ac81b1ab55c9e0c544dd8f1d32fab1ac7f1fcdef2f439ffc0c9079524fe0cbd0

Sharing

Copy URL Twitter E-mail

General

Target
ac81b1ab55c9e0c544dd8f1d32fab1ac7f1fcdef2f439ffc0c9079524fe0cbd0
Size 333KB
Sample261017-e1nmtasv6m
SHA256 ac81b1ab55c9e0c544dd8f1d32fab1ac7f1fcdef2f439ffc0c9079524fe0cbd0
MD5 ae1907bd1038ce0f8c988b15184a2a82
SHA1 87e511b310150b5de265fdcebcf83a09847f86a6
SHA512 7d392dd55f3ef7a0d9b522ce6874b69523233fd507db2564c953618cf44d92d61008be4ebf64abb3e3f5d7bc322316522b9970b67782fd6e0913ee146cb13643
SSDEEP 6144:eCMrYE2uLhIklZ0O7UJT0r3WOzV4HdFX9x7/o41gbx1yooooooonooooOWoooooy:suA0sUd07WYudFXLX1gP
TLSH
T1A4746B20BB52C232E8DA8672983C6B5E11AFF5650BD950C3FFB4956D9DA10D22F3434B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac81b1ab55c9e0c544dd8f1d32fab1ac7f1fcdef2f439ffc0c9079524fe0cbd0

File Explorer

ac81b1ab55c9e0c544dd8f1d32fab1ac7f1fcdef2f439ffc0c9079524fe0cbd0

.dll 333KB

ac81b1ab55c9e0c544dd8f1d32fab1ac7f1fcdef2f439ffc0c9079524fe0cbd0

IMPHASH cef7674f4c80d73dfbb20214732c97ea
SHA256 ac81b1ab55c9e0c544dd8f1d32fab1ac7f1fcdef2f439ffc0c9079524fe0cbd0
MD5 ae1907bd1038ce0f8c988b15184a2a82
SHA1 87e511b310150b5de265fdcebcf83a09847f86a6
SHA512 7d392dd55f3ef7a0d9b522ce6874b69523233fd507db2564c953618cf44d92d61008be4ebf64abb3e3f5d7bc322316522b9970b67782fd6e0913ee146cb13643
SSDEEP 6144:eCMrYE2uLhIklZ0O7UJT0r3WOzV4HdFX9x7/o41gbx1yooooooonooooOWoooooy:suA0sUd07WYudFXLX1gP
TLSH
T1A4746B20BB52C232E8DA8672983C6B5E11AFF5650BD950C3FFB4956D9DA10D22F3434B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

161195

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\Administrator\Desktop\Windows\Lib\HPSocket4C\x86\HPSocket4C.pdb

kernel32

InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapCreate HeapDestroy HeapAlloc HeapFree InterlockedCompareExchange InterlockedIncrement EnterCriticalSection LeaveCriticalSection InterlockedDecrement GetLastError SetLastError GetCurrentThreadId GetCurrentProcessId CreateSemaphoreA CloseHandle WaitForSingleObject ReleaseSemaphore SwitchToThread GetNativeSystemInfo CreateEventA Sleep CreateTimerQueue DeleteTimerQueueEx CreateWaitableTimerA GetSystemInfo GetExitCodeThread TerminateThread ResetEvent InterlockedExchange PostQueuedCompletionStatus RaiseException SetEvent GetQueuedCompletionStatus GetCurrentThread CreateIoCompletionPort CreateFileA GetProcAddress GetModuleHandleA GetFileSize CreateFileMappingA MapViewOfFileEx lstrlenA MultiByteToWideChar WideCharToMultiByte UnmapViewOfFile WaitForMultipleObjects InterlockedExchangeAdd SetWaitableTimer CancelWaitableTimer TryEnterCriticalSection CreateTimerQueueTimer DeleteTimerQueueTimer ReadFile WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW FlushFileBuffers GetConsoleMode GetConsoleCP SetFilePointer RtlUnwind GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA IsProcessorFeaturePresent IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryW CreateFileW TlsFree TlsSetValue TlsGetValue TlsAlloc GetStartupInfoW GetFileType SetHandleCount GetModuleFileNameW GetStdHandle WriteFile IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCommandLineA CreateThread ExitThread EncodePointer DecodePointer ExitProcess GetModuleHandleW GetProcessHeap HeapSize HeapReAlloc

user32

MsgWaitForMultipleObjects DispatchMessageA PeekMessageA TranslateMessage

shlwapi

StrChrA StrPBrkA

winmm

timeGetTime timeBeginPeriod timeEndPeriod timeGetDevCaps

ws2_32

WSAStartup __WSAFDIsSet select WSARecvFrom WSASendTo WSARecv WSASend closesocket shutdown sendto send ioctlsocket WSACleanup ntohl getpeername getsockname WSAAddressToStringA freeaddrinfo getaddrinfo WSAStringToAddressA getsockopt htons ntohs WSAIoctl WSASetLastError WSAGetLastError socket bind WSAGetOverlappedResult WSACreateEvent connect WSAEventSelect WSAWaitForMultipleEvents WSAEnumNetworkEvents WSAResetEvent recv WSACloseEvent listen recvfrom htonl setsockopt

Create_HP_SocketTaskObj Create_HP_TcpAgent Create_HP_TcpAgentListener Create_HP_TcpClient Create_HP_TcpClientListener Create_HP_TcpPackAgent Create_HP_TcpPackAgentListener Create_HP_TcpPackClient Create_HP_TcpPackClientListener Create_HP_TcpPackServer Create_HP_TcpPackServerListener Create_HP_TcpPullAgent Create_HP_TcpPullAgentListener Create_HP_TcpPullClient Create_HP_TcpPullClientListener Create_HP_TcpPullServer Create_HP_TcpPullServerListener Create_HP_TcpServer Create_HP_TcpServerListener Create_HP_ThreadPool Create_HP_ThreadPoolListener Create_HP_UdpArqClient Create_HP_UdpArqClientListener Create_HP_UdpArqServer Create_HP_UdpArqServerListener Create_HP_UdpCast Create_HP_UdpCastListener Create_HP_UdpClient Create_HP_UdpClientListener Create_HP_UdpNode Create_HP_UdpNodeListener Create_HP_UdpServer Create_HP_UdpServerListener Destroy_HP_Compressor Destroy_HP_Decompressor Destroy_HP_SocketTaskObj Destroy_HP_TcpAgent Destroy_HP_TcpAgentListener Destroy_HP_TcpClient Destroy_HP_TcpClientListener Destroy_HP_TcpPackAgent Destroy_HP_TcpPackAgentListener Destroy_HP_TcpPackClient Destroy_HP_TcpPackClientListener Destroy_HP_TcpPackServer Destroy_HP_TcpPackServerListener Destroy_HP_TcpPullAgent Destroy_HP_TcpPullAgentListener Destroy_HP_TcpPullClient Destroy_HP_TcpPullClientListener Destroy_HP_TcpPullServer Destroy_HP_TcpPullServerListener Destroy_HP_TcpServer Destroy_HP_TcpServerListener Destroy_HP_ThreadPool Destroy_HP_ThreadPoolListener Destroy_HP_UdpArqClient Destroy_HP_UdpArqClientListener Destroy_HP_UdpArqServer Destroy_HP_UdpArqServerListener Destroy_HP_UdpCast Destroy_HP_UdpCastListener Destroy_HP_UdpClient Destroy_HP_UdpClientListener Destroy_HP_UdpNode Destroy_HP_UdpNodeListener Destroy_HP_UdpServer Destroy_HP_UdpServerListener HP_Agent_Connect HP_Agent_ConnectWithExtra HP_Agent_ConnectWithExtraAndLocalAddressPort HP_Agent_ConnectWithExtraAndLocalPort HP_Agent_ConnectWithLocalAddress HP_Agent_ConnectWithLocalPort HP_Agent_Disconnect HP_Agent_DisconnectLongConnections HP_Agent_DisconnectSilenceConnections HP_Agent_GetAllConnectionIDs HP_Agent_GetConnectPeriod HP_Agent_GetConnectionCount HP_Agent_GetConnectionExtra HP_Agent_GetFreeBufferObjHold HP_Agent_GetFreeBufferObjPool HP_Agent_GetFreeSocketObjHold HP_Agent_GetFreeSocketObjLockTime HP_Agent_GetFreeSocketObjPool HP_Agent_GetLastError HP_Agent_GetLastErrorDesc HP_Agent_GetLocalAddress HP_Agent_GetMaxConnectionCount HP_Agent_GetOnSendSyncPolicy HP_Agent_GetPendingDataLength HP_Agent_GetRemoteAddress HP_Agent_GetRemoteHost HP_Agent_GetReuseAddressPolicy HP_Agent_GetSendPolicy HP_Agent_GetSilencePeriod HP_Agent_GetState HP_Agent_GetWorkerThreadCount HP_Agent_HasStarted HP_Agent_IsConnected HP_Agent_IsMarkSilence HP_Agent_IsPauseReceive HP_Agent_IsSecure HP_Agent_PauseReceive HP_Agent_Send HP_Agent_SendPackets HP_Agent_SendPart HP_Agent_SetConnectionExtra HP_Agent_SetFreeBufferObjHold HP_Agent_SetFreeBufferObjPool HP_Agent_SetFreeSocketObjHold HP_Agent_SetFreeSocketObjLockTime HP_Agent_SetFreeSocketObjPool HP_Agent_SetMarkSilence HP_Agent_SetMaxConnectionCount HP_Agent_SetOnSendSyncPolicy HP_Agent_SetReuseAddressPolicy HP_Agent_SetSendPolicy HP_Agent_SetWorkerThreadCount HP_Agent_Start HP_Agent_Stop HP_Agent_Wait HP_Client_GetConnectionID HP_Client_GetExtra HP_Client_GetFreeBufferPoolHold HP_Client_GetFreeBufferPoolSize HP_Client_GetLastError HP_Client_GetLastErrorDesc HP_Client_GetLocalAddress HP_Client_GetPendingDataLength HP_Client_GetRemoteHost HP_Client_GetReuseAddressPolicy HP_Client_GetState HP_Client_HasStarted HP_Client_IsConnected HP_Client_IsPauseReceive HP_Client_IsSecure HP_Client_PauseReceive HP_Client_Send HP_Client_SendPackets HP_Client_SendPart HP_Client_SetExtra HP_Client_SetFreeBufferPoolHold HP_Client_SetFreeBufferPoolSize HP_Client_SetReuseAddressPolicy HP_Client_Start HP_Client_StartWithBindAddress HP_Client_StartWithBindAddressAndLocalPort HP_Client_Stop HP_Client_Wait HP_Compressor_IsValid HP_Compressor_Process HP_Compressor_ProcessEx HP_Compressor_Reset HP_Decompressor_IsValid HP_Decompressor_Process HP_Decompressor_Reset HP_GetHPSocketVersion HP_GetSocketErrorDesc HP_Server_Disconnect HP_Server_DisconnectLongConnections HP_Server_DisconnectSilenceConnections HP_Server_GetAllConnectionIDs HP_Server_GetConnectPeriod HP_Server_GetConnectionCount HP_Server_GetConnectionExtra HP_Server_GetFreeBufferObjHold HP_Server_GetFreeBufferObjPool HP_Server_GetFreeSocketObjHold HP_Server_GetFreeSocketObjLockTime HP_Server_GetFreeSocketObjPool HP_Server_GetLastError HP_Server_GetLastErrorDesc HP_Server_GetListenAddress HP_Server_GetLocalAddress HP_Server_GetMaxConnectionCount HP_Server_GetOnSendSyncPolicy HP_Server_GetPendingDataLength HP_Server_GetRemoteAddress HP_Server_GetReuseAddressPolicy HP_Server_GetSendPolicy HP_Server_GetSilencePeriod HP_Server_GetState HP_Server_GetWorkerThreadCount HP_Server_HasStarted HP_Server_IsConnected HP_Server_IsMarkSilence HP_Server_IsPauseReceive HP_Server_IsSecure HP_Server_PauseReceive HP_Server_Send HP_Server_SendPackets HP_Server_SendPart HP_Server_SetConnectionExtra HP_Server_SetFreeBufferObjHold HP_Server_SetFreeBufferObjPool HP_Server_SetFreeSocketObjHold HP_Server_SetFreeSocketObjLockTime HP_Server_SetFreeSocketObjPool HP_Server_SetMarkSilence HP_Server_SetMaxConnectionCount HP_Server_SetOnSendSyncPolicy HP_Server_SetReuseAddressPolicy HP_Server_SetSendPolicy HP_Server_SetWorkerThreadCount HP_Server_Start HP_Server_Stop HP_Server_Wait HP_Set_FN_Agent_OnClose HP_Set_FN_Agent_OnConnect HP_Set_FN_Agent_OnHandShake HP_Set_FN_Agent_OnPrepareConnect HP_Set_FN_Agent_OnPullReceive HP_Set_FN_Agent_OnReceive HP_Set_FN_Agent_OnSend HP_Set_FN_Agent_OnShutdown HP_Set_FN_Client_OnClose HP_Set_FN_Client_OnConnect HP_Set_FN_Client_OnHandShake HP_Set_FN_Client_OnPrepareConnect HP_Set_FN_Client_OnPullReceive HP_Set_FN_Client_OnReceive HP_Set_FN_Client_OnSend HP_Set_FN_Server_OnAccept HP_Set_FN_Server_OnClose HP_Set_FN_Server_OnHandShake HP_Set_FN_Server_OnPrepareListen HP_Set_FN_Server_OnPullReceive HP_Set_FN_Server_OnReceive HP_Set_FN_Server_OnSend HP_Set_FN_Server_OnShutdown HP_Set_FN_ThreadPool_OnShutdown HP_Set_FN_ThreadPool_OnStartup HP_Set_FN_ThreadPool_OnWorkerThreadEnd HP_Set_FN_ThreadPool_OnWorkerThreadStart HP_Set_FN_UdpNode_OnError HP_Set_FN_UdpNode_OnPrepareListen HP_Set_FN_UdpNode_OnReceive HP_Set_FN_UdpNode_OnSend HP_Set_FN_UdpNode_OnShutdown HP_TcpAgent_GetKeepAliveInterval HP_TcpAgent_GetKeepAliveTime HP_TcpAgent_GetSocketBufferSize HP_TcpAgent_GetSyncConnectTimeout HP_TcpAgent_IsNoDelay HP_TcpAgent_SendSmallFile HP_TcpAgent_SetKeepAliveInterval HP_TcpAgent_SetKeepAliveTime HP_TcpAgent_SetNoDelay HP_TcpAgent_SetSocketBufferSize HP_TcpAgent_SetSyncConnectTimeout HP_TcpClient_GetKeepAliveInterval HP_TcpClient_GetKeepAliveTime HP_TcpClient_GetSocketBufferSize HP_TcpClient_GetSyncConnectTimeout HP_TcpClient_IsNoDelay HP_TcpClient_SendSmallFile HP_TcpClient_SetKeepAliveInterval HP_TcpClient_SetKeepAliveTime HP_TcpClient_SetNoDelay HP_TcpClient_SetSocketBufferSize HP_TcpClient_SetSyncConnectTimeout HP_TcpPackAgent_GetMaxPackSize HP_TcpPackAgent_GetPackHeaderFlag HP_TcpPackAgent_SetMaxPackSize HP_TcpPackAgent_SetPackHeaderFlag HP_TcpPackClient_GetMaxPackSize HP_TcpPackClient_GetPackHeaderFlag HP_TcpPackClient_SetMaxPackSize HP_TcpPackClient_SetPackHeaderFlag HP_TcpPackServer_GetMaxPackSize HP_TcpPackServer_GetPackHeaderFlag HP_TcpPackServer_SetMaxPackSize HP_TcpPackServer_SetPackHeaderFlag HP_TcpPullAgent_Fetch HP_TcpPullAgent_Peek HP_TcpPullClient_Fetch HP_TcpPullClient_Peek HP_TcpPullServer_Fetch HP_TcpPullServer_Peek HP_TcpServer_GetAcceptSocketCount HP_TcpServer_GetKeepAliveInterval HP_TcpServer_GetKeepAliveTime HP_TcpServer_GetSocketBufferSize HP_TcpServer_GetSocketListenQueue HP_TcpServer_IsNoDelay HP_TcpServer_SendSmallFile HP_TcpServer_SetAcceptSocketCount HP_TcpServer_SetKeepAliveInterval HP_TcpServer_SetKeepAliveTime HP_TcpServer_SetNoDelay HP_TcpServer_SetSocketBufferSize HP_TcpServer_SetSocketListenQueue HP_ThreadPool_AdjustThreadCount HP_ThreadPool_GetMaxQueueSize HP_ThreadPool_GetQueueSize HP_ThreadPool_GetRejectedPolicy HP_ThreadPool_GetState HP_ThreadPool_GetTaskCount HP_ThreadPool_GetThreadCount HP_ThreadPool_HasStarted HP_ThreadPool_Start HP_ThreadPool_Stop HP_ThreadPool_Submit HP_ThreadPool_Submit_Task HP_ThreadPool_Wait HP_UdpArqClient_GetFastLimit HP_UdpArqClient_GetFlushInterval HP_UdpArqClient_GetHandShakeTimeout HP_UdpArqClient_GetMaxMessageSize HP_UdpArqClient_GetMaxTransUnit HP_UdpArqClient_GetMinRto HP_UdpArqClient_GetRecvWndSize HP_UdpArqClient_GetResendByAcks HP_UdpArqClient_GetSendWndSize HP_UdpArqClient_GetWaitingSendMessageCount HP_UdpArqClient_IsNoDelay HP_UdpArqClient_IsTurnoffCongestCtrl HP_UdpArqClient_SetFastLimit HP_UdpArqClient_SetFlushInterval HP_UdpArqClient_SetHandShakeTimeout HP_UdpArqClient_SetMaxMessageSize HP_UdpArqClient_SetMaxTransUnit HP_UdpArqClient_SetMinRto HP_UdpArqClient_SetNoDelay HP_UdpArqClient_SetRecvWndSize HP_UdpArqClient_SetResendByAcks HP_UdpArqClient_SetSendWndSize HP_UdpArqClient_SetTurnoffCongestCtrl HP_UdpArqServer_GetFastLimit HP_UdpArqServer_GetFlushInterval HP_UdpArqServer_GetHandShakeTimeout HP_UdpArqServer_GetMaxMessageSize HP_UdpArqServer_GetMaxTransUnit HP_UdpArqServer_GetMinRto HP_UdpArqServer_GetRecvWndSize HP_UdpArqServer_GetResendByAcks HP_UdpArqServer_GetSendWndSize HP_UdpArqServer_GetWaitingSendMessageCount HP_UdpArqServer_IsNoDelay HP_UdpArqServer_IsTurnoffCongestCtrl HP_UdpArqServer_SetFastLimit HP_UdpArqServer_SetFlushInterval HP_UdpArqServer_SetHandShakeTimeout HP_UdpArqServer_SetMaxMessageSize HP_UdpArqServer_SetMaxTransUnit HP_UdpArqServer_SetMinRto HP_UdpArqServer_SetNoDelay HP_UdpArqServer_SetRecvWndSize HP_UdpArqServer_SetResendByAcks HP_UdpArqServer_SetSendWndSize HP_UdpArqServer_SetTurnoffCongestCtrl HP_UdpCast_GetCastMode HP_UdpCast_GetMaxDatagramSize HP_UdpCast_GetMultiCastTtl HP_UdpCast_GetRemoteAddress HP_UdpCast_IsMultiCastLoop HP_UdpCast_SetCastMode HP_UdpCast_SetMaxDatagramSize HP_UdpCast_SetMultiCastLoop HP_UdpCast_SetMultiCastTtl HP_UdpClient_GetDetectAttempts HP_UdpClient_GetDetectInterval HP_UdpClient_GetMaxDatagramSize HP_UdpClient_SetDetectAttempts HP_UdpClient_SetDetectInterval HP_UdpClient_SetMaxDatagramSize HP_UdpNode_GetCastAddress HP_UdpNode_GetCastMode HP_UdpNode_GetExtra HP_UdpNode_GetFreeBufferPoolHold HP_UdpNode_GetFreeBufferPoolSize HP_UdpNode_GetLastError HP_UdpNode_GetLastErrorDesc HP_UdpNode_GetLocalAddress HP_UdpNode_GetMaxDatagramSize HP_UdpNode_GetMultiCastTtl HP_UdpNode_GetPendingDataLength HP_UdpNode_GetPostReceiveCount HP_UdpNode_GetReuseAddressPolicy HP_UdpNode_GetState HP_UdpNode_GetWorkerThreadCount HP_UdpNode_HasStarted HP_UdpNode_IsMultiCastLoop HP_UdpNode_Send HP_UdpNode_SendCast HP_UdpNode_SendCastPackets HP_UdpNode_SendCastPart HP_UdpNode_SendPackets HP_UdpNode_SendPart HP_UdpNode_SetExtra HP_UdpNode_SetFreeBufferPoolHold HP_UdpNode_SetFreeBufferPoolSize HP_UdpNode_SetMaxDatagramSize HP_UdpNode_SetMultiCastLoop HP_UdpNode_SetMultiCastTtl HP_UdpNode_SetPostReceiveCount HP_UdpNode_SetReuseAddressPolicy HP_UdpNode_SetWorkerThreadCount HP_UdpNode_Start HP_UdpNode_StartWithCast HP_UdpNode_Stop HP_UdpNode_Wait HP_UdpServer_GetDetectAttempts HP_UdpServer_GetDetectInterval HP_UdpServer_GetMaxDatagramSize HP_UdpServer_GetPostReceiveCount HP_UdpServer_SetDetectAttempts HP_UdpServer_SetDetectInterval HP_UdpServer_SetMaxDatagramSize HP_UdpServer_SetPostReceiveCount SYS_Base64Decode SYS_Base64Encode SYS_Calloc SYS_CodePageToUnicode SYS_CodePageToUnicodeEx SYS_EnumHostIPAddresses SYS_Free SYS_FreeHostIPAddresses SYS_GbkToUnicode SYS_GbkToUnicodeEx SYS_GbkToUtf8 SYS_GbkToUtf8Ex SYS_GetIPAddress SYS_GetLastError SYS_GetSocketLocalAddress SYS_GetSocketOption SYS_GetSocketRemoteAddress SYS_GuessBase64DecodeBound SYS_GuessBase64EncodeBound SYS_GuessUrlDecodeBound SYS_GuessUrlEncodeBound SYS_HToN64 SYS_IoctlSocket SYS_IsIPAddress SYS_IsLittleEndian SYS_Malloc SYS_NToH64 SYS_Realloc SYS_SSO_DontLinger SYS_SSO_ExclusiveAddressUse SYS_SSO_Linger SYS_SSO_NoDelay SYS_SSO_RecvBuffSize SYS_SSO_RecvTimeOut SYS_SSO_ReuseAddress SYS_SSO_SendBuffSize SYS_SSO_SendTimeOut SYS_SetSocketOption SYS_SwapEndian16 SYS_SwapEndian32 SYS_UnicodeToCodePage SYS_UnicodeToCodePageEx SYS_UnicodeToGbk SYS_UnicodeToGbkEx SYS_UnicodeToUtf8 SYS_UnicodeToUtf8Ex SYS_UrlDecode SYS_UrlEncode SYS_Utf8ToGbk SYS_Utf8ToGbkEx SYS_Utf8ToUnicode SYS_Utf8ToUnicodeEx SYS_WSAGetLastError SYS_WSAIoctl _Create_HP_SocketTaskObj@32 _Create_HP_TcpAgent@4 _Create_HP_TcpAgentListener@0 _Create_HP_TcpClient@4 _Create_HP_TcpClientListener@0 _Create_HP_TcpPackAgent@4 _Create_HP_TcpPackAgentListener@0 _Create_HP_TcpPackClient@4 _Create_HP_TcpPackClientListener@0 _Create_HP_TcpPackServer@4 _Create_HP_TcpPackServerListener@0 _Create_HP_TcpPullAgent@4 _Create_HP_TcpPullAgentListener@0 _Create_HP_TcpPullClient@4 _Create_HP_TcpPullClientListener@0 _Create_HP_TcpPullServer@4 _Create_HP_TcpPullServerListener@0 _Create_HP_TcpServer@4 _Create_HP_TcpServerListener@0 _Create_HP_ThreadPool@4 _Create_HP_ThreadPoolListener@0 _Create_HP_UdpArqClient@4 _Create_HP_UdpArqClientListener@0 _Create_HP_UdpArqServer@4 _Create_HP_UdpArqServerListener@0 _Create_HP_UdpCast@4 _Create_HP_UdpCastListener@0 _Create_HP_UdpClient@4 _Create_HP_UdpClientListener@0 _Create_HP_UdpNode@4 _Create_HP_UdpNodeListener@0 _Create_HP_UdpServer@4 _Create_HP_UdpServerListener@0 _Destroy_HP_Compressor@4 _Destroy_HP_Decompressor@4 _Destroy_HP_SocketTaskObj@4 _Destroy_HP_TcpAgent@4 _Destroy_HP_TcpAgentListener@4 _Destroy_HP_TcpClient@4 _Destroy_HP_TcpClientListener@4 _Destroy_HP_TcpPackAgent@4 _Destroy_HP_TcpPackAgentListener@4 _Destroy_HP_TcpPackClient@4 _Destroy_HP_TcpPackClientListener@4 _Destroy_HP_TcpPackServer@4 _Destroy_HP_TcpPackServerListener@4 _Destroy_HP_TcpPullAgent@4 _Destroy_HP_TcpPullAgentListener@4 _Destroy_HP_TcpPullClient@4 _Destroy_HP_TcpPullClientListener@4 _Destroy_HP_TcpPullServer@4 _Destroy_HP_TcpPullServerListener@4 _Destroy_HP_TcpServer@4 _Destroy_HP_TcpServerListener@4 _Destroy_HP_ThreadPool@4 _Destroy_HP_ThreadPoolListener@4 _Destroy_HP_UdpArqClient@4 _Destroy_HP_UdpArqClientListener@4 _Destroy_HP_UdpArqServer@4 _Destroy_HP_UdpArqServerListener@4 _Destroy_HP_UdpCast@4 _Destroy_HP_UdpCastListener@4 _Destroy_HP_UdpClient@4 _Destroy_HP_UdpClientListener@4 _Destroy_HP_UdpNode@4 _Destroy_HP_UdpNodeListener@4 _Destroy_HP_UdpServer@4 _Destroy_HP_UdpServerListener@4 _HP_Agent_Connect@16 _HP_Agent_ConnectWithExtra@20 _HP_Agent_ConnectWithExtraAndLocalAddressPort@28 _HP_Agent_ConnectWithExtraAndLocalPort@24 _HP_Agent_ConnectWithLocalAddress@20 _HP_Agent_ConnectWithLocalPort@20 _HP_Agent_Disconnect@12 _HP_Agent_DisconnectLongConnections@12 _HP_Agent_DisconnectSilenceConnections@12 _HP_Agent_GetAllConnectionIDs@12 _HP_Agent_GetConnectPeriod@12 _HP_Agent_GetConnectionCount@4 _HP_Agent_GetConnectionExtra@12 _HP_Agent_GetFreeBufferObjHold@4 _HP_Agent_GetFreeBufferObjPool@4 _HP_Agent_GetFreeSocketObjHold@4 _HP_Agent_GetFreeSocketObjLockTime@4 _HP_Agent_GetFreeSocketObjPool@4 _HP_Agent_GetLastError@4 _HP_Agent_GetLastErrorDesc@4 _HP_Agent_GetLocalAddress@20 _HP_Agent_GetMaxConnectionCount@4 _HP_Agent_GetOnSendSyncPolicy@4 _HP_Agent_GetPendingDataLength@12 _HP_Agent_GetRemoteAddress@20 _HP_Agent_GetRemoteHost@20 _HP_Agent_GetReuseAddressPolicy@4 _HP_Agent_GetSendPolicy@4 _HP_Agent_GetSilencePeriod@12 _HP_Agent_GetState@4 _HP_Agent_GetWorkerThreadCount@4 _HP_Agent_HasStarted@4 _HP_Agent_IsConnected@8 _HP_Agent_IsMarkSilence@4 _HP_Agent_IsPauseReceive@12 _HP_Agent_IsSecure@4 _HP_Agent_PauseReceive@12 _HP_Agent_Send@16 _HP_Agent_SendPackets@16 _HP_Agent_SendPart@20 _HP_Agent_SetConnectionExtra@12 _HP_Agent_SetFreeBufferObjHold@8 _HP_Agent_SetFreeBufferObjPool@8 _HP_Agent_SetFreeSocketObjHold@8 _HP_Agent_SetFreeSocketObjLockTime@8 _HP_Agent_SetFreeSocketObjPool@8 _HP_Agent_SetMarkSilence@8 _HP_Agent_SetMaxConnectionCount@8 _HP_Agent_SetOnSendSyncPolicy@8 _HP_Agent_SetReuseAddressPolicy@8 _HP_Agent_SetSendPolicy@8 _HP_Agent_SetWorkerThreadCount@8 _HP_Agent_Start@12 _HP_Agent_Stop@4 _HP_Agent_Wait@8 _HP_Client_GetConnectionID@4 _HP_Client_GetExtra@4 _HP_Client_GetFreeBufferPoolHold@4 _HP_Client_GetFreeBufferPoolSize@4 _HP_Client_GetLastError@4 _HP_Client_GetLastErrorDesc@4 _HP_Client_GetLocalAddress@16 _HP_Client_GetPendingDataLength@8 _HP_Client_GetRemoteHost@16 _HP_Client_GetReuseAddressPolicy@4 _HP_Client_GetState@4 _HP_Client_HasStarted@4 _HP_Client_IsConnected@4 _HP_Client_IsPauseReceive@8 _HP_Client_IsSecure@4 _HP_Client_PauseReceive@8 _HP_Client_Send@12 _HP_Client_SendPackets@12 _HP_Client_SendPart@16 _HP_Client_SetExtra@8 _HP_Client_SetFreeBufferPoolHold@8 _HP_Client_SetFreeBufferPoolSize@8 _HP_Client_SetReuseAddressPolicy@8 _HP_Client_Start@16 _HP_Client_StartWithBindAddress@20 _HP_Client_StartWithBindAddressAndLocalPort@24 _HP_Client_Stop@4 _HP_Client_Wait@8 _HP_Compressor_IsValid@4 _HP_Compressor_Process@20 _HP_Compressor_ProcessEx@24 _HP_Compressor_Reset@4 _HP_Decompressor_IsValid@4 _HP_Decompressor_Process@16 _HP_Decompressor_Reset@4 _HP_GetHPSocketVersion@0 _HP_GetSocketErrorDesc@4 _HP_Server_Disconnect@12 _HP_Server_DisconnectLongConnections@12 _HP_Server_DisconnectSilenceConnections@12 _HP_Server_GetAllConnectionIDs@12 _HP_Server_GetConnectPeriod@12 _HP_Server_GetConnectionCount@4 _HP_Server_GetConnectionExtra@12 _HP_Server_GetFreeBufferObjHold@4 _HP_Server_GetFreeBufferObjPool@4 _HP_Server_GetFreeSocketObjHold@4 _HP_Server_GetFreeSocketObjLockTime@4 _HP_Server_GetFreeSocketObjPool@4 _HP_Server_GetLastError@4 _HP_Server_GetLastErrorDesc@4 _HP_Server_GetListenAddress@16 _HP_Server_GetLocalAddress@20 _HP_Server_GetMaxConnectionCount@4 _HP_Server_GetOnSendSyncPolicy@4 _HP_Server_GetPendingDataLength@12 _HP_Server_GetRemoteAddress@20 _HP_Server_GetReuseAddressPolicy@4 _HP_Server_GetSendPolicy@4 _HP_Server_GetSilencePeriod@12 _HP_Server_GetState@4 _HP_Server_GetWorkerThreadCount@4 _HP_Server_HasStarted@4 _HP_Server_IsConnected@8 _HP_Server_IsMarkSilence@4 _HP_Server_IsPauseReceive@12 _HP_Server_IsSecure@4 _HP_Server_PauseReceive@12 _HP_Server_Send@16 _HP_Server_SendPackets@16 _HP_Server_SendPart@20 _HP_Server_SetConnectionExtra@12 _HP_Server_SetFreeBufferObjHold@8 _HP_Server_SetFreeBufferObjPool@8 _HP_Server_SetFreeSocketObjHold@8 _HP_Server_SetFreeSocketObjLockTime@8 _HP_Server_SetFreeSocketObjPool@8 _HP_Server_SetMarkSilence@8 _HP_Server_SetMaxConnectionCount@8 _HP_Server_SetOnSendSyncPolicy@8 _HP_Server_SetReuseAddressPolicy@8 _HP_Server_SetSendPolicy@8 _HP_Server_SetWorkerThreadCount@8 _HP_Server_Start@12 _HP_Server_Stop@4 _HP_Server_Wait@8 _HP_Set_FN_Agent_OnClose@8 _HP_Set_FN_Agent_OnConnect@8 _HP_Set_FN_Agent_OnHandShake@8 _HP_Set_FN_Agent_OnPrepareConnect@8 _HP_Set_FN_Agent_OnPullReceive@8 _HP_Set_FN_Agent_OnReceive@8 _HP_Set_FN_Agent_OnSend@8 _HP_Set_FN_Agent_OnShutdown@8 _HP_Set_FN_Client_OnClose@8 _HP_Set_FN_Client_OnConnect@8 _HP_Set_FN_Client_OnHandShake@8 _HP_Set_FN_Client_OnPrepareConnect@8 _HP_Set_FN_Client_OnPullReceive@8 _HP_Set_FN_Client_OnReceive@8 _HP_Set_FN_Client_OnSend@8 _HP_Set_FN_Server_OnAccept@8 _HP_Set_FN_Server_OnClose@8 _HP_Set_FN_Server_OnHandShake@8 _HP_Set_FN_Server_OnPrepareListen@8 _HP_Set_FN_Server_OnPullReceive@8 _HP_Set_FN_Server_OnReceive@8 _HP_Set_FN_Server_OnSend@8 _HP_Set_FN_Server_OnShutdown@8 _HP_Set_FN_ThreadPool_OnShutdown@8 _HP_Set_FN_ThreadPool_OnStartup@8 _HP_Set_FN_ThreadPool_OnWorkerThreadEnd@8 _HP_Set_FN_ThreadPool_OnWorkerThreadStart@8 _HP_Set_FN_UdpNode_OnError@8 _HP_Set_FN_UdpNode_OnPrepareListen@8 _HP_Set_FN_UdpNode_OnReceive@8 _HP_Set_FN_UdpNode_OnSend@8 _HP_Set_FN_UdpNode_OnShutdown@8 _HP_TcpAgent_GetKeepAliveInterval@4 _HP_TcpAgent_GetKeepAliveTime@4 _HP_TcpAgent_GetSocketBufferSize@4 _HP_TcpAgent_GetSyncConnectTimeout@4 _HP_TcpAgent_IsNoDelay@4 _HP_TcpAgent_SendSmallFile@20 _HP_TcpAgent_SetKeepAliveInterval@8 _HP_TcpAgent_SetKeepAliveTime@8 _HP_TcpAgent_SetNoDelay@8 _HP_TcpAgent_SetSocketBufferSize@8 _HP_TcpAgent_SetSyncConnectTimeout@8 _HP_TcpClient_GetKeepAliveInterval@4 _HP_TcpClient_GetKeepAliveTime@4 _HP_TcpClient_GetSocketBufferSize@4 _HP_TcpClient_GetSyncConnectTimeout@4 _HP_TcpClient_IsNoDelay@4 _HP_TcpClient_SendSmallFile@16 _HP_TcpClient_SetKeepAliveInterval@8 _HP_TcpClient_SetKeepAliveTime@8 _HP_TcpClient_SetNoDelay@8 _HP_TcpClient_SetSocketBufferSize@8 _HP_TcpClient_SetSyncConnectTimeout@8 _HP_TcpPackAgent_GetMaxPackSize@4 _HP_TcpPackAgent_GetPackHeaderFlag@4 _HP_TcpPackAgent_SetMaxPackSize@8 _HP_TcpPackAgent_SetPackHeaderFlag@8 _HP_TcpPackClient_GetMaxPackSize@4 _HP_TcpPackClient_GetPackHeaderFlag@4 _HP_TcpPackClient_SetMaxPackSize@8 _HP_TcpPackClient_SetPackHeaderFlag@8 _HP_TcpPackServer_GetMaxPackSize@4 _HP_TcpPackServer_GetPackHeaderFlag@4 _HP_TcpPackServer_SetMaxPackSize@8 _HP_TcpPackServer_SetPackHeaderFlag@8 _HP_TcpPullAgent_Fetch@16 _HP_TcpPullAgent_Peek@16 _HP_TcpPullClient_Fetch@12 _HP_TcpPullClient_Peek@12 _HP_TcpPullServer_Fetch@16 _HP_TcpPullServer_Peek@16 _HP_TcpServer_GetAcceptSocketCount@4 _HP_TcpServer_GetKeepAliveInterval@4 _HP_TcpServer_GetKeepAliveTime@4 _HP_TcpServer_GetSocketBufferSize@4 _HP_TcpServer_GetSocketListenQueue@4 _HP_TcpServer_IsNoDelay@4 _HP_TcpServer_SendSmallFile@20 _HP_TcpServer_SetAcceptSocketCount@8 _HP_TcpServer_SetKeepAliveInterval@8 _HP_TcpServer_SetKeepAliveTime@8 _HP_TcpServer_SetNoDelay@8 _HP_TcpServer_SetSocketBufferSize@8 _HP_TcpServer_SetSocketListenQueue@8 _HP_ThreadPool_AdjustThreadCount@8 _HP_ThreadPool_GetMaxQueueSize@4 _HP_ThreadPool_GetQueueSize@4 _HP_ThreadPool_GetRejectedPolicy@4 _HP_ThreadPool_GetState@4 _HP_ThreadPool_GetTaskCount@4 _HP_ThreadPool_GetThreadCount@4 _HP_ThreadPool_HasStarted@4 _HP_ThreadPool_Start@20 _HP_ThreadPool_Stop@8 _HP_ThreadPool_Submit@16 _HP_ThreadPool_Submit_Task@12 _HP_ThreadPool_Wait@8 _HP_UdpArqClient_GetFastLimit@4 _HP_UdpArqClient_GetFlushInterval@4 _HP_UdpArqClient_GetHandShakeTimeout@4 _HP_UdpArqClient_GetMaxMessageSize@4 _HP_UdpArqClient_GetMaxTransUnit@4 _HP_UdpArqClient_GetMinRto@4 _HP_UdpArqClient_GetRecvWndSize@4 _HP_UdpArqClient_GetResendByAcks@4 _HP_UdpArqClient_GetSendWndSize@4 _HP_UdpArqClient_GetWaitingSendMessageCount@8 _HP_UdpArqClient_IsNoDelay@4 _HP_UdpArqClient_IsTurnoffCongestCtrl@4 _HP_UdpArqClient_SetFastLimit@8 _HP_UdpArqClient_SetFlushInterval@8 _HP_UdpArqClient_SetHandShakeTimeout@8 _HP_UdpArqClient_SetMaxMessageSize@8 _HP_UdpArqClient_SetMaxTransUnit@8 _HP_UdpArqClient_SetMinRto@8 _HP_UdpArqClient_SetNoDelay@8 _HP_UdpArqClient_SetRecvWndSize@8 _HP_UdpArqClient_SetResendByAcks@8 _HP_UdpArqClient_SetSendWndSize@8 _HP_UdpArqClient_SetTurnoffCongestCtrl@8 _HP_UdpArqServer_GetFastLimit@4 _HP_UdpArqServer_GetFlushInterval@4 _HP_UdpArqServer_GetHandShakeTimeout@4 _HP_UdpArqServer_GetMaxMessageSize@4 _HP_UdpArqServer_GetMaxTransUnit@4 _HP_UdpArqServer_GetMinRto@4 _HP_UdpArqServer_GetRecvWndSize@4 _HP_UdpArqServer_GetResendByAcks@4 _HP_UdpArqServer_GetSendWndSize@4 _HP_UdpArqServer_GetWaitingSendMessageCount@12 _HP_UdpArqServer_IsNoDelay@4 _HP_UdpArqServer_IsTurnoffCongestCtrl@4 _HP_UdpArqServer_SetFastLimit@8 _HP_UdpArqServer_SetFlushInterval@8 _HP_UdpArqServer_SetHandShakeTimeout@8 _HP_UdpArqServer_SetMaxMessageSize@8 _HP_UdpArqServer_SetMaxTransUnit@8 _HP_UdpArqServer_SetMinRto@8 _HP_UdpArqServer_SetNoDelay@8 _HP_UdpArqServer_SetRecvWndSize@8 _HP_UdpArqServer_SetResendByAcks@8 _HP_UdpArqServer_SetSendWndSize@8 _HP_UdpArqServer_SetTurnoffCongestCtrl@8 _HP_UdpCast_GetCastMode@4 _HP_UdpCast_GetMaxDatagramSize@4 _HP_UdpCast_GetMultiCastTtl@4 _HP_UdpCast_GetRemoteAddress@16 _HP_UdpCast_IsMultiCastLoop@4 _HP_UdpCast_SetCastMode@8 _HP_UdpCast_SetMaxDatagramSize@8 _HP_UdpCast_SetMultiCastLoop@8 _HP_UdpCast_SetMultiCastTtl@8 _HP_UdpClient_GetDetectAttempts@4 _HP_UdpClient_GetDetectInterval@4 _HP_UdpClient_GetMaxDatagramSize@4 _HP_UdpClient_SetDetectAttempts@8 _HP_UdpClient_SetDetectInterval@8 _HP_UdpClient_SetMaxDatagramSize@8 _HP_UdpNode_GetCastAddress@16 _HP_UdpNode_GetCastMode@4 _HP_UdpNode_GetExtra@4 _HP_UdpNode_GetFreeBufferPoolHold@4 _HP_UdpNode_GetFreeBufferPoolSize@4 _HP_UdpNode_GetLastError@4 _HP_UdpNode_GetLastErrorDesc@4 _HP_UdpNode_GetLocalAddress@16 _HP_UdpNode_GetMaxDatagramSize@4 _HP_UdpNode_GetMultiCastTtl@4 _HP_UdpNode_GetPendingDataLength@8 _HP_UdpNode_GetPostReceiveCount@4 _HP_UdpNode_GetReuseAddressPolicy@4 _HP_UdpNode_GetState@4 _HP_UdpNode_GetWorkerThreadCount@4 _HP_UdpNode_HasStarted@4 _HP_UdpNode_IsMultiCastLoop@4 _HP_UdpNode_Send@20 _HP_UdpNode_SendCast@12 _HP_UdpNode_SendCastPackets@12 _HP_UdpNode_SendCastPart@16 _HP_UdpNode_SendPackets@20 _HP_UdpNode_SendPart@24 _HP_UdpNode_SetExtra@8 _HP_UdpNode_SetFreeBufferPoolHold@8 _HP_UdpNode_SetFreeBufferPoolSize@8 _HP_UdpNode_SetMaxDatagramSize@8 _HP_UdpNode_SetMultiCastLoop@8 _HP_UdpNode_SetMultiCastTtl@8 _HP_UdpNode_SetPostReceiveCount@8 _HP_UdpNode_SetReuseAddressPolicy@8 _HP_UdpNode_SetWorkerThreadCount@8 _HP_UdpNode_Start@12 _HP_UdpNode_StartWithCast@20 _HP_UdpNode_Stop@4 _HP_UdpNode_Wait@8 _HP_UdpServer_GetDetectAttempts@4 _HP_UdpServer_GetDetectInterval@4 _HP_UdpServer_GetMaxDatagramSize@4 _HP_UdpServer_GetPostReceiveCount@4 _HP_UdpServer_SetDetectAttempts@8 _HP_UdpServer_SetDetectInterval@8 _HP_UdpServer_SetMaxDatagramSize@8 _HP_UdpServer_SetPostReceiveCount@8 _SYS_Base64Decode@16 _SYS_Base64Encode@16 _SYS_Calloc@8 _SYS_CodePageToUnicode@16 _SYS_CodePageToUnicodeEx@20 _SYS_EnumHostIPAddresses@16 _SYS_Free@4 _SYS_FreeHostIPAddresses@4 _SYS_GbkToUnicode@12 _SYS_GbkToUnicodeEx@16 _SYS_GbkToUtf8@12 _SYS_GbkToUtf8Ex@16 _SYS_GetIPAddress@16 _SYS_GetLastError@0 _SYS_GetSocketLocalAddress@16 _SYS_GetSocketOption@20 _SYS_GetSocketRemoteAddress@16 _SYS_GuessBase64DecodeBound@8 _SYS_GuessBase64EncodeBound@4 _SYS_GuessUrlDecodeBound@8 _SYS_GuessUrlEncodeBound@8 _SYS_HToN64@8 _SYS_IoctlSocket@12 _SYS_IsIPAddress@8 _SYS_IsLittleEndian@0 _SYS_Malloc@4 _SYS_NToH64@8 _SYS_Realloc@8 _SYS_SSO_DontLinger@8 _SYS_SSO_ExclusiveAddressUse@8 _SYS_SSO_Linger@12 _SYS_SSO_NoDelay@8 _SYS_SSO_RecvBuffSize@8 _SYS_SSO_RecvTimeOut@8 _SYS_SSO_ReuseAddress@8 _SYS_SSO_SendBuffSize@8 _SYS_SSO_SendTimeOut@8 _SYS_SetSocketOption@20 _SYS_SwapEndian16@4 _SYS_SwapEndian32@4 _SYS_UnicodeToCodePage@16 _SYS_UnicodeToCodePageEx@20 _SYS_UnicodeToGbk@12 _SYS_UnicodeToGbkEx@16 _SYS_UnicodeToUtf8@12 _SYS_UnicodeToUtf8Ex@16 _SYS_UrlDecode@16 _SYS_UrlEncode@16 _SYS_Utf8ToGbk@12 _SYS_Utf8ToGbkEx@16 _SYS_Utf8ToUnicode@12 _SYS_Utf8ToUnicodeEx@16 _SYS_WSAGetLastError@0 _SYS_WSAIoctl@28

Sharing

General

Malware Config

Signatures

File Explorer

ac81b1ab55c9e0c544dd8f1d32fab1ac7f1fcdef2f439ffc0c9079524fe0cbd0

kernel32

user32

shlwapi

winmm

ws2_32

generic