJDComError@@AAVRWCString@@@Z
?unitNameSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWBPServer@@@Z
?unitNameSet@BJetDirect@@QAE?AW4teHPJDComError@@AAVBNWPServer@@@Z
?validatePassword@BJetDirect@@QAE?AW4teHPJDComError@@ABVRWCString@@AA_N@Z
?validateWriteCommunityName@BJetDirect@@QAE?AW4teHPJDComError@@ABVRWCString@@AA_N@Z
?writeCommunityNameGet@BJetDirect@@QAE?AVRWCString@@XZ
?writeCommunityNameSet@BJetDirect@@QAEXAAVRWCString@@@Z

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75196f593b1dd6044e08e79726fb76cd

Headers

File Characteristics

Imports

tls7712d

sdiingredients

snmpnet_pp

sdiencryption

hpzjut02

kernel32

sdinetware

msvcp71

msvcr71

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 4KB - Virtual size: 604B

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 4KB - Virtual size: 604B

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 12KB - Virtual size: 10KB