e26381215ebb8544d03398090cb8dae0d46b23bd1fa737643c6d2e4a03c6060c

Sharing

Copy URL

Twitter E-mail

General

Target

e26381215ebb8544d03398090cb8dae0d46b23bd1fa737643c6d2e4a03c6060c
Size

565KB
MD5

1577cc464bd90de2758594d0e539edeb
SHA1

96baf3041b236b9c438bd595c184b93671a22629
SHA256

e26381215ebb8544d03398090cb8dae0d46b23bd1fa737643c6d2e4a03c6060c
SHA512

06c17c46ecb60a9edd159f5d9cbfba95786bec9dcc777ddb079c42a8e8f4c8b200166c71d2f67d18aaec92f7592e06ad9aea846da61164be2a5b3e2b8e1b82ef
SSDEEP

6144:sNoVEJMl1TXiwOwyzg20MuhahNdK3TD7hPMA4wKByf8BRuFMBRDmULJSW81JL:vf12wOwGg7kkX7hveRBkV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e26381215ebb8544d03398090cb8dae0d46b23bd1fa737643c6d2e4a03c6060c

Files

e26381215ebb8544d03398090cb8dae0d46b23bd1fa737643c6d2e4a03c6060c
.dll windows:6 windows x64 arch:x64

85e127c46507b924f2de813aeee9173d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

base

?getOemInfo@OEMInfo@@SA?AUOEMDefine@@XZ
??1ErrorInfo@Base@Public@@QEAA@XZ
??0ErrorInfo@Base@Public@@QEAA@W4ErrorCode@12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getCurrentMilliSecond@Time@Base@Public@@SA_KXZ
?BinToHex@StringEx@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV45@_N@Z
??4Version@Base@Public@@QEAAAEAU012@AEBU012@@Z
??1Version@Base@Public@@UEAA@XZ
??0Version@Base@Public@@QEAA@XZ
??0Version@Base@Public@@QEAA@AEBU012@@Z
?toString@Value@Base@Public@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV45@@Z
??4Value@Base@Public@@QEAAAEAV012@AEBV012@@Z
??1Value@Base@Public@@QEAA@XZ
??0Value@Base@Public@@QEAA@XZ
??0Value@Base@Public@@QEAA@PEBD@Z
??0Value@Base@Public@@QEAA@H@Z
??0Value@Base@Public@@QEAA@I@Z
??0Value@Base@Public@@QEAA@_K@Z
??0Value@Base@Public@@QEAA@AEBV012@@Z
?printer@Base@Public@@YAXW4LOG_Level@12@PEBD1H1AEBV?$vector@VValue@Base@Public@@V?$allocator@VValue@Base@Public@@@std@@@std@@@Z
??4SharedBuffer@Base@Public@@QEAAAEAV012@AEBV012@@Z
??1SharedBuffer@Base@Public@@UEAA@XZ
??0SharedBuffer@Base@Public@@QEAA@XZ
??7ErrorInfo@Base@Public@@QEBA_NXZ
??BErrorInfo@Base@Public@@QEBA_NXZ
??4ErrorInfo@Base@Public@@QEAAAEAV012@AEBV012@@Z
?_alloc_@Value@Base@Public@@AEAAXPEBX@Z
??0Value@Base@Public@@QEAA@_N@Z
?getExcutableFileFullPath@File@Base@Public@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?strncasecmp@StringEx@Base@Public@@SAHPEBD0_K@Z
?strcasecmp@StringEx@Base@Public@@SAHPEBD0@Z
?indexOfByCase@StringEx@Base@Public@@SA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?getProcAddr@DynamicLib@Base@Public@@QEAAPEAXPEBD@Z
?load@DynamicLib@Base@Public@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1DynamicLib@Base@Public@@QEAA@XZ
??0DynamicLib@Base@Public@@QEAA@_N@Z
?read@Directory@Base@Public@@UEAA_NAEAUDirent@23@@Z
??1Directory@Base@Public@@UEAA@XZ
??0Directory@Base@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1Dirent@Base@Public@@QEAA@XZ
??0Dirent@Base@Public@@QEAA@XZ
??0ErrorInfo@Base@Public@@QEAA@AEBV012@@Z
??0Value@Base@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?createProcess@Process@Base@Public@@SA?AV?$shared_ptr@VProcess@Base@Public@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@_N22@Z
?getStringStream@Guid@Base@Public@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1Guid@Base@Public@@UEAA@XZ
?createGuid@Guid@Base@Public@@SA?AV123@XZ
?getAvailablePort@Host@Base@Public@@SAGGW4SocketType@23@@Z
??1URL@Base@Public@@UEAA@XZ
??0URL@Base@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0SharedBuffer@Base@Public@@QEAA@AEBV012@@Z
?stopAndWait@Timer@Base@Public@@QEAA_NXZ
?start@Timer@Base@Public@@QEAA_NAEBV?$Function@$$A6AXK@Z$$V@23@IIK@Z
??1Timer@Base@Public@@UEAA@XZ
??0Timer@Base@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1IOWorker@Network@Public@@QEAA@XZ
??0IOWorker@Network@Public@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVThreadNum@012@W4Priority@Thread@Base@2@@Z
??1ThreadNum@IOWorker@Network@Public@@QEAA@XZ
?postEvent@IOWorker@Network@Public@@QEAA_NAEBV?$Function@$$A6AXAEBV?$shared_ptr@UEventParam@IOWorker@Network@Public@@@std@@@Z$$V@Base@3@AEBV?$shared_ptr@UEventParam@IOWorker@Network@Public@@@std@@@Z
??0EventParam@IOWorker@Network@Public@@QEAA@XZ
??1EventParam@IOWorker@Network@Public@@UEAA@XZ

rtsp

??0RTSPClientManager@RTSP@Public@@QEAA@AEBV?$shared_ptr@VIOWorker@Network@Public@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
??1RTSPClientManager@RTSP@Public@@QEAA@XZ

msprotocol

?buildTalkbackStreamUrl@MSStreamUrl@Protocol@Milesight@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV45@I00AEBUCameraId@@@Z
?working@MSServerInfo@@QEBA_NXZ
?parseFromBytes@MSPacket@Protocol@Milesight@@SA_NAEBVSharedBuffer@Base@Public@@PEAU123@_N@Z
?buildAnrStreamUrl@MSStreamUrl@Protocol@Milesight@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV45@I00AEBUCameraId@@W4MSProtoStreamType@23@_K3@Z
?buildLiveStreamUrl@MSStreamUrl@Protocol@Milesight@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV45@I00AEBUCameraId@@W4MSProtoStreamType@23@_N3@Z
?serializeAsBytes@MSPacket@Protocol@Milesight@@SA?AVSharedBuffer@Base@Public@@PEBU123@@Z

msmq

?sn@MQMessage@MQ@Milesight@@QEBAIXZ
?getSystemServerList@MQDiscover@MQ@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$shared_ptr@UMSServerInfo@@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$shared_ptr@UMSServerInfo@@@2@@std@@@2@@8@@Z
?from@MQMessage@MQ@Milesight@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?pushMessageRequest@MQConnection@MQ@Milesight@@QEAAIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBUMSPacket@Protocol@3@1W4MSProtoMessageLevel@73@AEBV?$Function@$$A6AXAEBV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@@Z$$V@Base@Public@@I@Z
?pushResponse@MQConnection@MQ@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@_N@Z
?forwardMessageTo@MQConnection@MQ@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AEBV?$shared_ptr@VMQMessage@MQ@Milesight@@@8@PEBUMSPacket@Protocol@3@@Z
?to@MQMessage@MQ@Milesight@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?buildResponse@MQMessage@MQ@Milesight@@QEBA?AV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@AEBVErrorInfo@Base@Public@@PEBUMSPacket@Protocol@3@@Z
?parseBody@MQMessage@MQ@Milesight@@QEBA_NPEAUMSPacket@Protocol@3@_N@Z
?unsubcribe@MQDispatcher@MQ@Milesight@@QEAAXPEAX@Z
?subscribe@MQDispatcher@MQ@Milesight@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAXAEBV?$Function@$$A6A?AV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@AEBV12@@Z$$V@Base@Public@@AEBV?$Function@$$A6AXAEBV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@@Z$$V@78@@Z
?connection@MQMessage@MQ@Milesight@@QEAA?AV?$shared_ptr@VMQConnection@MQ@Milesight@@@std@@XZ
?userAuthen@MQMessage@MQ@Milesight@@QEBA?AVSharedBuffer@Base@Public@@XZ
?parseUserAuthen@MQMessage@MQ@Milesight@@QEBA_NPEAUMSPacket@Protocol@3@_N@Z
?setBody@MQMessage@MQ@Milesight@@QEAA_NAEBVSharedBuffer@Base@Public@@@Z
?timeout@MQMessage@MQ@Milesight@@QEBAIXZ
?errorInfo@MQMessage@MQ@Milesight@@QEBA?AVErrorInfo@Base@Public@@XZ
?forwardTo@MQMessage@MQ@Milesight@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

module_interface

?updateStatisticsVehicleData@StatisticsDatabase@Module@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBUCameraId@@I@Z
?ioworker@Module_Manager@Module@Milesight@@QEAA?AV?$shared_ptr@VIOWorker@Network@Public@@@std@@XZ
?subscribeDBTable@DataBaseReloadFilter@Module@Milesight@@IEAAXAEBV?$shared_ptr@VModule_Manager@Module@Milesight@@@std@@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@_N@Z
??0DataBaseReloadFilter@Module@Milesight@@QEAA@XZ
?license@Module_Manager@Module@Milesight@@QEAA?AV?$shared_ptr@VLicenseInterface@Module@Milesight@@@std@@XZ
?configure@Module_Manager@Module@Milesight@@QEAA?AV?$shared_ptr@VConfigure@Module@Milesight@@@std@@XZ
?checkAuthention@Module_Manager@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@AEBV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@PEAUMSProtoAuthUserInfo@Protocol@3@@Z
?pushSystemMessage@Module_Manager@Module@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4MSProtoMessageLevel@Protocol@3@PEBUMSPacket@Protocol@3@2AEBV?$Function@$$A6AXAEBV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@@Z$$V@56@I@Z
?directNotifySystemMessage@Module_Manager@Module@Milesight@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBUMSPacket@Protocol@3@1@Z
?systemTimeObj@Module_Manager@Module@Milesight@@QEAA?AV?$shared_ptr@VVMSSystemTime@Module@Milesight@@@std@@XZ
?isDefaultAuthtion@Module_Manager@Module@Milesight@@QEAA_NAEBUMSProtoAuthUserInfo@Protocol@3@@Z
?eventNotify@Module_Manager@Module@Milesight@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBUMSPacket@Protocol@3@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@22@Z
?isMasterServer@Module_Manager@Module@Milesight@@QEAA_NXZ
?uninit@AlarmDatabase@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?registerDeletedCallback@AlarmDatabase@Module@Milesight@@UEAAXAEBV?$Function@$$A6AXW4MSProtoLogSystemLogRecycleType@Protocol@Milesight@@W4MSProtoLogSystemLogRecycleSubType@23@_K2@Z$$V@Base@Public@@@Z
?reset@ServerDatabase@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?uninit@ServerDatabase@Module@Milesight@@MEAA?AVErrorInfo@Base@Public@@XZ
?onPoolTimerProc@ServerDatabase@Module@Milesight@@MEAAXK@Z
?uninit@LocalDatabase@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?init@SysInternet@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@AEBV?$shared_ptr@VModule_Manager@Module@Milesight@@@std@@@Z
?uninit@SysInternet@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?uninit@SystemDatabase@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?reset@SystemDatabase@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?onPoolTimerProc@SystemDatabase@Module@Milesight@@EEAAXK@Z
?isClacMaster@Module_Manager@Module@Milesight@@QEAA_NXZ
?logSystem@Module_Manager@Module@Milesight@@QEAAXW4MSProtoLogSystemType@Protocol@3@AEBULogParam@123@@Z
?_ForwardDeviceToServer@Module@Milesight@@YA?AV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@AEBV?$shared_ptr@VModule_Manager@Module@Milesight@@@4@AEB_KAEBV34@@Z
?myServerInfo@ServerDatabase@Module@Milesight@@QEAA?AV?$shared_ptr@UServerDBInfo@Module@Milesight@@@std@@XZ
?getAllDeviceFromCache@DataCache@Module@Milesight@@QEAAXAEAV?$map@_KUMSProtoDeviceLoginInfo@Protocol@Milesight@@U?$less@_K@std@@V?$allocator@U?$pair@$$CB_KUMSProtoDeviceLoginInfo@Protocol@Milesight@@@std@@@5@@std@@@Z
?getAllCameraIdFromCache@DataCache@Module@Milesight@@QEAAXAEAV?$set@UCameraId@@U?$less@UCameraId@@@std@@V?$allocator@UCameraId@@@3@@std@@@Z
?updateDevices@SystemDatabase@Module@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBUMSProtoDeviceLoginInfos@Protocol@3@AEAUMSProtoDeviceOptResults@83@@Z
?updateDevices@SystemDatabase@Module@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBUMSProtoDeviceLoginInfos@Protocol@3@AEAUMSProtoDeviceOptResults@83@IAEAV?$set@UCameraId@@U?$less@UCameraId@@@std@@V?$allocator@UCameraId@@@3@@std@@@Z
?getAllDeviceList@SystemDatabase@Module@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEAV?$map@_KUMSProtoDeviceLoginInfo@Protocol@Milesight@@U?$less@_K@std@@V?$allocator@U?$pair@$$CB_KUMSProtoDeviceLoginInfo@Protocol@Milesight@@@std@@@5@@std@@@Z
?delDevices@SystemDatabase@Module@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBUMSProtoDeleteDeviceIds@Protocol@3@AEAUMSProtoDeviceOptResults@83@@Z
?updateCameraFailoverPriority@SystemDatabase@Module@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEBUMSProtoCameraFailoverInfos@Protocol@3@@Z
?queryCameraFailoverPriority@SystemDatabase@Module@Milesight@@QEAA?AVErrorInfo@Base@Public@@AEAV?$map@UCameraId@@UMSProtoCameraFailoverInfo@Protocol@Milesight@@U?$less@UCameraId@@@std@@V?$allocator@U?$pair@$$CBUCameraId@@UMSProtoCameraFailoverInfo@Protocol@Milesight@@@std@@@6@@std@@@Z
?_ForwardCommandTo@Module@Milesight@@YA?AV?$shared_ptr@VMQMessage@MQ@Milesight@@@std@@AEBV?$shared_ptr@VModule_Manager@Module@Milesight@@@4@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@1AEBV34@_N@Z
?getSystemLicenseLimitCount@LicenseInterface@Module@Milesight@@QEAAIW4MSProtoLicenseType@Protocol@3@@Z
?db@Module_Manager@Module@Milesight@@QEAA?AV?$shared_ptr@VSystemDatabase@Module@Milesight@@@std@@XZ
?logUserActivity@Module_Manager@Module@Milesight@@QEAAXAEBUMSProtoUserLoginInfo@Protocol@3@W4MSProtoLogUserType@53@W4MSProtoLogUserOperation@53@AEBUMSProtoCameraInfo@53@AEBULogParam@123@@Z
??1VerificationCode@Module@Milesight@@UEAA@XZ
?param@Configure@Module@Milesight@@QEAAAEAUModuleParam@23@XZ
??1DataBaseReloadFilter@Module@Milesight@@UEAA@XZ
?dbCache@Module_Manager@Module@Milesight@@QEAA?AV?$shared_ptr@VDataCache@Module@Milesight@@@std@@XZ
?uninit@EventDatabase@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?registerDeletedCallback@EventDatabase@Module@Milesight@@UEAAXAEBV?$Function@$$A6AXW4MSProtoLogSystemLogRecycleType@Protocol@Milesight@@W4MSProtoLogSystemLogRecycleSubType@23@_K2@Z$$V@Base@Public@@@Z
?uninit@StatisticsDatabase@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?uninit@LogDatabase@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?mq@Module_Manager@Module@Milesight@@QEAA?AV?$shared_ptr@VMSMQSystemServer@MQ@Milesight@@@std@@XZ
??1Module_Manager@Module@Milesight@@UEAA@XZ
?registerDeletedCallback@LogDatabase@Module@Milesight@@UEAAXAEBV?$Function@$$A6AXW4MSProtoLogSystemLogRecycleType@Protocol@Milesight@@W4MSProtoLogSystemLogRecycleSubType@23@_K2@Z$$V@Base@Public@@@Z

dcprocess

?start@DCProcess@@QEAA?AVErrorInfo@Base@Public@@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AEBV?$shared_ptr@VIOWorker@Network@Public@@@6@AEBV?$shared_ptr@VRTSPClientManager@RTSP@Public@@@6@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@6@3@Z
??1DCProcess@@UEAA@XZ
??0DCProcess@@QEAA@XZ
?streamFlag@StreamManager@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4StreamUrlType@Protocol@Milesight@@AEBUCameraId@@W4MSProtoStreamType@56@@Z
?creatAnrStream@StreamManager@@QEAA?AV?$shared_ptr@VStreamDevice@@@std@@AEBUCameraId@@W4MSProtoStreamType@Protocol@Milesight@@_K2AEAVErrorInfo@Base@Public@@@Z
?creatTalkbackStream@StreamManager@@QEAA?AV?$shared_ptr@VStreamDevice@@@std@@AEBUCameraId@@W4MSProtoStreamType@Protocol@Milesight@@AEAVErrorInfo@Base@Public@@@Z
?creatLiveStream@StreamManager@@QEAA?AV?$shared_ptr@VStreamDevice@@@std@@AEBUCameraId@@W4MSProtoStreamType@Protocol@Milesight@@AEAVErrorInfo@Base@Public@@@Z
?addExtendFrames@StreamDevice@@QEAA?AVErrorInfo@Base@Public@@AEBV?$vector@V?$shared_ptr@UMSProtoRTSPExtendFrameInfo@Protocol@Milesight@@@std@@V?$allocator@V?$shared_ptr@UMSProtoRTSPExtendFrameInfo@Protocol@Milesight@@@std@@@2@@std@@@Z
?inputStreamData@StreamDevice@@UEAA?AVErrorInfo@Base@Public@@W4STREAM_TRAMS_INFO_TYPE@RTSP@4@AEBV?$shared_ptr@VITarget@IStreamManager@Module@Milesight@@@std@@AEBV?$shared_ptr@VRTPFrame@RTSP@Public@@@8@@Z
?mediaStatus@StreamDevice@@UEAA?AW4MediaStatus@@XZ
?mediaInfo@StreamDevice@@UEAA?AV?$shared_ptr@URTSP_Media_Infos@RTSP@Public@@@std@@XZ
?closeStream@StreamDevice@@UEAA?AVErrorInfo@Base@Public@@XZ
?play@StreamDevice@@UEAA?AVErrorInfo@Base@Public@@PEAVITarget@IStreamManager@Module@Milesight@@AEBUPlayInfo@RTSP@4@AEBV?$Function@$$A6AXAEBVErrorInfo@Base@Public@@@Z$$V@34@@Z
?delTarget@StreamDevice@@UEAA?AVErrorInfo@Base@Public@@PEAVITarget@IStreamManager@Module@Milesight@@@Z
?addTarget@StreamDevice@@UEAA?AVErrorInfo@Base@Public@@AEBV?$shared_ptr@VITarget@IStreamManager@Module@Milesight@@@std@@@Z
?streamUrlType@StreamDevice@@UEAA?AW4StreamUrlType@Protocol@Milesight@@XZ
??0StreamDevice@@QEAA@AEBUCameraId@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4StreamUrlType@Protocol@Milesight@@AEBV?$Function@$$A6AXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBUCameraId@@I@Z$$V@Base@Public@@AEBV?$Function@$$A6AXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBUCameraId@@_N@Z$$V@89@AEBV?$Function@$$A6AXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z$$V@89@AEBV?$Function@$$A6A_KXZ$$V@89@@Z
??1StreamDevice@@UEAA@XZ
?start@StreamDevice@@QEAA?AVErrorInfo@Base@Public@@AEBV?$shared_ptr@VRTSPClientManager@RTSP@Public@@@std@@AEBVURL@34@@Z
?streamManager@DCProcess@@QEAA?AV?$shared_ptr@VStreamManager@@@std@@XZ

msvcp140

?_Xbad_function_call@std@@YAXXZ
_Mtx_unlock
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Xlength_error@std@@YAXPEBD@Z
?_Throw_C_error@std@@YAXH@Z

vcruntime140

__RTDynamicCast
memcmp
memcpy
memmove
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
__std_type_info_name
__C_specific_handler
__std_type_info_destroy_list
_CxxThrowException
memset

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

terminate
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll

kernel32

QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
RtlCaptureContext
GetCurrentProcess
GetCurrentThreadId
InitializeSListHead

Exports

Exports

??0?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@IEAA@AEBV01@@Z
??0?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@IEAA@XZ
??0AlarmDatabase@Module@Milesight@@QEAA@AEBV012@@Z
??0DBOperationId@Module@Milesight@@QEAA@$$QEAU012@@Z
??0DBOperationId@Module@Milesight@@QEAA@AEBU012@@Z
??0DBOperationId@Module@Milesight@@QEAA@AEBUMSProtoDatabaseLog@Protocol@2@@Z
??0DBOperationId@Module@Milesight@@QEAA@AEBUOperationLogInfo@OperationLog@12@@Z
??0DBOperationId@Module@Milesight@@QEAA@XZ
??0DataBaseReloadFilter@Module@Milesight@@QEAA@AEBV012@@Z
??0EventDatabase@Module@Milesight@@QEAA@AEBV012@@Z
??0IModule@Module@Milesight@@QEAA@AEBV012@@Z
??0IModule@Module@Milesight@@QEAA@XZ
??0ISubModule@Module@Milesight@@QEAA@AEBV012@@Z
??0ISubModule@Module@Milesight@@QEAA@XZ
??0LocalDatabase@Module@Milesight@@QEAA@AEBV012@@Z
??0LogDatabase@Module@Milesight@@QEAA@AEBV012@@Z
??0ModuleParam@Module@Milesight@@QEAA@$$QEAU012@@Z
??0ModuleParam@Module@Milesight@@QEAA@AEBU012@@Z
??0ModuleParam@Module@Milesight@@QEAA@XZ
??0Module_Manager@Module@Milesight@@QEAA@AEBV012@@Z
??0ServerDBInfo@Module@Milesight@@QEAA@$$QEAU012@@Z
??0ServerDBInfo@Module@Milesight@@QEAA@AEBU012@@Z
??0ServerDBInfo@Module@Milesight@@QEAA@XZ
??0ServerDatabase@Module@Milesight@@QEAA@AEBV012@@Z
??0StatisticsDatabase@Module@Milesight@@QEAA@AEBV012@@Z
??0SysInternet@Module@Milesight@@QEAA@AEBV012@@Z
??0SystemDatabase@Module@Milesight@@QEAA@AEBV012@@Z
??0VMSSystemTime@Module@Milesight@@QEAA@AEBV012@@Z
??0VMSSystemTime@Module@Milesight@@QEAA@XZ
??0VerificationCode@Module@Milesight@@QEAA@AEBV012@@Z
??1?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@IEAA@XZ
??1DBOperationId@Module@Milesight@@QEAA@XZ
??1IModule@Module@Milesight@@UEAA@XZ
??1ISubModule@Module@Milesight@@UEAA@XZ
??1ModuleParam@Module@Milesight@@QEAA@XZ
??1ServerDBInfo@Module@Milesight@@QEAA@XZ
??1VMSSystemTime@Module@Milesight@@UEAA@XZ
??4?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@IEAAAEAV01@AEBV01@@Z
??4AlarmDatabase@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4Configure@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4DBOperationId@Module@Milesight@@QEAAAEAU012@$$QEAU012@@Z
??4DBOperationId@Module@Milesight@@QEAAAEAU012@AEBU012@@Z
??4DataBaseReloadFilter@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4DataCache@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4EventDatabase@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4HostManager@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4IModule@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4ISubModule@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4LicenseInterface@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4LocalDatabase@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4LogDatabase@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4ModuleParam@Module@Milesight@@QEAAAEAU012@$$QEAU012@@Z
??4ModuleParam@Module@Milesight@@QEAAAEAU012@AEBU012@@Z
??4Module_Manager@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4OperationLog@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4ServerDBInfo@Module@Milesight@@QEAAAEAU012@$$QEAU012@@Z
??4ServerDBInfo@Module@Milesight@@QEAAAEAU012@AEBU012@@Z
??4ServerDatabase@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4StatisticsDatabase@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4SysInternet@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4SystemDatabase@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4VMSSystemTime@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4VerificationCode@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??4VersionManager@Module@Milesight@@QEAAAEAV012@AEBV012@@Z
??MDBOperationId@Module@Milesight@@QEBA_NAEBU012@@Z
??_7AlarmDatabase@Module@Milesight@@6B@
??_7DataBaseReloadFilter@Module@Milesight@@6B@
??_7EventDatabase@Module@Milesight@@6B@
??_7IModule@Module@Milesight@@6B@
??_7ISubModule@Module@Milesight@@6B@
??_7LocalDatabase@Module@Milesight@@6B@
??_7LogDatabase@Module@Milesight@@6B@
??_7Module_Manager@Module@Milesight@@6B@
??_7ServerDatabase@Module@Milesight@@6B@
??_7StatisticsDatabase@Module@Milesight@@6B@
??_7SysInternet@Module@Milesight@@6B@
??_7SystemDatabase@Module@Milesight@@6B@
??_7VMSSystemTime@Module@Milesight@@6B@
??_7VerificationCode@Module@Milesight@@6B@
?init@ISubModule@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@AEBV?$shared_ptr@VModule_Manager@Module@Milesight@@@std@@@Z
?setModuleManager@IModule@Module@Milesight@@QEAAXAEBV?$shared_ptr@VModule_Manager@Module@Milesight@@@std@@@Z
?shared_from_this@?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@QEAA?AV?$shared_ptr@VModule_Manager@Module@Milesight@@@2@XZ
?shared_from_this@?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@QEBA?AV?$shared_ptr@$$CBVModule_Manager@Module@Milesight@@@2@XZ
?streamManager@IModule@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@AEAV?$map@W4StreamUrlType@Protocol@Milesight@@V?$shared_ptr@VIStreamManager@Module@Milesight@@@std@@U?$less@W4StreamUrlType@Protocol@Milesight@@@5@V?$allocator@U?$pair@$$CBW4StreamUrlType@Protocol@Milesight@@V?$shared_ptr@VIStreamManager@Module@Milesight@@@std@@@std@@@5@@std@@@Z
?toId@DBOperationId@Module@Milesight@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V45@@Z
?toString@DBOperationId@Module@Milesight@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?uninit@ISubModule@Module@Milesight@@UEAA?AVErrorInfo@Base@Public@@XZ
?weak_from_this@?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@QEAA?AV?$weak_ptr@VModule_Manager@Module@Milesight@@@2@XZ
?weak_from_this@?$enable_shared_from_this@VModule_Manager@Module@Milesight@@@std@@QEBA?AV?$weak_ptr@$$CBVModule_Manager@Module@Milesight@@@2@XZ
createModule

Sections

.text
Size: 374KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

85e127c46507b924f2de813aeee9173d

Headers

DLL Characteristics

File Characteristics

Imports

base

rtsp

msprotocol

msmq

module_interface

dcprocess

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 374KB - Virtual size: 374KB

.rdata Size: 147KB - Virtual size: 146KB

.data Size: 23KB - Virtual size: 24KB

.pdata Size: 15KB - Virtual size: 15KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 374KB - Virtual size: 374KB

.rdata
Size: 147KB - Virtual size: 146KB

.data
Size: 23KB - Virtual size: 24KB

.pdata
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB