G:\Code_Tao\IPCamSuite\topic_tools_develop_branch\build\IPCamSuite.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8d47f7cd207eb8ed0889273ff7ab74a06cc278bdda9b4e2dcc23d7620f4d5ab4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d47f7cd207eb8ed0889273ff7ab74a06cc278bdda9b4e2dcc23d7620f4d5ab4.exe
Resource
win10v2004-20231215-en
General
-
Target
8d47f7cd207eb8ed0889273ff7ab74a06cc278bdda9b4e2dcc23d7620f4d5ab4
-
Size
4.1MB
-
MD5
0b5fea194ba3deb52fac03e21f03bf7b
-
SHA1
bb02456aade9516d516d2a3b5c00ecc4036d1c7a
-
SHA256
8d47f7cd207eb8ed0889273ff7ab74a06cc278bdda9b4e2dcc23d7620f4d5ab4
-
SHA512
0617abef8ccc307bcdce221dfdda4c239687f9c3bb1bb9c74b6a0631d9dc52d955aab8d38445ae1bbf463c9a5d0da8d4f1157812d37c2b7e16480f207212ecb2
-
SSDEEP
98304:Yqtj8nJfJvKG/zjR9k+mc4K+gHypYW/RDMV9H4+3wprg2erMZdHVfYKTNBjECsL8:YIjqvKGJ+oHgrg9rM2AHjECsw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d47f7cd207eb8ed0889273ff7ab74a06cc278bdda9b4e2dcc23d7620f4d5ab4
Files
-
8d47f7cd207eb8ed0889273ff7ab74a06cc278bdda9b4e2dcc23d7620f4d5ab4.exe windows:5 windows x86 arch:x86
d53097911d62052b06791bcebb0df65a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStartupInfoW
VirtualAlloc
VirtualQuery
ExitThread
SetStdHandle
GetFileType
HeapQueryInformation
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
IsValidCodePage
SetHandleCount
GetStdHandle
FatalAppExitA
GetConsoleCP
GetConsoleMode
LCMapStringW
GetLocaleInfoW
SetConsoleCtrlHandler
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDriveTypeW
CompareStringW
WriteConsoleW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
WideCharToMultiByte
GetModuleFileNameA
Sleep
ResumeThread
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetPrivateProfileSectionA
CreateThread
InitializeCriticalSection
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WinExec
FreeLibrary
GetProcAddress
LoadLibraryA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetSystemDefaultLangID
CloseHandle
CreateEventA
SetWaitableTimer
CreateWaitableTimerA
MultiByteToWideChar
WaitForMultipleObjects
WaitForSingleObject
GetLastError
SetEvent
TerminateThread
GlobalUnlock
GlobalLock
GlobalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
InterlockedCompareExchange
GetProcessHeap
OutputDebugStringW
OutputDebugStringA
WriteFile
UnmapViewOfFile
UnlockFileEx
UnlockFile
SystemTimeToFileTime
SetFilePointer
SetEndOfFile
ReadFile
QueryPerformanceCounter
MapViewOfFile
LockFileEx
LockFile
LocalFree
LoadLibraryW
HeapCompact
HeapValidate
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetVersionExA
GetTempPathW
GetTempPathA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
FormatMessageW
FormatMessageA
FlushFileBuffers
DeleteFileW
DeleteFileA
CreateMutexW
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
AreFileApisANSI
TryEnterCriticalSection
CreateDirectoryA
lstrlenA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetLastError
DeactivateActCtx
ActivateActCtx
InitializeCriticalSectionAndSpinCount
LocalAlloc
MulDiv
lstrlenW
GlobalSize
CopyFileA
GlobalFree
SetThreadPriority
GetCurrentThreadId
SuspendThread
lstrcmpW
CompareStringA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
FindResourceA
lstrcmpA
GetModuleHandleW
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
GetStringTypeExA
GetThreadLocale
lstrcmpiA
MoveFileA
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
FindNextFileA
GetFileAttributesExA
SetFileAttributesA
LocalFileTimeToFileTime
SetFileTime
GetFileSizeEx
GetFileTime
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetAtomNameA
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
GetCurrentDirectoryA
lstrcpyA
SetErrorMode
GetWindowsDirectoryA
GetNumberFormatA
GetTempFileNameA
GetProfileIntA
SearchPathA
VirtualProtect
GetUserDefaultLCID
ReplaceFileA
FindResourceExW
LocalUnlock
LocalLock
RtlUnwind
GetTimeFormatA
GetDateFormatA
RaiseException
EncodePointer
DecodePointer
ExitProcess
GetCommandLineA
HeapSetInformation
FindResourceW
user32
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
CharUpperA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
SetCursor
PostQuitMessage
MapVirtualKeyA
GetKeyNameTextA
IntersectRect
InflateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
EnableMenuItem
CheckMenuItem
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ScrollWindowEx
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
FillRect
GetParent
EnumChildWindows
GetDialogBaseUnits
DeleteMenu
SetRectEmpty
OpenClipboard
EmptyClipboard
PostMessageA
IsWindow
EnableWindow
CopyImage
LoadImageA
SetClipboardData
CloseClipboard
ScreenToClient
GetMessagePos
LoadMenuW
ModifyMenuA
GetSubMenu
GetCursorPos
IsIconic
DrawIcon
SetParent
GetDesktopWindow
GetWindowLongA
SetWindowLongA
LoadIconW
SetWindowPos
EnumWindows
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadCursorW
SetCapture
WindowFromPoint
ReleaseCapture
WaitMessage
DestroyIcon
CharNextA
OffsetRect
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
GetWindowThreadProcessId
MessageBoxA
GetDC
ReleaseDC
UpdateWindow
CopyRect
ClientToScreen
SetRect
GetSystemMetrics
MoveWindow
MessageBeep
UnregisterClassA
RedrawWindow
GetMenuDefaultItem
CreatePopupMenu
GetAsyncKeyState
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
DrawIconEx
IsZoomed
SendMessageA
SetTimer
KillTimer
GetWindowRect
SetWindowRgn
DestroyAcceleratorTable
SetClassLongA
GetSystemMenu
DrawStateA
DrawEdge
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
GetSysColor
InvalidateRect
GetClientRect
IsWindowVisible
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
BringWindowToTop
LockWindowUpdate
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
GetMenuBarInfo
LoadMenuA
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatA
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageA
GetIconInfo
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
InSendMessage
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
SendNotifyMessageA
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DestroyCursor
WindowFromDC
GetWindowRgn
GetDCEx
GetTabbedTextExtentW
GetTabbedTextExtentA
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
StretchBlt
DeleteObject
CreateSolidBrush
DeleteDC
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
RoundRect
EnumFontFamiliesExA
OffsetRgn
Rectangle
SetPixel
GetDIBits
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
GetCurrentObject
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
StretchDIBits
GetCharWidthA
GetRgnBox
GetTextColor
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetTextMetricsA
GetTextExtentPoint32A
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectA
CreateHatchBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
CreateDCA
CopyMetaFileA
GetDeviceCaps
BitBlt
CreateFontA
EnumFontsA
GetObjectA
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
GetJobA
DocumentPropertiesA
OpenPrinterA
advapi32
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegOpenKeyA
RegSetValueA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
SetFileSecurityA
RegEnumKeyExA
GetFileSecurityA
RegOpenKeyExW
shell32
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteExA
SHAppBarMessage
DragQueryFileA
DragFinish
ShellExecuteA
comctl32
ImageList_GetImageCount
ImageList_Create
ImageList_GetIcon
ImageList_Destroy
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx
ImageList_ReplaceIcon
shlwapi
PathStripPathA
StrStrIA
PathFileExistsA
UrlUnescapeA
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
ole32
OleRegGetUserType
ReadFmtUserTypeStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoInitialize
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
OleRegEnumVerbs
CLSIDFromString
CoInitializeEx
StringFromGUID2
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CreateStreamOnHGlobal
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
PropVariantCopy
CoCreateInstance
CoUninitialize
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
CreateDataAdviseHolder
CreateOleAdviseHolder
CoGetMalloc
GetRunningObjectTable
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleRegGetMiscStatus
WriteClassStg
OleSetClipboard
oleaut32
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
OleCreateFontIndirect
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SysAllocString
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SafeArrayPutElement
SafeArrayGetLBound
oledlg
ord8
wsock32
send
closesocket
listen
setsockopt
bind
htons
ioctlsocket
socket
WSAStartup
WSACleanup
recv
WSAGetLastError
select
connect
ntohl
sendto
__WSAFDIsSet
inet_addr
recvfrom
htonl
getsockopt
inet_ntoa
accept
ws2_32
WSASocketA
winmm
waveOutClose
PlaySoundA
waveOutUnprepareHeader
waveOutOpen
waveOutRestart
waveOutPause
waveOutWrite
waveOutPrepareHeader
dsound
ord11
hi_h264dec_w
Hi264DecGetInfo
Hi264DecCreate
Hi264DecFrame
Hi264DecDestroy
ddraw
DirectDrawCreateEx
d3d9
Direct3DCreate9
netsdk
?RegReconnectCallback@CNetClient@@QAEXP6AXPAX@Z0@Z
?OpenStreamEx@CNetClient@@QAEHHHH@Z
?ConnectToServer@CNetClient@@QAEHPBDGH@Z
?RegDisConnectCallback@CNetClient@@QAEXP6A_NHHPAX@Z0@Z
??0CNetClient@@QAE@XZ
?CloseAll@CNetClient@@QAEHXZ
?GetConnectStatus@CNetClient@@QAE_NXZ
?SendCmdToServer@CNetClient@@QAEHUtagPacketMsg@@@Z
??1CNetClient@@QAE@XZ
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
hw_h265dec_win32d
IHW265D_Delete
IHW265D_DecodeFrame
IHW265D_Create
wininet
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetOptionExA
InternetSetCookieA
InternetGetCookieA
InternetQueryDataAvailable
FtpDeleteFileA
FtpRenameFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpSetCurrentDirectoryA
FtpPutFileA
FtpGetFileA
InternetErrorDlg
HttpAddRequestHeadersA
HttpQueryInfoA
InternetFindNextFileA
InternetCloseHandle
GopherFindFirstFileA
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
FtpGetCurrentDirectoryA
HttpOpenRequestA
InternetOpenUrlA
GopherOpenFileA
InternetConnectA
FtpFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpOpenFileA
GopherGetAttributeA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
InternetReadFile
InternetWriteFile
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipDeleteGraphics
GdipGetImageHeight
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImageWidth
GdipAlloc
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipFree
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 722KB - Virtual size: 722KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 205KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ