General

Malware Config

Signatures

Files

• df82b120d734080e034d1c73dc8aa606c17cefa39c6ab7a5cda5ae8d9bc24889

  .dll windows:6 windows x86 arch:x86

  19bcf3d1266ab56d22eab9a0069f52f7

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  commondatasetbase

  ?GetModuleDir@Environment@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z

  ?IsValid@XmlAttr@common@@QBE_NXZ

  ?GetAttrName@XmlAttr@common@@QBEPBDXZ

  ?GetNextSibling@XmlAttr@common@@QBE?AV12@XZ

  ?GetValue@XmlAttr@common@@QBEPADXZ

  ?GetFirstAttr@XmlNode@common@@QBE?AVXmlAttr@2@XZ

  ?IsValid@XmlNode@common@@QBE_NXZ

  ?GetNodeName@XmlNode@common@@QBEPBDXZ

  ?GetNextSibling@XmlNode@common@@QBE?AV12@XZ

  ?GetFirstChild@XmlNode@common@@QBE?AV12@XZ

  ?GetNodeByName@XmlDoc@common@@QBE?AVXmlNode@2@PBD@Z

  ?LoadXmlData@XmlDoc@common@@QAE_NPBDH@Z

  ??0BinaryReader@common@@QAE@XZ

  kernel32

  GetProcAddress

  FileTimeToDosDateTime

  FindFirstFileW

  FindClose

  FileTimeToLocalFileTime

  MultiByteToWideChar

  FreeLibrary

  LoadLibraryA

  DecodePointer

  IsDebuggerPresent

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  GetTickCount64

  EncodePointer

  DisableThreadLibraryCalls

  msvcp110

  ?_Xlength_error@std@@YAXPBD@Z

  ?_Xout_of_range@std@@YAXPBD@Z

  ?_Xbad_alloc@std@@YAXXZ

  ?_Syserror_map@std@@YAPBDH@Z

  ?_Winerror_map@std@@YAPBDH@Z

  msvcr110

  tolower

  strtod

  _strtoi64

  strtol

  ??_V@YAXPAX@Z

  _lock

  _unlock

  _calloc_crt

  __dllonexit

  _onexit

  ??1type_info@@UAE@XZ

  __CppXcptFilter

  _amsg_exit

  _malloc_crt

  _initterm

  _initterm_e

  _crt_debugger_hook

  __crtUnhandledException

  __crtTerminateProcess

  _except_handler4_common

  ?terminate@@YAXXZ

  __clean_type_info_names_internal

  memcpy

  __CxxFrameHandler3

  _CxxThrowException

  memchr

  free

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _purecall

  memmove

  memset

  Exports

  Exports

  CreateDMMetroStationDataManager

  FreeDMMetroStationDataManager

  ImportGPSAssitantMapFile

  RTGetMetroCityNameInfo

  RTGetMetroLineCount

  RTGetMetroLineDoubleKeyInfo

  RTGetMetroLineIntKeyInfo

  RTGetMetroLineStationCount

  RTGetMetroLineStationDoubleKeyInfo

  RTGetMetroLineStationIntKeyInfo

  RTGetMetroLineStationStringKeyInfo

  RTGetMetroLineStationSubItemCount

  RTGetMetroLineStationSubItemDoubleKeyInfo

  RTGetMetroLineStringKeyInfo

  Sections

  .text

  Size: 42KB - Virtual size: 41KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 864B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ