Sample details: ee2d6e1d976a3a92fb1c2524278922ae --

Hashes
MD5: ee2d6e1d976a3a92fb1c2524278922ae
SHA1: b5cb931c178ae23145d94125c80784e8db19ae69
SHA256: d3db1e56360b25e7f36abb822e03c18d23a19a9b5f198e16c16e06785fc8c5fa
SSDEEP: 3072:0AR4j07EsMYGkIiF74OF3EaH0Yh2wfREJP2zFZ:0AR4sikI28OF3Ey2wdFZ
Details
File Type: PE32
Yara Hits
YRP/Visual_Cpp_2005_DLL_Microsoft | YRP/Visual_Cpp_2003_DLL_Microsoft | YRP/IsPE32 | YRP/IsDLL | YRP/IsWindowsGUI | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/network_tcp_listen | YRP/network_tcp_socket | YRP/win_mutex | YRP/win_registry | YRP/win_files_operation | YRP/Str_Win32_Winsock2_Library |
Parent Files
ac22586c7643432adf8ccdf388e8ba66
Source
http://mine.zarabotaibitok.ru/Downloads/Rundll/cnli-0.dll
http://host.gomencom.website/Downloads/Rundll/cnli-0.dll
Strings
		!This program cannot be run in DOS mode.
0FRich
`.rdata
@.data
.reloc
|$ ~uU
u#;D$ u,
T$ RVW
D$ RPV
T$ QRV
C;\$,~
L$4RQP
tAVWUP
D$$vk;
t29?t0U
l$,UPVQWRS
D$ PWSU
WUVPSRQ
D$(RPVWUSQ
|H9t$$tB
1_^][Y
t$@t VP
D$,PQR
L$<QUSR
D$<PUSR
s+Jt Jt
t3PVVVV
O(Ut Qj
D$ PVW
t9UWhD%
tRSWRSj
tRSWRSj
T$<Rj(V
D$<PjHW
D$PPjHV
T$<Rj(V
D$<PjHV
D$PPjHW
\t ht%
<G\t h
QPPPhx&
T$ WQRVP
L$ QWR
T$.WUf
+t#-l'
L$$UWR
T$LQRP
D$8_^]
URPQQh
v	N+D$
UQPXY]Y[
%d.%d.%d.%d
%02x:%02x:%02x:%02x:%02x:%02x
%x:%x:%x:%x:%x:%x:%x:%x%c
%d.%d.%d.%d%c
ProgramFilesDir
program
CommonFilesDir
Software\Microsoft\Windows\CurrentVersion
common
windows
system
255.255.255.255
```hhh
xppwpp
CreateFileA
CreateFileW
CloseHandle
GetFileAttributesA
GetFileAttributesW
FlushFileBuffers
WriteFile
ReadFile
SetEndOfFile
FileTimeToLocalFileTime
GetFileTime
SetFileTime
LocalFileTimeToFileTime
GetFileSize
DeleteFileA
DeleteFileW
MoveFileExA
MoveFileExW
CopyFileA
CopyFileW
FindClose
CreateDirectoryA
CreateDirectoryW
RemoveDirectoryA
RemoveDirectoryW
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetCurrentDirectoryA
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetTempPathW
GetSystemDirectoryW
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetTempPathA
GetSystemDirectoryA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
SetFilePointer
GetLastError
GetSystemTimeAsFileTime
GetTimeZoneInformation
FileTimeToSystemTime
GetLocalTime
SystemTimeToFileTime
CreateThread
GetExitCodeThread
WaitForSingleObject
SetThreadPriority
TerminateThread
GetCurrentThreadId
GetCurrentThread
ExitThread
CreateMutexA
ReleaseMutex
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
CreateEventA
DeleteCriticalSection
ResetEvent
LeaveCriticalSection
EnterCriticalSection
SetEvent
InterlockedDecrement
InterlockedIncrement
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
ResumeThread
GetSystemTime
KERNEL32.dll
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
ADVAPI32.dll
WS2_32.dll
_vsnwprintf
wcschr
_vsnprintf
strchr
malloc
_except_handler3
realloc
strrchr
wcsrchr
wcslen
_stricmp
wcscmp
_wcsicmp
wcsncmp
strncmp
towupper
towlower
toupper
tolower
iswctype
isspace
_snprintf
wcscpy
isdigit
wcstombs
_snwprintf
wcstol
strtok
wcstoul
wcstok
strtoul
sscanf
strstr
memmove
wcsstr
strpbrk
wcspbrk
strncpy
wcsncpy
_wcsnicmp
_strnicmp
_strdup
msvcrt.dll
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
RtlUnwind
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
cnli-0.dll
CNEBlob_append
CNEBlob_appendByte
CNEBlob_appendRandomData
CNEBlob_copy
CNEBlob_createFunc
CNEBlob_createNU32Func
CNEBlob_flushMemorySurplus
CNEBlob_formattedStrAppend
CNEBlob_formattedStrWAppend
CNEBlob_free
CNEBlob_freeBuffer
CNEBlob_increaseAllocatedSize
CNEBlob_initializeFunc
CNEBlob_pop
CNEBlob_remove
CNEBlob_strAppend
CNEBlob_strWAppend
CNEDate_daysInMonth
CNEDate_daysOfYear
CNEDate_getCNEDateDiffFromTimeStampDiff
CNEDate_getCNEDateFromTimeStamp
CNEDate_getCNEDateTimeFromFileTime
CNEDate_getCurrentDate
CNEDate_getCurrentTimeAndDate
CNEDate_getFileTimeFromCNEDateTime
CNEDate_getTimeStamp
CNEDate_getTimeStampFromCNEDate
CNEDate_getTimeZone
CNEDate_isLeapYear
CNEFileIO_dirClose
CNEFileIO_dirCreate
CNEFileIO_dirCreateW
CNEFileIO_dirInstall
CNEFileIO_dirInstallW
CNEFileIO_dirNext
CNEFileIO_dirNextDirectory
CNEFileIO_dirNextEx
CNEFileIO_dirNextExW
CNEFileIO_dirNextW
CNEFileIO_dirOpen
CNEFileIO_dirOpenW
CNEFileIO_dirRemove
CNEFileIO_dirRemoveW
CNEFileIO_dirReset
CNEFileIO_expendFilenameA
CNEFileIO_expendFilenameW
CNEFileIO_fileClose
CNEFileIO_fileCopy
CNEFileIO_fileCopyW
CNEFileIO_fileExists
CNEFileIO_fileExistsW
CNEFileIO_fileFlush
CNEFileIO_fileGetDir
CNEFileIO_fileGetDirExW
CNEFileIO_fileGetDirW
CNEFileIO_fileGetPos
CNEFileIO_fileGetSize
CNEFileIO_fileGetSizeByNameExWWithFileAccess
CNEFileIO_fileGetSizeByNameExWithFileAccess
CNEFileIO_fileGetSizeByNameWWithFileAccess
CNEFileIO_fileGetSizeByNameWithFileAccess
CNEFileIO_fileGetSizeEx
CNEFileIO_fileGetTimesFromHandle
CNEFileIO_fileGetTimesWWithFileAccess
CNEFileIO_fileGetTimesWithFileAccess
CNEFileIO_fileIsOpen
CNEFileIO_fileMap
CNEFileIO_fileMove
CNEFileIO_fileMoveW
CNEFileIO_fileOpen
CNEFileIO_fileOpenExpend
CNEFileIO_fileOpenExpendW
CNEFileIO_fileOpenW
CNEFileIO_fileRead
CNEFileIO_fileReadChar
CNEFileIO_fileSetEndOfFile
CNEFileIO_fileSetPos
CNEFileIO_fileSetPosEx
CNEFileIO_fileSetTimesFromHandle
CNEFileIO_fileSetTimesWWithFileAccess
CNEFileIO_fileSetTimesWithFileAccess
CNEFileIO_fileUnMap
CNEFileIO_fileUnlink
CNEFileIO_fileUnlinkW
CNEFileIO_fileWipe
CNEFileIO_fileWipeExpend
CNEFileIO_fileWipeExpendW
CNEFileIO_fileWipeW
CNEFileIO_fileWrite
CNEFileIO_fileWriteChar
CNEFileIO_fixLongPath
CNEFileIO_freeExpendFilename
CNEFileIO_getPathFromFileSpecW
CNEFileIO_getWorkingDir
CNEFileIO_getWorkingDirW
CNEHeap_CreateEmptyFunc
CNEHeap_CreateFunc
CNEHeap_Empty
CNEHeap_FlushMemorySurplus
CNEHeap_Free
CNEHeap_HeadPeek
CNEHeap_Pop
CNEHeap_Push
CNELAList_allocateFromList
CNELAList_create
CNELAList_free
CNELAList_freeToList
CNEListAddBack
CNEListAddFront
CNEListCreate_func
CNEListFree
CNEListGetBack
CNEListGetFront
CNEListInit_func
CNEListIsEmpty
CNEListIterator_equal
CNEListIterator_get
CNEListIterator_getPrev
CNEListIterator_getPrevReference
CNEListIterator_getReference
CNEListIterator_next
CNEListIterator_notEqual
CNEListIterator_prev
CNEListMap
CNEListPeekBack
CNEListPeekFront
CNEList_at
CNEList_begin
CNEList_clear
CNEList_clearWithDestructor
CNEList_destroy
CNEList_destroyWithDestructor
CNEList_end
CNEList_erase
CNEList_filter
CNEList_filterWithContext
CNEList_find
CNEList_findWithContext
CNEList_forEach
CNEList_forEachWithContext
CNEList_insert
CNEList_isEmpty
CNEList_peekBack
CNEList_peekFront
CNEList_popBack
CNEList_popFront
CNEList_pushBack
CNEList_pushFront
CNEList_size
CNEList_sort
CNEMem_cleanNClear
CNEMem_cleanNClearNDestroyPointer
CNENetwork_Checksum16
CNENetwork_CreateEthernetHeader
CNENetwork_CreateIcmpHeader
CNENetwork_CreateIpHeader
CNENetwork_CreateUdpHeader
CNENetwork_DisplayEthernetHeader
CNENetwork_DisplayIcmpHeader
CNENetwork_DisplayIpHeader
CNENetwork_DisplayUdpHeader
CNENetwork_IsIpValidA
CNENetwork_IsIpValidW
CNENetwork_IsPortValidA
CNENetwork_IsPortValidW
CNENetwork_addrToWPIDFunc
CNENetwork_addrToWPIDWFunc
CNENetwork_ipToAddr
CNENetwork_ipToAddrW
CNENetwork_stripMACSpacers
CNENetwork_wpidToAddr
CNEPqs_CreateEmptyFunc
CNEPqs_CreateFunc
CNEPqs_Empty
CNEPqs_FlushMemorySurplus
CNEPqs_Free
CNEPqs_HeadPeek
CNEPqs_Pop
CNEPqs_Push
CNERBTree_createTreeFunc
CNERBTree_delete
CNERBTree_deleteNode
CNERBTree_destroyTree
CNERBTree_executeNodeEx
CNERBTree_getFirst
CNERBTree_getLast
CNERBTree_getNext
CNERBTree_getPrev
CNERBTree_insert
CNERBTree_retrieve
CNERBTree_retrieveNode
CNESocket_accept
CNESocket_addressToIPString
CNESocket_bind
CNESocket_cleanup
CNESocket_close
CNESocket_connect
CNESocket_create
CNESocket_disable
CNESocket_fastAccept
CNESocket_fastConnect
CNESocket_getLocal
CNESocket_getNative
CNESocket_getOSError
CNESocket_getRemote
CNESocket_getSocketOption
CNESocket_getSocketOption_bCast
CNESocket_getSocketOption_exclusive
CNESocket_getSocketOption_keepAlive
CNESocket_getSocketOption_linger
CNESocket_getSocketOption_noDelay
CNESocket_getSocketOption_noLinger
CNESocket_getSocketOption_recvBuff
CNESocket_getSocketOption_reuseAddr
CNESocket_getSocketOption_sendBuff
CNESocket_getSocketOption_ttl
CNESocket_getString
CNESocket_ipStringToAddress
CNESocket_isSocketReady
CNESocket_isValidIP
CNESocket_listen
CNESocket_lookupIP
CNESocket_lookupName
CNESocket_peek
CNESocket_putString
CNESocket_recv
CNESocket_recvExact
CNESocket_recvFrom
CNESocket_select
CNESocket_selectEx
CNESocket_send
CNESocket_sendExpect
CNESocket_sendTo
CNESocket_setBlockingMode
CNESocket_setLineEnding
CNESocket_setSocketOption
CNESocket_setSocketOption_bCast
CNESocket_setSocketOption_exclusive
CNESocket_setSocketOption_keepAlive
CNESocket_setSocketOption_linger
CNESocket_setSocketOption_noDelay
CNESocket_setSocketOption_noLinger
CNESocket_setSocketOption_recvBuff
CNESocket_setSocketOption_reuseAddr
CNESocket_setSocketOption_sendBuff
CNESocket_setSocketOption_ttl
CNESocket_setThrottle
CNESocket_shutdown
CNESocket_startup
CNEStaticArray_clear
CNEStaticArray_createFunc
CNEStaticArray_delete
CNEStaticArray_forEach
CNEStaticArray_forEachWithArgument
CNEStaticArray_get
CNEStaticArray_getReference
CNEStaticArray_push
CNEStaticArray_remove
CNEStaticArray_removeAt
CNEStaticArray_removeIf
CNEStaticArray_removeIfWithArgument
CNEStaticArray_set
CNEStaticArray_size
CNEString_VAFree
CNEString_append
CNEString_appendA
CNEString_appendFunc
CNEString_appendW
CNEString_compare
CNEString_compareA
CNEString_compareCSStringFunc
CNEString_compareFunc
CNEString_compareIgnoreCase
CNEString_compareIgnoreCaseA
CNEString_compareIgnoreCaseW
CNEString_compareW
CNEString_concat
CNEString_copy
CNEString_copySafeAFunc
CNEString_copySafeWFunc
CNEString_createA
CNEString_createFunc
CNEString_createW
CNEString_endsWith
CNEString_endsWithA
CNEString_endsWithW
CNEString_findLastCharacterIndexWith
CNEString_findStringInBufferFunc
CNEString_free
CNEString_getStringBufferA
CNEString_getStringBufferW
CNEString_getStringType
CNEString_indexOfStringA
CNEString_indexOfStringFunc
CNEString_indexOfStringW
CNEString_lastIndexOfStringA
CNEString_lastIndexOfStringW
CNEString_length
CNEString_lengthSafeA
CNEString_lengthSafeW
CNEString_radix10itoa
CNEString_remove
CNEString_replaceAll
CNEString_replaceAllA
CNEString_replaceAllFunc
CNEString_replaceAllW
CNEString_split
CNEString_splitA
CNEString_splitFunc
CNEString_splitW
CNEString_sprintf
CNEString_sprintfA
CNEString_sprintfW
CNEString_startsWith
CNEString_startsWithA
CNEString_startsWithFunc
CNEString_startsWithW
CNEString_strToLower
CNEString_strToUpper
CNEString_strWToLower
CNEString_strWToUpper
CNEString_substring
CNEString_toLower
CNEString_toLowerUpperCaseFunc
CNEString_toStringA
CNEString_toStringFunc
CNEString_toStringW
CNEString_toUpper
CNEString_trim
CNEString_wideCharacterStringToSingleByteString
CNESystemWin_getMicroSecondsSinceEpoch
CNESystemWin_sleep
CNEThread_TlsAlloc
CNEThread_TlsFree
CNEThread_TlsGetValue
CNEThread_TlsSetValue
CNEThread_cvBroadcast
CNEThread_cvCreate
CNEThread_cvDestroy
CNEThread_cvSignal
CNEThread_cvTimedWait
CNEThread_cvWait
CNEThread_eventCreate
CNEThread_eventDestroy
CNEThread_eventSet
CNEThread_eventUnSet
CNEThread_eventWait
CNEThread_getCurrentThread
CNEThread_inverseSemaphoreCreate
CNEThread_inverseSemaphoreGetHolderCount
CNEThread_inverseSemaphoreHold
CNEThread_inverseSemaphoreRelease
CNEThread_isCurrentThread
CNEThread_mutexCreateFunc
CNEThread_mutexDestroy
CNEThread_mutexHold
CNEThread_mutexHoldNoBlock
CNEThread_mutexRelease
CNEThread_priorityTable
CNEThread_rwLockCreate
CNEThread_rwLockDestroy
CNEThread_rwLockLock
CNEThread_rwLockUnlock
CNEThread_semaphoreCreate
CNEThread_semaphoreDestroy
CNEThread_semaphorePost
CNEThread_semaphoreWait
CNEThread_semaphoreWaitNoBlock
CNEThread_threadCancel
CNEThread_threadClose
CNEThread_threadCreate
CNEThread_threadCreateWithPriority
CNEThread_threadExit
CNEThread_threadJoin
CNEThread_threadSetPriority
CNEVector_At
CNEVector_Capacity
CNEVector_Clear
CNEVector_CreateEmptyFunc
CNEVector_CreateFunc
CNEVector_Erase
CNEVector_EraseFast
CNEVector_FlushMemorySurplus
CNEVector_Free
CNEVector_Get
CNEVector_GetFast
CNEVector_PopBack
CNEVector_PushBack
CNEVector_Resize
CNEVector_Size
CNEVector_SizeType
CNEVector_Swap
CNEVirtualArray_do
CNEVirtualArray_doWithParam
CNEVirtualArray_findFirstElementWith
CNEVirtualArray_findLastElementWith
CNEVirtualArray_freeAllElements
CNEVirtualArray_freeArrayPointersAndElements
CNEVirtualArray_freeVA
CNEVirtualArray_freeVAAndElements
CNEVirtualArray_getElementAt
CNEVirtualArray_getLastElement
CNEVirtualArray_getSize
CNEVirtualArray_increasePreAllocateArraySize
CNEVirtualArray_insertAtIndex
CNEVirtualArray_pop
CNEVirtualArray_positionOfFirstElementFoundWith
CNEVirtualArray_positionOfLastElementFoundWith
CNEVirtualArray_push
CNEVirtualArray_removeAllElementsFoundWith
CNEVirtualArray_removeAtIndex
CNEVirtualArray_removeFirstElementFoundWith
CNEVirtualArray_search
CNEVirtualArray_setElementAt
CNEVirtualArray_sort
CNEVirtualArray_swapElements
CNE_allocateCleanMemoryFunc
CNE_compareMemoryFunc
CNE_poisonAllocatedMemoryFunc
CNE_poisonFreeMemoryFunc
CNE_reallocateCleanMemoryFunc
CNE_reallocateMemoryFunc
SafeVirtualArray_GetArrayFromBlob
SafeVirtualArray_GetBlobFromArray
SafeVirtualArray_GetBlobFromStaticElems
SafeVirtualArray_createFunc
SafeVirtualArray_do
SafeVirtualArray_doWithParam
SafeVirtualArray_findFirstElementWith
SafeVirtualArray_findLastElementWith
SafeVirtualArray_freeAllElements
SafeVirtualArray_freeArrayPointersAndElements
SafeVirtualArray_freeVA
SafeVirtualArray_freeVAAndElements
SafeVirtualArray_getElementAt
SafeVirtualArray_getLastElement
SafeVirtualArray_getLock
SafeVirtualArray_getSize
SafeVirtualArray_getVAAndLock
SafeVirtualArray_increasePreAllocateArraySize
SafeVirtualArray_initializeFunc
SafeVirtualArray_insertAtIndex
SafeVirtualArray_pop
SafeVirtualArray_positionOfFirstElementFoundWith
SafeVirtualArray_positionOfLastElementFoundWith
SafeVirtualArray_push
SafeVirtualArray_pushAndBlob
SafeVirtualArray_pushAndBlobStatic
SafeVirtualArray_releaseLock
SafeVirtualArray_removeAllElementsFoundWith
SafeVirtualArray_removeAndBlob
SafeVirtualArray_removeAndBlobStatic
SafeVirtualArray_removeAtIndex
SafeVirtualArray_removeFirstElementFoundWith
SafeVirtualArray_search
SafeVirtualArray_setElementAt
SafeVirtualArray_sort
SafeVirtualArray_swapElements
SafeVirtualArray_updateElement
VAMarshal_GetArrayFromBlob
VAMarshal_GetBlobFromArray
VAMarshal_GetBlobFromStaticElems
VirtualArray_createFunc
VirtualArray_initializeFunc
VirtualBuffer_addBytesToBuffer
VirtualBuffer_freeBuffer
VirtualBuffer_initializeBuffer
VirtualBuffer_makeRoomIfNeeded
byteSwapLong
byteSwapLongLong
byteSwapShort
162V2[2
2f3k3C:m;
44Q4j5
55:^;};
6@7L7d7k7
1@1I1P1\1f1
0)090[0{0
7C8j8{8
:$;9;G;c;
>+>C>n>
? ?,?2?;?B?Q?
1070G0M0V0]0l0
1!141F1S1
2'242|2
4?5F5S5
7%7<7C7`7s7
:$:O:\:
2B2i2s2
8T8g8t8
;+;E;R;t;
<#<7<E<R<s<
4080<0@0D0H0
191I1`4k4
272t2{2
3D4W4a4
485C5a5h5
7 7$7(7w7
7A8M8Y9h:p:
>8>@>J>U>k>t>
?$?*?>?D?Q?a?v?
2<2B2H2N2T2Z2a2h2o2v2}2
5W5\5s5
3 3,303<3@3L3P3\3`3l3p3|3
4 4,404<4@4L4P4\4`4l4p4|4
5 5,505<5@5
8 8(8,84888T8X8