3fad3120166dbfd975bae812e4ae6e09bb251f80f44fbacd8740f2e70da78e01

Sharing

Copy URL

Twitter E-mail

General

Target

3fad3120166dbfd975bae812e4ae6e09bb251f80f44fbacd8740f2e70da78e01
Size

4.2MB
MD5

6ef2d1efc6e761f75636142a2c97b338
SHA1

e9b0e9d90a1f71034b183e95ed44f8b83a3223d7
SHA256

3fad3120166dbfd975bae812e4ae6e09bb251f80f44fbacd8740f2e70da78e01
SHA512

4f104488fe38830cf2a7ce831112559d298e065a4b7f67274d44817e16dc2070cbb58790912f95f1544ee316f62dcbf4ca11b7a88998aaa98f77742989416b59
SSDEEP

98304:QSPoqTClkK2h0F9FuUlcmCNvnYPGTjda2RkQAz5cMZ6BBsu:QSPoEClkKDjFuUNmYPyRRAz5zsBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3fad3120166dbfd975bae812e4ae6e09bb251f80f44fbacd8740f2e70da78e01

Files

3fad3120166dbfd975bae812e4ae6e09bb251f80f44fbacd8740f2e70da78e01
.dll windows:6 windows x86 arch:x86

1bd574273e846d81f77bd63c21d100e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

commondatasetbase

?GetApplicationName@Environment@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetModuleDir@Environment@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z
?GetInstance@BugChecker@common@@SAAAV12@XZ
?Throw@BugChecker@common@@QAEAAV12@XZ
?SetDumpMark@BugChecker@common@@QAEAAV12@_N@Z
?Assertion@BugChecker@common@@QAEAAV12@PBD00H@Z
?Remove@File@common@@QAEX_N@Z
?IsDirectory@File@common@@QBE_NXZ
?IsExist@File@common@@QBE_NXZ
??1File@common@@UAE@XZ
??0File@common@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CopyLen@StringHelper@common@@YA_NPADIPBDZZ
??1TimeStamp@common@@QAE@XZ
??0TimeStamp@common@@QAE@XZ
??0TimeStamp@common@@QAE@_J@Z
?GetZone@TimeZone@common@@SAHXZ
??1DateTime@common@@QAE@XZ
??0DateTime@common@@QAE@ABVTimeStamp@1@@Z
?IsValid@Logger@common@@QAE_NXZ
?WriteLog@Logger@common@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?Flush@Logger@common@@QAE_NXZ
??0Logger@common@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0BinaryReader@common@@QAE@XZ
?LoadXml@XmlDoc@common@@QAE_NPBD@Z
??1SystemException@common@@UAE@XZ
??0SystemException@common@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
??0SystemException@common@@QAE@ABV01@@Z
??0RuntimeException@common@@QAE@ABV01@@Z
??0Exception@common@@QAE@ABV01@@Z
??1Mutex@common@@QAE@XZ
??0Mutex@common@@QAE@XZ
?Join@Thread@common@@QAEXXZ
??1Thread@common@@QAE@XZ
??0Thread@common@@QAE@P6AXPAX@Z0_N@Z
??0Event@common@@QAE@_N@Z
?WaitImpl@EventImpl@common@@IAE_NJ@Z
?GetDirectory@Path@common@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1Path@common@@QAE@XZ
??0Path@common@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?IsValid@XmlNode@common@@QBE_NXZ
?GetChildByName@XmlNode@common@@QBE?AV12@PBD@Z
?GetValue@XmlNode@common@@QBEPADXZ
?GetNodeByName@XmlDoc@common@@QBE?AVXmlNode@2@PBD@Z
?LoadXmlData@XmlDoc@common@@QAE_NPBDH@Z
?GetDispalyName@Exception@common@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?Start@Thread@common@@QAEXP6AXPAX@Z0_N@Z
??0Thread@common@@QAE@XZ
?Set@Environment@common@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z

kernel32

OpenProcess
GetProcAddress
GetModuleHandleA
CloseHandle
GetCurrentProcessId
FileTimeToDosDateTime
FindFirstFileW
FindClose
FileTimeToLocalFileTime
WideCharToMultiByte
MultiByteToWideChar
GetLastError
FreeLibrary
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
SetEvent
Sleep
DuplicateHandle
GetCurrentProcess
SwitchToFiber
DeleteFiber
QueryPerformanceFrequency
GetVersionExA
GetDriveTypeA
FlushFileBuffers
WaitForSingleObject
GetEnvironmentVariableA
GetTickCount
GetFileInformationByHandle
HeapAlloc
CreateMutexA
ConvertFiberToThread
InitializeCriticalSection
LocalFree
ReleaseMutex
GetLogicalDrives
GetComputerNameW
InterlockedDecrement
UnmapViewOfFile
TerminateThread
DeleteCriticalSection
CreateFileMappingA
ConvertThreadToFiber
GetCurrentThreadId
HeapFree
TlsAlloc
TlsSetValue
GetProcessTimes
OutputDebugStringA
TlsGetValue
QueryPerformanceCounter
ResumeThread
GetProcessHeap
DeviceIoControl
LocalAlloc
TerminateProcess
GetLocalTime
WriteFile
InterlockedIncrement
GetWindowsDirectoryA
FileTimeToSystemTime
MapViewOfFile
OpenMutexA
SetThreadPriority
SwitchToThread
GetSystemTime
CreateFiberEx
GetVolumeInformationA
SystemTimeToFileTime
HeapReAlloc
InterlockedCompareExchange
CreateFileA
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetTickCount64
EncodePointer

msvcp110

?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_BADOFF@std@@3_JB
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?eof@ios_base@std@@QBE_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??0id@locale@std@@QAE@I@Z

psapi

EnumProcessModules
GetModuleBaseNameA

msvcr110

??2@YAPAXI@Z
memchr
free
malloc
realloc
_wmkdir
_wremove
_waccess
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
tolower
isdigit
toupper
strtod
sprintf
ceil
_strtoi64
strtol
wcstol
_isnan
wcstod
_wcstoi64
_wassert
??_V@YAXPAX@Z
_time64
_atoi64
_localtime64
isxdigit
strncmp
fclose
strspn
strtok
fwrite
_errno
isprint
strchr
_wfopen
isalpha
_beginthreadex
strftime
strstr
strerror
isspace
fread
atoi
_gmtime64
exit
strcspn
abort
fputc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_unlock_file
ungetc
fgetpos
_fseeki64
fflush
fgetc
fsetpos
setvbuf
_lock_file
memcpy_s
rand
srand
isalnum
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_vsnprintf
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_wstat32
_mktime32
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
__clean_type_info_names_internal
??3@YAXPAX@Z
_purecall
memmove
memcpy
memcmp
floor
_CxxThrowException
__CxxFrameHandler3
__RTDynamicCast
_libm_sse2_cos_precise
memset

Exports

Exports

AnalysisDetailMsgParamString
BackupDecodeCacheIndexToFile
CalcAnalyzeInfoByFile
CalcAppointNetTypeTotalMileage
CalcAppointNetTypeTotalTime
CalcBinConditionPointSet
CalcComputerTimeLengthByInterZone
CalcCoverageInfo
CalcDataSetSimpleInfo
CalcDataSetStatInfo
CalcDataSetStatInfoByFile
CalcEventSimpleInfo
CalcGPSTotalMileage
CalcInterZoneOperateResult
CalcMileageByInterZone
CalcParamBaseStatResult
CalcParamDetailStatResult
CalcParamRangeStatResult
CalcParamTotalStatResult
CalcSPSinglePropertyValue
CalcSummaryInformationValue
CalcTotalMileage
CalcTwoPointMileage
CheckDecodeFileByOriginalFile
CheckDecodeFileValid
ClearAllCustomEvent
ClearAllOutputBuffer
ClearAppearsObserverInfo
CombinateDCFFiles
CombinateDDIBFiles
CombinateDDIBFilesEx
CombinateDecodedFiles
CombinateMultiDataSetAnalyzeInfoByFile
CombinateMultiDataSetStatInfoByFile
ConfigDecodeOrStorageComplexProperty
ConfigDecodeOrStorageProperty
ConfigDecodeOrStorageStringProperty
CreateBinHandle
CreateDataSetHandle
CreateDataSetHandleEx
CreateDataSetHandleForDecode
CreateDataSetHandleForDecodeX
CreateDataSetHandleForVisit
CreateGPSDecodeHandle
CreateGloableHandleManager
DBConvert2RCU
DataSetFreeMemory
DecodeFinished
DecodeFinishedEx
DefineDataFormatConversionInfo
DeleteDecodedFile
DestroyGloableHandleManager
DivideCombinateSDBFile
DivideFileFromDataSet
ExecuteSingleDataSetAnalyzeByFile
ExistsSetCellFrequencyOrPNList
FilterDataSetByCondition
FilterPointZonesFromDataSet
FreeDataSetHandle
FreeGPSDecodeHandle
GBLGetProductDongleID
GPSMapStorage_AddNewGPSInfoEx
GPSMapStorage_AddNewPointIndexEx
GPSMapStorage_ClearEx
GPSZoneFilterFromDCFFile
GenDataSetStatCompareInfo
GenDataSetStructCompareInfo
GenOtherFormatRealFileFromTempFile
GetAbidanceConditionFilterResult
GetAppearsObserverCount
GetAppearsObserverItem
GetAppointParamScale
GetAppointPointIndexOwnedSPList
GetAppointSPCount
GetBinCondition
GetBinPointFRMDLTParamValueInfo
GetBinPointID
GetBinPointInterZoneInfo
GetBinPointParamDetailInfo
GetBinPointParamValDetailDotInfo
GetBinPointParamValueInfo
GetBinPointTimeRange
GetBinPointWorseParamValueInfo
GetCanRestoreCancelMarkCount
GetComputerTimeLengthByInterZone
GetComputerTimeTestRange
GetCurPOLQADataPackagePointIndex
GetCustomConditionFilterResult
GetCustomStorageDefinedInfoCount
GetCustomStorageDefinedInfoName
GetDataSetCurReportEventList
GetDataSetCurReportMsgBinary
GetDataSetFilterZones
GetDataSetLastError
GetDateTime
GetDecodeFileStorageVersion
GetDecodedFileDeviceInfo
GetDecodedIndexFileName
GetDetailMsgParamValue
GetDetailMsgParamValueCount
GetDeviceModelName
GetDeviceModuleType
GetDeviceType
GetEventCount
GetEventCountByEventFlag
GetEventDetailsByEventFlagAndIndex
GetEventInfoByEventIndex
GetEventParamSerializeMemory
GetEventPropertyDoubleCount
GetEventPropertyDoubleValue
GetEventPropertyExtentCount
GetEventPropertyExtentValue
GetEventPropertyInt64Count
GetEventPropertyInt64Value
GetEventPropertyIntCount
GetEventPropertyIntValue
GetEventPropertyStringCount
GetEventPropertyStringValue
GetEventPropertyValue
GetEventSerializeMemory
GetEventSimpleInfoByEventIndex
GetEventTimeByEventFlagAndIndex
GetEventTotalCount
GetEventUTCTimeByEventFlagAndIndex
GetExistEventFlagList
GetExistMsgCodeTypeList
GetExistSPList
GetExistsStructServiceIDList
GetExpressionFilterResult
GetFileNameInfoByIndex
GetFileNameInfoCount
GetFiltedPointSetByTotalFilterCondition
GetGPSDateTime
GetGPSMapInfoCount
GetGPSMapInfos
GetGPSPointCount
GetGPSValidRange
GetGPSValue
GetHaveValueParamList
GetHaveValueSpecificIDList
GetHaveValueSpecificIDListX
GetIndoorMagInfos
GetIndoorMagPictureContents
GetIndoorMagPictureNames
GetIndoorMapInfoCount
GetInt64ParamValue
GetIntPropertyValue
GetIntervalByDivideMode
GetLastValidDataPackageTime
GetLayer3OriginalMsgContent
GetMsgCode
GetMsgCodePointCount
GetMsgCodePointIndexList
GetMsgContent
GetMsgDetailContent
GetMsgDetailContentX
GetMsgDirection
GetMultiDataSetMetadataInfo
GetNeedDisplaySPAndEventInfo
GetNeedInheritedParamInfo
GetNetType
GetNetWorkFilterResult
GetNetWorkState
GetNextMsgCode
GetOneSPOwnedEventDisplayInfo
GetOneTestInfo
GetOriginalFileName
GetOtherOperatorPointInfo
GetOutputFileReportFormatDataItemBinary
GetOutputFileReportFormatDataItemCount
GetOutputFileReportFormatExtendDataItemBinary
GetOutputFileReportFormatExtendDataItemCount
GetOutputFileReportFormatHeaderBinary
GetParamBaseFilterResult
GetParamOrStructInterZoneInfo
GetParamRealPointCount
GetParamRealValue
GetParamRealValueByRealValueIndex
GetParamRealValueIndexByPointIndex
GetParamRealValueTotalCount
GetParamStorageSize
GetParamValue
GetPointIndexByGPSIndex
GetPointIndexByParamRealValueIndex
GetPointIndexByValidMsgItemIndex
GetPointIndexInterZoneByParamRealValueIndex
GetPointInterZoneByGPSIndex
GetPointInterZoneByGPSIndexEx
GetPointSetByFilterCondition
GetPointSetCountBySPID
GetPointSetFromSPEventsByTimeRange
GetPort
GetRealGPSInfo
GetRealGPSProtocolTime
GetRealHighestNetType
GetRegionFilterResultByFile
GetRegionFilterResultByRegionMemory
GetRelativePointIndexByDistance
GetRelativePointIndexByTime
GetRootEventDisplayInfo
GetSPBaseInfoValue
GetSPDelayCount
GetSPDelayEventIndex
GetSPDelayIDList
GetSPDelayValue
GetSPEventCount
GetSPEventIndexList
GetSPFrameCount
GetSPFrameInfo
GetSPIDOfPPPByPointIndex
GetSPIndexList
GetSPIndexListBySPID
GetSPInfoBySPIndex
GetSPPropertyDoubleValue
GetSPPropertyStringValue
GetSPRangeInfo
GetSPStatPointSetByIndex
GetSPStatPropertyNameByIndex
GetSPTransforSize
GetSPTransforTime
GetSameComputerTimePointIndexRange
GetScannerFieldSerializeMemory
GetScannerItemDescribe
GetServiceFilterResult
GetServiceStructInterZoneInfo
GetSetCellCount
GetSetCellCountBySetType
GetSetCellParamRealValue
GetSetCellParamRealValueByFrequencyAndPN
GetSetCellParamRealValueByPN
GetSetCellParamRealValueBySetType
GetSetCellParamValue
GetSetCellParamValueByFrequencyAndPN
GetSetCellParamValueByPN
GetSetCellParamValueBySetType
GetSortedAllEventIndexList
GetSpecialFieldSerializeMemory
GetSpecialFieldValidStorageMemory
GetSpecificFieldDetailsBySpecificIDAndPointIndex
GetSpecificFieldDetailsBySpecificIDAndPointIndexEX
GetSpecificFieldStorageSize
GetSpecificParamCountFromSortCondition
GetSpecificParamValueFromSortCondition
GetStorageCount
GetStorageSize
GetStorageType
GetStringPropertyValue
GetStructItem
GetStructItemCount
GetStructMultiSubItem
GetStructMultiSubItemCount
GetStructSubItem
GetStructSubItemCount
GetStructXMLDescribeByStructIDAndPointIndex
GetTestContentPropertyValue
GetTestInfoCount
GetTestTimeRange
GetTimeFilterResult
GetTimeZone
GetTotalPointCount
GetUTCDateTime
GetValidMsgCount
GetWalkingEventCount
GetWalkingEventGPS
GetWalkingEventPictureInfo
HaveIndoorMarked
IsAppointCMSPExists
IsDivideFile
IsExistDecodedFile
IsExistsUnknownMessage
IsFiltedDataSet
IsInGSMState
IsParamValueExists
IsSecretFile
ModifyDDIBDateTimeInfo
ModifyPortID
ParseLayer3MsgDetailInfo
PioneerBaseDataReport
PioneerNewBDataReportCmd
PushCommonOriginalData
PushCustomEventData
PushCustomEventDataV2
PushCustomParamValue
PushDCFDetailData
PushDecodedData
PushGPSData
PushOtherData
ReadPioneerCmdResult
ReadPioneerDataReportResult
RegisterDataSetHandleToGPS
RegisterDeviceDecodeInfo
RegisterDeviceDecodeInfoCallBack
RegisterObserverInfo
RegisterWTDeviceHeartBeatCallBack
ResetDeviceModel
RestoreCancelMarks
RestoreOneStepCancelMark
SetCommand
SetDataSetConfig
SetEnvironmentProperty
SetScannerItemSort
StartTransforCMFile
StartTransforFromDecodedFile
StorageCustomEventFinished
TimeZoneFilterFromDCFFile
TransforCMFileOneStepInfo
TransforOnePointInfoFromDecodedFile
TranslateToOriginalGPSIndex
TranslateToOriginalPointIndex
UnregisterDataSetHandleFromGPS
UpdateFileHeader
WalktourRunAuthCheckCmdWaitBack
WalktourTerminateCmdRun

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bd574273e846d81f77bd63c21d100e5

Headers

DLL Characteristics

File Characteristics

Imports

commondatasetbase

kernel32

msvcp110

psapi

msvcr110

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 108KB - Virtual size: 154KB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 92KB - Virtual size: 91KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 108KB - Virtual size: 154KB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 92KB - Virtual size: 91KB