3db768b6f29375abca8ecbd418979739604346045a086e68b70ef8e81a5de35a

Sharing

Copy URL Twitter E-mail

General

Target

3db768b6f29375abca8ecbd418979739604346045a086e68b70ef8e81a5de35a
Size

568KB
MD5

46dc44ea0d5aee5f3ba6bdbf82559d1e
SHA1

e1ddb1adc808f2b12075ace0cf5f97c6bae758ad
SHA256

3db768b6f29375abca8ecbd418979739604346045a086e68b70ef8e81a5de35a
SHA512

8a8da30fd5ad2364854ea9ab8a169863d29f94da64354936a642795b3de8ca9d0e4796c3f8744221dc92618ff6a3bb0b7d8c772491ecf141d58a5e22c984666e
SSDEEP

6144:4WZoeRYxU88j+ilra/lUgws2pTHMlRW2us8EsrEpQ4VleoqrT6GRRzQ7Dn5DDE++:3ZhKiliUgqz/u0u7L5DDzW4+aWomh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db768b6f29375abca8ecbd418979739604346045a086e68b70ef8e81a5de35a

Files

3db768b6f29375abca8ecbd418979739604346045a086e68b70ef8e81a5de35a
.dll windows:4 windows x86 arch:x86

a3fb9ee52daef3dce80f811ed36d2a24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

select
recv
ioctlsocket
connect
getsockopt
__WSAFDIsSet
shutdown
WSACleanup
getservbyport
gethostbyaddr
getservbyname
inet_addr
WSASetLastError
htonl
WSAStartup
gethostname
gethostbyname
inet_ntoa
socket
setsockopt
bind
closesocket
ntohs
WSAGetLastError
ntohl
send
htons

kernel32

CompareStringA
FindClose
FindFirstFileA
GetLocaleInfoW
CloseHandle
CreateFileA
GetLastError
ReadFile
WriteFile
SetFilePointer
CreateDirectoryA
GetFileAttributesA
OutputDebugStringA
GetModuleFileNameA
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
GetDiskFreeSpaceExA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetEndOfFile
Sleep
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
DeleteFileA
GetStringTypeW
FindNextFileA
SetFileAttributesA
GetLocalTime
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
GetCurrentProcess
GetCurrentThreadId
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
GetStringTypeA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
IsBadCodePtr
IsBadReadPtr
UnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
IsValidLocale
GetFileInformationByHandle
GetFileType
FlushFileBuffers
LoadLibraryExA
CreateEventA
FreeEnvironmentStringsA
GetOEMCP
SetEvent
GetACP
GetCPInfo
GetStartupInfoA
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
CompareStringW
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetEnvironmentVariableA
HeapSize
SetLastError
SetEnvironmentVariableA
ExitThread
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
CreateThread
GetVersion
GetCommandLineA
HeapReAlloc
TerminateProcess
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
RaiseException
GetSystemTime

advapi32

GetSecurityInfo

user32

InvalidateRect
ShowWindow

Exports

Exports

NS_AudioPlayPasue
NS_AudioPlayResume
NS_BMPCapture
NS_BatchDownLoadProgress
NS_BatchStartDownLoad
NS_BatchStopDownLoad
NS_ChangeRange
NS_CloseSound
NS_D3DCapture
NS_Decrypt
NS_Download
NS_DrawIntelInfoFeature
NS_EnableIVS
NS_Encrypt
NS_ExportDeviceConfig
NS_ExportDeviceLog
NS_ExportFile
NS_ExportReport
NS_FECRigisterDrawFun
NS_FEC_CapturePIC
NS_FEC_GetParam
NS_FEC_GetSpecialViewParam
NS_FEC_GetViewParam
NS_FEC_IsInFinshDraw
NS_FEC_PTZ2WindowEx
NS_FEC_Play
NS_FEC_Set3DModelParam
NS_FEC_SetCorrectEffect
NS_FEC_SetDisplayRegion
NS_FEC_SetDrawType
NS_FEC_SetFinshDraw
NS_FEC_SetViewParam
NS_FEC_TestScan
NS_FEC_UpDateParam
NS_Fast
NS_FiniLib
NS_FrameForward
NS_GetAudioPlayedTime
NS_GetAudioVolume
NS_GetDownLoadFiles
NS_GetDownloadStatus
NS_GetEngineSupport
NS_GetFormUploadErrorInfo
NS_GetHTTPErrorInfo
NS_GetIpcImportErrorInfo
NS_GetLastError
NS_GetLoginAuth
NS_GetNetworkInfo
NS_GetOSDTime
NS_GetPictureSize
NS_GetPlayedTime
NS_GetPlayedTimeEx
NS_GetRecordFileSize
NS_GetScale
NS_GetSycVAStatus
NS_GetSystemTime
NS_GetUpLoadFilesProgress
NS_GetUploadErrorInfo
NS_GetVolume
NS_ImportDeviceConfig
NS_InitLib
NS_JPEGCapture
NS_OpenSound
NS_Pause
NS_Play
NS_Play_V20
NS_RefreshPlay
NS_RegAdditionFun
NS_RenderPrivateDataEx
NS_ResetPlayWnd
NS_Resume
NS_ReversePlay
NS_RigisterAudioDrawFun
NS_RigisterDrawFun
NS_SR_Rotate
NS_SendHttpSynRequest
NS_SetAudioPlayStatus
NS_SetAudioVolume
NS_SetDVRMessageCallBack
NS_SetDecodeEngine
NS_SetDecodeOrDisplayMode
NS_SetDelayPlayTime
NS_SetDisplayBuf
NS_SetDisplayCallBack
NS_SetDisplayRegion
NS_SetFishMsgCallBack
NS_SetHttpRequestCallBack
NS_SetLanguage
NS_SetLocalAlarmPicLoacation
NS_SetMessageHandler
NS_SetOverlayPriInfoFlag
NS_SetPicInfoToPlayer
NS_SetPicOrRegionFillPara
NS_SetReconnectInfo
NS_SetSecretKey
NS_SetTrackDurationTime
NS_SetUploadFaceDataCallBack
NS_SetUploadState
NS_SetVoiceAdditionDataCallBack
NS_SetVoiceMsgCallBack
NS_SetVolume
NS_Slow
NS_StartAlarmChan
NS_StartAsynUpload
NS_StartAudioPlay
NS_StartAudioRecord
NS_StartDownload
NS_StartDownloadEx
NS_StartDownloadEx_V2
NS_StartDownload_V2
NS_StartFishListener
NS_StartFormAsynUpload
NS_StartRealTime
NS_StartSave
NS_StartSycAudioPlay
NS_StartUpLoadFiles
NS_StartUpLoadFilesByOption
NS_StartUpLoadFilesEx
NS_StartUpgrade
NS_StartVoiceTalk
NS_Stop
NS_StopAlarmChan
NS_StopAsynUpload
NS_StopAudioPlay
NS_StopAudioRecord
NS_StopDownload
NS_StopFishListener
NS_StopFormAsynUpload
NS_StopHttpRequest
NS_StopRealTime
NS_StopSave
NS_StopSycAudioPlay
NS_StopSycVAFiles
NS_StopUpLoadFiles
NS_StopUpgrade
NS_StopVoiceTalk
NS_SubmitHttpRequest
NS_SwitchFile
NS_SycVideoAndAudioFiles
NS_USB_EnumUSBDevices
NS_USB_GetAuthKey
NS_USB_GetDeviceConfig
NS_USB_GetDeviceSerial
NS_USB_LoginDefaultDevice
NS_USB_LoginUSBDevice
NS_USB_LogoutDevice
NS_USB_SetFingerMessageCallback
NS_USB_SetSeviceConfig
NS_USB_StartEnrollFinger
NS_USB_StopEnrollFinger
NS_UpgradeStatus
NS_UpgradeStatusEx
NS_Upload

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3fb9ee52daef3dce80f811ed36d2a24

Headers

File Characteristics

Imports

ws2_32

kernel32

advapi32

user32

Exports

Exports

Sections

.text Size: 384KB - Virtual size: 383KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 88KB - Virtual size: 1.4MB

.rsrc Size: 4KB - Virtual size: 784B

.reloc Size: 32KB - Virtual size: 31KB

.text
Size: 384KB - Virtual size: 383KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 88KB - Virtual size: 1.4MB

.rsrc
Size: 4KB - Virtual size: 784B

.reloc
Size: 32KB - Virtual size: 31KB