D:\jenkins_ci\workspace\Pack_SDK_HCNetSDK_Win32_64_SWMS\common\HCNetSDK\VS2013\lib\win32\HCNetSDKCom\HCDisplay.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f79b5b85464a589cfb507d5c6ab65ce0eb74bfac1972d8aa55fa59b602abe13f.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f79b5b85464a589cfb507d5c6ab65ce0eb74bfac1972d8aa55fa59b602abe13f.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f79b5b85464a589cfb507d5c6ab65ce0eb74bfac1972d8aa55fa59b602abe13f
-
Size
892KB
-
MD5
1f116cdd2f997efc1ee356ebc312e46b
-
SHA1
ccdcb8093b6bb3669ddd9f531f901f909e3425a3
-
SHA256
f79b5b85464a589cfb507d5c6ab65ce0eb74bfac1972d8aa55fa59b602abe13f
-
SHA512
85191b3475918bde31efdea46aa75ba6222243226b6188aa91a349acff68e862c56b95fed2fe3a9653dc5b91e8d1c7d667aa9b30585aee5e1f467e2a87d4c796
-
SSDEEP
24576:CdC++I0ETngTcKoMhdU0eH9XYMS8eFaTX1:CdC++4bgTTTd1urQ0TX1
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f79b5b85464a589cfb507d5c6ab65ce0eb74bfac1972d8aa55fa59b602abe13f
Files
-
f79b5b85464a589cfb507d5c6ab65ce0eb74bfac1972d8aa55fa59b602abe13f.dll windows:6 windows x86 arch:x86
c27f934fdfa696693c3d2b4a890ec5ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
hccore
?Init@CCtrlBase@NetSDK@@UAEHXZ
?Fini@CCtrlBase@NetSDK@@UAEHXZ
??1CModuleSession@NetSDK@@UAE@XZ
?CheckResource@CModuleSession@NetSDK@@UAEHXZ
?Start@CModuleSession@NetSDK@@UAEHPAX@Z
?Stop@CModuleSession@NetSDK@@UAEHXZ
??1CModuleMgrBase@NetSDK@@UAE@XZ
?CheckResource@CModuleMgrBase@NetSDK@@UAEHXZ
Core_WriteLogStr
??1CHikLongLinkCtrl@NetSDK@@UAE@XZ
??1CRtspProtocolInstance@NetSDK@@UAE@XZ
_Core_SetDVRCfgCB@8
_Core_SetRemoteCtrlCB@8
_Core_SetSTDCfgCB@8
_Core_SetLongConfigCallback@8
_COM_SetProcessCB@8
??_7CObjectBase@NetSDK@@6B@
??_7CMemberBase@NetSDK@@6B@
??_7CMemberMgrBase@NetSDK@@6B@
??_7CCtrlCoreBase@NetSDK@@6B@
??2CObjectBase@NetSDK@@SAPAXIH@Z
??3CObjectBase@NetSDK@@SAXPAXH@Z
?GetMember@CMemberMgrBase@NetSDK@@QAEPAVCMemberBase@2@H@Z
?LockMember@CMemberMgrBase@NetSDK@@QBEHH@Z
?UnlockMember@CMemberMgrBase@NetSDK@@QBEHH@Z
?CreateMemoryPool@CMemberMgrBase@NetSDK@@QAEHUtagNETSDK_COREBASE_MEMORY_POOL_PARAM@2@@Z
?AllocIndex@CMemberMgrBase@NetSDK@@IAEHPBXPAX@Z
?FreeIndex@CMemberMgrBase@NetSDK@@IAEHHH@Z
?GetMemoryPoolIndex@CMemberMgrBase@NetSDK@@IBEHXZ
_Core_SetLastError@4
??0CModuleMgrBase@NetSDK@@QAE@IW4tagModuleType@@@Z
?GetMemberIndex@CMemberBase@NetSDK@@QAEHXZ
??0CCoreSignal@NetSDK@@QAE@XZ
??1CCoreSignal@NetSDK@@UAE@XZ
?Create@CCoreSignal@NetSDK@@QAEHXZ
?Post@CCoreSignal@NetSDK@@QAEHXZ
?TimedWait@CCoreSignal@NetSDK@@QAEHI@Z
?Destroy@CCoreSignal@NetSDK@@QAEHXZ
COM_GetLastError
_Core_GetSysLastError@0
_Core_Assert@0
_Core_NewArray@4
_Core_DelArray@4
_Core_GetReconnect@8
_Core_MsgOrCallBack@16
??0CModuleSession@NetSDK@@QAE@XZ
?SetUserID@CModuleSession@NetSDK@@QAEHH@Z
?GetUserID@CModuleSession@NetSDK@@QAEHXZ
_Core_SimpleCommandToDvr@36
??0CHikLongLinkCtrl@NetSDK@@QAE@H@Z
?HasCreateLink@CHikLongLinkCtrl@NetSDK@@QAEHXZ
?StartRecvThread@CHikLongLinkCtrl@NetSDK@@QAEHP6AHPAXPBXII@Z0@Z
?StopRecvThread@CHikLongLinkCtrl@NetSDK@@QAEXXZ
?CreateLink@CHikLongLinkCtrl@NetSDK@@QAEHIW4tagInterLinkTypeEnum@@PBUtagLinkCondSimple@@@Z
??1CCtrlBase@NetSDK@@UAE@XZ
?GetLink@CHikLongLinkCtrl@NetSDK@@QAEPAXXZ
?SendCommandWithRecv@CHikLongLinkCtrl@NetSDK@@QAEHIPBU__DATA_BUF@@PAU3@PAUtagSimpleCmdToDevCond@@@Z
?SendNakeData@CHikLongLinkCtrl@NetSDK@@QAEHPBU__DATA_BUF@@I@Z
?ResumeRecvThread@CHikLongLinkCtrl@NetSDK@@QAEHXZ
?EnlargeBufferSize@CHikLongLinkCtrl@NetSDK@@QAEHII@Z
_Core_RefreshDevAddress@4
_Core_CreateTimerProxy@4
_Core_DestroryTimerProxy@4
_Core_RigisterTimerProxy@8
_Core_UnRigisterTimerProxy@8
_Core_GetNetworkEnvironment@4
_Core_GetTimeoutLimitDependsOnNetwork@0
_Core_PicViewMessageCallBack@4
_Core_SplittingSend@12
?StartPush@CHikLongLinkCtrl@NetSDK@@QAEHPBUtagPushLongLinkParams@@@Z
?SuspendRecvThread@CHikLongLinkCtrl@NetSDK@@QAEXXZ
?SetRecvTimeout@CHikLongLinkCtrl@NetSDK@@QAEXI@Z
_Core_GetDevProVer@4
?Wait@CCoreSignal@NetSDK@@QAEXXZ
?Stop@CHikLongLinkCtrl@NetSDK@@QAEHXZ
?ExitRecvThread@CHikLongLinkCtrl@NetSDK@@QAEXXZ
?CloseLink@CHikLongLinkCtrl@NetSDK@@QAEXXZ
_Core_ConvertCommandStatusToErrorCode@4
?SendCommandWithoutRecv@CHikLongLinkCtrl@NetSDK@@QAEHIPBU__DATA_BUF@@@Z
_Core_Ipv4toStr@8
_Core_StrtoIpv4@4
_Core_GetDevSupport1@4
_Core_SimpleEncrypt@8
??0CXmlBase@NetSDK@@QAE@XZ
??1CXmlBase@NetSDK@@UAE@XZ
?Parse@CXmlBase@NetSDK@@QAEPBXPBD@Z
?FindElem@CXmlBase@NetSDK@@QAE_NPBD@Z
?IntoElem@CXmlBase@NetSDK@@QAE_NXZ
?OutOfElem@CXmlBase@NetSDK@@QAE_NXZ
?NextSibElem@CXmlBase@NetSDK@@QAE_NXZ
?AddNode@CXmlBase@NetSDK@@QAE_NPBD@Z
?SetAttribute@CXmlBase@NetSDK@@QBE_NPBD0@Z
?CreateRoot@CXmlBase@NetSDK@@QAEXPBD@Z
_Core_GetDevInfo@8
_Core_GetDevSupport2@4
_Core_GetDevSupport3@4
_Core_GetDevSupportFromArr@8
_Core_GetDVRConfigWithoutPassthrough@24
_Core_SetDVRConfigWithoutPassthrough@20
?CheckInit@CCtrlCoreBase@NetSDK@@QAEHXZ
?GetUseCount@CCtrlCoreBase@NetSDK@@QAEPAHXZ
??0CUseCountAutoDec@NetSDK@@QAE@PAH@Z
??1CUseCountAutoDec@NetSDK@@QAE@XZ
?SendNakeDataWithRecv@CHikLongLinkCtrl@NetSDK@@QAEHPAXIPAU__DATA_BUF@@PAUtagSimpleCmdToDevCond@@@Z
COM_User_CheckID
_Core_GetDevSupport4@4
_Core_SimpleCommandToDvrEx@32
_Core_SimpleCommandToDvrSpecial@20
??0CCtrlBase@NetSDK@@QAE@XZ
COM_Core_Fini
COM_Core_Init
?DestroyLink@CHikLongLinkCtrl@NetSDK@@QAEHXZ
??3CObjectBase@NetSDK@@SAXPAX@Z
hccoredevcfg
_ConvertChanInfoHostToNet@16
_ConvertBaseControl@12
_ConvertDeviceIDInfoHostToNet@12
_g_fConDVCSNetSignal@16
_ConTimeStru@16
_ResolutionConvert@16
_g_fConDynamicTest_EX@16
_g_fConDecStreamMode@16
_g_fConDynamicV41@12
Core_ConTimeExStru
_SystemTimeConvert@16
_ConvertDayTimeParamCfg@12
_TimeConvert@20
_ConvertStreamInfoHostToNet@12
_g_fConV30NetCfg@12
_ConvertSingleNodeData@28
_PrintXmlToNewBuffer@12
_COM_CoreDevCfg_GetDeviceAbility@24
_ConvertVideoWallInfo@20
_CheckTimeSeq@8
COM_CoreDevCfg_Init
COM_CoreDevCfg_Fini
_Core_Ipv4_6Convert@16
_Core_ConvertStreamInfo@12
_g_fConCompressionV30Stru@12
kernel32
SetThreadPriority
GetCurrentThreadId
TlsAlloc
CloseHandle
TlsFree
SuspendThread
ResumeThread
GetLastError
SetLastError
WideCharToMultiByte
Sleep
MultiByteToWideChar
GetProcAddress
GlobalMemoryStatusEx
GetSystemInfo
GetModuleHandleA
OutputDebugStringA
CreateFileA
SetFilePointer
TlsSetValue
ReadFile
FlushFileBuffers
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
CopyFileA
FindClose
GetFileType
MoveFileA
GetModuleFileNameA
FindNextFileA
GetFileInformationByHandle
LocalFree
DeleteFileA
FreeLibrary
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FileTimeToSystemTime
GetTimeZoneInformation
QueryPerformanceFrequency
FileTimeToLocalFileTime
SetWaitableTimer
SetEvent
CreateEventA
ResetEvent
WaitForMultipleObjects
CreateWaitableTimerA
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateSemaphoreA
ReleaseSemaphore
WaitForSingleObject
GetCurrentProcess
TlsGetValue
SetPriorityClass
WriteFile
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
HeapReAlloc
MoveFileExW
GetFileAttributesExW
GetModuleFileNameW
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetStdHandle
GetProcessHeap
GetCurrentThread
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FatalAppExitA
GetCPInfo
AreFileApisANSI
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
DecodePointer
GetStringTypeW
RaiseException
RtlUnwind
GetCommandLineA
CreateThread
ExitThread
LoadLibraryExW
HeapFree
HeapAlloc
SetEnvironmentVariableA
advapi32
CryptAcquireContextA
CryptGenRandom
GetSecurityInfo
CryptReleaseContext
ws2_32
WSAIoctl
WSARecv
WSASend
WSASendTo
select
ioctlsocket
connect
WSAStartup
recvfrom
WSAGetLastError
shutdown
setsockopt
WSARecvFrom
WSACleanup
recv
bind
socket
__WSAFDIsSet
WSASetLastError
closesocket
send
getsockopt
listen
accept
gethostname
ntohl
htonl
getaddrinfo
freeaddrinfo
gethostbyname
getpeername
inet_addr
htons
ntohs
getsockname
sendto
rpcrt4
UuidCreate
winmm
timeSetEvent
timeEndPeriod
timeKillEvent
timeBeginPeriod
mswsock
AcceptEx
Exports
Exports
??0CCtrlBase@NetSDK@@QAE@ABV01@@Z
??0CHikLongLinkCtrl@NetSDK@@QAE@ABV01@@Z
??0CModuleMgrBase@NetSDK@@QAE@ABV01@@Z
??0CModuleSession@NetSDK@@QAE@ABV01@@Z
??0CRtspProtocolInstance@NetSDK@@QAE@ABV01@@Z
??0CStreamConvertInterface@NetSDK@@QAE@ABV01@@Z
??0CStreamConvertInterface@NetSDK@@QAE@XZ
??0CTransUnitMgrInterface@NetSDK@@QAE@ABV01@@Z
??0CTransUnitMgrInterface@NetSDK@@QAE@XZ
??1CStreamConvertInterface@NetSDK@@UAE@XZ
??1CTransUnitMgrInterface@NetSDK@@UAE@XZ
??4CCtrlBase@NetSDK@@QAEAAV01@ABV01@@Z
??4CHikLongLinkCtrl@NetSDK@@QAEAAV01@ABV01@@Z
??4CModuleMgrBase@NetSDK@@QAEAAV01@ABV01@@Z
??4CModuleSession@NetSDK@@QAEAAV01@ABV01@@Z
??4CRWLockInterface@NetSDK@@QAEAAV01@ABV01@@Z
??4CReconnectThreadPool@NetSDK@@QAEAAV01@ABV01@@Z
??4CRtspProtocolInstance@NetSDK@@QAEAAV01@ABV01@@Z
??4CStreamConvertInterface@NetSDK@@QAEAAV01@ABV01@@Z
??4CTransUnitMgrInterface@NetSDK@@QAEAAV01@ABV01@@Z
??4CUseCountAutoDec@NetSDK@@QAEAAV01@ABV01@@Z
??_7CCtrlBase@NetSDK@@6B@
??_7CHikLongLinkCtrl@NetSDK@@6B@
??_7CModuleMgrBase@NetSDK@@6B@
??_7CModuleSession@NetSDK@@6B@
??_7CRtspProtocolInstance@NetSDK@@6B@
??_7CStreamConvertInterface@NetSDK@@6B@
??_7CTransUnitMgrInterface@NetSDK@@6B@
COM_AddMatrix
COM_AddNetSignal
COM_AlarmJoinedRecord
COM_CloseUploadHandle
COM_DecCtrlDec
COM_DecCtrlScreen
COM_DecPlayBackCtrl
COM_DelMatrix
COM_Display_Fini
COM_Display_GetSDKBuildVersion
COM_Display_Init
COM_DownloadLogo
COM_GetAllValidWinInfo
COM_GetCameraListInfo
COM_GetDecCurLinkStatus
COM_GetDecInfo
COM_GetDecTransPort
COM_GetDecoderState
COM_GetDevList
COM_GetGlobalNum
COM_GetInputSignalList
COM_GetInputSignalList_V40
COM_GetMonitorListInfo
COM_GetPTZProtocol_Ex
COM_GetPassiveTransChanNum
COM_GetPicUploadProgress
COM_GetPicUploadState
COM_GetPlanList
COM_GetScreenInputStatus
COM_GetScreenList
COM_GetSingleMatrixInfo
COM_GetTrunkListInfo
COM_GetUnitedMatrixInfo
COM_LogoSwitch
COM_MatrixAddCamera
COM_MatrixAddMonitor
COM_MatrixAddResourceInfo
COM_MatrixAddTrunk
COM_MatrixAddUser
COM_MatrixAddUserGroupInfo
COM_MatrixAlarmOffMonitor
COM_MatrixAlarmShowControl
COM_MatrixAlarmTurn
COM_MatrixDelCamera
COM_MatrixDelMonitor
COM_MatrixDelResourceInfo
COM_MatrixDelUser
COM_MatrixDelUserGroup
COM_MatrixDiaplayControl
COM_MatrixGetAlarmShowMode
COM_MatrixGetAllCameraInfo
COM_MatrixGetAllMatrixInfo
COM_MatrixGetAllMonitorInfo
COM_MatrixGetAllTrunkInfo
COM_MatrixGetCodeSplitter
COM_MatrixGetConfigFile
COM_MatrixGetCurrentSceneMode
COM_MatrixGetDecChanCfg
COM_MatrixGetDecChanEnable
COM_MatrixGetDecChanInfo
COM_MatrixGetDecChanInfo_V30
COM_MatrixGetDecChanInfo_V41
COM_MatrixGetDecChanStatus
COM_MatrixGetDeviceStatus
COM_MatrixGetDeviceStatus_V41
COM_MatrixGetDisplayCfg
COM_MatrixGetDisplayCfg_V40
COM_MatrixGetDisplayCfg_V41
COM_MatrixGetEncodeJoint
COM_MatrixGetGatewayInfo
COM_MatrixGetLoopDecChanEnable
COM_MatrixGetLoopDecChanInfo
COM_MatrixGetLoopDecChanInfo_EX
COM_MatrixGetLoopDecChanInfo_V30
COM_MatrixGetLoopDecChanInfo_V41
COM_MatrixGetLoopDecEnable
COM_MatrixGetLoopPlanArray
COM_MatrixGetPassiveDecodeStatus
COM_MatrixGetPlanDecode
COM_MatrixGetRemotePlayStatus
COM_MatrixGetResourceInfo
COM_MatrixGetSceneCfg
COM_MatrixGetSingleCameraInfo
COM_MatrixGetSingleMonitorInfo
COM_MatrixGetSubDecSystemJoinInfo
COM_MatrixGetSubDecSystemJoinInfo_V40
COM_MatrixGetSubDecSystemJoinInfo_V41
COM_MatrixGetSubSystemInfo
COM_MatrixGetSubSystemInfo_V40
COM_MatrixGetTranInfo
COM_MatrixGetTranInfo_V30
COM_MatrixGetTrunkInfo
COM_MatrixGetUartParam
COM_MatrixGetUnitedMatrixInfo
COM_MatrixGetUserGroupInfo
COM_MatrixGetUserInfo
COM_MatrixGetVideoStandard
COM_MatrixModCameraInfo
COM_MatrixModMonitorInfo
COM_MatrixModResourceInfo
COM_MatrixModTrunkInfo
COM_MatrixModUserGroupInfo
COM_MatrixModUserInfo
COM_MatrixPassiveDecodeControl
COM_MatrixPicAdjust
COM_MatrixSceneControl
COM_MatrixSendData
COM_MatrixSetAlarmShowMode
COM_MatrixSetCodeSplitter
COM_MatrixSetConfigFile
COM_MatrixSetDecChanCfg
COM_MatrixSetDecChanEnable
COM_MatrixSetDisplayCfg
COM_MatrixSetDisplayCfg_V40
COM_MatrixSetDisplayCfg_V41
COM_MatrixSetGatewayInfo
COM_MatrixSetLoopDecChanEnable
COM_MatrixSetLoopDecChanInfo
COM_MatrixSetLoopDecChanInfo_EX
COM_MatrixSetLoopDecChanInfo_V30
COM_MatrixSetLoopDecChanInfo_V41
COM_MatrixSetLoopPlanArray
COM_MatrixSetPlanDecode
COM_MatrixSetRemotePlay
COM_MatrixSetRemotePlayControl
COM_MatrixSetRemotePlay_V41
COM_MatrixSetSceneCfg
COM_MatrixSetSubSystemInfo
COM_MatrixSetSubSystemInfo_V40
COM_MatrixSetTranInfo
COM_MatrixSetTranInfo_V30
COM_MatrixSetUartParam
COM_MatrixSetUnitedMatrixInfo
COM_MatrixSetVideoStandard
COM_MatrixSpanSwitch
COM_MatrixStartDynamic
COM_MatrixStartDynamicAssociateDecode
COM_MatrixStartDynamic_EX
COM_MatrixStartDynamic_V30
COM_MatrixStartDynamic_V41
COM_MatrixStartPassiveDecode
COM_MatrixStartSwitch
COM_MatrixStopDynamic
COM_MatrixStopPassiveDecode
COM_MatrixTrunkCtrl
COM_MatrixTrunkStatusQuery
COM_ModMatrixInfo
COM_PicControl
COM_PicUpload
COM_PicViewRequest
COM_ScreenCtrl
COM_ScreenWinCtrl
COM_ScreenZoomIn
COM_SetDecInfo
COM_SetDecTransPort
COM_SetPicViewDataCallBack
COM_SetScreenRelation
COM_StartDecSpecialCon
COM_StartDecode
COM_StartPassiveTransCode
COM_StartPicPreview
COM_StartScreenPic
COM_StartUpgrade
COM_StopDecSpecialCon
COM_StopDecode
COM_StopPassiveTransCode
COM_StopScreenPic
COM_StopUpgrade
COM_TextShowCtrl
COM_TransCodeInputData
COM_UploadLogo
COM_UploadLogo_NEW
Sections
.text Size: 690KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE