50a81a5e11eae167324213e04d6e8a6274b49453f5bf9abb1343dba8855fe624

Sharing

Copy URL Twitter E-mail

General

Target

50a81a5e11eae167324213e04d6e8a6274b49453f5bf9abb1343dba8855fe624
Size

6.6MB
MD5

42927a65b22afbdfe72bbe7aa329ed07
SHA1

a714164a073eaebeb8402a4f561e2103f73ad561
SHA256

50a81a5e11eae167324213e04d6e8a6274b49453f5bf9abb1343dba8855fe624
SHA512

dc8c71c84afd7b06a30b34c40b12c6060468b7180ec6e4a67cdc750b90d5856fff757900b6a0703af294b8d18c243069f378427d576ef25df8da98d497bfd546
SSDEEP

98304:n9f6dJgF7SizX0nzXPtqDO7xoTJMMKn+JQLXbIUaSjmMqlkh3gEW:9f6dJgFuUX0nzUDsoTJMbqiwEW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50a81a5e11eae167324213e04d6e8a6274b49453f5bf9abb1343dba8855fe624

Files

50a81a5e11eae167324213e04d6e8a6274b49453f5bf9abb1343dba8855fe624
.dll windows:6 windows x86 arch:x86

971d199085b40d5452cd55615f1f00d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

setsockopt
WSASetLastError
WSACleanup
__WSAFDIsSet
accept
bind
closesocket
gethostbyname
select
ntohl
shutdown
WSAStartup
inet_addr
WSAGetLastError
ioctlsocket
sendto
htons
send
socket
connect
getsockopt
recv
recvfrom

base

??1Guid@Base@Public@@UAE@XZ
?create@UDP@Network@Public@@SA?AV?$shared_ptr@VSocket@Network@Public@@@std@@ABV?$shared_ptr@VIOWorker@Network@Public@@@5@W4InetType@23@@Z
?decode@URLEncoding@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
?toString@XML@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0Child@XML@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@23@@Z
?addChild@Child@XML@Base@Public@@QAEAAV1234@ABV1234@@Z
?addChild@Child@XML@Base@Public@@QAEAAV1234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@34@@Z
?addAttribute@Child@XML@Base@Public@@QAEAAUAttribute@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@34@@Z
?removeAttribute@Child@XML@Base@Public@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getNetworkInfos@Host@Base@Public@@SA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UNetworkInfo@Base@Public@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UNetworkInfo@Base@Public@@@std@@@2@@std@@XZ
??1ErrorInfo@Base@Public@@QAE@XZ
??0ErrorInfo@Base@Public@@QAE@W4ErrorCode@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getCurrentMilliSecond@Time@Base@Public@@SA_KXZ
?start@Timer@Base@Public@@QAE_NABV?$Function@$$A6AXK@Z$$V@23@IIK@Z
??1Timer@Base@Public@@UAE@XZ
??0Timer@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?toUint32@Value@Base@Public@@QBEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?__append@SharedBuffer@Base@Public@@QAEAAV123@ABV123@PBDH@Z
??4SharedBuffer@Base@Public@@QAEAAV012@ABV012@@Z
??1SharedBuffer@Base@Public@@UAE@XZ
??0SharedBuffer@Base@Public@@QAE@XZ
??0SharedBuffer@Base@Public@@QAE@PBXI@Z
??4NetAddr@Network@Public@@QAEAAV012@ABV012@@Z
??1NetAddr@Network@Public@@QAE@XZ
??0NetAddr@Network@Public@@QAE@W4InetType@12@@Z
??0NetAddr@Network@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
??AKeyValueHeaders@Network@Public@@QAEAAVValue@Base@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?create@TCPClient@Network@Public@@SA?AV?$shared_ptr@VSocket@Network@Public@@@std@@ABV?$shared_ptr@VIOWorker@Network@Public@@@5@W4InetType@23@@Z
?parse@HTTPParser@Network@Public@@QAE?AV?$shared_ptr@UHTTPHeader@Network@Public@@@std@@PBDIAAI@Z
??1HTTPParser@Network@Public@@QAE@XZ
??0HTTPParser@Network@Public@@QAE@_N@Z
??BErrorInfo@Base@Public@@QBE_NXZ
??0ErrorInfo@Base@Public@@QAE@ABV012@@Z
??0Time@Base@Public@@QAE@XZ
??0Time@Base@Public@@QAE@_K@Z
?split@StringEx@Base@Public@@SA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@0@Z
?toFloat@Value@Base@Public@@QBEMABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?toInt@Value@Base@Public@@QBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?toString@Value@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
??BValue@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1Value@Base@Public@@QAE@XZ
??0Value@Base@Public@@QAE@XZ
??0Value@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setHostname@URL@Base@Public@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getHostname@URL@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getHost@URL@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?setAuthen@URL@Base@Public@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?href@URL@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??4URL@Base@Public@@QAEAAV012@ABV012@@Z
??1URL@Base@Public@@UAE@XZ
??0URL@Base@Public@@QAE@XZ
??0URL@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0URL@Base@Public@@QAE@ABV012@@Z
??EChildIterator@XML@Base@Public@@QAEAAV0123@H@Z
??DChildIterator@XML@Base@Public@@QAEABVChild@123@XZ
??CChildIterator@XML@Base@Public@@QAEPBVChild@123@XZ
??BChildIterator@XML@Base@Public@@QAE_NXZ
??1ChildIterator@XML@Base@Public@@QAE@XZ
?name@Attribute@XML@Base@Public@@QAEAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?isEmpty@Attribute@XML@Base@Public@@QBE_NXZ
??1Attribute@XML@Base@Public@@QAE@XZ
??0Attribute@XML@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@23@@Z
?isEmpty@Child@XML@Base@Public@@QBE_NXZ
?firstChild@Child@XML@Base@Public@@QBE?AVChildIterator@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?attribute@Child@XML@Base@Public@@QAEAAVValue@34@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?attribute@Child@XML@Base@Public@@QBEABVValue@34@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?child@Child@XML@Base@Public@@QAEAAV1234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?child@Child@XML@Base@Public@@QBEABV1234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?data@Child@XML@Base@Public@@QBEABVValue@34@XZ
?name@Child@XML@Base@Public@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1Child@XML@Base@Public@@QAE@XZ
??0Child@XML@Base@Public@@QAE@ABV0123@@Z
?body@XML@Base@Public@@QAEAAVChild@123@XZ
?parseBuffer@XML@Base@Public@@QAE_NABVSharedBuffer@23@W4CharsetEncoding@@@Z
??1XML@Base@Public@@QAE@XZ
??0XML@Base@Public@@QAE@XZ
??0SharedBuffer@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?timeout@HTTPClientRequest@Network@Public@@QAEAAIXZ
?header@HTTPClientRequest@Network@Public@@QAE?AV?$shared_ptr@UHTTPHeader@Network@Public@@@std@@XZ
??1HTTPClientRequest@Network@Public@@UAE@XZ
??0HTTPClientRequest@Network@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4HTTPCacheType@12@@Z
?request@HTTPClient@Network@Public@@QAE_NABV?$shared_ptr@VHTTPAsyncClient@Network@Public@@@std@@ABV?$shared_ptr@VHTTPClientRequest@Network@Public@@@5@ABV?$Function@$$A6AXABV?$shared_ptr@VHTTPClient@Network@Public@@@std@@ABV?$shared_ptr@VHTTPClientRequest@Network@Public@@@2@ABV?$shared_ptr@VHTTPClientResponse@Network@Public@@@2@@Z$$V@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
??1HTTPClient@Network@Public@@UAE@XZ
??0HTTPClient@Network@Public@@QAE@ABV?$shared_ptr@VIOWorker@Network@Public@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?content@HTTPClientResponse@Network@Public@@QBE?AV?$shared_ptr@VReadContent@Network@Public@@@std@@XZ
?header@HTTPClientResponse@Network@Public@@QBE?AV?$shared_ptr@UHTTPHeader@Network@Public@@@std@@XZ
??7ErrorInfo@Base@Public@@QBE_NXZ
?iequals@StringEx@Base@Public@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z
?indexOfByCase@StringEx@Base@Public@@SAIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?toupper@StringEx@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
?tolower@StringEx@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
??4Value@Base@Public@@QAEAAV012@ABV012@@Z
??0Value@Base@Public@@QAE@PBD@Z
??0Value@Base@Public@@QAE@H@Z
??0Value@Base@Public@@QAE@I@Z
??0Value@Base@Public@@QAE@_K@Z
??0Value@Base@Public@@QAE@ABV012@@Z
?getPath@URL@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?setPort@URL@Base@Public@@QAEXI@Z
?getPort@URL@Base@Public@@QBEII@Z
?setHost@URL@Base@Public@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getAuthenInfo@URL@Base@Public@@QBE?AUAuthenInfo@123@XZ
?printer@Base@Public@@YAXW4LOG_Level@12@PBD1H1ABV?$vector@VValue@Base@Public@@V?$allocator@VValue@Base@Public@@@std@@@std@@@Z
?buildAuthorization@WWW_Authenticate@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@00000@Z
?header@HTTPHeader@Network@Public@@QAE?AVValue@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
??1AuthenInfo@URL@Base@Public@@QAE@XZ
?stopAndWait@Timer@Base@Public@@QAE_NXZ
??1HTTPAsyncClient@Network@Public@@QAE@XZ
??0HTTPAsyncClient@Network@Public@@QAE@XZ
??1IOWorker@Network@Public@@QAE@XZ
??0IOWorker@Network@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVThreadNum@012@W4Priority@Thread@Base@2@@Z
??1ThreadNum@IOWorker@Network@Public@@QAE@XZ
?getStringStream@Guid@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?createGuid@Guid@Base@Public@@SA?AV123@XZ

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty

kernel32

LoadLibraryA
DisableThreadLibraryCalls
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SetLastError
GetLastError
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
SetEvent
CloseHandle
DeleteCriticalSection
GetSystemTime
SystemTimeToFileTime
GetEnvironmentVariableW
WideCharToMultiByte
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SwitchToFiber
DeleteFiber
CreateFiber
FindClose
FindFirstFileW
FindNextFileW
MultiByteToWideChar
GetStdHandle
GetFileType
WriteFile
GetModuleHandleW
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
ConvertFiberToThread
ConvertThreadToFiber
FreeLibrary
WaitForSingleObjectEx
LoadLibraryW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
UnhandledExceptionFilter
InitializeSListHead
CreateEventW
ResetEvent

user32

MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation

advapi32

CryptGetUserKey
RegisterEventSourceW
ReportEventW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
DeregisterEventSource
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW

msvcp140

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPBD@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Mtx_unlock
?uncaught_exception@std@@YA_NXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

iphlpapi

SendARP

bcrypt

BCryptGenRandom

vcruntime140

__std_type_info_destroy_list
wcsstr
memchr
_CxxThrowException
_except_handler4_common
__RTDynamicCast
memmove
memset
memcpy
__std_type_info_name
strrchr
strchr
strstr
__std_terminate
_purecall
__std_exception_copy
__CxxFrameHandler3
__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

realloc
free
malloc
_callnewh

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_invalid_parameter_noinfo
_initterm_e
_crt_atexit
strerror
signal
_initterm
_register_onexit_function
terminate
raise
_invalid_parameter_noinfo_noreturn
strerror_s
_cexit
_errno
_initialize_onexit_table
_exit

api-ms-win-crt-convert-l1-1-0

wctomb_s
strtoul
mbtowc
atoi
_strtoui64
_strtod_l
strtol

api-ms-win-crt-math-l1-1-0

_except1
_isnan
_finite

api-ms-win-crt-string-l1-1-0

strncpy_s
strncmp
_stricmp
strncat_s
isdigit
isspace
strspn
strcspn
strcmp
strncpy
_strnicmp

api-ms-win-crt-time-l1-1-0

_time64
_difftime64
_mktime64
strftime
_gmtime64
_gmtime64_s

api-ms-win-crt-utility-l1-1-0

srand
qsort
rand

api-ms-win-crt-locale-l1-1-0

_free_locale
___mb_cur_max_func
_create_locale

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
ftell
_wfopen
fseek
__acrt_iob_func
fgets
fflush
fputs
feof
__stdio_common_vsscanf
setbuf
fwrite
fread
_fileno
ferror
clearerr
fopen
__stdio_common_vsprintf
_write
__stdio_common_vsnprintf_s
_setmode
__stdio_common_vfprintf
__stdio_common_vsprintf_s
_read
fclose

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32
_stat64i32

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

??0Disconvery@OnvifClientManager@Onvif@Public@@QAE@XZ
??0OnvifClient@Onvif@Public@@QAE@ABV?$shared_ptr@VIOWorker@Network@Public@@@std@@ABV?$shared_ptr@VHTTPAsyncClient@Network@Public@@@4@ABVURL@Base@2@@Z
??0OnvifClientManager@Onvif@Public@@QAE@ABV?$shared_ptr@VIOWorker@Network@Public@@@std@@@Z
??0OnvifClientManager@Onvif@Public@@QAE@H@Z
??1Disconvery@OnvifClientManager@Onvif@Public@@QAE@XZ
??1OnvifClient@Onvif@Public@@QAE@XZ
??1OnvifClientManager@Onvif@Public@@QAE@XZ
?asyncCheckAuth@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifScope@Onvif@3@@Z$$V@53@I@Z
?asyncEventCreatePullPointSub@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@_KABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifSubEventResponse@Onvif@3@@Z$$V@53@I@Z
?asyncEventPullMeassages@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifEventInfos@Onvif@3@@Z$$V@53@I@Z
?asyncEventUnsubscribe@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncGetAnalyticsModules@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UVideoAnalytics@Onvif@Public@@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUAnalyticsModules@Onvif@3@@Z$$V@53@I@Z
?asyncGetAnalyticsMotionRules@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UVideoAnalytics@Onvif@Public@@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUAnalyticsMotionRules@Onvif@3@@Z$$V@53@I@Z
?asyncGetAudioConfiguration@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UAudioEncoder@Onvif@Public@@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUAudioConfiguration@Onvif@3@@Z$$V@53@I@Z
?asyncGetAudioConfigurationOptions@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UAudioEncoder@Onvif@Public@@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUAudioConfigurationOptions@Onvif@3@@Z$$V@53@I@Z
?asyncGetDevCapabilities@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifCapabilities@Onvif@3@@Z$$V@53@I@Z
?asyncGetDeviceInformation@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifDeviceInformation@Onvif@3@@Z$$V@53@I@Z
?asyncGetEventProperties@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUEventProperties@Onvif@3@@Z$$V@53@I@Z
?asyncGetImage@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABVSharedBuffer@23@@Z$$V@53@I@Z
?asyncGetMediaProfiles@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifProfiles@Onvif@3@@Z$$V@53@I@Z
?asyncGetNTP@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifNTPInfo@Onvif@3@@Z$$V@53@I@Z
?asyncGetNetworkInterfaces@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifNetworkInterfaces@Onvif@3@@Z$$V@53@I@Z
?asyncGetSnapUrl@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifSnapUrl@Onvif@3@@Z$$V@53@I@Z
?asyncGetStreamUrl@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifStreamUrl@Onvif@3@@Z$$V@53@I@Z
?asyncGetSystemDate@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifDateAndTime@Onvif@3@@Z$$V@53@I@Z
?asyncGetVideoConfiguration@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UVideoEncoder@Onvif@Public@@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUVideoConfiguration@Onvif@3@@Z$$V@53@I@Z
?asyncGetVideoConfigurationOptions@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UVideoEncoder@Onvif@Public@@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUVideoConfigurationOptions@Onvif@3@@Z$$V@53@I@Z
?asyncImagingGetOptions@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifImageOptions@Onvif@3@@Z$$V@53@I@Z
?asyncImagingGetSettings@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifImageSetting@Onvif@3@@Z$$V@53@I@Z
?asyncImagingSetSettings@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUOnvifImageSetting@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncPtzContinuousMove@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUOnvifPTZCtrl@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncPtzCreateTour@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z$$V@53@I@Z
?asyncPtzGetNode@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUPtzNode@Onvif@3@@Z$$V@53@I@Z
?asyncPtzGetPresets@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUPresetInfos@Onvif@3@@Z$$V@53@I@Z
?asyncPtzGetStatus@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUOnvifPtzStatus@Onvif@3@@Z$$V@53@I@Z
?asyncPtzGetTours@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@ABUTourInfos@Onvif@3@@Z$$V@53@I@Z
?asyncPtzGotoPreset@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUPresetInfo@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncPtzModifyTour@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUTourInfo@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncPtzOperationTour@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4TourOperation@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncPtzRemovePreset@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUPresetInfo@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncPtzRemoveTour@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncPtzSetPreset@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUPresetInfo@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncPtzStop@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncSetAnalyticsMotionRules@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UVideoAnalytics@Onvif@Public@@@std@@ABUAnalyticsMotionRule@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncSetAudioConfiguration@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UAudioEncoder@Onvif@Public@@@std@@ABUAudioConfiguration@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncSetNTP@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABUOnvifNTPInfo@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncSetSystemDate@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABUOnvifDateAndTime@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncSetVideoConfiguration@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$shared_ptr@UVideoEncoder@Onvif@Public@@@std@@ABUVideoConfiguration@23@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?asyncSystemReboot@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?aysncPtzSendAuxiliaryCommand@OnvifClient@Onvif@Public@@QAE?AVErrorInfo@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0ABV?$Function@$$A6AXABVErrorInfo@Base@Public@@@Z$$V@53@I@Z
?create@OnvifClientManager@Onvif@Public@@QAE?AV?$shared_ptr@VOnvifClient@Onvif@Public@@@std@@ABVURL@Base@3@@Z
?disconvery@OnvifClientManager@Onvif@Public@@QAE?AV?$shared_ptr@UDisconvery@OnvifClientManager@Onvif@Public@@@std@@XZ
?getDeviceList@Disconvery@OnvifClientManager@Onvif@Public@@QAEXAAV?$list@UDiscoveryInfo@Onvif@Public@@V?$allocator@UDiscoveryInfo@Onvif@Public@@@std@@@std@@@Z
?onvifUrl@OnvifClient@Onvif@Public@@QAE?AVURL@Base@3@XZ
?sendDisconvery@Disconvery@OnvifClientManager@Onvif@Public@@QAEXXZ

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 786KB - Virtual size: 786KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

971d199085b40d5452cd55615f1f00d7

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

base

crypt32

kernel32

user32

advapi32

msvcp140

iphlpapi

bcrypt

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 786KB - Virtual size: 786KB

.data Size: 138KB - Virtual size: 147KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 286KB - Virtual size: 285KB

.text
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 786KB - Virtual size: 786KB

.data
Size: 138KB - Virtual size: 147KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 286KB - Virtual size: 285KB