4ef56c6a834b6a4af2cb3fb716253912d811f0be6d36c5832be74ad34ce66a11

Sharing

Copy URL Twitter E-mail

General

Target

4ef56c6a834b6a4af2cb3fb716253912d811f0be6d36c5832be74ad34ce66a11
Size

633KB
MD5

bd18e07169827cd13b8edbd5e8722b21
SHA1

bcddd0d70d484b51f9c07ac97341a0704cd6a9ae
SHA256

4ef56c6a834b6a4af2cb3fb716253912d811f0be6d36c5832be74ad34ce66a11
SHA512

a1f421924df7dd37ad6398213efc36eecde92c6f8ba3a3a1792c0a4901db286e8a61e0ae8f146448a3ec4bd0fd9ad576961eac42215ab949017bea373e3bdfbf
SSDEEP

12288:XFvKg2zw27f559jSgqLZ9kh6pYE3b0xcYXnO6S2rl:XFvhgqLDH3bgnOv2r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ef56c6a834b6a4af2cb3fb716253912d811f0be6d36c5832be74ad34ce66a11

Files

4ef56c6a834b6a4af2cb3fb716253912d811f0be6d36c5832be74ad34ce66a11
.dll windows:5 windows x86 arch:x86

d0e0fed26ad6f92aaa28dbd4cb3955dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hid

HidD_GetPreparsedData
HidD_GetAttributes
HidD_SetFeature
HidP_GetCaps
HidD_FreePreparsedData
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidD_GetFeature
HidP_MaxUsageListLength

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_Depth
CM_Get_Parent
CM_Get_Child
CM_Get_Device_IDW
CM_Get_Sibling

advapi32

RegQueryValueExW

dynamicsislog

?printLog@SiSLog@SiS@@QAAXPBD000H0ZZ
?isLOG_D@SiSLog@SiS@@QAE_NXZ
?getOwnerSiS@SiSLog@SiS@@SAPAV12@XZ

qtsql4

?isOpen@QSqlDatabase@@QBE_NXZ
?addDatabase@QSqlDatabase@@SA?AV1@ABVQString@@0@Z
?setDatabaseName@QSqlDatabase@@QAEXABVQString@@@Z
??0QSqlDatabase@@QAE@ABV0@@Z
?open@QSqlDatabase@@QAE_NXZ
?lastError@QSqlDatabase@@QBE?AVQSqlError@@XZ
?text@QSqlError@@QBE?AVQString@@XZ
??1QSqlError@@QAE@XZ
?type@QSqlError@@QBE?AW4ErrorType@1@XZ
?close@QSqlDatabase@@QAEXXZ
?removeDatabase@QSqlDatabase@@SAXABVQString@@@Z
??0QSqlQueryModel@@QAE@PAVQObject@@@Z
?setQuery@QSqlQueryModel@@QAEXABVQString@@ABVQSqlDatabase@@@Z
?rowCount@QSqlQueryModel@@UBEHABVQModelIndex@@@Z
?record@QSqlQueryModel@@QBE?AVQSqlRecord@@H@Z
?columnCount@QSqlQueryModel@@UBEHABVQModelIndex@@@Z
?value@QSqlRecord@@QBE?AVQVariant@@H@Z
?fieldName@QSqlRecord@@QBE?AVQString@@H@Z
??1QSqlRecord@@QAE@XZ
??1QSqlQueryModel@@UAE@XZ
??1QSqlDatabase@@QAE@XZ

qtcore4

??0QString@@QAE@ABV0@@Z
?detach@QListData@@QAEPAUData@1@H@Z
?simplified@QString@@QBE?AV1@XZ
?split@QString@@QBE?AVQStringList@@ABVQChar@@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
??0QChar@@QAE@D@Z
?append@QString@@QAEAAV1@ABV1@@Z
?toString@QVariant@@QBE?AVQString@@XZ
?fromAscii@QString@@SA?AV1@PBDH@Z
??1QModelIndex@@QAE@XZ
??4QString@@QAEAAV0@ABV0@@Z
?toInt@QString@@QBEHPA_NH@Z
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
??0QVariant@@QAE@ABV0@@Z
??0QVariant@@QAE@XZ
??4QVariant@@QAEAAV0@ABV0@@Z
?addLibraryPath@QCoreApplication@@SAXABVQString@@@Z
?fromStdWString@QString@@SA?AV1@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?qFree@@YAXPAX@Z
?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?fromStdString@QString@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0QVariant@@QAE@ABVQString@@@Z
?free@QString@@CAXPAUData@1@@Z
?toInt@QVariant@@QBEHPA_N@Z
??1QVariant@@QAE@XZ
??1QString@@QAE@XZ
?isNull@QVariant@@QBE_NXZ

msvcp90

?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEX_NI@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?uncaught_exception@std@@YA_NXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

msvcr90

_lock
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_encode_pointer
__dllonexit
_unlock
__clean_type_info_names_internal
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?terminate@@YAXXZ
_beginthreadex
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??_V@YAXPAX@Z
_invalid_parameter_noinfo
_CxxThrowException
??2@YAPAXI@Z
??8type_info@@QBE_NABV0@@Z
memmove_s
memset
printf
_purecall
__RTDynamicCast
memcpy
sprintf
free
calloc
malloc
_vswprintf
wcstombs
tolower
toupper
wcscpy_s
_except_handler4_common

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
SetEvent
GetVersionExW
ReleaseMutex
OpenMutexA
CreateMutexA
TerminateThread
DeviceIoControl
CancelIo
WaitForSingleObject
SetLastError
ResetEvent
CreateEventW
GetLastError
MultiByteToWideChar
CreateFileW
SetupComm
SetCommTimeouts
SetCommState
PurgeComm
EscapeCommFunction
WriteFile
ReadFile
CloseHandle
Sleep
GetModuleFileNameW

Exports

Exports

??0Component@Model@SiS@@AAE@XZ
??0Component@Model@SiS@@QAE@ABV012@@Z
??0Component@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@D_N@Z
??0Component@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@F_N@Z
??0Component@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_N@Z
??0Component@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAEH@Z
??0Component@Model@SiS@@QAE@PAV012@@Z
??0CptFactoryFacade@Model@SiS@@QAE@PAVComponentFactory@12@@Z
??0CptFactoryFacade@Model@SiS@@QAE@XZ
??0DeviceSearcher@Model@SiS@@QAE@XZ
??0OperationFormatReader@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0OperationFormatReader@Model@SiS@@QAE@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
??0OperationFormatReader@Model@SiS@@QAE@XZ
??0SiSCmdModuleException@Model@SiS@@AAE@XZ
??0SiSCmdModuleException@Model@SiS@@QAE@ABV012@@Z
??0SiSCmdModuleException@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0SiSCmdModuleException@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
??0SiSCore@Model@SiS@@QAE@XZ
??0SiSCoreException@Model@SiS@@AAE@XZ
??0SiSCoreException@Model@SiS@@QAE@ABV012@@Z
??0SiSCoreException@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0SiSCoreException@Model@SiS@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
??1Component@Model@SiS@@UAE@XZ
??1CptFactoryFacade@Model@SiS@@QAE@XZ
??1DeviceSearcher@Model@SiS@@UAE@XZ
??1OperationFormatReader@Model@SiS@@QAE@XZ
??1SiSCmdModuleException@Model@SiS@@UAE@XZ
??1SiSCore@Model@SiS@@QAE@XZ
??1SiSCoreException@Model@SiS@@UAE@XZ
??4Component@Model@SiS@@QAEABV012@ABV012@@Z
??4CptFactoryFacade@Model@SiS@@QAEAAV012@ABV012@@Z
??4SiSCmdModuleException@Model@SiS@@QAEAAV012@ABV012@@Z
??4SiSCoreException@Model@SiS@@QAEAAV012@ABV012@@Z
??_7Component@Model@SiS@@6B@
??_7DeviceSearcher@Model@SiS@@6B@
??_7SiSCmdModuleException@Model@SiS@@6B@
??_7SiSCoreException@Model@SiS@@6B@
?IOInterval@SiSCore@Model@SiS@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
?IOStatusReset@SiSCore@Model@SiS@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
?LogFileLocation@SiSCore@Model@SiS@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
?LogFileName@SiSCore@Model@SiS@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
?ReadTimeout@SiSCore@Model@SiS@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
?WriteTimeout@SiSCore@Model@SiS@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
?addComponent@Component@Model@SiS@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV123@@Z
?addOperation@SiSCore@Model@SiS@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVOperation@23@@Z
?addSuccessiveInterfaceTo@OperationFormatReader@Model@SiS@@ABE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V45@ABV45@@Z
?address@CptFactoryFacade@Model@SiS@@QBEPAVComponent@23@I@Z
?attribute@SiSCore@Model@SiS@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
?boot@SiSCore@Model@SiS@@QAEXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?boot@SiSCore@Model@SiS@@QAEXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@PBVOperationFormatReader@23@@Z
?boot@SiSCore@Model@SiS@@QAEXPBVOperationFormatReader@23@@Z
?boot@SiSCore@Model@SiS@@QAEXXZ
?buildDataMask@CptFactoryFacade@Model@SiS@@ABEXDHPAVComponent@23@@Z
?chipAddress@CptFactoryFacade@Model@SiS@@QBEPAVComponent@23@I@Z
?commands@OperationFormatReader@Model@SiS@@QBEPAVOpFormatNode@23@PAV423@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11@Z
?componentProvider@SiSCore@Model@SiS@@QBEPBVCptFactoryFacade@23@XZ
?components@OperationFormatReader@Model@SiS@@QBEPAVOpFormatNode@23@PAV423@@Z
?copyValue@Component@Model@SiS@@SAXPBV123@PAV123@@Z
?createByteArray@Component@Model@SiS@@CA?AV?$vector@EV?$allocator@E@std@@@std@@PAEH@Z
?data@Component@Model@SiS@@QBEABV?$vector@EV?$allocator@E@std@@@std@@XZ
?data@Component@Model@SiS@@QBEEI@Z
?dataMask@CptFactoryFacade@Model@SiS@@QBEPAVComponent@23@DDDD@Z
?doCommand@SiSCore@Model@SiS@@QAE?AW4_AckResult@23@PAVComponent@23@0@Z
?getErrCode@SiSCmdModuleException@Model@SiS@@UBEIXZ
?getErrCode@SiSCoreException@Model@SiS@@UBEIXZ
?getSetting@OperationFormatReader@Model@SiS@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z
?hasSetting@OperationFormatReader@Model@SiS@@ABE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?hasSubComponent@Component@Model@SiS@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?init@OperationFormatReader@Model@SiS@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?init@OperationFormatReader@Model@SiS@@QAE_NXZ
?initialFormat@SiSCore@Model@SiS@@AAEXPBVOperationFormatReader@23@@Z
?initialFormat@SiSCore@Model@SiS@@AAEXXZ
?initialLog@SiSCore@Model@SiS@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?initialLog@SiSCore@Model@SiS@@AAEXXZ
?insertValue@Component@Model@SiS@@SAXIPAV123@II@Z
?insertValue@Component@Model@SiS@@SAXPBV123@PAV123@II@Z
?length4Byte@CptFactoryFacade@Model@SiS@@QBEPAVComponent@23@I@Z
?listDevice@DeviceSearcher@Model@SiS@@UBE?AV?$vector@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@V?$allocator@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?listDeviceWithoutFilter@DeviceSearcher@Model@SiS@@QBE?AV?$vector@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@V?$allocator@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?listSubComponent@Component@Model@SiS@@QBE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?loadFactory@CptFactoryFacade@Model@SiS@@QAEXPAVComponentFactory@23@@Z
?log@SiSCore@Model@SiS@@QAEPAVLog@0utility@sis@@XZ
?mode@CptFactoryFacade@Model@SiS@@QBEPAVComponent@23@PBVSiSCore@23@F@Z
?operationAttr@SiSCore@Model@SiS@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@0@Z
?operations@OperationFormatReader@Model@SiS@@QBEPAVOpFormatNode@23@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@000@Z
?operations@OperationFormatReader@Model@SiS@@QBEPAVOpFormatNode@23@XZ
?readLength@CptFactoryFacade@Model@SiS@@QBEPAVComponent@23@G@Z
?resourcePath@OperationFormatReader@Model@SiS@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?serialData@CptFactoryFacade@Model@SiS@@SAPAVComponent@23@IH@Z
?set@OperationFormatReader@Model@SiS@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?setAttribute@SiSCore@Model@SiS@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?setOperationAttr@SiSCore@Model@SiS@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z
?setResourcePath@OperationFormatReader@Model@SiS@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?shutdown@SiSCore@Model@SiS@@QAEXXZ
?subComponent@Component@Model@SiS@@QAEPAV123@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?suffixLen@CptFactoryFacade@Model@SiS@@QBEPAVComponent@23@G@Z
?transitionID@CptFactoryFacade@Model@SiS@@QBEPAVComponent@23@I@Z
?valueInByte@Component@Model@SiS@@SAPAEPAV123@@Z
?what@SiSCmdModuleException@Model@SiS@@UBEPBDXZ
?what@SiSCoreException@Model@SiS@@UBEPBDXZ

Sections

.text
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0e0fed26ad6f92aaa28dbd4cb3955dd

Headers

DLL Characteristics

File Characteristics

Imports

hid

setupapi

advapi32

dynamicsislog

qtsql4

qtcore4

msvcp90

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 445KB - Virtual size: 445KB

.rdata Size: 91KB - Virtual size: 90KB

.data Size: 8KB - Virtual size: 112KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 86KB - Virtual size: 85KB

.text
Size: 445KB - Virtual size: 445KB

.rdata
Size: 91KB - Virtual size: 90KB

.data
Size: 8KB - Virtual size: 112KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 86KB - Virtual size: 85KB