fb09ea1a55fe41a14683dc64d0f035db_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fb09ea1a55fe41a14683dc64d0f035db_JaffaCakes118
Size

990KB
MD5

fb09ea1a55fe41a14683dc64d0f035db
SHA1

fba71d93d19a5c90856b9130a70e1283d0753ae5
SHA256

7b638cf14d6a0a442ff21de012420ff235ca91818a23700a7c36e7bd50b52421
SHA512

253f2e7ee06f47d0a9b165b116fdf51ab6ed4e67b6693c25665567f2acb77a405e787a58a327d75c16c81e0aa793f973cb28bdc7888b2c6046da918cfb262ac1
SSDEEP

24576:bDMdYuZFSaEqqLniYWovwjdimD+FmckQ9/yxdC:bD0wVqqLi1jo8kExk

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 2 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

Processes:

resource	yara_rule
static1/unpack001/20063914274000/lib/VISh263m.dll	aspack_v212_v242
static1/unpack001/20063914274000/lib/VISh323.dll	aspack_v212_v242

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/20063914274000/lib/VISConf.exe
unpack001/20063914274000/lib/VISh263m.dll
unpack001/20063914274000/lib/VISh323.dll

Files

fb09ea1a55fe41a14683dc64d0f035db_JaffaCakes118
.rar
20063914274000/VIS2_DLL_Guider.chm
.chm
20063914274000/VISConf/ILSClientWnd.cpp
20063914274000/VISConf/ILSClientWnd.h
20063914274000/VISConf/ILSUserInfoDlg.cpp
20063914274000/VISConf/ILSUserInfoDlg.h
20063914274000/VISConf/LogOutputDlg.cpp
20063914274000/VISConf/LogOutputDlg.h
20063914274000/VISConf/MyEndPoint.cpp
20063914274000/VISConf/MyEndPoint.h
20063914274000/VISConf/PropertiesDlg.cpp
20063914274000/VISConf/PropertiesDlg.h
20063914274000/VISConf/ReadMe.txt
20063914274000/VISConf/Resource.h
20063914274000/VISConf/SendUserInputDlg.cpp
20063914274000/VISConf/SendUserInputDlg.h
20063914274000/VISConf/SetupAudioDlg.cpp
20063914274000/VISConf/SetupAudioDlg.h
20063914274000/VISConf/SetupGeneralDlg.cpp
20063914274000/VISConf/SetupGeneralDlg.h
20063914274000/VISConf/SetupNetworkDlg.cpp
20063914274000/VISConf/SetupNetworkDlg.h
20063914274000/VISConf/SetupVideoDlg.cpp
20063914274000/VISConf/SetupVideoDlg.h
20063914274000/VISConf/StdAfx.cpp
20063914274000/VISConf/StdAfx.h
20063914274000/VISConf/UserInputDlg.cpp
20063914274000/VISConf/UserInputDlg.h
20063914274000/VISConf/VISConf.aps
20063914274000/VISConf/VISConf.clw
20063914274000/VISConf/VISConf.cpp
20063914274000/VISConf/VISConf.dsp
20063914274000/VISConf/VISConf.dsw
20063914274000/VISConf/VISConf.h
20063914274000/VISConf/VISConf.rc
20063914274000/VISConf/VISConfDlg.cpp
20063914274000/VISConf/VISConfDlg.h
20063914274000/VISConf/VideoWnd.cpp
20063914274000/VISConf/VideoWnd.h
20063914274000/VISConf/config.cpp
20063914274000/VISConf/config.h
20063914274000/VISConf/res/SPEAKER.ICO
20063914274000/VISConf/res/VISConf.ico
20063914274000/VISConf/res/VISConf.rc2
20063914274000/VISConf/res/mic.ico
20063914274000/lib/ILSexp.h
20063914274000/lib/VISConf.exe
.exe windows:4 windows x86 arch:x86

75c7d314a574bcbae09b309cd41a2511

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

vish323

??0CVolumeCtrl@@QAE@XZ
??1CVolumeCtrl@@UAE@XZ
?GetAudioCodecName@CH323EndPoint@@QBEHHPADH@Z
?SetSilenceDetectionMode@CH323EndPoint@@QAEHKW4SilenceDetectionMode@@K@Z
?SetMaxAudioDelayJitter@CH323EndPoint@@QAEHKK@Z
?SetVideoSize@CH323EndPoint@@QAEHKW4VideoFormat@@@Z
?SetVideoQuality@CH323EndPoint@@QAEHKK@Z
?GetRemoteApplication@CH323EndPoint@@QBEHKPADH@Z
?GetRemoteAddress@CH323EndPoint@@QBEHKPADH@Z
?GetSilenceDetectionMode@CH323EndPoint@@QBEHKAAW4SilenceDetectionMode@@AAK@Z
?GetMaxAudioDelayJitter@CH323EndPoint@@QBEHKAAK@Z
?GetVideoSize@CH323EndPoint@@QBEHKAAW4VideoFormat@@@Z
?GetFPS@CVideoMixer@@QAEHKHAAK@Z
?GetVideoQuality@CH323EndPoint@@QBEHKAAK@Z
?GetAudioDataSent@CH323EndPoint@@QBEKK@Z
?GetAudioDataReceived@CH323EndPoint@@QBEKK@Z
?GetVideoDataSent@CH323EndPoint@@QBEKK@Z
?GetVideoDataReceived@CH323EndPoint@@QBEKK@Z
?GetVideoFrameSent@CH323EndPoint@@QBEKK@Z
?GetVideoFrameReceived@CH323EndPoint@@QBEKK@Z
??1CILSClient@@UAE@XZ
??0CILSClient@@QAE@XZ
?Read@CAudioRecorder@@QAEHPAXH@Z
?Write@CAudioPlayer@@QAEHPAEH@Z
?Close@CAudioPlayer@@QAEHXZ
?Open@CAudioPlayer@@QAEHH@Z
?Close@CAudioRecorder@@QAEHXZ
?Open@CAudioRecorder@@QAEHH@Z
?StopStream@CVideoGrabber@@QAEHXZ
?Close@CVideoGrabber@@QAEHXZ
?IsOpened@CVideoGrabber@@QBEHXZ
?GetUserNameA@CH323EndPoint@@QBEXPADH@Z
?Open@CVideoGrabber@@QAEHHH@Z
?StartStream@CVideoGrabber@@QAEHHH@Z
?AddChannel@CVideoMixer@@QAEHKHKK@Z
?SetFPS@CVideoMixer@@QAEHKHK@Z
?ChannelExist@CVideoMixer@@QAEHKH@Z
?GetChannelCount@CVideoMixer@@QAEKH@Z
?GetDeviceName@CAudioPlayer@@SAHHPADH@Z
?GetAudioCodecCount@CH323EndPoint@@QBEKXZ
?AddChannel@CAudioMixer@@QAEHKHK@Z
?ChannelExist@CAudioMixer@@QAEHKH@Z
?GetChannelCount@CAudioMixer@@QAEKH@Z
?UseGatekeeper@CH323EndPoint@@QAEHPBD0@Z
?Read@CAudioMixer@@QAEHKPAEKHPAK@Z
?Write@CAudioMixer@@QAEHKPAEKHPAK@Z
?StartListen@CH323EndPoint@@QAEHPBDG@Z
?EnableH245inSetup@CH323EndPoint@@QAEXH@Z
?EnableH245Tunnel@CH323EndPoint@@QAEXH@Z
?EnableFastStart@CH323EndPoint@@QAEXH@Z
?SetInitialBandwidth@CH323EndPoint@@QAEXK@Z
?AutoSendVideo@CH323EndPoint@@QAEXH@Z
?SetPreferredAudioCodec@CH323EndPoint@@QAEHH@Z
?Authorise@CH323EndPoint@@QAEHPBD@Z
?Initialize@CH323EndPoint@@QAEHPBD0GGW4CodeStatus@@G@Z
?GetInitialBandwidth@CH323EndPoint@@QBEKXZ
?GetPreferredAudioCodec@CH323EndPoint@@QBEHXZ
?StartSendAudio@CH323EndPoint@@QAEHK@Z
?StopSendAudio@CH323EndPoint@@QAEHK@Z
?HoldAudio@CH323EndPoint@@QAEHKHH@Z
?StartSendVideo@CH323EndPoint@@QAEHK@Z
?StopSendVideo@CH323EndPoint@@QAEHK@Z
?HoldVideo@CH323EndPoint@@QAEHKHH@Z
?SetVideoFlip@CVideoMixer@@QAEHKHHH@Z
?Initialize@CILSClient@@QAEHXZ
??1CVideoGrabber@@UAE@XZ
??0CH323EndPoint@@QAE@H@Z
??0CAudioMixer@@QAE@XZ
??0CVideoMixer@@QAE@XZ
??0CVideoGrabber@@QAE@XZ
??0CAudioPlayer@@QAE@XZ
??0CAudioRecorder@@QAE@XZ
??1CH323EndPoint@@UAE@XZ
??1CAudioMixer@@UAE@XZ
??1CVideoMixer@@UAE@XZ
??1CAudioPlayer@@UAE@XZ
?Write@CVideoMixer@@QAEHKPAEHHH@Z
?GetUserState@CILSClient@@QAEHAAK@Z
?GetDeviceCount@CAudioPlayer@@SAKXZ
?GetDeviceName@CAudioRecorder@@SAHHPADH@Z
?GetVolume@CVolumeCtrl@@QAEKXZ
?Open@CVolumeCtrl@@QAEHHH@Z
?SetVolume@CVolumeCtrl@@QAEHK@Z
?IsH263Available@@YAHXZ
?GetDeviceName@CVideoGrabber@@QAEHHPADH@Z
?UnuseGatekeeper@CH323EndPoint@@QAEHXZ
?GetGateKeeperName@CH323EndPoint@@QAEHPADH@Z
?HangUp@CH323EndPoint@@QAEHK@Z
?GetConnectionStatus@CH323EndPoint@@QBE?AW4ConnStatus@@K@Z
?MakeCall@CH323EndPoint@@QAEHAAKPBD@Z
?GetVideoFlip@CVideoMixer@@QAEHKHAAH0@Z
?IsVideoHold@CH323EndPoint@@QBEHKH@Z
?IsAudioHold@CH323EndPoint@@QBEHKH@Z
?SendUserInput@CH323EndPoint@@QAEHKPBDW4SendUserInputModes@@@Z
?SetNoAnswerTimeout@CH323EndPoint@@QAEXK@Z
?SetMaxConnection@CH323EndPoint@@QAEXK@Z
?SetUserName@CH323EndPoint@@QAEXPBD0@Z
?GetNoAnswerTimeout@CH323EndPoint@@QAEKXZ
?GetMaxConnection@CH323EndPoint@@QBEKXZ
?GetUserAlias@CH323EndPoint@@QBEXPADH@Z
?Read@CVideoMixer@@QAEHKPAEHHH@Z
?RemoveChannel@CVideoMixer@@QAEHKH@Z
?RemoveChannel@CAudioMixer@@QAEHKH@Z
?Update@CILSClient@@QAEHAAKPBUUSER_INFO@@K@Z
?EnumUsers@CILSClient@@QAEHAAK@Z
?SetServer@CILSClient@@QAEHPBD00@Z
?GetConnectionCount@CH323EndPoint@@QBEKXZ
?GetDeviceCount@CAudioRecorder@@SAKXZ
?GetDeviceCount@CVideoGrabber@@QAEKXZ
?SetUser@CILSClient@@QAEHPBUUSER_INFO@@@Z
?Register@CILSClient@@QAEHAAK@Z
?Unregister@CILSClient@@QAEHAAK@Z
?SetGrabberMode@CVideoGrabber@@QAEHK@Z
??1CAudioRecorder@@UAE@XZ
?GetRemotePartyName@CH323EndPoint@@QBEHKPADH@Z
?AnswerCall@CH323EndPoint@@QAEHKH@Z

msvfw32

DrawDibOpen
DrawDibClose
DrawDibDraw

mfc42

ord825
ord6880
ord2379
ord3301
ord6696
ord2827
ord1200
ord6215
ord1644
ord6270
ord2438
ord3654
ord2584
ord4220
ord6648
ord3286
ord4123
ord2863
ord4160
ord2118
ord2108
ord2086
ord2299
ord1146
ord765
ord797
ord3723
ord4405
ord2586
ord3698
ord1134
ord2621
ord815
ord561
ord3738
ord4622
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord1233
ord2152
ord4275
ord818
ord3742
ord2365
ord2292
ord790
ord3716
ord2859
ord5951
ord2363
ord2297
ord413
ord711
ord793
ord3719
ord2645
ord6007
ord6905
ord3811
ord354
ord3337
ord5186
ord273
ord6404
ord603
ord665
ord4476
ord3876
ord2414
ord3663
ord3626
ord1641
ord656
ord3573
ord3610
ord2370
ord2301
ord2298
ord3317
ord3092
ord537
ord800
ord2818
ord540
ord860
ord535
ord858
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord2575
ord4396
ord3402
ord3574
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord4407
ord5280
ord4425
ord3597
ord2582
ord6055
ord4078
ord1776
ord4402
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3370
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3640
ord6199
ord616
ord693
ord609
ord641
ord823
ord567
ord324
ord2302
ord4234
ord6197
ord5981
ord1576
ord1168
ord3996
ord4710
ord2642
ord3874
ord6334
ord6907
ord3998
ord6453

msvcrt

_setmbcp
__setusermatherr
_controlfp
_initterm
__CxxFrameHandler
_mbscmp
_strtime
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__dllonexit
strtol
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit

kernel32

GetStartupInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
HeapReAlloc
HeapFree
HeapAlloc
SetThreadPriority
Sleep
WaitForSingleObject
CloseHandle
CreateThread

user32

PostQuitMessage
LoadMenuA
GetSubMenu
GetCursorPos
CheckMenuItem
GetMenu
EnableMenuItem
PeekMessageA
GetSystemMenu
AppendMenuA
LoadIconA
InvalidateRect
LoadCursorA
GetDC
GetClientRect
ReleaseDC
PostMessageA
IsWindowVisible
SetTimer
KillTimer
SetForegroundWindow
EnableWindow
SendMessageA
GetWindowRect

gdi32

GetStockObject
CreateSolidBrush

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
20063914274000/lib/VISh263m.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AllocContext
AllocFrame
CodecClose
CodecOpen
DecodeVideo
EncodeVideo
FindDecoder
FindEncoder
GetVer
InitCodec

Sections

.text
Size: 400KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
20063914274000/lib/VISh323.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

??0CAudioMixer@@QAE@ABV0@@Z
??0CAudioMixer@@QAE@XZ
??0CAudioPlayer@@QAE@ABV0@@Z
??0CAudioPlayer@@QAE@XZ
??0CAudioRecorder@@QAE@ABV0@@Z
??0CAudioRecorder@@QAE@XZ
??0CH323EndPoint@@QAE@ABV0@@Z
??0CH323EndPoint@@QAE@H@Z
??0CILSClient@@QAE@ABV0@@Z
??0CILSClient@@QAE@XZ
??0CVideoGrabber@@QAE@ABV0@@Z
??0CVideoGrabber@@QAE@XZ
??0CVideoMixer@@QAE@ABV0@@Z
??0CVideoMixer@@QAE@XZ
??0CVolumeCtrl@@QAE@ABV0@@Z
??0CVolumeCtrl@@QAE@XZ
??1CAudioMixer@@UAE@XZ
??1CAudioPlayer@@UAE@XZ
??1CAudioRecorder@@UAE@XZ
??1CH323EndPoint@@UAE@XZ
??1CILSClient@@UAE@XZ
??1CVideoGrabber@@UAE@XZ
??1CVideoMixer@@UAE@XZ
??1CVolumeCtrl@@UAE@XZ
??4CAudioMixer@@QAEAAV0@ABV0@@Z
??4CAudioPlayer@@QAEAAV0@ABV0@@Z
??4CAudioRecorder@@QAEAAV0@ABV0@@Z
??4CH323EndPoint@@QAEAAV0@ABV0@@Z
??4CILSClient@@QAEAAV0@ABV0@@Z
??4CVideoGrabber@@QAEAAV0@ABV0@@Z
??4CVideoMixer@@QAEAAV0@ABV0@@Z
??4CVolumeCtrl@@QAEAAV0@ABV0@@Z
??_7CAudioMixer@@6B@
??_7CAudioPlayer@@6B@
??_7CAudioRecorder@@6B@
??_7CH323EndPoint@@6B@
??_7CILSClient@@6B@
??_7CVideoGrabber@@6B@
??_7CVideoMixer@@6B@
??_7CVolumeCtrl@@6B@
??_FCH323EndPoint@@QAEXXZ
?AddChannel@CAudioMixer@@QAEHKHK@Z
?AddChannel@CVideoMixer@@QAEHKHKK@Z
?AnswerCall@CH323EndPoint@@QAEHKH@Z
?Authorise@CH323EndPoint@@QAEHPBD@Z
?AutoSendVideo@CH323EndPoint@@QAEXH@Z
?ChannelExist@CAudioMixer@@QAEHKH@Z
?ChannelExist@CVideoMixer@@QAEHKH@Z
?Close@CAudioPlayer@@QAEHXZ
?Close@CAudioRecorder@@QAEHXZ
?Close@CVideoGrabber@@QAEHXZ
?Close@CVolumeCtrl@@QAEHXZ
?EnableFastStart@CH323EndPoint@@QAEXH@Z
?EnableH245Tunnel@CH323EndPoint@@QAEXH@Z
?EnableH245inSetup@CH323EndPoint@@QAEXH@Z
?EnumUserNames@CILSClient@@QAEHAAK@Z
?EnumUsers@CILSClient@@QAEHAAK@Z
?GetAudioCodecCount@CH323EndPoint@@QBEKXZ
?GetAudioCodecName@CH323EndPoint@@QBEHHPADH@Z
?GetAudioDataReceived@CH323EndPoint@@QBEKK@Z
?GetAudioDataSent@CH323EndPoint@@QBEKK@Z
?GetAudioSignalLevel@CH323EndPoint@@QBEKKH@Z
?GetAudioSrcAddr@CH323EndPoint@@QAEHKPADAAG@Z
?GetBkgndColor@CVideoMixer@@QAEHKHAAK@Z
?GetChannelCount@CAudioMixer@@QAEKH@Z
?GetChannelCount@CVideoMixer@@QAEKH@Z
?GetConnectionCount@CH323EndPoint@@QBEKXZ
?GetConnectionDuration@CH323EndPoint@@QBEHKAAK@Z
?GetConnectionStatus@CH323EndPoint@@QBE?AW4ConnStatus@@K@Z
?GetDeviceCount@CAudioPlayer@@SAKXZ
?GetDeviceCount@CAudioRecorder@@SAKXZ
?GetDeviceCount@CVideoGrabber@@QAEKXZ
?GetDeviceName@CAudioPlayer@@SAHHPADH@Z
?GetDeviceName@CAudioRecorder@@SAHHPADH@Z
?GetDeviceName@CVideoGrabber@@QAEHHPADH@Z
?GetFPS@CVideoMixer@@QAEHKHAAK@Z
?GetGateKeeperName@CH323EndPoint@@QAEHPADH@Z
?GetInitialBandwidth@CH323EndPoint@@QBEKXZ
?GetMaxAudioDelayJitter@CH323EndPoint@@QBEHKAAK@Z
?GetMaxConnection@CH323EndPoint@@QBEKXZ
?GetNoAnswerTimeout@CH323EndPoint@@QAEKXZ
?GetPreferredAudioCodec@CH323EndPoint@@QBEHXZ
?GetRemoteAddress@CH323EndPoint@@QBEHKPADH@Z
?GetRemoteApplication@CH323EndPoint@@QBEHKPADH@Z
?GetRemotePartyName@CH323EndPoint@@QBEHKPADH@Z
?GetSilenceDetectionMode@CH323EndPoint@@QBEHKAAW4SilenceDetectionMode@@AAK@Z
?GetUserAlias@CH323EndPoint@@QBEXPADH@Z
?GetUserInfo@CILSClient@@QAEHAAKPBD@Z
?GetUserNameA@CH323EndPoint@@QBEXPADH@Z
?GetUserState@CILSClient@@QAEHAAK@Z
?GetVideoDataReceived@CH323EndPoint@@QBEKK@Z
?GetVideoDataSent@CH323EndPoint@@QBEKK@Z
?GetVideoFlip@CVideoMixer@@QAEHKHAAH0@Z
?GetVideoFrameReceived@CH323EndPoint@@QBEKK@Z
?GetVideoFrameSent@CH323EndPoint@@QBEKK@Z
?GetVideoGrids@CVideoMixer@@QAEHKAAK@Z
?GetVideoQuality@CH323EndPoint@@QBEHKAAK@Z
?GetVideoSize@CH323EndPoint@@QBEHKAAW4VideoFormat@@@Z
?GetVideoSrcAddr@CH323EndPoint@@QAEHKPADAAG@Z
?GetVolume@CVolumeCtrl@@QAEKXZ
?HangUp@CH323EndPoint@@QAEHK@Z
?HoldAudio@CH323EndPoint@@QAEHKHH@Z
?HoldVideo@CH323EndPoint@@QAEHKHH@Z
?Initialize@CH323EndPoint@@QAEHPBD0GGW4CodeStatus@@G@Z
?Initialize@CILSClient@@QAEHXZ
?IsAudioHold@CH323EndPoint@@QBEHKH@Z
?IsH263Available@@YAHXZ
?IsOpened@CAudioPlayer@@QBEHXZ
?IsOpened@CAudioRecorder@@QBEHXZ
?IsOpened@CVideoGrabber@@QBEHXZ
?IsOpened@CVolumeCtrl@@QBEHXZ
?IsVideoHold@CH323EndPoint@@QBEHKH@Z
?MakeCall@CH323EndPoint@@QAEHAAKPBD@Z
?OnAnswerCall@CH323EndPoint@@UAEXKPBD@Z
?OnAudioStart@CH323EndPoint@@UAEHKHPBD@Z
?OnAudioStop@CH323EndPoint@@UAEHKHPBD@Z
?OnConnectionCleared@CH323EndPoint@@UAEXKKW4CallEndReason@@@Z
?OnConnectionEstablished@CH323EndPoint@@UAEXK@Z
?OnEnumUserNames@CILSClient@@UAEXKKPBD@Z
?OnEnumUsers@CILSClient@@UAEXKKAAUUSER_INFO@@@Z
?OnGetUserInfo@CILSClient@@UAEXKKAAUUSER_INFO@@@Z
?OnReadAudioFrame@CH323EndPoint@@UAEHKPAEH@Z
?OnReadVideoFrame@CH323EndPoint@@UAEHKPAEHH@Z
?OnReceiveUserInput@CH323EndPoint@@UAEXKPBD@Z
?OnRegister@CILSClient@@UAEXKK@Z
?OnRenderAudioFrame@CH323EndPoint@@UAEHKPAEH@Z
?OnRenderVideoFrame@CH323EndPoint@@UAEHKPAEHH@Z
?OnStream@CVideoGrabber@@UAEXPAEHH@Z
?OnUnregister@CILSClient@@UAEXKK@Z
?OnUpdate@CILSClient@@UAEXKK@Z
?OnUseGatekeeper@CH323EndPoint@@UAEXW4UseGKResult@@PBD@Z
?OnUserStateChanged@CILSClient@@UAEXKPBD@Z
?OnVideoStart@CH323EndPoint@@UAEHKHPBD@Z
?OnVideoStop@CH323EndPoint@@UAEHKHPBD@Z
?OnVolumeChanged@CVolumeCtrl@@UAEXK@Z
?OnWaitForAnswer@CH323EndPoint@@UAEXK@Z
?Open@CAudioPlayer@@QAEHH@Z
?Open@CAudioRecorder@@QAEHH@Z
?Open@CVideoGrabber@@QAEHHH@Z
?Open@CVolumeCtrl@@QAEHHH@Z
?QueryVideoPosition@CVideoMixer@@QAEHKKAAH@Z
?Read@CAudioMixer@@QAEHKPAEKHPAK@Z
?Read@CAudioRecorder@@QAEHPAXH@Z
?Read@CVideoGrabber@@QAEHPAXHH@Z
?Read@CVideoMixer@@QAEHKPAEHHH@Z
?Register@CILSClient@@QAEHAAK@Z
?RemoveChannel@CAudioMixer@@QAEHKH@Z
?RemoveChannel@CVideoMixer@@QAEHKH@Z
?SendUserInput@CH323EndPoint@@QAEHKPBDW4SendUserInputModes@@@Z
?SetAudioDstAddr@CH323EndPoint@@QAEHKPBDG@Z
?SetBkgndColor@CVideoMixer@@QAEHKHK@Z
?SetFPS@CVideoMixer@@QAEHKHK@Z
?SetGrabberMode@CVideoGrabber@@QAEHK@Z
?SetInitialBandwidth@CH323EndPoint@@QAEXK@Z
?SetMaxAudioDelayJitter@CH323EndPoint@@QAEHKK@Z
?SetMaxConnection@CH323EndPoint@@QAEXK@Z
?SetNoAnswerTimeout@CH323EndPoint@@QAEXK@Z
?SetPreferredAudioCodec@CH323EndPoint@@QAEHH@Z
?SetServer@CILSClient@@QAEHPBD00@Z
?SetSilenceDetectionMode@CH323EndPoint@@QAEHKW4SilenceDetectionMode@@K@Z
?SetUser@CILSClient@@QAEHPBUUSER_INFO@@@Z
?SetUserName@CH323EndPoint@@QAEXPBD0@Z
?SetVideoDstAddr@CH323EndPoint@@QAEHKPBDG@Z
?SetVideoFlip@CVideoMixer@@QAEHKHHH@Z
?SetVideoPosition@CVideoMixer@@QAEHKKH@Z
?SetVideoQuality@CH323EndPoint@@QAEHKK@Z
?SetVideoSize@CH323EndPoint@@QAEHKW4VideoFormat@@@Z
?SetVolume@CVolumeCtrl@@QAEHK@Z
?StartListen@CH323EndPoint@@QAEHPBDG@Z
?StartSendAudio@CH323EndPoint@@QAEHK@Z
?StartSendVideo@CH323EndPoint@@QAEHK@Z
?StartStream@CVideoGrabber@@QAEHHH@Z
?StopSendAudio@CH323EndPoint@@QAEHK@Z
?StopSendVideo@CH323EndPoint@@QAEHK@Z
?StopStream@CVideoGrabber@@QAEHXZ
?Uninitialize@CILSClient@@QAEHXZ
?Unregister@CILSClient@@QAEHAAK@Z
?UnuseGatekeeper@CH323EndPoint@@QAEHXZ
?Update@CILSClient@@QAEHAAKPBUUSER_INFO@@K@Z
?UseGatekeeper@CH323EndPoint@@QAEHPBD0@Z
?Write@CAudioMixer@@QAEHKPAEKHPAK@Z
?Write@CAudioPlayer@@QAEHPAEH@Z
?Write@CVideoMixer@@QAEHKPAEHHH@Z

Sections

.text
Size: 241KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 23KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
20063914274000/lib/VISh323.lib
20063914274000/lib/h323exp.h
20063914274000/readme.txt
20063914274000/下载说明.htm
.html .js polyglot
20063914274000/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

75c7d314a574bcbae09b309cd41a2511

Headers

File Characteristics

Imports

vish323

msvfw32

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 15KB

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 400KB - Virtual size: 1.0MB

.text Size: 512B - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 18KB - Virtual size: 384KB

.rdata Size: 1024B - Virtual size: 4KB

.edata Size: 28KB - Virtual size: 28KB

.reloc Size: 10KB - Virtual size: 16KB

.reloc Size: 10KB - Virtual size: 16KB

.aspack Size: 4KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 241KB - Virtual size: 768KB

.rdata Size: 296KB - Virtual size: 296KB

.data Size: 30KB - Virtual size: 120KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 23KB - Virtual size: 104KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 15KB

.text
Size: 400KB - Virtual size: 1.0MB

.text
Size: 512B - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 18KB - Virtual size: 384KB

.rdata
Size: 1024B - Virtual size: 4KB

.edata
Size: 28KB - Virtual size: 28KB

.reloc
Size: 10KB - Virtual size: 16KB

.reloc
Size: 10KB - Virtual size: 16KB

.aspack
Size: 4KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.text
Size: 241KB - Virtual size: 768KB

.rdata
Size: 296KB - Virtual size: 296KB

.data
Size: 30KB - Virtual size: 120KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 23KB - Virtual size: 104KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB