41a27011f6119e9b68373e6fa057c2b1fccc1effbc4a5df989c2c02a83996983

Sharing

Copy URL Twitter E-mail

General

Target
41a27011f6119e9b68373e6fa057c2b1fccc1effbc4a5df989c2c02a83996983
Size 181KB
Sample261020-g87f1awwft
SHA256 41a27011f6119e9b68373e6fa057c2b1fccc1effbc4a5df989c2c02a83996983
MD5 8353545ac5de950d09da27c1850942a0
SHA1 1ec5aa309cc914202c276e42710304df051c5540
SHA512 4bcc13d93da9a775d5981cbe02778c3d6320b40473f33455ad3a199f272a054b1211fbb9ec5bfb0007a4eaaac80c0e531e29e289e3e2590d61e85749f036d275
SSDEEP 3072:E/1nagmLpa/oieEbzXp6ZF8wSj8Jun4/dcZdA4NAjjCf:y1aGnegXgj8wS4Ju4GdA4N/
TLSH
T183047E013750D872C32B9B3E0C15B704A2BEB6629BF6A5077F689A2DDEF40915F78346
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41a27011f6119e9b68373e6fa057c2b1fccc1effbc4a5df989c2c02a83996983

File Explorer

41a27011f6119e9b68373e6fa057c2b1fccc1effbc4a5df989c2c02a83996983

.dll 181KB

41a27011f6119e9b68373e6fa057c2b1fccc1effbc4a5df989c2c02a83996983

IMPHASH 8391b956b6c4081bd52fd09eeeeb1b0a
SHA256 41a27011f6119e9b68373e6fa057c2b1fccc1effbc4a5df989c2c02a83996983
MD5 8353545ac5de950d09da27c1850942a0
SHA1 1ec5aa309cc914202c276e42710304df051c5540
SHA512 4bcc13d93da9a775d5981cbe02778c3d6320b40473f33455ad3a199f272a054b1211fbb9ec5bfb0007a4eaaac80c0e531e29e289e3e2590d61e85749f036d275
SSDEEP 3072:E/1nagmLpa/oieEbzXp6ZF8wSj8Jun4/dcZdA4NAjjCf:y1aGnegXgj8wS4Ju4GdA4N/
TLSH
T183047E013750D872C32B9B3E0C15B704A2BEB6629BF6A5077F689A2DDEF40915F78346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

62747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

K:\source\HPSOCKET\version\hp-socket-5.8.3-beta1\Windows\Bin\HPSocket4C\x86\HPSocket4C.pdb

kernel32

InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapCreate HeapDestroy HeapAlloc HeapFree InterlockedCompareExchange InterlockedIncrement EnterCriticalSection LeaveCriticalSection InterlockedDecrement GetLastError SetLastError GetCurrentThreadId GetCurrentProcessId CreateSemaphoreA CloseHandle WaitForSingleObject ReleaseSemaphore SwitchToThread GetNativeSystemInfo CreateEventA Sleep GetSystemInfo GetExitCodeThread TerminateThread ResetEvent InterlockedExchange PostQueuedCompletionStatus RaiseException SetEvent GetQueuedCompletionStatus CreateIoCompletionPort CreateFileA GetProcAddress GetModuleHandleA GetFileSize CreateFileMappingA MapViewOfFileEx MultiByteToWideChar WideCharToMultiByte lstrlenA UnmapViewOfFile WaitForMultipleObjects InterlockedExchangeAdd ReadFile WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW FlushFileBuffers GetConsoleMode GetConsoleCP SetFilePointer RtlUnwind GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA IsProcessorFeaturePresent IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryW TlsFree CreateFileW TlsSetValue TlsGetValue TlsAlloc GetStartupInfoW GetFileType SetHandleCount GetModuleFileNameW GetStdHandle WriteFile IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCommandLineA CreateThread ExitThread EncodePointer DecodePointer ExitProcess GetModuleHandleW HeapReAlloc HeapSize GetProcessHeap

user32

MsgWaitForMultipleObjects DispatchMessageA PeekMessageA TranslateMessage

shlwapi

StrChrA StrPBrkA

winmm

timeGetTime

ws2_32

WSARecv WSASend closesocket shutdown send ioctlsocket setsockopt htonl ntohl WSAStartup getsockname WSAAddressToStringA freeaddrinfo getaddrinfo WSAStringToAddressA getsockopt htons ntohs WSAIoctl WSASetLastError WSAGetLastError WSACleanup socket bind connect WSAGetOverlappedResult WSACreateEvent WSAEventSelect WSAWaitForMultipleEvents WSAEnumNetworkEvents WSAResetEvent recv WSACloseEvent listen getpeername

Create_HP_SocketTaskObj Create_HP_TcpAgent Create_HP_TcpAgentListener Create_HP_TcpClient Create_HP_TcpClientListener Create_HP_TcpPackAgent Create_HP_TcpPackAgentListener Create_HP_TcpPackClient Create_HP_TcpPackClientListener Create_HP_TcpPackServer Create_HP_TcpPackServerListener Create_HP_TcpPullAgent Create_HP_TcpPullAgentListener Create_HP_TcpPullClient Create_HP_TcpPullClientListener Create_HP_TcpPullServer Create_HP_TcpPullServerListener Create_HP_TcpServer Create_HP_TcpServerListener Create_HP_ThreadPool Destroy_HP_SocketTaskObj Destroy_HP_TcpAgent Destroy_HP_TcpAgentListener Destroy_HP_TcpClient Destroy_HP_TcpClientListener Destroy_HP_TcpPackAgent Destroy_HP_TcpPackAgentListener Destroy_HP_TcpPackClient Destroy_HP_TcpPackClientListener Destroy_HP_TcpPackServer Destroy_HP_TcpPackServerListener Destroy_HP_TcpPullAgent Destroy_HP_TcpPullAgentListener Destroy_HP_TcpPullClient Destroy_HP_TcpPullClientListener Destroy_HP_TcpPullServer Destroy_HP_TcpPullServerListener Destroy_HP_TcpServer Destroy_HP_TcpServerListener Destroy_HP_ThreadPool HP_Agent_Connect HP_Agent_ConnectWithExtra HP_Agent_ConnectWithExtraAndLocalAddressPort HP_Agent_ConnectWithExtraAndLocalPort HP_Agent_ConnectWithLocalAddress HP_Agent_ConnectWithLocalPort HP_Agent_Disconnect HP_Agent_DisconnectLongConnections HP_Agent_DisconnectSilenceConnections HP_Agent_GetAllConnectionIDs HP_Agent_GetConnectPeriod HP_Agent_GetConnectionCount HP_Agent_GetConnectionExtra HP_Agent_GetFreeBufferObjHold HP_Agent_GetFreeBufferObjPool HP_Agent_GetFreeSocketObjHold HP_Agent_GetFreeSocketObjLockTime HP_Agent_GetFreeSocketObjPool HP_Agent_GetLastError HP_Agent_GetLastErrorDesc HP_Agent_GetLocalAddress HP_Agent_GetMaxConnectionCount HP_Agent_GetOnSendSyncPolicy HP_Agent_GetPendingDataLength HP_Agent_GetRemoteAddress HP_Agent_GetRemoteHost HP_Agent_GetReuseAddressPolicy HP_Agent_GetSendPolicy HP_Agent_GetSilencePeriod HP_Agent_GetState HP_Agent_GetWorkerThreadCount HP_Agent_HasStarted HP_Agent_IsConnected HP_Agent_IsMarkSilence HP_Agent_IsPauseReceive HP_Agent_IsSecure HP_Agent_PauseReceive HP_Agent_Send HP_Agent_SendPackets HP_Agent_SendPart HP_Agent_SetConnectionExtra HP_Agent_SetFreeBufferObjHold HP_Agent_SetFreeBufferObjPool HP_Agent_SetFreeSocketObjHold HP_Agent_SetFreeSocketObjLockTime HP_Agent_SetFreeSocketObjPool HP_Agent_SetMarkSilence HP_Agent_SetMaxConnectionCount HP_Agent_SetOnSendSyncPolicy HP_Agent_SetReuseAddressPolicy HP_Agent_SetSendPolicy HP_Agent_SetWorkerThreadCount HP_Agent_Start HP_Agent_Stop HP_Agent_Wait HP_Client_GetConnectionID HP_Client_GetExtra HP_Client_GetFreeBufferPoolHold HP_Client_GetFreeBufferPoolSize HP_Client_GetLastError HP_Client_GetLastErrorDesc HP_Client_GetLocalAddress HP_Client_GetPendingDataLength HP_Client_GetRemoteHost HP_Client_GetReuseAddressPolicy HP_Client_GetState HP_Client_HasStarted HP_Client_IsConnected HP_Client_IsPauseReceive HP_Client_IsSecure HP_Client_PauseReceive HP_Client_Send HP_Client_SendPackets HP_Client_SendPart HP_Client_SetExtra HP_Client_SetFreeBufferPoolHold HP_Client_SetFreeBufferPoolSize HP_Client_SetReuseAddressPolicy HP_Client_Start HP_Client_StartWithBindAddress HP_Client_StartWithBindAddressAndLocalPort HP_Client_Stop HP_Client_Wait HP_GetHPSocketVersion HP_GetSocketErrorDesc HP_Server_Disconnect HP_Server_DisconnectLongConnections HP_Server_DisconnectSilenceConnections HP_Server_GetAllConnectionIDs HP_Server_GetConnectPeriod HP_Server_GetConnectionCount HP_Server_GetConnectionExtra HP_Server_GetFreeBufferObjHold HP_Server_GetFreeBufferObjPool HP_Server_GetFreeSocketObjHold HP_Server_GetFreeSocketObjLockTime HP_Server_GetFreeSocketObjPool HP_Server_GetLastError HP_Server_GetLastErrorDesc HP_Server_GetListenAddress HP_Server_GetLocalAddress HP_Server_GetMaxConnectionCount HP_Server_GetOnSendSyncPolicy HP_Server_GetPendingDataLength HP_Server_GetRemoteAddress HP_Server_GetReuseAddressPolicy HP_Server_GetSendPolicy HP_Server_GetSilencePeriod HP_Server_GetState HP_Server_GetWorkerThreadCount HP_Server_HasStarted HP_Server_IsConnected HP_Server_IsMarkSilence HP_Server_IsPauseReceive HP_Server_IsSecure HP_Server_PauseReceive HP_Server_Send HP_Server_SendPackets HP_Server_SendPart HP_Server_SetConnectionExtra HP_Server_SetFreeBufferObjHold HP_Server_SetFreeBufferObjPool HP_Server_SetFreeSocketObjHold HP_Server_SetFreeSocketObjLockTime HP_Server_SetFreeSocketObjPool HP_Server_SetMarkSilence HP_Server_SetMaxConnectionCount HP_Server_SetOnSendSyncPolicy HP_Server_SetReuseAddressPolicy HP_Server_SetSendPolicy HP_Server_SetWorkerThreadCount HP_Server_Start HP_Server_Stop HP_Server_Wait HP_Set_FN_Agent_OnClose HP_Set_FN_Agent_OnConnect HP_Set_FN_Agent_OnHandShake HP_Set_FN_Agent_OnPrepareConnect HP_Set_FN_Agent_OnPullReceive HP_Set_FN_Agent_OnReceive HP_Set_FN_Agent_OnSend HP_Set_FN_Agent_OnShutdown HP_Set_FN_Client_OnClose HP_Set_FN_Client_OnConnect HP_Set_FN_Client_OnHandShake HP_Set_FN_Client_OnPrepareConnect HP_Set_FN_Client_OnPullReceive HP_Set_FN_Client_OnReceive HP_Set_FN_Client_OnSend HP_Set_FN_Server_OnAccept HP_Set_FN_Server_OnClose HP_Set_FN_Server_OnHandShake HP_Set_FN_Server_OnPrepareListen HP_Set_FN_Server_OnPullReceive HP_Set_FN_Server_OnReceive HP_Set_FN_Server_OnSend HP_Set_FN_Server_OnShutdown HP_TcpAgent_GetKeepAliveInterval HP_TcpAgent_GetKeepAliveTime HP_TcpAgent_GetSocketBufferSize HP_TcpAgent_SendSmallFile HP_TcpAgent_SetKeepAliveInterval HP_TcpAgent_SetKeepAliveTime HP_TcpAgent_SetSocketBufferSize HP_TcpClient_GetKeepAliveInterval HP_TcpClient_GetKeepAliveTime HP_TcpClient_GetSocketBufferSize HP_TcpClient_SendSmallFile HP_TcpClient_SetKeepAliveInterval HP_TcpClient_SetKeepAliveTime HP_TcpClient_SetSocketBufferSize HP_TcpPackAgent_GetMaxPackSize HP_TcpPackAgent_GetPackHeaderFlag HP_TcpPackAgent_SetMaxPackSize HP_TcpPackAgent_SetPackHeaderFlag HP_TcpPackClient_GetMaxPackSize HP_TcpPackClient_GetPackHeaderFlag HP_TcpPackClient_SetMaxPackSize HP_TcpPackClient_SetPackHeaderFlag HP_TcpPackServer_GetMaxPackSize HP_TcpPackServer_GetPackHeaderFlag HP_TcpPackServer_SetMaxPackSize HP_TcpPackServer_SetPackHeaderFlag HP_TcpPullAgent_Fetch HP_TcpPullAgent_Peek HP_TcpPullClient_Fetch HP_TcpPullClient_Peek HP_TcpPullServer_Fetch HP_TcpPullServer_Peek HP_TcpServer_GetAcceptSocketCount HP_TcpServer_GetKeepAliveInterval HP_TcpServer_GetKeepAliveTime HP_TcpServer_GetSocketBufferSize HP_TcpServer_GetSocketListenQueue HP_TcpServer_SendSmallFile HP_TcpServer_SetAcceptSocketCount HP_TcpServer_SetKeepAliveInterval HP_TcpServer_SetKeepAliveTime HP_TcpServer_SetSocketBufferSize HP_TcpServer_SetSocketListenQueue HP_ThreadPool_AdjustThreadCount HP_ThreadPool_GetMaxQueueSize HP_ThreadPool_GetQueueSize HP_ThreadPool_GetRejectedPolicy HP_ThreadPool_GetState HP_ThreadPool_GetTaskCount HP_ThreadPool_GetThreadCount HP_ThreadPool_HasStarted HP_ThreadPool_Start HP_ThreadPool_Stop HP_ThreadPool_Submit HP_ThreadPool_Submit_Task HP_ThreadPool_Wait SYS_Base64Decode SYS_Base64Encode SYS_CodePageToUnicode SYS_EnumHostIPAddresses SYS_Free SYS_FreeHostIPAddresses SYS_GbkToUnicode SYS_GbkToUtf8 SYS_GetIPAddress SYS_GetLastError SYS_GetSocketLocalAddress SYS_GetSocketOption SYS_GetSocketRemoteAddress SYS_GuessBase64DecodeBound SYS_GuessBase64EncodeBound SYS_GuessUrlDecodeBound SYS_GuessUrlEncodeBound SYS_HToN64 SYS_IoctlSocket SYS_IsIPAddress SYS_IsLittleEndian SYS_Malloc SYS_NToH64 SYS_Realloc SYS_SSO_DontLinger SYS_SSO_ExclusiveAddressUse SYS_SSO_Linger SYS_SSO_NoDelay SYS_SSO_RecvBuffSize SYS_SSO_RecvTimeOut SYS_SSO_ReuseAddress SYS_SSO_SendBuffSize SYS_SSO_SendTimeOut SYS_SetSocketOption SYS_SwapEndian16 SYS_SwapEndian32 SYS_UnicodeToCodePage SYS_UnicodeToGbk SYS_UnicodeToUtf8 SYS_UrlDecode SYS_UrlEncode SYS_Utf8ToGbk SYS_Utf8ToUnicode SYS_WSAGetLastError SYS_WSAIoctl _Create_HP_SocketTaskObj@32 _Create_HP_TcpAgent@4 _Create_HP_TcpAgentListener@0 _Create_HP_TcpClient@4 _Create_HP_TcpClientListener@0 _Create_HP_TcpPackAgent@4 _Create_HP_TcpPackAgentListener@0 _Create_HP_TcpPackClient@4 _Create_HP_TcpPackClientListener@0 _Create_HP_TcpPackServer@4 _Create_HP_TcpPackServerListener@0 _Create_HP_TcpPullAgent@4 _Create_HP_TcpPullAgentListener@0 _Create_HP_TcpPullClient@4 _Create_HP_TcpPullClientListener@0 _Create_HP_TcpPullServer@4 _Create_HP_TcpPullServerListener@0 _Create_HP_TcpServer@4 _Create_HP_TcpServerListener@0 _Create_HP_ThreadPool@0 _Destroy_HP_SocketTaskObj@4 _Destroy_HP_TcpAgent@4 _Destroy_HP_TcpAgentListener@4 _Destroy_HP_TcpClient@4 _Destroy_HP_TcpClientListener@4 _Destroy_HP_TcpPackAgent@4 _Destroy_HP_TcpPackAgentListener@4 _Destroy_HP_TcpPackClient@4 _Destroy_HP_TcpPackClientListener@4 _Destroy_HP_TcpPackServer@4 _Destroy_HP_TcpPackServerListener@4 _Destroy_HP_TcpPullAgent@4 _Destroy_HP_TcpPullAgentListener@4 _Destroy_HP_TcpPullClient@4 _Destroy_HP_TcpPullClientListener@4 _Destroy_HP_TcpPullServer@4 _Destroy_HP_TcpPullServerListener@4 _Destroy_HP_TcpServer@4 _Destroy_HP_TcpServerListener@4 _Destroy_HP_ThreadPool@4 _HP_Agent_Connect@16 _HP_Agent_ConnectWithExtra@20 _HP_Agent_ConnectWithExtraAndLocalAddressPort@28 _HP_Agent_ConnectWithExtraAndLocalPort@24 _HP_Agent_ConnectWithLocalAddress@20 _HP_Agent_ConnectWithLocalPort@20 _HP_Agent_Disconnect@12 _HP_Agent_DisconnectLongConnections@12 _HP_Agent_DisconnectSilenceConnections@12 _HP_Agent_GetAllConnectionIDs@12 _HP_Agent_GetConnectPeriod@12 _HP_Agent_GetConnectionCount@4 _HP_Agent_GetConnectionExtra@12 _HP_Agent_GetFreeBufferObjHold@4 _HP_Agent_GetFreeBufferObjPool@4 _HP_Agent_GetFreeSocketObjHold@4 _HP_Agent_GetFreeSocketObjLockTime@4 _HP_Agent_GetFreeSocketObjPool@4 _HP_Agent_GetLastError@4 _HP_Agent_GetLastErrorDesc@4 _HP_Agent_GetLocalAddress@20 _HP_Agent_GetMaxConnectionCount@4 _HP_Agent_GetOnSendSyncPolicy@4 _HP_Agent_GetPendingDataLength@12 _HP_Agent_GetRemoteAddress@20 _HP_Agent_GetRemoteHost@20 _HP_Agent_GetReuseAddressPolicy@4 _HP_Agent_GetSendPolicy@4 _HP_Agent_GetSilencePeriod@12 _HP_Agent_GetState@4 _HP_Agent_GetWorkerThreadCount@4 _HP_Agent_HasStarted@4 _HP_Agent_IsConnected@8 _HP_Agent_IsMarkSilence@4 _HP_Agent_IsPauseReceive@12 _HP_Agent_IsSecure@4 _HP_Agent_PauseReceive@12 _HP_Agent_Send@16 _HP_Agent_SendPackets@16 _HP_Agent_SendPart@20 _HP_Agent_SetConnectionExtra@12 _HP_Agent_SetFreeBufferObjHold@8 _HP_Agent_SetFreeBufferObjPool@8 _HP_Agent_SetFreeSocketObjHold@8 _HP_Agent_SetFreeSocketObjLockTime@8 _HP_Agent_SetFreeSocketObjPool@8 _HP_Agent_SetMarkSilence@8 _HP_Agent_SetMaxConnectionCount@8 _HP_Agent_SetOnSendSyncPolicy@8 _HP_Agent_SetReuseAddressPolicy@8 _HP_Agent_SetSendPolicy@8 _HP_Agent_SetWorkerThreadCount@8 _HP_Agent_Start@12 _HP_Agent_Stop@4 _HP_Agent_Wait@8 _HP_Client_GetConnectionID@4 _HP_Client_GetExtra@4 _HP_Client_GetFreeBufferPoolHold@4 _HP_Client_GetFreeBufferPoolSize@4 _HP_Client_GetLastError@4 _HP_Client_GetLastErrorDesc@4 _HP_Client_GetLocalAddress@16 _HP_Client_GetPendingDataLength@8 _HP_Client_GetRemoteHost@16 _HP_Client_GetReuseAddressPolicy@4 _HP_Client_GetState@4 _HP_Client_HasStarted@4 _HP_Client_IsConnected@4 _HP_Client_IsPauseReceive@8 _HP_Client_IsSecure@4 _HP_Client_PauseReceive@8 _HP_Client_Send@12 _HP_Client_SendPackets@12 _HP_Client_SendPart@16 _HP_Client_SetExtra@8 _HP_Client_SetFreeBufferPoolHold@8 _HP_Client_SetFreeBufferPoolSize@8 _HP_Client_SetReuseAddressPolicy@8 _HP_Client_Start@16 _HP_Client_StartWithBindAddress@20 _HP_Client_StartWithBindAddressAndLocalPort@24 _HP_Client_Stop@4 _HP_Client_Wait@8 _HP_GetHPSocketVersion@0 _HP_GetSocketErrorDesc@4 _HP_Server_Disconnect@12 _HP_Server_DisconnectLongConnections@12 _HP_Server_DisconnectSilenceConnections@12 _HP_Server_GetAllConnectionIDs@12 _HP_Server_GetConnectPeriod@12 _HP_Server_GetConnectionCount@4 _HP_Server_GetConnectionExtra@12 _HP_Server_GetFreeBufferObjHold@4 _HP_Server_GetFreeBufferObjPool@4 _HP_Server_GetFreeSocketObjHold@4 _HP_Server_GetFreeSocketObjLockTime@4 _HP_Server_GetFreeSocketObjPool@4 _HP_Server_GetLastError@4 _HP_Server_GetLastErrorDesc@4 _HP_Server_GetListenAddress@16 _HP_Server_GetLocalAddress@20 _HP_Server_GetMaxConnectionCount@4 _HP_Server_GetOnSendSyncPolicy@4 _HP_Server_GetPendingDataLength@12 _HP_Server_GetRemoteAddress@20 _HP_Server_GetReuseAddressPolicy@4 _HP_Server_GetSendPolicy@4 _HP_Server_GetSilencePeriod@12 _HP_Server_GetState@4 _HP_Server_GetWorkerThreadCount@4 _HP_Server_HasStarted@4 _HP_Server_IsConnected@8 _HP_Server_IsMarkSilence@4 _HP_Server_IsPauseReceive@12 _HP_Server_IsSecure@4 _HP_Server_PauseReceive@12 _HP_Server_Send@16 _HP_Server_SendPackets@16 _HP_Server_SendPart@20 _HP_Server_SetConnectionExtra@12 _HP_Server_SetFreeBufferObjHold@8 _HP_Server_SetFreeBufferObjPool@8 _HP_Server_SetFreeSocketObjHold@8 _HP_Server_SetFreeSocketObjLockTime@8 _HP_Server_SetFreeSocketObjPool@8 _HP_Server_SetMarkSilence@8 _HP_Server_SetMaxConnectionCount@8 _HP_Server_SetOnSendSyncPolicy@8 _HP_Server_SetReuseAddressPolicy@8 _HP_Server_SetSendPolicy@8 _HP_Server_SetWorkerThreadCount@8 _HP_Server_Start@12 _HP_Server_Stop@4 _HP_Server_Wait@8 _HP_Set_FN_Agent_OnClose@8 _HP_Set_FN_Agent_OnConnect@8 _HP_Set_FN_Agent_OnHandShake@8 _HP_Set_FN_Agent_OnPrepareConnect@8 _HP_Set_FN_Agent_OnPullReceive@8 _HP_Set_FN_Agent_OnReceive@8 _HP_Set_FN_Agent_OnSend@8 _HP_Set_FN_Agent_OnShutdown@8 _HP_Set_FN_Client_OnClose@8 _HP_Set_FN_Client_OnConnect@8 _HP_Set_FN_Client_OnHandShake@8 _HP_Set_FN_Client_OnPrepareConnect@8 _HP_Set_FN_Client_OnPullReceive@8 _HP_Set_FN_Client_OnReceive@8 _HP_Set_FN_Client_OnSend@8 _HP_Set_FN_Server_OnAccept@8 _HP_Set_FN_Server_OnClose@8 _HP_Set_FN_Server_OnHandShake@8 _HP_Set_FN_Server_OnPrepareListen@8 _HP_Set_FN_Server_OnPullReceive@8 _HP_Set_FN_Server_OnReceive@8 _HP_Set_FN_Server_OnSend@8 _HP_Set_FN_Server_OnShutdown@8 _HP_TcpAgent_GetKeepAliveInterval@4 _HP_TcpAgent_GetKeepAliveTime@4 _HP_TcpAgent_GetSocketBufferSize@4 _HP_TcpAgent_SendSmallFile@20 _HP_TcpAgent_SetKeepAliveInterval@8 _HP_TcpAgent_SetKeepAliveTime@8 _HP_TcpAgent_SetSocketBufferSize@8 _HP_TcpClient_GetKeepAliveInterval@4 _HP_TcpClient_GetKeepAliveTime@4 _HP_TcpClient_GetSocketBufferSize@4 _HP_TcpClient_SendSmallFile@16 _HP_TcpClient_SetKeepAliveInterval@8 _HP_TcpClient_SetKeepAliveTime@8 _HP_TcpClient_SetSocketBufferSize@8 _HP_TcpPackAgent_GetMaxPackSize@4 _HP_TcpPackAgent_GetPackHeaderFlag@4 _HP_TcpPackAgent_SetMaxPackSize@8 _HP_TcpPackAgent_SetPackHeaderFlag@8 _HP_TcpPackClient_GetMaxPackSize@4 _HP_TcpPackClient_GetPackHeaderFlag@4 _HP_TcpPackClient_SetMaxPackSize@8 _HP_TcpPackClient_SetPackHeaderFlag@8 _HP_TcpPackServer_GetMaxPackSize@4 _HP_TcpPackServer_GetPackHeaderFlag@4 _HP_TcpPackServer_SetMaxPackSize@8 _HP_TcpPackServer_SetPackHeaderFlag@8 _HP_TcpPullAgent_Fetch@16 _HP_TcpPullAgent_Peek@16 _HP_TcpPullClient_Fetch@12 _HP_TcpPullClient_Peek@12 _HP_TcpPullServer_Fetch@16 _HP_TcpPullServer_Peek@16 _HP_TcpServer_GetAcceptSocketCount@4 _HP_TcpServer_GetKeepAliveInterval@4 _HP_TcpServer_GetKeepAliveTime@4 _HP_TcpServer_GetSocketBufferSize@4 _HP_TcpServer_GetSocketListenQueue@4 _HP_TcpServer_SendSmallFile@20 _HP_TcpServer_SetAcceptSocketCount@8 _HP_TcpServer_SetKeepAliveInterval@8 _HP_TcpServer_SetKeepAliveTime@8 _HP_TcpServer_SetSocketBufferSize@8 _HP_TcpServer_SetSocketListenQueue@8 _HP_ThreadPool_AdjustThreadCount@8 _HP_ThreadPool_GetMaxQueueSize@4 _HP_ThreadPool_GetQueueSize@4 _HP_ThreadPool_GetRejectedPolicy@4 _HP_ThreadPool_GetState@4 _HP_ThreadPool_GetTaskCount@4 _HP_ThreadPool_GetThreadCount@4 _HP_ThreadPool_HasStarted@4 _HP_ThreadPool_Start@20 _HP_ThreadPool_Stop@8 _HP_ThreadPool_Submit@16 _HP_ThreadPool_Submit_Task@12 _HP_ThreadPool_Wait@8 _SYS_Base64Decode@16 _SYS_Base64Encode@16 _SYS_CodePageToUnicode@16 _SYS_EnumHostIPAddresses@16 _SYS_Free@4 _SYS_FreeHostIPAddresses@4 _SYS_GbkToUnicode@12 _SYS_GbkToUtf8@12 _SYS_GetIPAddress@16 _SYS_GetLastError@0 _SYS_GetSocketLocalAddress@16 _SYS_GetSocketOption@20 _SYS_GetSocketRemoteAddress@16 _SYS_GuessBase64DecodeBound@8 _SYS_GuessBase64EncodeBound@4 _SYS_GuessUrlDecodeBound@8 _SYS_GuessUrlEncodeBound@8 _SYS_HToN64@8 _SYS_IoctlSocket@12 _SYS_IsIPAddress@8 _SYS_IsLittleEndian@0 _SYS_Malloc@4 _SYS_NToH64@8 _SYS_Realloc@8 _SYS_SSO_DontLinger@8 _SYS_SSO_ExclusiveAddressUse@8 _SYS_SSO_Linger@12 _SYS_SSO_NoDelay@8 _SYS_SSO_RecvBuffSize@8 _SYS_SSO_RecvTimeOut@8 _SYS_SSO_ReuseAddress@8 _SYS_SSO_SendBuffSize@8 _SYS_SSO_SendTimeOut@8 _SYS_SetSocketOption@20 _SYS_SwapEndian16@4 _SYS_SwapEndian32@4 _SYS_UnicodeToCodePage@16 _SYS_UnicodeToGbk@12 _SYS_UnicodeToUtf8@12 _SYS_UrlDecode@16 _SYS_UrlEncode@16 _SYS_Utf8ToGbk@12 _SYS_Utf8ToUnicode@12 _SYS_WSAGetLastError@0 _SYS_WSAIoctl@28

Sharing

General

Malware Config

Signatures

File Explorer

41a27011f6119e9b68373e6fa057c2b1fccc1effbc4a5df989c2c02a83996983

kernel32

user32

shlwapi

winmm

ws2_32

generic