11a261438b1825e652f8a4d7208ee5ec800655f6c1864f96cf42fc60ca4affaeN

Sharing

Copy URL Twitter E-mail

General

Target

11a261438b1825e652f8a4d7208ee5ec800655f6c1864f96cf42fc60ca4affaeN
Size

2.9MB
MD5

3f6d96f4eaf53a530b1d97cfd5be55b0
SHA1

2f7c81840ad67cce42850ddef31a21d9eef57c5f
SHA256

11a261438b1825e652f8a4d7208ee5ec800655f6c1864f96cf42fc60ca4affae
SHA512

603bba22358427bfa3796c8cdc4a26824bbabb747a8cd98a46da5d25f92f82c7846e89ee644e75b51d8ed01fa33a35417e85a7d436b3769b20e32d9e05aae289
SSDEEP

49152:i/Jk2CMjm0Zf4f1rXjMR+aTgM7Kfl7Cfl3BTK25Ck:UJDzjmA4fORJ7Kfl7Cfl3

Score

1^/10

Malware Config

Signatures

Files

11a261438b1825e652f8a4d7208ee5ec800655f6c1864f96cf42fc60ca4affaeN
.dll windows:4 windows x86 arch:x86

e3219824ab20fe468b5e5ccb1e896ada

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

5e:26:1f:77:ee:12:b3:b4:9a:5d:62:a6:a6:5d:05:ae
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14/12/2015, 00:00

Not After

13/12/2017, 23:59

Subject

CN=Shenzhen Qitu Software Technology Co.\,Ltd.,OU=Develop,O=Shenzhen Qitu Software Technology Co.\,Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

32:8b:20:0e:2f:79:a4:14:a4:c9:99:74:de:38:d6:ff:da:b7:58:15
Signer

Actual PE Digest

32:8b:20:0e:2f:79:a4:14:a4:c9:99:74:de:38:d6:ff:da:b7:58:15

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

brom

ord6
ord104
ord49
ord192

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDriverInfoList
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA

kernel32

LocalAlloc
TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
lstrcatA
lstrcpyA
lstrcpynA
GetVersion
SetLastError
GlobalFlags
WritePrivateProfileStringA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
GetProcessVersion
GetCurrentProcess
SetFilePointer
FlushFileBuffers
SetEndOfFile
MoveFileA
GetCPInfo
GetOEMCP
SetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapAlloc
GetFileInformationByHandle
PeekNamedPipe
GetFileType
RaiseException
GetCommandLineA
ExitProcess
TerminateProcess
CreateThread
ExitThread
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
PurgeComm
SetCommTimeouts
SetupComm
ClearCommError
OpenEventA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
DeviceIoControl
InterlockedExchange
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
lstrlenA
SystemTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
CreateMutexA
ReadFile
GetFileAttributesA
GetProcAddress
GetPrivateProfileSectionA
GetPrivateProfileStringA
FindFirstFileA
RemoveDirectoryA
FindNextFileA
FindClose
CreateDirectoryA
GetTempPathA
GetTempFileNameA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteFileA
GetModuleHandleA
ReleaseMutex
CreateEventA
GetModuleFileNameA
EnterCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
OutputDebugStringA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
PulseEvent
GetCommState
SetCommState
WriteFile
CreateFileA
Sleep
CloseHandle
GetTickCount
ResetEvent
WaitForSingleObject
FormatMessageA
LocalFree
GetWindowsDirectoryA
GetVersionExA
GetSystemTime
WaitForMultipleObjects
GetLastError
SetEvent
HeapFree
GetOverlappedResult

user32

GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
DestroyMenu
SetWindowPos
SetWindowLongA
GetSystemMetrics
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
wsprintfA
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
RegisterDeviceNotificationA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
SetFocus
ShowWindow
PostMessageA
PostQuitMessage
SendMessageA
IsWindowVisible
UnregisterDeviceNotification
SetWindowsHookExA
DispatchMessageA

gdi32

DeleteDC
SaveDC
RestoreDC
SelectObject
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
GetDeviceCaps
SetBkColor
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
CreateBitmap
GetStockObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

comctl32

ord17

Exports

Exports

META_3Grf_AFC
META_3Grf_AFC_r
META_3Grf_ConfigHWTPC
META_3Grf_ConfigHWTPC_r
META_3Grf_ContinuousRX
META_3Grf_ContinuousRX_r
META_3Grf_FHC_NoWaitResult
META_3Grf_FHC_NoWaitResult_r
META_3Grf_FHC_Start
META_3Grf_FHC_StartEx
META_3Grf_FHC_StartEx_r
META_3Grf_FHC_Start_r
META_3Grf_GetImmediateBSI
META_3Grf_GetImmediateBSI_r
META_3Grf_GetPwrDtDac
META_3Grf_GetPwrDtDac_r
META_3Grf_GetPwrDtDefaultThr
META_3Grf_GetPwrDtDefaultThr_r
META_3Grf_GetPwrDtMeasureResult
META_3Grf_GetPwrDtMeasureResult_r
META_3Grf_GetPwrDtStep
META_3Grf_GetPwrDtStep_r
META_3Grf_GetRFID
META_3Grf_GetRFID_r
META_3Grf_HsdpaNsftStart
META_3Grf_HsdpaNsftStart_r
META_3Grf_HsupaNsftStart
META_3Grf_HsupaNsftStart_r
META_3Grf_NSFT_GetBitCountForSingleEndedBER
META_3Grf_NSFT_GetBitCountForSingleEndedBER_r
META_3Grf_NSFT_SetILPCStep
META_3Grf_NSFT_SetILPCStep_r
META_3Grf_NSFT_Start
META_3Grf_NSFT_StartEx
META_3Grf_NSFT_StartEx_r
META_3Grf_NSFT_Start_r
META_3Grf_QueryCurrentLnaMode
META_3Grf_QueryCurrentLnaMode_r
META_3Grf_QueryFHCExResult
META_3Grf_QueryFHCExResult_r
META_3Grf_QueryFHCResult
META_3Grf_QueryFHCResult_r
META_3Grf_QueryTargetCapability
META_3Grf_QueryTargetCapability_r
META_3Grf_ReplaceGainTableforCal
META_3Grf_ReplaceGainTableforCal_r
META_3Grf_Rscp
META_3Grf_Rscp_r
META_3Grf_Rssi
META_3Grf_Rssi_r
META_3Grf_RxDpch
META_3Grf_RxDpch_r
META_3Grf_SetImmediateBSI
META_3Grf_SetImmediateBSI_r
META_3Grf_SetPowerControlMode
META_3Grf_SetPowerControlMode_r
META_3Grf_SetTxDacData_B
META_3Grf_SetTxDacData_B_r
META_3Grf_SetTxPaOctLevData
META_3Grf_SetTxPaOctLevData_r
META_3Grf_Set_Tx_PaApc
META_3Grf_Set_Tx_PaApc_r
META_3Grf_TestStop
META_3Grf_TestStop_r
META_3Grf_TxAccess
META_3Grf_TxAccess_r
META_3Grf_TxDpch
META_3Grf_TxDpch_r
META_Audio_EX_GetDLGainCapability
META_Audio_EX_GetDLGainCapability_r
META_Audio_EX_GetExtAmpGainMap
META_Audio_EX_GetExtAmpGainMapEx
META_Audio_EX_GetExtAmpGainMapEx_r
META_Audio_EX_GetExtAmpGainMap_r
META_Audio_EX_GetGainTableMap
META_Audio_EX_GetGainTableMap_r
META_Audio_EX_GetPgaGainMap
META_Audio_EX_GetPgaGainMap_r
META_Audio_EX_GetSpeechModeTable
META_Audio_EX_GetSpeechModeTable_r
META_Audio_EX_QueryEchoLoop
META_Audio_EX_QueryEchoLoopDataRate
META_Audio_EX_QueryEchoLoopDataRate_r
META_Audio_EX_QueryEchoLoop_r
META_Audio_EX_QueryRecording
META_Audio_EX_QueryRecording_r
META_Audio_EX_SetACFIIRToTarget
META_Audio_EX_SetACFIIRToTargetEx
META_Audio_EX_SetACFIIRToTargetEx_r
META_Audio_EX_SetACFIIRToTarget_r
META_Audio_EX_SetACFilterCoefEx
META_Audio_EX_SetACFilterCoefEx_r
META_Audio_EX_StartEchoLoop
META_Audio_EX_StartEchoLoop_r
META_Audio_EX_StartRecording
META_Audio_EX_StartRecording_r
META_Audio_EX_StopEchoLoop
META_Audio_EX_StopEchoLoop_r
META_Audio_EX_StopRecording
META_Audio_EX_StopRecording_r
META_Audio_FreeMemory
META_Audio_FreeMemory_r
META_Audio_GetACFilterType
META_Audio_GetACFilterType_r
META_Audio_GetGainTypeSupport
META_Audio_GetGainTypeSupport_r
META_Audio_Get_Audio_Param_Settings_0809
META_Audio_Get_Audio_Param_Settings_0809_r
META_Audio_Get_Audio_Profile_Settings
META_Audio_Get_Audio_Profile_Settings_r
META_Audio_Play
META_Audio_PlayCurMemContent
META_Audio_PlayCurMemContent_r
META_Audio_Play_ByName
META_Audio_Play_ByName_r
META_Audio_Play_Freq_Vol_Tone
META_Audio_Play_Freq_Vol_Tone_r
META_Audio_Play_IMY_ByBuf
META_Audio_Play_IMY_ByBuf_r
META_Audio_Play_Wave_File
META_Audio_Play_Wave_File_r
META_Audio_Play_r
META_Audio_Query_ID
META_Audio_Query_ID_r
META_Audio_SetACFilterCoef
META_Audio_SetACFilterCoef_r
META_Audio_Set_Audio_Param_Settings_0809
META_Audio_Set_Audio_Param_Settings_0809_r
META_Audio_Set_Audio_Profile_Settings
META_Audio_Set_Audio_Profile_Settings_r
META_Audio_Set_Echo_Loop
META_Audio_Set_Echo_Loop_r
META_Audio_Set_Gain
META_Audio_Set_Gain_r
META_Audio_Set_LoudSpk_FIR_Coeffs
META_Audio_Set_LoudSpk_FIR_Coeffs_r
META_Audio_Set_LoudSpk_Mode
META_Audio_Set_LoudSpk_Mode_r
META_Audio_Set_Melody_FIR_Output_Coeffs
META_Audio_Set_Melody_FIR_Output_Coeffs_r
META_Audio_Set_Mode
META_Audio_Set_Mode_r
META_Audio_Set_Output_Dev
META_Audio_Set_Output_Dev_With_DG
META_Audio_Set_Output_Dev_With_DG_r
META_Audio_Set_Output_Dev_r
META_Audio_Set_Output_Vol
META_Audio_Set_Output_Vol_r
META_Audio_Set_Playback_Maximum_Swing
META_Audio_Set_Playback_Maximum_Swing_r
META_Audio_Set_Speech_Common
META_Audio_Set_Speech_Common_And_Mode
META_Audio_Set_Speech_Common_And_Mode_r
META_Audio_Set_Speech_Common_r
META_Audio_Set_Volume
META_Audio_Set_Volume_r
META_Audio_Stop
META_Audio_StopPlaying
META_Audio_StopPlaying_r
META_Audio_Stop_Freq_Vol_Tone
META_Audio_Stop_Freq_Vol_Tone_r
META_Audio_Stop_r
META_Audio_Tone_Loop_Back_Rec
META_Audio_Tone_Loop_Back_Rec_2K
META_Audio_Tone_Loop_Back_Rec_2K_Normal
META_Audio_Tone_Loop_Back_Rec_2K_Normal_r
META_Audio_Tone_Loop_Back_Rec_2K_r
META_Audio_Tone_Loop_Back_Rec_r
META_Aux_Func
META_Aux_Func_r
META_BB_ADCGetMeaSumData
META_BB_ADCGetMeaSumData_ByMsg
META_BB_ADCGetMeaSumData_Ex
META_BB_ADCGetMeaSumData_Ex_r
META_BB_ADCGetMeaSumData_r
META_BB_RegRead
META_BB_RegRead_ByMsg
META_BB_RegRead_r
META_BB_RegWrite
META_BB_RegWrite_ByMsg
META_BB_RegWrite_r
META_BTPowerOn
META_BTPowerOn_r
META_BT_CancelHCICommand
META_BT_CancelHCICommand_r
META_BT_DisableNvramOnlineUpdate
META_BT_DisableNvramOnlineUpdate_r
META_BT_DisablePcmClockSyncSignal
META_BT_DisablePcmClockSyncSignal_r
META_BT_EnableNvramOnlineUpdate
META_BT_EnableNvramOnlineUpdate_r
META_BT_EnablePcmClockSyncSignal
META_BT_EnablePcmClockSyncSignal_r
META_BT_POWEROFF_EX
META_BT_POWEROFF_EX_r
META_BT_POWERON_EX
META_BT_POWERON_EX_r
META_BT_QueryModuleID
META_BT_QueryModuleID_r
META_BT_ReceiveHCIData
META_BT_ReceiveHCIData_r
META_BT_RegisterAutoCallback
META_BT_RegisterAutoCallback_r
META_BT_RemoveAutoCallback
META_BT_RemoveAutoCallback_r
META_BT_RemoveReceiveHCIDataCallback
META_BT_RemoveReceiveHCIDataCallback_r
META_BT_RxTestEnd
META_BT_RxTestEnd_r
META_BT_RxTestStart
META_BT_RxTestStart_V2
META_BT_RxTestStart_V2_r
META_BT_RxTestStart_r
META_BT_SendHCICommand
META_BT_SendHCICommand_r
META_BT_SendHCIData
META_BT_SendHCIData_r
META_BT_TxPureTest
META_BT_TxPureTest_V2
META_BT_TxPureTest_V2_r
META_BT_TxPureTest_r
META_BackupCalibrationData
META_BackupCalibrationData_r
META_BasicBackupCalibrationData
META_BasicBackupCalibrationData_r
META_BasicRestoreCalibrationData
META_BasicRestoreCalibrationData_r
META_BaudrateEnumToName
META_CMMB_AutoScan
META_CMMB_AutoScanGetFreq
META_CMMB_AutoScanGetFreq_r
META_CMMB_AutoScanWithFreqRange
META_CMMB_AutoScanWithFreqRange_r
META_CMMB_AutoScan_r
META_CMMB_GetSignalStrength
META_CMMB_GetSignalStrength_r
META_CMMB_PauseServ
META_CMMB_PauseServ_r
META_CMMB_SelServOnly
META_CMMB_SelServOnly_r
META_CMMB_SetBand
META_CMMB_SetBand_r
META_CMMB_SetFreq
META_CMMB_SetFreq_r
META_CMMB_StopAutoScan
META_CMMB_StopAutoScan_r
META_CMMB_TurnOff
META_CMMB_TurnOff_r
META_CMMB_TurnOn
META_CMMB_TurnOn_r
META_COMM_Set_Baudrate
META_COMM_Set_Baudrate_r
META_COMM_Start
META_COMM_Start_r
META_COMM_Stop
META_COMM_Stop_r
META_CTI_SendPacketCmd
META_CTI_SendPacketCmd_r
META_CTI_SetPacketCallback
META_CTI_SetPacketCallback_r
META_Cancel
META_CancelAllBlockingCall
META_CancelAllBlockingCall_r
META_Cancel_r
META_Check_SmartPhoneModem_support
META_Check_SmartPhoneModem_support_r
META_Check_ULC_support
META_Check_ULC_support_r
META_ConnectInMetaMode
META_ConnectInMetaModeByUSB
META_ConnectInMetaModeByUSB_r
META_ConnectInMetaMode_r
META_ConnectWithTarget
META_ConnectWithTargetByUSB
META_ConnectWithTargetByUSBEx
META_ConnectWithTargetByUSBEx_r
META_ConnectWithTargetByUSB_r
META_ConnectWithTarget_r
META_Customer_Func
META_Customer_Func_r
META_DebugClear
META_DebugOff
META_DebugOn
META_DebugOn_With_FilePath
META_DebugOn_ex
META_DebugOn_ex2
META_Deinit
META_Deinit_r
META_DeleteAllFilesInBackupFolder
META_DeleteAllFilesInBackupFolder_r
META_DisconnectInMetaMode
META_DisconnectInMetaMode_r
META_DisconnectWithTarget
META_DisconnectWithTarget_r
META_EnableWatchDogTimer
META_EnableWatchDogTimer_r
META_FAT_CheckEnoughSpace
META_FAT_CheckEnoughSpace_r
META_FAT_Close
META_FAT_Close_r
META_FAT_Delete
META_FAT_Delete_r
META_FAT_Find_Close
META_FAT_Find_GetFileInfo
META_FAT_Find_Head
META_FAT_Find_Next
META_FAT_Find_Prev
META_FAT_Find_Start
META_FAT_Find_Start_r
META_FAT_GetDiskInfo
META_FAT_GetDiskInfo_r
META_FAT_GetDriveType
META_FAT_GetDriveType_r
META_FAT_GetFileSize
META_FAT_GetFileSize_r
META_FAT_Move
META_FAT_Move_r
META_FAT_Open
META_FAT_Open_r
META_FAT_Read
META_FAT_Read_To_File
META_FAT_Read_To_File_Ex
META_FAT_Read_To_File_Ex_r
META_FAT_Read_To_File_r
META_FAT_Read_r
META_FAT_RemoveDir
META_FAT_RemoveDir_r
META_FAT_Write
META_FAT_Write_By_File
META_FAT_Write_By_File_Ex
META_FAT_Write_By_File_Ex_r
META_FAT_Write_By_File_r
META_FAT_Write_r
META_FM_AutoScan
META_FM_AutoScan_r
META_FM_GetAF
META_FM_GetAF_r
META_FM_GetAntennaType
META_FM_GetAntennaType_r
META_FM_GetBadBlockCounter
META_FM_GetBadBlockCounter_r
META_FM_GetChipId
META_FM_GetChipId_r
META_FM_GetGoodBlockCounter
META_FM_GetGoodBlockCounter_r
META_FM_GetGroupCounter
META_FM_GetGroupCounter_r
META_FM_GetHighOrLowSide
META_FM_GetHighOrLowSide_r
META_FM_GetIfCnt
META_FM_GetIfCnt_r
META_FM_GetMR
META_FM_GetMR_r
META_FM_GetMS
META_FM_GetMS_r
META_FM_GetPAMDLevel
META_FM_GetPAMDLevel_r
META_FM_GetPI
META_FM_GetPI_r
META_FM_GetPS
META_FM_GetPS_r
META_FM_GetPTY
META_FM_GetPTY_r
META_FM_GetRDSBLERRatio
META_FM_GetRDSBLERRatio_r
META_FM_GetRDSLogData
META_FM_GetRDSLogData_r
META_FM_GetRSSI
META_FM_GetRSSI_r
META_FM_GetRT
META_FM_GetRT_r
META_FM_GetRXFilterBW
META_FM_GetRXFilterBW_r
META_FM_GetStereoOrMono
META_FM_GetStereoOrMono_r
META_FM_GetTA
META_FM_GetTA_r
META_FM_GetTP
META_FM_GetTP_r
META_FM_HWSearch_Stop
META_FM_HWSearch_Stop_r
META_FM_HWSeek
META_FM_HWSeek_r
META_FM_PowerOff
META_FM_PowerOff_r
META_FM_PowerOn
META_FM_PowerOn_r
META_FM_QueryCapArray
META_FM_QueryCapArray_r
META_FM_ReadByte
META_FM_ReadByte_r
META_FM_RegisterRDSInfoUpdateCallback
META_FM_RegisterRDSInfoUpdateCallback_r
META_FM_RegisterRDSStatusUpdateCallback
META_FM_RegisterRDSStatusUpdateCallback_r
META_FM_RemoveRDSInfoUpdateCallback
META_FM_RemoveRDSInfoUpdateCallback_r
META_FM_RemoveRDSStatusUpdateCallback
META_FM_RemoveRDSStatusUpdateCallback_r
META_FM_ResetBlockCounter
META_FM_ResetBlockCounter_r
META_FM_ResetGroupCounter
META_FM_ResetGroupCounter_r
META_FM_SearchNextFreq
META_FM_SearchNextFreq_r
META_FM_SearchPrevFreq
META_FM_SearchPrevFreq_r
META_FM_SelectSBlendStage
META_FM_SelectSBlendStage_r
META_FM_SelectSoftMuteStage
META_FM_SelectSoftMuteStage_r
META_FM_SetAntennaType
META_FM_SetAntennaType_r
META_FM_SetDecodeMode
META_FM_SetDecodeMode_r
META_FM_SetDeemphasisLevel
META_FM_SetDeemphasisLevel_r
META_FM_SetDemodBW
META_FM_SetDemodBW_r
META_FM_SetDynamicLimiter
META_FM_SetDynamicLimiter_r
META_FM_SetFreq
META_FM_SetFreq_r
META_FM_SetHCC
META_FM_SetHCC_r
META_FM_SetHLSide
META_FM_SetHLSide_r
META_FM_SetIfCntDelta
META_FM_SetIfCntDelta_r
META_FM_SetMonoOrStereo_Blend
META_FM_SetMonoOrStereo_Blend_r
META_FM_SetPAMDThreshold
META_FM_SetPAMDThreshold_r
META_FM_SetRDS
META_FM_SetRDS_r
META_FM_SetRssiThreold
META_FM_SetRssiThreold_r
META_FM_SetSoftMute
META_FM_SetSoftMute_r
META_FM_SetSoftmute
META_FM_SetSoftmuteRate
META_FM_SetSoftmuteRate_r
META_FM_SetSoftmute_r
META_FM_SetStereoBlend
META_FM_SetStereoBlend_r
META_FM_SetVolume
META_FM_SetVolume_r
META_FM_WriteByte
META_FM_WriteByte_r
META_GetAvailableHandle
META_GetBackupResultInfo
META_GetBackupResultInfo_r
META_GetDLLInfo
META_GetDLLVer
META_GetDebugLevel
META_GetDynamicUSBComPort
META_GetDynamicUSBComPortEx
META_GetDynamicUSBComPortEx_r
META_GetDynamicUSBComPortWithPrefix
META_GetDynamicUSBComPortWithPrefix_r
META_GetDynamicUSBComPort_r
META_GetErrorString
META_GetGainTable_Close
META_GetGainTable_GetDetailedInfo
META_GetGainTable_Next
META_GetGainTable_Start
META_GetGainTable_Start_r
META_GetProcessTime
META_GetProcessTime_r
META_GetRestoreResultInfo
META_GetRestoreResultInfo_r
META_GetTargetRequiredMetaVer
META_GetTargetRequiredMetaVer_r
META_GetTargetVerInfo
META_GetTargetVerInfo_r
META_GetVersion
META_Init
META_Init_ByMsg
META_Init_r
META_MATV_ChangeChannel
META_MATV_ChangeChannel_r
META_MATV_GetChannelList
META_MATV_GetChannelList_r
META_MATV_GetChannelQuality
META_MATV_GetChannelQualityAll
META_MATV_GetChannelQualityAll_r
META_MATV_GetChannelQuality_r
META_MATV_PowerOff
META_MATV_PowerOff_r
META_MATV_PowerOn
META_MATV_PowerOn_r
META_MATV_SetChannelProperty
META_MATV_SetChannelProperty_r
META_MATV_SetRegion
META_MATV_SetRegion_r
META_MATV_StartFullScan
META_MATV_StartFullScan_r
META_MATV_StartScan
META_MATV_StartScan_r
META_MATV_StopScan

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 45.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 612KB - Virtual size: 609KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3219824ab20fe468b5e5ccb1e896ada

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

5e:26:1f:77:ee:12:b3:b4:9a:5d:62:a6:a6:5d:05:aeCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

32:8b:20:0e:2f:79:a4:14:a4:c9:99:74:de:38:d6:ff:da:b7:58:15Signer

Headers

File Characteristics

Imports

version

brom

setupapi

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 204KB - Virtual size: 201KB

.data Size: 292KB - Virtual size: 45.0MB

.rsrc Size: 612KB - Virtual size: 609KB

.reloc Size: 248KB - Virtual size: 245KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

5e:26:1f:77:ee:12:b3:b4:9a:5d:62:a6:a6:5d:05:ae
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

32:8b:20:0e:2f:79:a4:14:a4:c9:99:74:de:38:d6:ff:da:b7:58:15
Signer

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 204KB - Virtual size: 201KB

.data
Size: 292KB - Virtual size: 45.0MB

.rsrc
Size: 612KB - Virtual size: 609KB

.reloc
Size: 248KB - Virtual size: 245KB