3615ad81248989cd9947020e54b008c0dc4420d8768902fb9524bd509f3d9bca

Sharing

Copy URL Twitter E-mail

General

Target

3615ad81248989cd9947020e54b008c0dc4420d8768902fb9524bd509f3d9bca
Size

9.4MB
MD5

316f7ba64548de935db9342faa47555a
SHA1

c3d382c0fa6db40b0824c92b12817583f0403e3b
SHA256

3615ad81248989cd9947020e54b008c0dc4420d8768902fb9524bd509f3d9bca
SHA512

45b925400718980caa05e65700de227019d7dd43ed7537c3fda2a0651224bc3079e2822e8bf550b12256db31119c40bb4d8aba71f74bab811570d8de6b8bcf1a
SSDEEP

196608:ssgSXxSXaT5XMN3zYRu6/qiesyu2Tz0GxsIr000AMUZZFLOyomFHKnPL:qzYA/2BIOGF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3615ad81248989cd9947020e54b008c0dc4420d8768902fb9524bd509f3d9bca

Files

3615ad81248989cd9947020e54b008c0dc4420d8768902fb9524bd509f3d9bca
.exe windows:6 windows x86 arch:x86

d9ff3eec553e0631bce8525024751dbb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ord12
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryA

bcrypt

BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider

avifil32

AVIStreamEndStreaming
AVIStreamWrite
AVIStreamRead
AVIStreamSetFormat
AVIFileCreateStreamA
AVIStreamReadFormat
AVIStreamLength
AVIStreamStart
AVIStreamInfoA
AVIStreamRelease
AVIFileGetStream
AVIFileRelease
AVIFileOpenA
AVIFileExit
AVIFileInit
AVIFileOpenW

secur32

FreeCredentialsHandle
QueryContextAttributesW
FreeContextBuffer
InitializeSecurityContextW
AcquireCredentialsHandleW
DecryptMessage
EncryptMessage

kernel32

VerSetConditionMask
lstrcpyA
VerifyVersionInfoA
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetOEMCP
GetCPInfo
GetACP
GetCurrentDirectoryA
GetFileAttributesExA
GetFileTime
FindResourceExW
GetWindowsDirectoryA
SearchPathA
GetProfileIntA
GetTempFileNameA
GetUserDefaultLCID
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
CreateEventW
TlsSetValue
GetStartupInfoW
InitializeSListHead
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
GetCurrentDirectoryW
LocalReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetDriveTypeW
ReadConsoleW
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
ExitProcess
GetFileType
SetStdHandle
HeapQueryInformation
GetCommandLineW
VirtualQuery
FreeLibraryAndExitThread
InterlockedFlushSList
RtlUnwind
LCMapStringW
CompareStringW
GetModuleHandleExW
GetStringTypeW
TryEnterCriticalSection
GetExitCodeThread
SwitchToThread
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GlobalHandle
GlobalReAlloc
SetEnvironmentVariableW
TlsGetValue
TlsAlloc
SetErrorMode
GetThreadLocale
GetVolumeInformationA
lstrcmpiA
LoadLibraryExA
DuplicateHandle
FindNextFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalAlloc
ResumeThread
SetThreadPriority
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetVersionExA
GetCurrentThread
GetModuleFileNameA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
TlsFree
LoadLibraryExW
GetModuleHandleW
FreeResource
GetSystemDirectoryW
EncodePointer
CopyFileA
MulDiv
WaitForMultipleObjects
GetLocalTime
QueryPerformanceFrequency
GetCommandLineA
GetModuleHandleA
GetProcessAffinityMask
WaitForSingleObjectEx
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
InitOnceComplete
InitOnceBeginInitialize
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
FlushFileBuffers
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetFileSize
LockFileEx
LocalFree
CreateFileMappingA
UnlockFile
HeapCompact
GetSystemInfo
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
FormatMessageW
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateMutexW
GetTempPathW
UnlockFileEx
GetFullPathNameA
SetFilePointer
LockFile
GetFullPathNameW
HeapCreate
AreFileApisANSI
DeleteFileW
FindResourceExA
LoadLibraryW
CreateDirectoryA
FindClose
FindFirstFileA
SetEndOfFile
ReadFile
WriteFile
SetFilePointerEx
GetFileSizeEx
DeleteFileA
ExitThread
GetSystemTime
SystemTimeToTzSpecificLocalTime
OutputDebugStringA
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
FreeLibrary
CreateThread
Sleep
WaitForSingleObject
SetEvent
ResetEvent
CreateEventA
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapDestroy
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
GetModuleFileNameW
SetUnhandledExceptionFilter
GetCurrentProcessId
CreateFileA
GetProcAddress
LoadLibraryA
GetTickCount
GetCurrentProcess
GlobalSize
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceA
MoveFileW
GetDiskFreeSpaceW
GetFileInformationByHandleEx
CreateFileW
GetLongPathNameW
GetTimeZoneInformation
GetTempPathA
CloseHandle
MultiByteToWideChar
GetSystemTimes
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
InitializeCriticalSectionEx
SetLastError
GetCurrentThreadId
RaiseException
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetVersionExW
QueryDepthSList
UnregisterWaitEx
IsDebuggerPresent

user32

PostQuitMessage
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
WindowFromPoint
MapVirtualKeyA
GetKeyNameTextA
IntersectRect
SetRectEmpty
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
GetWindowThreadProcessId
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckDlgButton
GetMonitorInfoA
MonitorFromWindow
WinHelpA
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassLongA
EqualRect
GetSysColor
MapWindowPoints
MessageBoxA
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
GetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
WaitMessage
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoA
RegisterClassA
GetMessageTime
GetMessagePos
DrawIconEx
LoadBitmapW
GetClassNameA
UpdateWindow
DrawStateA
AppendMenuA
GetMenuState
GetMessageA
ShowOwnedPopups
CharUpperA
GetMenuStringA
GetWindowDC
DispatchMessageA
SetWindowContextHelpId
MapDialogRect
DrawEdge
DrawFrameControl
SetWindowRgn
TranslateMessage
PeekMessageA
SetRect
RemoveMenu
GetMenuItemID
SetMenuItemInfoA
InsertMenuA
CreatePopupMenu
CreateMenu
GetMenuItemCount
LoadMenuW
SetMenuInfo
SetParent
SetScrollPos
SetScrollRange
FrameRect
SetCursor
DrawIcon
IsIconic
IsWindowVisible
LoadCursorW
EnumDisplayMonitors
CopyImage
RealChildWindowFromPoint
TrackMouseEvent
IsZoomed
GetSystemMenu
DeleteMenu
MessageBeep
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
RedrawWindow
GetSubMenu
GetCursorPos
DestroyIcon
LoadImageW
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
OpenClipboard
CloseClipboard
SetClipboardData
GetSysColorBrush
DrawFocusRect
GetDlgItem
IsRectEmpty
EmptyClipboard
SetWindowLongA
GetWindowLongA
CreateWindowExA
DestroyWindow
MoveWindow
ClientToScreen
ShowWindow
SetFocus
IsWindow
UnregisterClassA
DefWindowProcA
GetClassInfoExA
LoadCursorA
RegisterClassExA
SetLayeredWindowAttributes
CallWindowProcA
InvalidateRect
EnableWindow
LoadIconW
SendMessageA
AdjustWindowRectEx
GetFocus
GetWindowRect
InflateRect
PtInRect
GetClientRect
GetParent
SetCapture
SetTimer
ReleaseCapture
KillTimer
CopyRect
OffsetRect
GetSystemMetrics
SendMessageW
SetScrollInfo
GetScrollInfo
GetScrollBarInfo
GetWindowLongW
CreateWindowExW
SetWindowLongW
DefWindowProcW
FillRect
GetDC
CreateAcceleratorTableA
DrawTextW
ReleaseDC
CallWindowProcW
LoadImageA
SetCursorPos
BringWindowToTop
LockWindowUpdate
PostMessageW
PostMessageA
SetWindowPos
ScreenToClient
GetAsyncKeyState
GetDoubleClickTime
GetIconInfo
CopyIcon
ModifyMenuA
DestroyAcceleratorTable
SetClassLongA
GetUpdateRect
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
GetWindowRgn
DestroyCursor
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
IsClipboardFormatAvailable
SubtractRect
InvertRect
HideCaret
PostThreadMessageA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
CharUpperBuffA
RegisterClipboardFormatA
RegisterWindowMessageA

gdi32

CreateFontW
CreateFontIndirectA
CopyMetaFileA
CreateDCA
SetBkColor
CreateHatchBrush
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
TextOutA
SetPixel
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32A
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
Polygon
Polyline
GetTextMetricsA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
GetRgnBox
RealizePalette
StretchBlt
SetDIBColorTable
OffsetRgn
CreatePalette
GetPaletteEntries
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceA
GetPixel
CreatePolygonRgn
FillRgn
CreateRectRgn
GetObjectA
GetTextExtentPoint32W
CreateFontIndirectW
GetDIBits
StretchDIBits
SetStretchBltMode
LineTo
MoveToEx
ExtCreatePen
GetDeviceCaps
CreateBitmap
DeleteDC
BitBlt
GetTextExtentPointW
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
RoundRect
Rectangle
SelectObject
CreatePen
GetStockObject
CreateSolidBrush
ExtTextOutA
CombineRgn
CreateFontA

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetOpenFileNameW
GetSaveFileNameW

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

CryptReleaseContext
CryptDestroyKey
CryptAcquireContextW
CryptGenKey
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA

shell32

ord190
SHOpenFolderAndSelectItems
ord155
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
DragFinish
DragQueryFileA
ShellExecuteA
SHAppBarMessage
SHGetFileInfoA

comctl32

InitCommonControlsEx
_TrackMouseEvent

uxtheme

GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
DrawThemeText
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground

ole32

OleLockRunning
CoLockObjectExternal
CoInitializeEx
RevokeDragDrop
RegisterDragDrop
OleGetClipboard
OleCreateMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleDestroyMenuDescriptor
CoRevokeClassObject
CoRegisterMessageFilter
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal

oleaut32

VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
VariantClear
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantChangeType
LoadTypeLi
SystemTimeToVariantTime

oledlg

ord8

gdiplus

GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipDrawRectangleI
GdiplusStartup
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDrawImageI
GdipLoadImageFromStream
GdipGetImageGraphicsContext
GdipCreateBitmapFromGdiDib
GdipSaveImageToStream
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipGetInterpolationMode
GdipGetPixelOffsetMode
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromResource
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCloneBitmapAreaI
GdipCloneImage
GdipAlloc
GdipFree
GdiplusShutdown

ws2_32

WSACleanup
WSAStartup
WSASetLastError
select
htonl
getaddrinfo
freeaddrinfo
socket
connect
WSAGetLastError
ioctlsocket
send
setsockopt
recv
closesocket
inet_addr
htons
ntohl
ntohs
getsockname
shutdown
__WSAFDIsSet
bind
sendto
recvfrom

crypt32

CertStrToNameW
CertCreateSelfSignCertificate
CryptFindCertificateKeyProvInfo
CertFreeCertificateContext

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

InternetCloseHandle
InternetOpenA
InternetConnectA
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetFindNextFileA
InternetQueryOptionA
InternetSetOptionA
InternetGetLastResponseInfoA
InternetSetStatusCallback
FtpFindFirstFileA
FtpOpenFileA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

waveInGetNumDevs
PlaySoundA
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutGetVolume
waveOutSetVolume
waveOutReset
waveOutWrite
waveOutClose
waveOutUnprepareHeader

Exports

Exports

?__autoclassinit2@FFAVIWriter@@QAEXI@Z
CDECAudioDecodeExtra
CDECAudioStart
CDECCheckImageExist
CDECCheckRenderFontSetting
CDECClearBufferFrame
CDECCreate
CDECCreateImageFromFileInMemory
CDECCreateImageFromResource
CDECCreateROIData
CDECCreateRenderFont
CDECDecStreamParameter
CDECDecode
CDECDecodeEX
CDECDecodeExtra
CDECDeleteImage
CDECDeleteObjectRender
CDECDeletePreObjectRender
CDECDeleteROIData
CDECDigitalReScaleExtra
CDECDigitalReScaleYUVExtra
CDECEncode
CDECEncodeExtra
CDECGetD3DHandle
CDECGetErrorCode
CDECGetFrameRate
CDECGetGPUAdapterInfo
CDECGetROIData
CDECGetResolution
CDECReScaleExtra
CDECReScaleYUVExtra
CDECRelease
CDECRenderROI
CDECRendering
CDECRenderingIntoBuffer
CDECResizeWindow
CDECRotateExtra
CDECSetAfterRenderCallback
CDECSetAudioCodecUseage
CDECSetCodecUseage
CDECSetCodecUseage2
CDECSetDeblock
CDECSetDisplayEnable
CDECSetDisplayMode
CDECSetFisheyeTable
CDECSetFocusVertex
CDECSetFormat
CDECSetImageFromFileInMemory
CDECSetImageFromResource
CDECSetObjectRender
CDECSetPreObjectRender
CDECSetQuality
CDECSetROIColor
CDECSetROIData
CDECSetROIQueue
CDECSetReScaleType
CDECSetReductionRatio
CDECSetRenderString
CDECSetRenderString2
CDECSetResolution
CDECSetRotateType
CDECShowBufferFrame
CDECStart
CDECUsedHardwareCodec
DCreate
DEPTZRender
DEPTZRender3
DEnableFullScreen
DExit
DGetVersion
DInit
DNotifyFullScreenWindow
DRegisterAfterBitbltCB
DRender
DRender2
DRender3
DRender4
DRender5
DRenderFillRect
DRenderFillRect2
DSetImageLeftToRight
DSetImageUpToDown
DSetRenderInfo
DSetStretchMode
FCreate
FExit
FGetTotalFrameSize
FGetVersion
FInit
FResetFrameTime
FStartRecord
FStartRecord2
FStopRecord
FWriteData
FishEye_CloseInterface
FishEye_GetCircle
FishEye_GetCoordinate
FishEye_GetTransformTable
FishEye_Initial
FishEye_OpenInterface
FishEye_Release
FishEye_ReleaseMappingTable
FishEye_ReleaseTransformBuffer
FishEye_ResetTransformTable
FishEye_Transform
FishEye_UserSetCircle
NKCheckImageExist
NKCheckTextFontSetting
NKCloseInterface
NKConnect
NKCreateImageFromFileInMemory
NKCreateImageFromResource
NKCreateROIData
NKCreateRenderTextFont
NKDeleteImage
NKDeleteObjectRender
NKDeletePreObjectRender
NKDeleteROIData
NKDigitalPTZPIPSize
NKDigitalPTZTo
NKDisconnect
NKEPTZMove
NKEnableDaylightTime
NKEnableDecodeViewSize
NKEnableDecoder
NKEnableDigitalPTZMode
NKEnableFishEye
NKEnableFishEyeSubWindow
NKEnableFlip
NKEnableLocalTime
NKEnableMirror
NKEnableRender
NKEnableSnapshotPause
NKEnableStretchMode
NKFishEyeRelativeMove
NKFishEyeWindowRelativeMove
NKGetCurrentImage
NKGetData
NKGetFishEyeCircle
NKGetFishEyeCurrentCoordinate
NKGetFishEyeDefaultCircle
NKGetFishEyeImageWithPercent
NKGetFishEyeMoveTo
NKGetFishEyePTZMoveTo
NKGetFishEyeRotationAngle
NKGetHardwareCodec
NKGetOverlayEventStatus
NKGetOverlayXML
NKGetROIData
NKGetTextHeight
NKGetVolume
NKGetXSession
NKOpenInterface
NKPTZAction
NKPTZActionONVIF
NKPTZFocus
NKPTZIris
NKPTZMove
NKPTZMoveONVIF
NKPTZPreset
NKPTZPreset2
NKPTZPresetONVIF
NKPTZPresetONVIF2
NKPTZZoom
NKPause
NKPlay
NKRenderROI
NKSendURLCommand
NKSendURLCommand2
NKSendURLCommand3
NKSendURLCommand4
NKSetAfterRenderCallBack
NKSetCodecFmt
NKSetCodecOption
NKSetCodecRescale
NKSetConnectSuccessCallBack
NKSetCurrentTime
NKSetDICallBack
NKSetDICallBack2
NKSetDIConfig
NKSetDO
NKSetDOONVIF
NKSetDebugText
NKSetDecodeIOnly
NKSetDisplayEnable
NKSetDisplayMode
NKSetDropFrameMode
NKSetEventCallBack
NKSetFishEyeCircle
NKSetFishEyeImageWithPercent
NKSetFishEyeMode
NKSetFishEyeModule
NKSetFishEyeMoveTo
NKSetFishEyePTZMoveTo
NKSetFishEyeRotationAngle
NKSetFisheyeResolutionChangeCallBack
NKSetFocusVertex
NKSetHardwareCodec
NKSetImageCallBack
NKSetImageFromFileInMemory
NKSetImageFromResource
NKSetMotionCallBack
NKSetMotionVectorCallBack
NKSetMute
NKSetNVRMediaConfig
NKSetNetworkLossCallBack
NKSetObjectRender
NKSetOverlayDisplay
NKSetOverlayXML
NKSetPlayAction
NKSetPlayMode
NKSetPlayMode2
NKSetPreObjectRender
NKSetROIColor
NKSetROIData
NKSetROIQueue
NKSetRawDataCallBack
NKSetRenderInfo
NKSetRenderTextString
NKSetRenderTextString2
NKSetResolutionChangeCallBack
NKSetServerTimeZone
NKSetSnapshotImageCallBack
NKSetTextHeight
NKSetTimeCodeCallBack
NKSetVideoLossCallBack
NKSetVideoRecoveryCallBack
NKSetVolume
NKSetXMLCallBack
NKShowFrameTime
NKShowLastFrame
NKSnapshot
NKSnapshot2
NKSnapshot3
NKSnapshot4
NKSnapshot5
NKStartStream
NKStepNext
NKStepPrevious
NKStop
NKStopStream
NKSyncCurrentTime
NKUseFishEyePT
RCloseSendURLCommand
RConnect
RCreate
RDisconnect
RExit
RGetBeginTime
RGetBeginTimeUTC
RGetCurrentTime
RGetCurrentTimeUTC
RGetEndTime
RGetEndTimeUTC
RGetMotionInfo
RGetNextFrame
RGetNextFrame2
RGetNextIFrame
RGetNextIFrame2
RGetPrevFrame
RGetPrevFrame2
RGetPrevIFrame
RGetPrevIFrame2
RGetRawFileInfo2
RGetSessionID
RGetVideoConfig
RGetXSession
RInit
ROpenSendURLCommand
RSendCommand
RSendData
RSendURLCommand
RSetControlDataCallBack
RSetCurrentTime
RSetCurrentTimeUTC
RSetEngineConfig
RSetEngineConfig2
RSetMediaConfig4
RSetMotionInfo
RSetVideoConfig
RSetVideoTransformConfig
RStartStreaming
RStartTransferStreamingEngineData
RStop
RStopStreaming
SACloseInterface
SAOpenInterface
SASetOutputImageFormat
SASetServerTimeZone
SASetSnapshotCallBack
SASnapshotBuffer
SASnapshotBuffer2
SASnapshotURL
SAStopAllSnapshot
SaveImageFromBuffer
XCloseSendURLCommand
XConnect
XCreate
XDisconnect
XEnableDeleteFileAfterClose
XExit
XGetBeginTime
XGetBeginTimeUTC
XGetCurrentPos
XGetCurrentTime
XGetCurrentTimeUTC
XGetEndTime
XGetEndTimeUTC
XGetErrMsg
XGetMotionInfo
XGetNextFrame
XGetNextFrame2
XGetNextIFrame
XGetNextIFrame2
XGetPrevFrame
XGetPrevFrame2
XGetPrevIFrame
XGetPrevIFrame2
XGetRawFileInfo2
XGetRawFileInfo3
XGetSendDataType
XGetSessionID
XGetStatusCode
XGetSupportEvents
XGetVideoConfig
XGetVideoConfig2
XGetVideoConfig3
XGetXSession
XInit
XLiveCheck
XOpenSendURLCommand
XSendAudioData
XSendCommand
XSendData
XSendURLCommand
XSetControlDataCallBack
XSetCurrentTime
XSetCurrentTimeUTC
XSetDownloadLocalFileName
XSetDownloadProgressCallback
XSetEngineConfig
XSetEngineConfig2
XSetMediaConfig
XSetMediaConfig2
XSetMediaConfig3
XSetMediaConfig4
XSetMotionInfo
XSetVideoConfig
XSetVideoTransformConfig
XStartStreaming
XStartTransferStreamingEngineData
XStop
XStopStreaming

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 986KB - Virtual size: 986KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9ff3eec553e0631bce8525024751dbb

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

bcrypt

avifil32

secur32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

crypt32

oleacc

wininet

imm32

winmm

Exports

Exports

Sections

.text Size: 5.6MB - Virtual size: 5.6MB

.rdata Size: 986KB - Virtual size: 986KB

.data Size: 105KB - Virtual size: 1.9MB

_RDATA Size: 5KB - Virtual size: 4KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 263KB - Virtual size: 263KB

.text
Size: 5.6MB - Virtual size: 5.6MB

.rdata
Size: 986KB - Virtual size: 986KB

.data
Size: 105KB - Virtual size: 1.9MB

_RDATA
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 263KB - Virtual size: 263KB