b7a3d9285f1fd0d9c7f9c317ecf1e3061d2d6303b627d807d7daf5f78a3cd019

Sharing

Copy URL Twitter E-mail

General

Target

b7a3d9285f1fd0d9c7f9c317ecf1e3061d2d6303b627d807d7daf5f78a3cd019
Size

3.1MB
MD5

e41d8cc16e38aef941ef9b80afb0e475
SHA1

f12169d6917fe78a0ca1f33b2e78f874ce9e75f3
SHA256

b7a3d9285f1fd0d9c7f9c317ecf1e3061d2d6303b627d807d7daf5f78a3cd019
SHA512

0ecf019a1e3621a8a9fd7bde6b33461ad238383e029c749a004659f618d06ad15696d0dc8c1ea89d15a98fb2ae8ddadfc7c5038d2b708bba687bf90a8d1b61f6
SSDEEP

49152:nm3fmd0hRnjcasB/jJfJemBrqA69AwUPat9yPBQMLvtXsDYtBc5:U/joqAgl9lM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a3d9285f1fd0d9c7f9c317ecf1e3061d2d6303b627d807d7daf5f78a3cd019

Files

b7a3d9285f1fd0d9c7f9c317ecf1e3061d2d6303b627d807d7daf5f78a3cd019
.dll windows:6 windows x64 arch:x64

a41d260b0c4ddbb96277dd0d21f2975c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

base

??0Value@Base@Public@@QEAA@AEBV012@@Z
?printer@Base@Public@@YAXW4LOG_Level@12@PEBD1H1AEBV?$vector@VValue@Base@Public@@V?$allocator@VValue@Base@Public@@@std@@@std@@@Z
?getCurrentMilliSecond@Time@Base@Public@@SA_KXZ
?destroyThread@Thread@Base@Public@@QEAA_NXZ
?createThread@Thread@Base@Public@@QEAA_NXZ
??1Thread@Base@Public@@UEAA@XZ
??0Thread@Base@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HHH@Z
??1SharedBuffer@Base@Public@@UEAA@XZ
??0SharedBuffer@Base@Public@@QEAA@XZ
??4NetAddr@Network@Public@@QEAAAEAV012@AEBV012@@Z
??1NetAddr@Network@Public@@QEAA@XZ
??0NetAddr@Network@Public@@QEAA@W4InetType@12@@Z
??0NetAddr@Network@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?stopAndWait@Timer@Base@Public@@QEAA_NXZ
?start@Timer@Base@Public@@QEAA_NAEBV?$Function@$$A6AXK@Z$$V@23@IIK@Z
??1Timer@Base@Public@@UEAA@XZ
??0Timer@Base@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4SharedBuffer@Base@Public@@QEAAAEAV012@AEBV012@@Z
?__reserve@SharedBuffer@Base@Public@@UEAAPEAD_KPEBDH@Z
?__resize@SharedBuffer@Base@Public@@UEAAX_KPEBDH@Z
?size@SharedBuffer@Base@Public@@UEBA_KXZ
?buf@SharedBuffer@Base@Public@@UEAAPEADXZ
??0SharedBuffer@Base@Public@@QEAA@AEBV012@@Z
??BErrorInfo@Base@Public@@QEBA_NXZ
?getVMSUidFromServerBySystemIdAsync@msP2PUid@Base@Milesight@@QEAA?AVErrorInfo@2Public@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$shared_ptr@VHTTPAsyncClient@Network@Public@@@7@AEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z$$V@25@I@Z
??1msP2PUid@Base@Milesight@@QEAA@XZ
??0msP2PUid@Base@Milesight@@QEAA@AEBV?$shared_ptr@VIOWorker@Network@Public@@@std@@@Z
?creatThreadEx@ThreadEx@Base@Public@@SA?AV?$shared_ptr@VThread@Base@Public@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@AEBV?$Function@$$A6AXPEAVThread@Base@Public@@PEAX@Z$$V@23@PEAXHHH@Z
?sleep@Thread@Base@Public@@SAXH@Z
?looping@Thread@Base@Public@@QEBA_NXZ
??0Value@Base@Public@@QEAA@H@Z
?getIPCUidFromServerByMacAsync@msP2PUid@Base@Milesight@@QEAA?AVErrorInfo@2Public@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$shared_ptr@VHTTPAsyncClient@Network@Public@@@7@AEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z$$V@25@I@Z
??4ErrorInfo@Base@Public@@QEAAAEAV012@AEBV012@@Z
??0ErrorInfo@Base@Public@@QEAA@AEBV012@@Z
??0Value@Base@Public@@QEAA@_K@Z
??7ErrorInfo@Base@Public@@QEBA_NXZ
?getCurrentTime@Time@Base@Public@@SA?AV123@XZ
?makeTime@Time@Base@Public@@QEBA_KXZ
?_alloc_@Value@Base@Public@@AEAAXPEBX@Z
??0Value@Base@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Value@Base@Public@@QEAA@_N@Z
?getCurrentThreadID@Thread@Base@Public@@SAHXZ
?removeDispatch@ThreadPool@Base@Public@@QEAAXPEAX@Z
?dispatch@ThreadPool@Base@Public@@QEAA_NPEAXAEBV?$Function@$$A6AXAEBV?$shared_ptr@UThreadPoolParam@ThreadPool@Base@Public@@@std@@@Z$$V@23@AEBV?$shared_ptr@UThreadPoolParam@ThreadPool@Base@Public@@@std@@@Z
?post@Semaphore@Base@Public@@UEAAHXZ
?pend@Semaphore@Base@Public@@UEAAHXZ
?pend@Semaphore@Base@Public@@UEAAHI@Z
??1Semaphore@Base@Public@@UEAA@XZ
??0Semaphore@Base@Public@@QEAA@H@Z
??0NetAddr@Network@Public@@QEAA@AEBV012@@Z
?waitAllOtherCallbackThreadUsedEnd@ThreadUsed@Network@Public@@QEAAXXZ
?callbackThreadUsedEnd@ThreadUsed@Network@Public@@QEAA_NXZ
?callbackThreadUsedStart@ThreadUsed@Network@Public@@QEAA_NXZ
?quit@ThreadUsed@Network@Public@@UEAAXXZ
??1ThreadUsed@Network@Public@@UEAA@XZ
??0ThreadUsed@Network@Public@@QEAA@XZ
??4SBuf@Socket@Network@Public@@QEAAAEAU0123@AEBU0123@@Z
??0SBuf@Socket@Network@Public@@QEAA@AEBU0123@@Z
??1Socket@Network@Public@@UEAA@XZ
??0Socket@Network@Public@@QEAA@AEBV?$shared_ptr@VIOWorker@Network@Public@@@std@@@Z
??1SBuf@Socket@Network@Public@@UEAA@XZ
??0Value@Base@Public@@QEAA@PEBD@Z
??0Value@Base@Public@@QEAA@XZ
??1Value@Base@Public@@QEAA@XZ
??4Value@Base@Public@@QEAAAEAV012@AEBV012@@Z
??0ErrorInfo@Base@Public@@QEAA@W4ErrorCode@12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?cancelThread@Thread@Base@Public@@QEAA_NXZ
??1ErrorInfo@Base@Public@@QEAA@XZ

msvcp140

?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Mtx_unlock
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ

iphlpapi

SendARP

vcruntime140

strrchr
wcsstr
__vcrt_LoadLibraryExW
__vcrt_GetModuleFileNameW
__C_specific_handler_noexcept
__std_type_info_destroy_list
__C_specific_handler
strchr
memchr
memcmp
memmove
memcpy
memset
__std_type_info_name
_purecall
__std_terminate
__std_exception_copy
__RTDynamicCast
__std_exception_destroy
__CxxFrameHandler3
strstr
_CxxThrowException

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free
calloc
_callnewh

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_seh_filter_dll
strerror
_configure_narrow_argv
_initialize_narrow_environment
terminate
_errno
__sys_nerr
_initialize_onexit_table
abort
_execute_onexit_table
_crt_atexit
raise
_exit
_cexit
_initterm
_wassert
_initterm_e
_invalid_parameter_noinfo_noreturn
_getpid
_register_onexit_function
strerror_s
signal

api-ms-win-crt-stdio-l1-1-0

_write
__stdio_common_vsscanf
feof
ferror
fgets
fputs
__stdio_common_vfprintf
setbuf
__stdio_common_vsprintf
__acrt_iob_func
_read
_fileno
fread
fwrite
_setmode
_close
__stdio_common_vsnprintf_s
__stdio_common_vswprintf
_wfopen
clearerr
__stdio_common_vsprintf_s
fflush
_open
fputc
setvbuf
fclose
fopen_s
fopen
fseek
_lseeki64
ftell

api-ms-win-crt-string-l1-1-0

strcpy_s
strcat_s
strpbrk
toupper
isalnum
_strdup
tolower
strncpy_s
strnlen
strncpy
isdigit
strcmp
strncmp
strlen
strcpy
strspn
strcspn
isspace
_strnicmp
_stricmp
strncat

api-ms-win-crt-time-l1-1-0

_get_timezone
_get_daylight
_time64
strftime
_localtime64_s
_gmtime64
_tzset
_gmtime64_s

api-ms-win-crt-convert-l1-1-0

strtoull
wcstombs
atoi
strtod
strtoul
strtol
strtoll

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

rand
bsearch
qsort
srand

api-ms-win-crt-filesystem-l1-1-0

_access
_fstat64
_unlink
_stat64i32
_fstat64i32
_stat64
rename
remove

ws2_32

setsockopt
sendto
recvfrom
ioctlsocket
freeaddrinfo
getaddrinfo
WSAGetLastError
send
select
recv
listen
htonl
getsockopt
getsockname
connect
bind
accept
__WSAFDIsSet
WSAIoctl
socket
closesocket
WSACleanup
WSAStartup
ntohs
inet_addr
htons
WSASetLastError
shutdown
getnameinfo
getpeername
inet_pton
WSACloseEvent
gethostname
WSAEventSelect
WSACreateEvent
WSAEnumNetworkEvents

wldap32

ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord26
ord22
ord41
ord50
ord60
ord46
ord217
ord143
ord211

crypt32

CertFreeCertificateContext
CertEnumCertificatesInStore
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertOpenSystemStoreA
CertCloseStore

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
TlsSetValue
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
GetTickCount
ExitThread
CloseHandle
WaitForSingleObject
SetWaitableTimer
RaiseException
GetSystemTimeAsFileTime
CreateWaitableTimerA
CreateThread
GetCurrentThreadId
TryEnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetLastError
VerifyVersionInfoA
VerSetConditionMask
WaitForMultipleObjects
PeekNamedPipe
ReadFile
GetEnvironmentVariableA
CompareFileTime
WaitForSingleObjectEx
MoveFileExA
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
QueryPerformanceFrequency
SleepEx
InitializeCriticalSectionEx
GetVersion
FormatMessageW
WriteFile
GetFileType
FindNextFileW
FindFirstFileW
FindClose
TlsFree
HeapAlloc
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
GetStdHandle
SystemTimeToFileTime
GetSystemTime
SetLastError
GetProcAddress
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
UnhandledExceptionFilter

user32

GetUserObjectInformationW
MessageBoxW
GetProcessWindowStation

advapi32

RegisterEventSourceW
ReportEventW
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
DeregisterEventSource

api-ms-win-crt-math-l1-1-0

_dclass

api-ms-win-crt-locale-l1-1-0

setlocale

bcrypt

BCryptGenRandom

Exports

Exports

??0?$enable_shared_from_this@VMSP2PDeviceUuid@P2P@Milesight@@@std@@IEAA@AEBV01@@Z
??0?$enable_shared_from_this@VMSP2PDeviceUuid@P2P@Milesight@@@std@@IEAA@XZ
??0?$enable_shared_from_this@VMSP2PSessionDevice@P2P@Milesight@@@std@@IEAA@AEBV01@@Z
??0?$enable_shared_from_this@VMSP2PSessionDevice@P2P@Milesight@@@std@@IEAA@XZ
??0MSP2PDeviceUuid@P2P@Milesight@@QEAA@AEBV012@@Z
??0MSP2PDeviceUuid@P2P@Milesight@@QEAA@AEBV?$shared_ptr@VIOWorker@Network@Public@@@std@@AEBV?$shared_ptr@VHTTPAsyncClient@Network@Public@@@4@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
??0MSP2PSessionClient@P2P@Milesight@@QEAA@AEBV012@@Z
??0MSP2PSessionClient@P2P@Milesight@@QEAA@AEBV?$shared_ptr@VIOWorker@Network@Public@@@std@@AEBV?$shared_ptr@VHTTPAsyncClient@Network@Public@@@4@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
??0MSP2PSessionDevice@P2P@Milesight@@AEAA@AEBV?$shared_ptr@VMSP2PDeviceUuid@P2P@Milesight@@@std@@W4MSProtoStreamType@Protocol@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@2AEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@@Z$$V@Base@Public@@IAEBV?$shared_ptr@VThreadPool@Base@Public@@@4@AEBV?$Function@$$A6AXAEBV?$shared_ptr@VMSP2PSessionDeviceLogin@P2P@Milesight@@@std@@@Z$$V@9Public@@@Z
??0MSP2PSessionDevice@P2P@Milesight@@QEAA@AEBV012@@Z
??0MSP2PSessionDeviceManager@P2P@Milesight@@QEAA@AEBV012@@Z
??0MSP2PSessionDeviceManager@P2P@Milesight@@QEAA@XZ
??0MSP2PSessionServer@P2P@Milesight@@QEAA@AEBV012@@Z
??0MSP2PSessionServer@P2P@Milesight@@QEAA@AEBV?$shared_ptr@VIOWorker@Network@Public@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
??1?$enable_shared_from_this@VMSP2PDeviceUuid@P2P@Milesight@@@std@@IEAA@XZ
??1?$enable_shared_from_this@VMSP2PSessionDevice@P2P@Milesight@@@std@@IEAA@XZ
??1MSP2PDeviceUuid@P2P@Milesight@@QEAA@XZ
??1MSP2PSessionClient@P2P@Milesight@@UEAA@XZ
??1MSP2PSessionDevice@P2P@Milesight@@UEAA@XZ
??1MSP2PSessionDeviceManager@P2P@Milesight@@UEAA@XZ
??1MSP2PSessionServer@P2P@Milesight@@UEAA@XZ
??4?$enable_shared_from_this@VMSP2PDeviceUuid@P2P@Milesight@@@std@@IEAAAEAV01@AEBV01@@Z
??4?$enable_shared_from_this@VMSP2PSessionDevice@P2P@Milesight@@@std@@IEAAAEAV01@AEBV01@@Z
??4MSP2P@P2P@Milesight@@QEAAAEAV012@$$QEAV012@@Z
??4MSP2P@P2P@Milesight@@QEAAAEAV012@AEBV012@@Z
??4MSP2PDeviceUuid@P2P@Milesight@@QEAAAEAV012@AEBV012@@Z
??4MSP2PSessionClient@P2P@Milesight@@QEAAAEAV012@AEBV012@@Z
??4MSP2PSessionDevice@P2P@Milesight@@QEAAAEAV012@AEBV012@@Z
??4MSP2PSessionDeviceManager@P2P@Milesight@@QEAAAEAV012@AEBV012@@Z
??4MSP2PSessionServer@P2P@Milesight@@QEAAAEAV012@AEBV012@@Z
??_7MSP2PSessionClient@P2P@Milesight@@6B@
??_7MSP2PSessionDevice@P2P@Milesight@@6B@
??_7MSP2PSessionDeviceManager@P2P@Milesight@@6B@
??_7MSP2PSessionServer@P2P@Milesight@@6B@
?addCommand@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@HAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@HAEBVSharedBuffer@23@@Z$$V@56@I@Z
?connect@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@XZ
?createDevice@MSP2PSessionDeviceManager@P2P@Milesight@@QEAA?AV?$shared_ptr@VMSP2PSessionDevice@P2P@Milesight@@@std@@AEBV?$shared_ptr@VMSP2PDeviceUuid@P2P@Milesight@@@5@W4MSProtoStreamType@Protocol@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@2AEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@@Z$$V@Base@Public@@IAEBV?$shared_ptr@VThreadPool@Base@Public@@@5@@Z
?createSocket@MSP2PSessionClient@P2P@Milesight@@QEAA?AV?$shared_ptr@VSocket@Network@Public@@@std@@W4MSP2PSocketType@@@Z
?disconnect@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@XZ
?getUuid@MSP2PDeviceUuid@P2P@Milesight@@QEAAXAEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z$$V@Base@Public@@@Z
?init@MSP2P@P2P@Milesight@@SA?AVErrorInfo@Base@Public@@HW4MSProtoSystemP2PRegion@Protocol@3@@Z
?initStatus@MSP2P@P2P@Milesight@@SA_NXZ
?macAddr@MSP2PDeviceUuid@P2P@Milesight@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?onPoolCommand@MSP2PSessionDevice@P2P@Milesight@@AEAAXXZ
?onPoolReadWrite@MSP2PSessionDevice@P2P@Milesight@@AEAAXXZ
?onPoolTimerProc@MSP2PDeviceUuid@P2P@Milesight@@QEAAXXZ
?onPoolTimerProc@MSP2PSessionDevice@P2P@Milesight@@AEAAXAEA_K@Z
?onPoolTimerProc@MSP2PSessionDeviceManager@P2P@Milesight@@AEAAXK@Z
?poolDataThread@MSP2PSessionDeviceManager@P2P@Milesight@@AEAAXPEAVThread@Base@Public@@PEAX@Z
?sendTalkData@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@HAEBVSharedBuffer@56@@Z
?sessionStatus@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@XZ
?setSocketCallback@MSP2PSessionServer@P2P@Milesight@@QEAAXAEBV?$Function@$$A6AXAEBV?$shared_ptr@VSocket@Network@Public@@@std@@W4MSP2PSocketType@@@Z$$V@Base@Public@@@Z
?shared_from_this@?$enable_shared_from_this@VMSP2PDeviceUuid@P2P@Milesight@@@std@@QEAA?AV?$shared_ptr@VMSP2PDeviceUuid@P2P@Milesight@@@2@XZ
?shared_from_this@?$enable_shared_from_this@VMSP2PDeviceUuid@P2P@Milesight@@@std@@QEBA?AV?$shared_ptr@$$CBVMSP2PDeviceUuid@P2P@Milesight@@@2@XZ
?shared_from_this@?$enable_shared_from_this@VMSP2PSessionDevice@P2P@Milesight@@@std@@QEAA?AV?$shared_ptr@VMSP2PSessionDevice@P2P@Milesight@@@2@XZ
?shared_from_this@?$enable_shared_from_this@VMSP2PSessionDevice@P2P@Milesight@@@std@@QEBA?AV?$shared_ptr@$$CBVMSP2PSessionDevice@P2P@Milesight@@@2@XZ
?start@MSP2PSessionClient@P2P@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?start@MSP2PSessionServer@P2P@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?startLiveStream@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBV?$Function@$$A6AX_NAEBVSharedBuffer@Base@Public@@AEBUMediaInfo@MSP2PSessionDevice@P2P@Milesight@@@Z$$V@56@AEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@@Z$$V@56@I@Z
?startTalk@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@@Z$$V@56@I@Z
?status@MSP2PSessionClient@P2P@Milesight@@QEBA?AW4NetStatus@Network@Public@@XZ
?status@MSP2PSessionServer@P2P@Milesight@@QEAA?AW4RunStatus@123@XZ
?stop@MSP2PSessionClient@P2P@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?stop@MSP2PSessionServer@P2P@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?stopLiveStream@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@XZ
?stopTalk@MSP2PSessionDevice@P2P@Milesight@@QEAA?AVErrorInfo@Base@Public@@XZ
?uninit@MSP2P@P2P@Milesight@@SA?AVErrorInfo@Base@Public@@XZ
?uuid@MSP2PDeviceUuid@P2P@Milesight@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?weak_from_this@?$enable_shared_from_this@VMSP2PDeviceUuid@P2P@Milesight@@@std@@QEAA?AV?$weak_ptr@VMSP2PDeviceUuid@P2P@Milesight@@@2@XZ
?weak_from_this@?$enable_shared_from_this@VMSP2PDeviceUuid@P2P@Milesight@@@std@@QEBA?AV?$weak_ptr@$$CBVMSP2PDeviceUuid@P2P@Milesight@@@2@XZ
?weak_from_this@?$enable_shared_from_this@VMSP2PSessionDevice@P2P@Milesight@@@std@@QEAA?AV?$weak_ptr@VMSP2PSessionDevice@P2P@Milesight@@@2@XZ
?weak_from_this@?$enable_shared_from_this@VMSP2PSessionDevice@P2P@Milesight@@@std@@QEBA?AV?$weak_ptr@$$CBVMSP2PSessionDevice@P2P@Milesight@@@2@XZ
IOTC_WakeUp_DeInit
IOTC_WakeUp_Get_SleepPacket2
IOTC_WakeUp_Init
IOTC_WakeUp_Setup_Auto_WakeUp
IOTC_WakeUp_WakeDevice
_json_c_strerror
json_c_object_sizeof
json_c_set_serialization_double_format
json_c_shallow_copy_default
json_object_array_add
json_object_array_bsearch
json_object_array_del_idx
json_object_array_get_idx
json_object_array_length
json_object_array_put_idx
json_object_array_shrink
json_object_array_sort
json_object_deep_copy
json_object_double_to_json_string
json_object_equal
json_object_free_userdata
json_object_from_fd
json_object_from_fd_ex
json_object_from_file
json_object_get
json_object_get_array
json_object_get_boolean
json_object_get_double
json_object_get_int
json_object_get_int64
json_object_get_object
json_object_get_string
json_object_get_string_len
json_object_get_type
json_object_get_uint64
json_object_get_userdata
json_object_int_inc
json_object_is_type
json_object_iter_begin
json_object_iter_end
json_object_iter_equal
json_object_iter_init_default
json_object_iter_next
json_object_iter_peek_name
json_object_iter_peek_value
json_object_new_array
json_object_new_array_ext
json_object_new_boolean
json_object_new_double
json_object_new_double_s
json_object_new_int
json_object_new_int64
json_object_new_null
json_object_new_object
json_object_new_string
json_object_new_string_len
json_object_new_uint64
json_object_object_add
json_object_object_add_ex
json_object_object_del
json_object_object_get
json_object_object_get_ex
json_object_object_length
json_object_put
json_object_set_boolean
json_object_set_double
json_object_set_int
json_object_set_int64
json_object_set_serializer
json_object_set_string
json_object_set_string_len
json_object_set_uint64
json_object_set_userdata
json_object_to_fd
json_object_to_file
json_object_to_file_ext
json_object_to_json_string
json_object_to_json_string_ext
json_object_to_json_string_length
json_object_userdata_to_json_string
json_parse_double
json_parse_int64
json_parse_uint64
json_tokener_error_desc
json_tokener_free
json_tokener_get_error
json_tokener_get_parse_end
json_tokener_new
json_tokener_new_ex
json_tokener_parse
json_tokener_parse_ex
json_tokener_parse_verbose
json_tokener_reset
json_tokener_set_flags
json_type_to_name
json_util_get_last_err
printbuf_free
printbuf_memappend
printbuf_memset
printbuf_new
printbuf_reset
sprintbuf

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 788KB - Virtual size: 787KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a41d260b0c4ddbb96277dd0d21f2975c

Headers

DLL Characteristics

File Characteristics

Imports

base

msvcp140

iphlpapi

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

ws2_32

wldap32

crypt32

kernel32

user32

advapi32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

bcrypt

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 788KB - Virtual size: 787KB

.data Size: 55KB - Virtual size: 159KB

.pdata Size: 98KB - Virtual size: 97KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 28KB - Virtual size: 28KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 788KB - Virtual size: 787KB

.data
Size: 55KB - Virtual size: 159KB

.pdata
Size: 98KB - Virtual size: 97KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 28KB - Virtual size: 28KB