e99cdec0f13808ff808a7cf63afb1e35901fa0423c23a02d8d5f5ea4363d24cb

Sharing

Copy URL Twitter E-mail

General

Target

e99cdec0f13808ff808a7cf63afb1e35901fa0423c23a02d8d5f5ea4363d24cb
Size

383KB
MD5

764558558092f5e7e5d3ebac5d08a7bd
SHA1

513cce2c0a0f45857c27d1816458d279a1ed5dfd
SHA256

e99cdec0f13808ff808a7cf63afb1e35901fa0423c23a02d8d5f5ea4363d24cb
SHA512

16f40d58991e129dc6a71e3c6f4d843ab4b5dc834b5f05d2bc0e1ca9e4e3b97803ce1e26a1e72e5839fd85189f4d5908ad09227ba12e6939570ce393b3e5baf8
SSDEEP

6144:Dp4wFUk/K5fpFyTgmMQNtbhP8xCOw3+AaVXjOlw3GLfslX0:3kITgmrNthOw3+fVXR3Gk0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e99cdec0f13808ff808a7cf63afb1e35901fa0423c23a02d8d5f5ea4363d24cb

Files

e99cdec0f13808ff808a7cf63afb1e35901fa0423c23a02d8d5f5ea4363d24cb
.dll windows:6 windows x86 arch:x86

eaf2627d80d653a25ca50358d669bd69

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

ntohs
htons

base

??AJsonValue@Base@Public@@QAEAAV012@I@Z
??0Timer@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1Timer@Base@Public@@UAE@XZ
??BErrorInfo@Base@Public@@QBE_NXZ
??1ErrorInfo@Base@Public@@QAE@XZ
??0ErrorInfo@Base@Public@@QAE@W4ErrorCode@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getCurrentMilliSecond@Time@Base@Public@@SA_KXZ
?iequals@StringEx@Base@Public@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?split@StringEx@Base@Public@@SA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@0@Z
?getStringStream@Guid@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1Guid@Base@Public@@UAE@XZ
?createGuid@Guid@Base@Public@@SA?AV123@XZ
??4Value@Base@Public@@QAEAAV012@ABV012@@Z
??1Value@Base@Public@@QAE@XZ
??0Value@Base@Public@@QAE@XZ
??0Value@Base@Public@@QAE@PBD@Z
??0Value@Base@Public@@QAE@H@Z
??0Value@Base@Public@@QAE@ABV012@@Z
?printer@Base@Public@@YAXW4LOG_Level@12@PBD1H1ABV?$vector@VValue@Base@Public@@V?$allocator@VValue@Base@Public@@@std@@@std@@@Z
?__push_back@SharedBuffer@Base@Public@@UAEXPBDH0H@Z
??4SharedBuffer@Base@Public@@QAEAAV012@ABV012@@Z
?empty@SharedBuffer@Base@Public@@UBE_NXZ
?clear@SharedBuffer@Base@Public@@UAEXXZ
?__reserve@SharedBuffer@Base@Public@@UAEPADIPBDH@Z
?__resize@SharedBuffer@Base@Public@@UAEXIPBDH@Z
?capacity@SharedBuffer@Base@Public@@UBEIXZ
?size@SharedBuffer@Base@Public@@UBEIXZ
?buf@SharedBuffer@Base@Public@@UBEPBDXZ
?buf@SharedBuffer@Base@Public@@UAEPADXZ
??1SharedBuffer@Base@Public@@UAE@XZ
??0SharedBuffer@Base@Public@@QAE@XZ
??0SharedBuffer@Base@Public@@QAE@ABV012@@Z
?__alloc@SharedBufferArray@Base@Public@@QAE?AVSharedBuffer@23@IIPBDH@Z
?erase@SharedBufferArray@Base@Public@@QAEXI@Z
??1SharedBufferArray@Base@Public@@UAE@XZ
??0SharedBufferArray@Base@Public@@QAE@XZ
?create@TCPClient@Network@Public@@SA?AV?$shared_ptr@VSocket@Network@Public@@@std@@ABV?$shared_ptr@VIOWorker@Network@Public@@@5@W4InetType@23@@Z
?bufferSize@SharedRecvBuffer@Socket@Network@Public@@UAEIXZ
?bufferaddr@SharedRecvBuffer@Socket@Network@Public@@UAEPADXZ
??1SharedRecvBuffer@Socket@Network@Public@@UAE@XZ
??0SharedRecvBuffer@Socket@Network@Public@@QAE@ABVSharedBuffer@Base@3@PADH@Z
?size@SharedBufferArray@Base@Public@@QBEIXZ
?makeTime@Time@Base@Public@@QBE_KXZ
??0Time@Base@Public@@QAE@XZ
?trim_copy@StringEx@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@ABV?$set@DU?$less@D@std@@V?$allocator@D@2@@5@@Z
?tolower@StringEx@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
?toInt@Value@Base@Public@@QBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getOemInfo@OEMInfo@@SA?AUOEMDefine@@XZ
??7ErrorInfo@Base@Public@@QBE_NXZ
??9ErrorInfo@Base@Public@@QBE_NABV012@@Z
??4ErrorInfo@Base@Public@@QAEAAV012@ABV012@@Z
??0ErrorInfo@Base@Public@@QAE@ABV012@@Z
?BinToHex@StringEx@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@_N@Z
?toupper@StringEx@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
??4Version@Base@Public@@QAEAAU012@ABU012@@Z
??1Version@Base@Public@@UAE@XZ
??0Version@Base@Public@@QAE@XZ
??0Version@Base@Public@@QAE@ABU012@@Z
?decode@Base64@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
?encode@Base64@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
?toString@Value@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
??0Value@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Value@Base@Public@@QAE@_N@Z
??0Value@Base@Public@@QAE@I@Z
?encode@AES@Base@Public@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@00@Z
??1AES@Base@Public@@QAE@XZ
??0AES@Base@Public@@QAE@W4AesBit@012@W4AesMode@012@W4AesPadding@012@@Z
?read@JsonValue@Base@Public@@QAE?AVErrorInfo@23@ABVSharedBuffer@23@@Z
?toStyledString@JsonValue@Base@Public@@QBE?AVSharedBuffer@23@W4WriteStyle@123@@Z
?append@JsonValue@Base@Public@@QAEAAV123@ABV123@@Z
?start@Timer@Base@Public@@QAE_NABV?$Function@$$A6AXK@Z$$V@23@IIK@Z
??AJsonValue@Base@Public@@QAEAAV012@PBD@Z
?size@JsonValue@Base@Public@@QBEIXZ
??CJsonValue@Base@Public@@QAEPAVValue@12@XZ
?isArray@JsonValue@Base@Public@@QBE_NXZ
??4JsonValue@Base@Public@@QAEAAV012@ABV012@@Z
??1JsonValue@Base@Public@@QAE@XZ
??0JsonValue@Base@Public@@QAE@W4ValueType@012@@Z
??0JsonValue@Base@Public@@QAE@ABV012@@Z
??0JsonValue@Base@Public@@QAE@ABVValue@12@@Z
??BSharedBuffer@Base@Public@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0SharedBuffer@Base@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?content@HTTPClientRequest@Network@Public@@QAE?AV?$shared_ptr@VWriteContent@Network@Public@@@std@@XZ
?header@HTTPClientRequest@Network@Public@@QAE?AV?$shared_ptr@UHTTPHeader@Network@Public@@@std@@XZ
??1HTTPClientRequest@Network@Public@@UAE@XZ
??0HTTPClientRequest@Network@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4HTTPCacheType@12@@Z
?request@HTTPClient@Network@Public@@QAE_NABV?$shared_ptr@VHTTPAsyncClient@Network@Public@@@std@@ABV?$shared_ptr@VHTTPClientRequest@Network@Public@@@5@ABV?$Function@$$A6AXABV?$shared_ptr@VHTTPClient@Network@Public@@@std@@ABV?$shared_ptr@VHTTPClientRequest@Network@Public@@@2@ABV?$shared_ptr@VHTTPClientResponse@Network@Public@@@2@@Z$$V@Base@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
??1HTTPClient@Network@Public@@UAE@XZ
??0HTTPClient@Network@Public@@QAE@ABV?$shared_ptr@VIOWorker@Network@Public@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?write@WriteContent@Network@Public@@QAEIABVSharedBuffer@Base@3@@Z
??1NetAddr@Network@Public@@QAE@XZ
??0NetAddr@Network@Public@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?content@HTTPClientResponse@Network@Public@@QBE?AV?$shared_ptr@VReadContent@Network@Public@@@std@@XZ
?header@HTTPClientResponse@Network@Public@@QBE?AV?$shared_ptr@UHTTPHeader@Network@Public@@@std@@XZ
??AKeyValueHeaders@Network@Public@@QAEAAVValue@Base@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?push@HTTPHeader@Network@Public@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@Base@3@@Z
?_alloc_@Value@Base@Public@@AAEXPBX@Z
??9SharedBuffer@Base@Public@@QBE_NABV012@@Z
?getExcutableFileFullPath@File@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?load@File@Base@Public@@SA?AVSharedBuffer@23@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?strncasecmp@StringEx@Base@Public@@SAHPBD0I@Z
?iequals@StringEx@Base@Public@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z
?split@StringEx@Base@Public@@SA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@PBDIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?toUint32@Value@Base@Public@@QBEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?stopAndWait@Timer@Base@Public@@QAE_NXZ

msprotocol

?serializeAsBytes@MSPacket@Protocol@Milesight@@SA?AVSharedBuffer@Base@Public@@PBU123@@Z
?working@MSServerInfo@@QBE_NXZ
?parseFromBytes@MSPacket@Protocol@Milesight@@SA_NABVSharedBuffer@Base@Public@@PAU123@_N@Z

msmq

?timeout@MQMessage@MQ@Milesight@@QBEIXZ
?connection@MQMessage@MQ@Milesight@@QAE?AV?$shared_ptr@VMQConnection@MQ@Milesight@@@std@@XZ
?subscribe@MQDispatcher@MQ@Milesight@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAXABV?$Function@$$A6A?AV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@ABV12@@Z$$V@Base@Public@@ABV?$Function@$$A6AXABV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@@Z$$V@78@@Z
?unsubcribe@MQDispatcher@MQ@Milesight@@QAEXPAX@Z
?getSystemServerList@MQDiscover@MQ@Milesight@@QAE?AVErrorInfo@Base@Public@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$shared_ptr@UMSServerInfo@@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$shared_ptr@UMSServerInfo@@@2@@std@@@2@@8@@Z
?to@MQMessage@MQ@Milesight@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?forwardTo@MQMessage@MQ@Milesight@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?errorInfo@MQMessage@MQ@Milesight@@QBE?AVErrorInfo@Base@Public@@XZ
?parseBody@MQMessage@MQ@Milesight@@QBE_NPAUMSPacket@Protocol@3@_N@Z
?buildResponse@MQMessage@MQ@Milesight@@QBE?AV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@ABVErrorInfo@Base@Public@@PBUMSPacket@Protocol@3@@Z
?pushResponse@MQConnection@MQ@Milesight@@QAE?AVErrorInfo@Base@Public@@ABV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@_N@Z

module_interface

?mq@Module_Manager@Module@Milesight@@QAE?AV?$shared_ptr@VMSMQSystemServer@MQ@Milesight@@@std@@XZ
?_ForwardCommandTo@Module@Milesight@@YA?AV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@ABV?$shared_ptr@VModule_Manager@Module@Milesight@@@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@1ABV34@_N@Z
?subscribeDBTable@DataBaseReloadFilter@Module@Milesight@@IAEXABV?$shared_ptr@VModule_Manager@Module@Milesight@@@std@@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@_N@Z
??0DataBaseReloadFilter@Module@Milesight@@QAE@XZ
?sysLimitNum@Configure@Module@Milesight@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?param@Configure@Module@Milesight@@QAEAAUModuleParam@23@XZ
?deleteIotGatewayFailover@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?isDefaultAuthtion@Module_Manager@Module@Milesight@@QAE_NABUMSProtoAuthUserInfo@Protocol@3@@Z
?queryIotGatewayFailover@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@AAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UMSProtoIotGatewayFailoverInfo@Protocol@Milesight@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UMSProtoIotGatewayFailoverInfo@Protocol@Milesight@@@std@@@2@@std@@@Z
?getIotSensorByGatateway@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@AAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UMSProtoIotSensorInfo@Protocol@Milesight@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UMSProtoIotSensorInfo@Protocol@Milesight@@@std@@@2@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UMSProtoIotSensorInfo@Protocol@Milesight@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UMSProtoIotSensorInfo@Protocol@Milesight@@@std@@@2@@2@@std@@@2@@std@@@Z
?deleteIotSensor@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@ABV?$vector@UMSProtoIOTSensorId@Protocol@Milesight@@V?$allocator@UMSProtoIOTSensorId@Protocol@Milesight@@@std@@@std@@@Z
?updateIotSensor@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@ABUMSProtoIotSensorInfos@Protocol@3@@Z
?getIogGateway@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@AAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UMSProtoIotGatewayInfo@Protocol@Milesight@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UMSProtoIotGatewayInfo@Protocol@Milesight@@@std@@@2@@std@@@Z
?deleteIotGateway@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?updateIotGateway@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@ABUMSProtoIotGatewayInfos@Protocol@3@@Z
?eventNotify@Module_Manager@Module@Milesight@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBUMSPacket@Protocol@3@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@22@Z
?pushSystemMessage@Module_Manager@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4MSProtoMessageLevel@Protocol@3@PBUMSPacket@Protocol@3@2ABV?$Function@$$A6AXABV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@@Z$$V@56@I@Z
?directNotifySystemMessage@Module_Manager@Module@Milesight@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBUMSPacket@Protocol@3@1@Z
?isMasterServer@Module_Manager@Module@Milesight@@QAE_NXZ
?isClacMaster@Module_Manager@Module@Milesight@@QAE_NXZ
?logUserActivity@Module_Manager@Module@Milesight@@QAEXABUMSProtoUserLoginInfo@Protocol@3@W4MSProtoLogUserType@53@W4MSProtoLogUserOperation@53@ABUMSProtoCameraInfo@53@ABULogParam@123@@Z
?uninit@AlarmDatabase@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?reset@SystemDatabase@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?registerDeletedCallback@AlarmDatabase@Module@Milesight@@UAEXABV?$Function@$$A6AXW4MSProtoLogSystemLogRecycleType@Protocol@Milesight@@W4MSProtoLogSystemLogRecycleSubType@23@_K2@Z$$V@Base@Public@@@Z
?myServerInfo@ServerDatabase@Module@Milesight@@QAE?AV?$shared_ptr@UServerDBInfo@Module@Milesight@@@std@@XZ
?reset@ServerDatabase@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?uninit@ServerDatabase@Module@Milesight@@MAE?AVErrorInfo@Base@Public@@XZ
?onPoolTimerProc@ServerDatabase@Module@Milesight@@MAEXK@Z
?uninit@LocalDatabase@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?configure@Module_Manager@Module@Milesight@@QAE?AV?$shared_ptr@VConfigure@Module@Milesight@@@std@@XZ
?init@SysInternet@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@ABV?$shared_ptr@VModule_Manager@Module@Milesight@@@std@@@Z
?uninit@SysInternet@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?uninit@SystemDatabase@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?updateIotGatewayFailover@SystemDatabase@Module@Milesight@@QAE?AVErrorInfo@Base@Public@@ABUMSProtoIotGatewayFailoverInfos@Protocol@3@@Z
?systemTimeObj@Module_Manager@Module@Milesight@@QAE?AV?$shared_ptr@VVMSSystemTime@Module@Milesight@@@std@@XZ
?httpAsyncClient@Module_Manager@Module@Milesight@@QAE?AV?$shared_ptr@VHTTPAsyncClient@Network@Public@@@std@@XZ
?ioworker@Module_Manager@Module@Milesight@@QAE?AV?$shared_ptr@VIOWorker@Network@Public@@@std@@XZ
?db@Module_Manager@Module@Milesight@@QAE?AV?$shared_ptr@VSystemDatabase@Module@Milesight@@@std@@XZ
??1Module_Manager@Module@Milesight@@UAE@XZ
?registerDeletedCallback@LogDatabase@Module@Milesight@@UAEXABV?$Function@$$A6AXW4MSProtoLogSystemLogRecycleType@Protocol@Milesight@@W4MSProtoLogSystemLogRecycleSubType@23@_K2@Z$$V@Base@Public@@@Z
?onPoolTimerProc@SystemDatabase@Module@Milesight@@EAEXK@Z
??1VerificationCode@Module@Milesight@@UAE@XZ
??1DataBaseReloadFilter@Module@Milesight@@UAE@XZ
?uninit@EventDatabase@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?registerDeletedCallback@EventDatabase@Module@Milesight@@UAEXABV?$Function@$$A6AXW4MSProtoLogSystemLogRecycleType@Protocol@Milesight@@W4MSProtoLogSystemLogRecycleSubType@23@_K2@Z$$V@Base@Public@@@Z
?uninit@StatisticsDatabase@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?uninit@LogDatabase@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?checkAuthention@Module_Manager@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@ABV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@PAUMSProtoAuthUserInfo@Protocol@3@@Z

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Xlength_error@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock

vcruntime140

_CxxThrowException
__std_type_info_destroy_list
__std_type_info_name
memmove
memset
__std_exception_destroy
__std_terminate
_purecall
__CxxFrameHandler3
__std_exception_copy
__RTDynamicCast
memcpy
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf

kernel32

EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
InitializeSListHead
UnhandledExceptionFilter

Exports

Exports

??0?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@IAE@ABV01@@Z
??0?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@IAE@XZ
??0AlarmDatabase@Module@Milesight@@QAE@ABV012@@Z
??0DBOperationId@Module@Milesight@@QAE@$$QAU012@@Z
??0DBOperationId@Module@Milesight@@QAE@ABU012@@Z
??0DBOperationId@Module@Milesight@@QAE@ABUMSProtoDatabaseLog@Protocol@2@@Z
??0DBOperationId@Module@Milesight@@QAE@ABUOperationLogInfo@OperationLog@12@@Z
??0DBOperationId@Module@Milesight@@QAE@XZ
??0DataBaseReloadFilter@Module@Milesight@@QAE@ABV012@@Z
??0EventDatabase@Module@Milesight@@QAE@ABV012@@Z
??0IModule@Module@Milesight@@QAE@ABV012@@Z
??0IModule@Module@Milesight@@QAE@XZ
??0ISubModule@Module@Milesight@@QAE@ABV012@@Z
??0ISubModule@Module@Milesight@@QAE@XZ
??0LocalDatabase@Module@Milesight@@QAE@ABV012@@Z
??0LogDatabase@Module@Milesight@@QAE@ABV012@@Z
??0ModuleParam@Module@Milesight@@QAE@$$QAU012@@Z
??0ModuleParam@Module@Milesight@@QAE@ABU012@@Z
??0ModuleParam@Module@Milesight@@QAE@XZ
??0Module_Manager@Module@Milesight@@QAE@ABV012@@Z
??0ServerDBInfo@Module@Milesight@@QAE@$$QAU012@@Z
??0ServerDBInfo@Module@Milesight@@QAE@ABU012@@Z
??0ServerDBInfo@Module@Milesight@@QAE@XZ
??0ServerDatabase@Module@Milesight@@QAE@ABV012@@Z
??0StatisticsDatabase@Module@Milesight@@QAE@ABV012@@Z
??0SysInternet@Module@Milesight@@QAE@ABV012@@Z
??0SystemDatabase@Module@Milesight@@QAE@ABV012@@Z
??0VMSSystemTime@Module@Milesight@@QAE@ABV012@@Z
??0VMSSystemTime@Module@Milesight@@QAE@XZ
??0VerificationCode@Module@Milesight@@QAE@ABV012@@Z
??1?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@IAE@XZ
??1DBOperationId@Module@Milesight@@QAE@XZ
??1IModule@Module@Milesight@@UAE@XZ
??1ISubModule@Module@Milesight@@UAE@XZ
??1ModuleParam@Module@Milesight@@QAE@XZ
??1ServerDBInfo@Module@Milesight@@QAE@XZ
??1VMSSystemTime@Module@Milesight@@UAE@XZ
??4?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@IAEAAV01@ABV01@@Z
??4AlarmDatabase@Module@Milesight@@QAEAAV012@ABV012@@Z
??4Configure@Module@Milesight@@QAEAAV012@ABV012@@Z
??4DBOperationId@Module@Milesight@@QAEAAU012@$$QAU012@@Z
??4DBOperationId@Module@Milesight@@QAEAAU012@ABU012@@Z
??4DataBaseReloadFilter@Module@Milesight@@QAEAAV012@ABV012@@Z
??4DataCache@Module@Milesight@@QAEAAV012@ABV012@@Z
??4EventDatabase@Module@Milesight@@QAEAAV012@ABV012@@Z
??4HostManager@Module@Milesight@@QAEAAV012@ABV012@@Z
??4IModule@Module@Milesight@@QAEAAV012@ABV012@@Z
??4ISubModule@Module@Milesight@@QAEAAV012@ABV012@@Z
??4LicenseInterface@Module@Milesight@@QAEAAV012@ABV012@@Z
??4LocalDatabase@Module@Milesight@@QAEAAV012@ABV012@@Z
??4LogDatabase@Module@Milesight@@QAEAAV012@ABV012@@Z
??4ModuleParam@Module@Milesight@@QAEAAU012@$$QAU012@@Z
??4ModuleParam@Module@Milesight@@QAEAAU012@ABU012@@Z
??4Module_Manager@Module@Milesight@@QAEAAV012@ABV012@@Z
??4OperationLog@Module@Milesight@@QAEAAV012@ABV012@@Z
??4ServerDBInfo@Module@Milesight@@QAEAAU012@$$QAU012@@Z
??4ServerDBInfo@Module@Milesight@@QAEAAU012@ABU012@@Z
??4ServerDatabase@Module@Milesight@@QAEAAV012@ABV012@@Z
??4StatisticsDatabase@Module@Milesight@@QAEAAV012@ABV012@@Z
??4SysInternet@Module@Milesight@@QAEAAV012@ABV012@@Z
??4SystemDatabase@Module@Milesight@@QAEAAV012@ABV012@@Z
??4VMSSystemTime@Module@Milesight@@QAEAAV012@ABV012@@Z
??4VerificationCode@Module@Milesight@@QAEAAV012@ABV012@@Z
??4VersionManager@Module@Milesight@@QAEAAV012@ABV012@@Z
??MDBOperationId@Module@Milesight@@QBE_NABU012@@Z
??_7AlarmDatabase@Module@Milesight@@6B@
??_7DataBaseReloadFilter@Module@Milesight@@6B@
??_7EventDatabase@Module@Milesight@@6B@
??_7IModule@Module@Milesight@@6B@
??_7ISubModule@Module@Milesight@@6B@
??_7LocalDatabase@Module@Milesight@@6B@
??_7LogDatabase@Module@Milesight@@6B@
??_7Module_Manager@Module@Milesight@@6B@
??_7ServerDatabase@Module@Milesight@@6B@
??_7StatisticsDatabase@Module@Milesight@@6B@
??_7SysInternet@Module@Milesight@@6B@
??_7SystemDatabase@Module@Milesight@@6B@
??_7VMSSystemTime@Module@Milesight@@6B@
??_7VerificationCode@Module@Milesight@@6B@
?init@ISubModule@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@ABV?$shared_ptr@VModule_Manager@Module@Milesight@@@std@@@Z
?setModuleManager@IModule@Module@Milesight@@QAEXABV?$shared_ptr@VModule_Manager@Module@Milesight@@@std@@@Z
?shared_from_this@?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@QAE?AV?$shared_ptr@VModule_Manager@Module@Milesight@@@2@XZ
?shared_from_this@?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@QBE?AV?$shared_ptr@$$CBVModule_Manager@Module@Milesight@@@2@XZ
?streamManager@IModule@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@AAV?$map@W4StreamUrlType@Protocol@Milesight@@V?$shared_ptr@VIStreamManager@Module@Milesight@@@std@@U?$less@W4StreamUrlType@Protocol@Milesight@@@5@V?$allocator@U?$pair@$$CBW4StreamUrlType@Protocol@Milesight@@V?$shared_ptr@VIStreamManager@Module@Milesight@@@std@@@std@@@5@@std@@@Z
?toId@DBOperationId@Module@Milesight@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V45@@Z
?toString@DBOperationId@Module@Milesight@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?uninit@ISubModule@Module@Milesight@@UAE?AVErrorInfo@Base@Public@@XZ
?weak_from_this@?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@QAE?AV?$weak_ptr@VModule_Manager@Module@Milesight@@@2@XZ
?weak_from_this@?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@QBE?AV?$weak_ptr@$$CBVModule_Manager@Module@Milesight@@@2@XZ
createModule

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eaf2627d80d653a25ca50358d669bd69

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

base

msprotocol

msmq

module_interface

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 272KB - Virtual size: 271KB

.rdata Size: 73KB - Virtual size: 73KB

.data Size: 18KB - Virtual size: 19KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 272KB - Virtual size: 271KB

.rdata
Size: 73KB - Virtual size: 73KB

.data
Size: 18KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 17KB - Virtual size: 16KB