6bf0f32f86b39aa1d42a3a747500fa42b3ad31f7e7c57ba964ce240244d68644

Sharing

Copy URL Twitter E-mail

General

Target

6bf0f32f86b39aa1d42a3a747500fa42b3ad31f7e7c57ba964ce240244d68644
Size

754KB
MD5

31e2241c7b562004bb34c81e9d868920
SHA1

ae24bbb0bd49d317287668c49cab326ebd75a47f
SHA256

6bf0f32f86b39aa1d42a3a747500fa42b3ad31f7e7c57ba964ce240244d68644
SHA512

06920da6ed444f7a1ad00b6168f901820d7ab9b938d2aac59497870d37e888551dd221e22eedc379bb0d52c9fabb15061fe09b47ff158d5a213e1a29224ab3e7
SSDEEP

12288:h/ROaY6sIQLbf9Kpht16ggll4fsyRdCfp6P3agJWVliEZKPKXHGZdlXWP:h/Rl3sIQLrIph7Iyq6CMqcfPKXHqX8

Score

N/A

Malware Config

Signatures

Files

6bf0f32f86b39aa1d42a3a747500fa42b3ad31f7e7c57ba964ce240244d68644
.exe windows x86

a56b82a25cfd25900a42e21834073cc9

Code Sign

41:79:ea:1b:ec:59:d4:ca:7e:66:86:28:32:55:54:80
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

24/09/2014, 00:00

Not After

24/09/2015, 23:59

Subject

CN=Evgen Kugitko,OU=Individual Developer,O=No Organization Affiliation,L=Kiev,ST=Kiev,C=UA

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

30:64:b1:9e:58:32:d4:be:f9:ba:c1:65:fe:cc:59:dc:d3:08:57:14
Signer

Actual PE Digest

30:64:b1:9e:58:32:d4:be:f9:ba:c1:65:fe:cc:59:dc:d3:08:57:14

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Evgen Kugitko,OU=Individual Developer,O=No Organization Affiliation,L=Kiev,ST=Kiev,C=UA

04/11/2022, 15:46
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
lstrcpyA
lstrcmpiA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualAlloc
Sleep
SizeofResource
SetThreadLocale
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVolumeInformationA
GetVersionExA
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetTempPathA
GetSystemInfo
GetStringTypeExA
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileSize
GetExitCodeThread
GetDriveTypeA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetComputerNameA
GetCPInfo
GetACP
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageA
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
ExitProcess
EnumCalendarInfoA
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringA
CloseHandle
Sleep
CreateWaitableTimerW
ReplaceFile
SetComputerNameExW
CreateJobObjectA
ReadConsoleInputExW
FindNextVolumeW
GetExpandedNameA
LZStart
CallNamedPipeW
RegisterWowExec
LocalCompact
LockResource
BuildCommDCBAndTimeoutsW
SetCurrentDirectoryW
SetFileAttributesW
WriteConsoleOutputAttribute
TryEnterCriticalSection
PeekNamedPipe
lstrcpynA
GetDefaultCommConfigW
GetEnvironmentStrings
SetVolumeLabelA
FindFirstChangeNotificationW
ReadFileScatter
LoadResource
FileTimeToSystemTime
ReadFile
GetProcessPriorityBoost
RtlUnwind
ConvertDefaultLocale
CreateFileW
GetComputerNameA
GetCurrentDirectoryW
InterlockedExchange
TerminateJobObject
EnumLanguageGroupLocalesA
GetDriveTypeW
ChangeTimerQueueTimer
GetThreadPriorityBoost
GetDiskFreeSpaceW
BackupSeek
lstrcmpA
IsBadHugeWritePtr
GetDiskFreeSpaceA
ReleaseActCtx
CreateDirectoryW
SetCommBreak
GetSystemInfo
CreateEventW
GetNativeSystemInfo
CancelWaitableTimer
FindAtomA
GetLocaleInfoW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
InitializeCriticalSection
SetTimeZoneInformation
VirtualLock
SetProcessPriorityBoost
CreateHardLinkA
ReadConsoleOutputCharacterA
SetCommBreak
EndUpdateResourceW
GetFileAttributesW
InterlockedIncrement
GetVolumePathNamesForVolumeNameW
FatalAppExitA
ReadConsoleOutputAttribute
SetFileShortNameA
CreateWaitableTimerW
CreateEventA
CreateMailslotW
GlobalGetAtomNameW
EnumResourceNamesA
CreateDirectoryW
SetProcessWorkingSetSize
GetNumberOfConsoleInputEvents
DeactivateActCtx
SetNamedPipeHandleState
LocalSize
GetCommState
lstrcmpiA
RegisterWaitForSingleObject
CancelIo
GetModuleHandleA
CloseProfileUserMapping
ActivateActCtx
CopyFileExA
Heap32ListFirst
DeleteTimerQueue
GetExitCodeProcess
CancelTimerQueueTimer
ReplaceFileW
GetComputerNameExW
TlsFree
SetSystemTimeAdjustment
LocalFlags
ReadFile
EnumSystemCodePagesA
DebugBreak
GetEnvironmentStringsA
GetProcessWorkingSetSize
MulDiv
HeapLock
GetProcessAffinityMask
GetComputerNameA
IsBadReadPtr
GetNamedPipeHandleStateW
GetModuleFileNameA
SetLocaleInfoW
GetShortPathNameW
OpenJobObjectA
OpenEventW
HeapAlloc
GlobalMemoryStatusEx
FreeEnvironmentStringsA
PeekNamedPipe
GetDiskFreeSpaceW
FormatMessageA
GetVolumeNameForVolumeMountPointW
GetOverlappedResult
GetConsoleCP
lstrcpyA
GetTimeFormatA
SetThreadContext
FileTimeToDosDateTime
PeekConsoleInputA
OpenWaitableTimerA
SetComputerNameA
GlobalDeleteAtom
EndUpdateResourceW
CreateNamedPipeW
WriteProfileStringA
Heap32First
GetCurrentConsoleFont
GetCurrentDirectoryW
GetVolumePathNamesForVolumeNameA
GetVolumePathNamesForVolumeNameW
GetLongPathNameA
LZClose
lstrcmpi
GetBinaryTypeA
InterlockedCompareExchange
GetConsoleHardwareState
FindResourceExA
CopyFileExW
DelayLoadFailureHook
GetConsoleDisplayMode
CreateProcessA
GetTapeParameters
QueryPerformanceCounter
SetFileAttributesA
GetSystemTimeAsFileTime
SetThreadLocale
GetDefaultCommConfigA
AllocConsole
WaitForDebugEvent
SetWaitableTimer
SetFilePointerEx
WritePrivateProfileSectionW
GetLongPathNameW
IsBadStringPtrW
FindNextChangeNotification
LocalLock
GetLastError
IsDBCSLeadByte
ShowConsoleCursor
CreateEventA
FindFirstFileExW
DnsHostnameToComputerNameW
ResetEvent
QueryActCtxW
WaitForSingleObject
FindResourceW
HeapValidate
FindActCtxSectionStringW
SetCurrentDirectoryW
UnhandledExceptionFilter
MapUserPhysicalPages
CreateTimerQueue
GlobalAddAtomA
CancelWaitableTimer
HeapQueryInformation
GetFileAttributesW
CreateJobObjectA
GetEnvironmentStrings
GetCalendarInfoW
lstrlen
GetFullPathNameA
OpenEventA
GetGeoInfoA
GetProfileIntW
TerminateJobObject
GetConsoleCharType
FindNextFileA
CreateDirectoryExW
BackupWrite
QueryInformationJobObject
IsValidLocale
TerminateThread
FreeEnvironmentStringsW
lstrcpy
WriteProfileSectionA
GetEnvironmentStringsW
GetVersion
SystemTimeToFileTime
GetSystemDefaultLangID
RegisterWowExec
RtlFillMemory
UnregisterWait
LoadResource
WriteProfileStringW
TryEnterCriticalSection
GetStringTypeW
QueryDosDeviceA
ReadDirectoryChangesW
CreateThread
Heap32Next
EnumCalendarInfoA
SetFileValidData
WritePrivateProfileStringA
UpdateResourceA
SetCurrentDirectoryA
PrivCopyFileExW
GetThreadLocale
GetFileSize
GetCommModemStatus
ConsoleMenuControl
SetVolumeLabelW
ExpandEnvironmentStringsA
FindCloseChangeNotification
ScrollConsoleScreenBufferW
EnumResourceLanguagesW
CreateJobObjectW
InterlockedDecrement
FreeConsole
RemoveDirectoryW
GetConsoleOutputCP
GetPrivateProfileStringW
SetCommTimeouts
GlobalWire
SetInformationJobObject
SetCriticalSectionSpinCount
GetStringTypeExA
GetCommConfig
VerLanguageNameA
IsValidCodePage
EnumDateFormatsExA
GetCommProperties
DeleteCriticalSection
lstrcpynW
SetCalendarInfoW
GlobalSize
RtlCaptureContext
SetEnvironmentVariableA
SetVolumeMountPointA
CreateTimerQueueTimer
CreateProcessInternalA
GetFileInformationByHandle
GetEnvironmentVariableA
RestoreLastError
EnumTimeFormatsA
GetProfileSectionA
IsBadStringPtrA
ReadConsoleOutputCharacterW
LockResource
SetCalendarInfoA
FindFirstFileA
GetTapeStatus
EnumResourceNamesA
SetFileShortNameW
GetThreadContext
FreeLibrary
GetLogicalDrives
GetStringTypeExW
AllocateUserPhysicalPages
VerifyConsoleIoHandle
GetProcessHeap
GetConsoleMode
CreateConsoleScreenBuffer
GetConsoleFontInfo
lstrcpyn
CompareStringA
SetStdHandle
CreateMailslotW
GetCurrentProcessId
FindClose
CreateFileW
lstrcatA
GetStartupInfoA
lstrcmpW
IsProcessorFeaturePresent
GetPrivateProfileStructA
FlushInstructionCache
FindNextVolumeMountPointW
LocalReAlloc
BuildCommDCBW
LZStart
GlobalUnfix
Sleep
SleepEx
SetProcessWorkingSetSize
GetSystemDefaultLCID
HeapUnlock
GetExpandedNameW
IsProcessInJob
lstrcmpA
SetProcessAffinityMask
SetProcessShutdownParameters
CreatePipe
GetUserDefaultLangID
UnlockFile
GetFileType
TerminateProcess
DosPathToSessionPathA
FindFirstVolumeW
GetThreadTimes
WriteConsoleOutputCharacterW
SetCommState
GlobalFindAtomA
CreateWaitableTimerA
FindFirstChangeNotificationW
CreateActCtxA
CallNamedPipeW
IsBadWritePtr
CreateDirectoryW
FindAtomA
FormatMessageW
GetDiskFreeSpaceExW
GetShortPathNameA
FoldStringA
AddVectoredExceptionHandler
InitializeCriticalSectionAndSpinCount
MoveFileWithProgressA
MoveFileA
GetStdHandle
PrivMoveFileIdentityW
GetCommMask
CreateDirectoryExA
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
LZRead
AddConsoleAliasA
GetPrivateProfileSectionNamesW
SetComputerNameExW
GetWriteWatch
CopyLZFile
GetPrivateProfileStringA
AddAtomW
GetCurrentThread
EnterCriticalSection
VirtualFree
ClearCommError
SetComPlusPackageInstallStatus
CreateMailslotA
InvalidateConsoleDIBits
GlobalUnlock
FoldStringW
EnumResourceLanguagesA
GlobalReAlloc
WaitNamedPipeA
MoveFileW
lstrcmpiW
LocalHandle
GetDateFormatW
GetMailslotInfo
GetFileAttributesA

user32

GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
WindowFromPoint
WinHelpA
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongA
SetCapture
SetActiveWindow
SendMessageA
SendDlgItemMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawEdge
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
AdjustWindowRectEx
ActivateKeyboardLayout
BlockInput
CopyIcon
IsMenu
EnableWindow
IsCharAlphaNumericW
GetComboBoxInfo
GetMenuInfo
MenuWindowProcA
InsertMenuItemW
GetClipboardData
UpdateWindow
CloseWindow
CharPrevA
AnimateWindow
ChangeDisplaySettingsExA
DeleteMenu
GetClipboardFormatNameA
MessageBoxIndirectA
SetProgmanWindow
SetProgmanWindow
OpenInputDesktop
SetWindowPlacement
GetDlgCtrlID
ExitWindowsEx
FlashWindowEx
SetPropW
InsertMenuA
OemToCharW
SetClassWord
IsDialogMessage
GetMenuItemInfoA
CreateCursor
LoadKeyboardLayoutW
GetParent
DialogBoxIndirectParamA
AppendMenuW
CharUpperBuffW
RegisterClipboardFormatA
CopyImage
CreateDialogIndirectParamW
OpenWindowStationW
GetWindowWord
CreateDialogParamA
EqualRect
DefWindowProcW
BroadcastSystemMessageExW
CharNextExA
CharNextExA
LoadCursorA
MapDialogRect
GetTitleBarInfo
LoadKeyboardLayoutA
SendMessageA
MessageBoxW
CreateIconFromResourceEx
BringWindowToTop
UnregisterHotKey
TileWindows
CreateIconIndirect
TileChildWindows
DlgDirSelectExW
BroadcastSystemMessageExW
LoadMenuA
CallWindowProcA
ClipCursor
RegisterClipboardFormatW
AppendMenuW
OpenIcon
GetMenuStringA
GrayStringA
GetFocus
GetDlgItemTextW
SetWindowPos
DrawMenuBarTemp
GetMenuBarInfo
CheckDlgButton
BeginPaint
SetProgmanWindow
MessageBoxTimeoutA
CharLowerBuffA
SetCursorContents
GetProgmanWindow
SendDlgItemMessageW
CallMsgFilterW
GetSysColorBrush
LoadMenuW
SetDebugErrorLevel
BroadcastSystemMessageA
CheckMenuRadioItem
SetDeskWallpaper
KillTimer
GetTabbedTextExtentW
SetScrollRange
SetMenuItemBitmaps
EndMenu
SetKeyboardState
GetClipboardViewer
GetListBoxInfo
GetPropA
GetWindowTextW
IsMenu
SendMessageCallbackA
GetUpdateRgn
SetCaretBlinkTime
EnumThreadWindows
FrameRect
RealGetWindowClassW
ExitWindowsEx
SendInput
EndDialog
GetClipboardFormatNameA
ChangeMenuA
EnumWindowStationsW
UnregisterClassW
OemToCharBuffW
OpenInputDesktop
GetMessageTime
EnumPropsExA
SetCaretPos
GetWindowLongW
AttachThreadInput
CopyIcon
WaitForInputIdle
GetMenu
CloseDesktop
SetSystemCursor
DrawIconEx
RegisterClassExA
wvsprintfW
ValidateRgn
CharPrevA
GetWindowRgnBox
SendNotifyMessageA
GetWindowContextHelpId
MapVirtualKeyA
GetActiveWindow
ScreenToClient
SetFocus
SendMessageCallbackW
GetClassWord
CloseClipboard
GetWindowPlacement
WinHelpA
EnumDisplaySettingsExW
MapDialogRect
DragDetect
DlgDirListA
GetThreadDesktop
SendDlgItemMessageA
IsWindowVisible
SetDlgItemInt
SystemParametersInfoA
DragObject
LoadAcceleratorsW
DrawMenuBar
PostMessageW
ChangeDisplaySettingsW
GetIconInfo
GetScrollRange
MessageBeep
IsRectEmpty
GetKeyboardState
RegisterClassExW
CharUpperW
GetKeyboardLayoutNameW
CharUpperBuffW
SetParent
RegisterDeviceNotificationW
SetMenu
GetCursorPos
ShowCaret
BlockInput
MessageBoxW
CopyRect
EnumDesktopWindows
CascadeChildWindows
InsertMenuItemW
CreateIconFromResource
GetMenuItemInfoA
DlgDirSelectExA
WinHelpW
LoadStringW
UnhookWindowsHook
IsIconic
GetWindowTextLengthW
CharNextW
SwitchDesktop
DrawStateW
GetClassLongW
WaitMessage
GetClassInfoA
ChangeDisplaySettingsExW
GetAltTabInfoA
ValidateRect
PeekMessageW
CloseWindowStation
IsDialogMessageW
wsprintfW
PaintDesktop
CreateCursor
MapWindowPoints
IsCharAlphaNumericA
OffsetRect
DrawTextExA
ChangeMenuW
ToAscii
LoadCursorA
SetMessageExtraInfo
SetWindowTextA
GetDesktopWindow
CharToOemBuffW
GetWindowRgn
GetMenuItemCount
ScrollChildren
SetLastErrorEx
LoadCursorFromFileA
GetClipboardFormatNameW
SetDlgItemTextW
BroadcastSystemMessageW
ChildWindowFromPoint
SendNotifyMessageW
DestroyCaret
GetSubMenu
SetActiveWindow
CharUpperBuffA
ChildWindowFromPointEx
RegisterClipboardFormatA
IntersectRect
GetGUIThreadInfo
GetSystemMetrics
SetWindowsHookW
DefFrameProcA
EnableWindow
SetWindowContextHelpId
GetClassInfoW
GetClientRect
GetMenuInfo
GetMonitorInfoA
ShowStartGlass
ActivateKeyboardLayout
wvsprintfA
GetForegroundWindow
DefFrameProcW
GetCaretBlinkTime
MapVirtualKeyExW
GetClassLongA
MenuWindowProcW
RealChildWindowFromPoint
GetAltTabInfoW
EnableMenuItem
SetClassLongW
MessageBoxA
DrawEdge
TabbedTextOutW
GetScrollPos
GetClipboardOwner
PrivateExtractIconExA
OpenClipboard
GetInputState
GetCaretPos
SetMenuItemInfoW
ShowOwnedPopups
SetMenuInfo
ShowWindowAsync
GetDC
wsprintfA
GetDialogBaseUnits
RemovePropA
IsCharUpperA
LoadAcceleratorsA
LoadBitmapA
MoveWindow
DrawIcon
GetProcessWindowStation
DeleteMenu
GetDlgItem
CallWindowProcW
SetWindowWord
SetProcessWindowStation
DefDlgProcW
SendMessageA
TabbedTextOutA
RemovePropW
GetDlgItemInt
EqualRect
GetGuiResources
IsWindowUnicode
EnumDesktopsA
SetClassLongA
SetForegroundWindow
GetMessageW
SetDlgItemTextA
DrawCaptionTempA
InvalidateRect
RegisterDeviceNotificationA
GetAncestor
GetScrollInfo
UnionRect
FindWindowExA
LoadIconW
ScrollWindow
FindWindowW
DrawCaption
UnloadKeyboardLayout
DestroyAcceleratorTable
FlashWindowEx
SetWindowsHookExA
GetAsyncKeyState
GetWindow
EditWndProc
IsHungAppWindow
GetUserObjectSecurity
RegisterWindowMessageA
OemToCharW
FindWindowExW
CopyAcceleratorTableA
IsWindowEnabled
TranslateMessageEx
GetWindowRect
RegisterWindowMessageW
ShowCursor
InvalidateRgn
DefDlgProcA
GetMenuStringW
MonitorFromPoint
LoadBitmapW
InvertRect
EndPaint
SetMenuDefaultItem
SendMessageTimeoutA
GetMenuItemRect
CharLowerBuffW
IsCharAlphaA
OemToCharBuffA
GetInternalWindowPos
GetCapture
GetCursorInfo

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
RegisterTypeLib
GetAltMonthNames
VarBstrFromI2
VarI4FromDec
VarDateFromUI8
VarR8Round
VarUI4FromDec
VARIANT_UserUnmarshal
VarI8FromDate
VariantTimeToSystemTime
VarDecFromUI2
VarR8FromI4
VarDateFromStr
VarUI8FromI2
VarUI8FromI8
VarDateFromDisp
VarR4FromI2
DispGetParam
VarI4FromR4
SafeArrayGetLBound
VarCyFromR8
VarI4FromUI2
VarBoolFromI8
VarUI8FromUI4
VarSub
VarI8FromUI8
VarCyAdd
VariantChangeType
VarI1FromR4
VarR8FromR4
QueryPathOfRegTypeLib
DllUnregisterServer
VarBstrFromUI2
VarWeekdayName
VarCyMulI8
VarUI2FromR8
VarUI8FromR4
VarCyFromUI4
VarDecFromDisp
LPSAFEARRAY_UserUnmarshal
DosDateTimeToVariantTime
VarCyFromStr
VARIANT_UserFree
VarDateFromI2
VarI1FromUI4
VarNeg
VarR8FromUI2
VarBstrFromUI4
VarBoolFromCy
VariantInit
SysReAllocStringLen
VarBstrFromDate
SafeArrayGetElement
VarDateFromR4
VarI4FromDate
BSTR_UserFree
VarDecSub

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExcludeClipRect
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateFontA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
SetICMProfileW
AbortDoc
GetDeviceCaps
SetICMProfileA
CopyMetaFileA
StrokePath
ExtTextOutA
GdiSwapBuffers
SelectPalette
STROBJ_bEnum
GetPixelFormat
GetWinMetaFileBits
Arc
AddFontResourceExW
ExcludeClipRect
EnumFontFamiliesExW
RemoveFontResourceTracking
GdiGetCharDimensions
AddFontResourceA
GdiStartDocEMF
GdiGetDevmodeForPage
GetCharWidthFloatW
GetTextMetricsW
XFORMOBJ_bApplyXform
GetStretchBltMode
SetDCPenColor
EngBitBlt
LineDDA
Rectangle
GetWorldTransform
CLIPOBJ_bEnum
GetMiterLimit
GetOutlineTextMetricsW
GdiGetPageCount
CreateEllipticRgn
CreateColorSpaceA
SetTextAlign
GetStockObject
DescribePixelFormat
EngDeletePath
GdiTransparentBlt
SetROP2
MirrorRgn
OffsetClipRgn
GetCharacterPlacementW
EngAlphaBlend
GetTextFaceAliasW
EngQueryLocalTime
EnumICMProfilesW
GdiGetSpoolFileHandle
EndPath

comctl32

ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
FlatSB_GetScrollRange
GetMUILanguage
ImageList_Draw
ImageList_Destroy
ImageList_BeginDrag
ImageList_DragEnter
ImageList_GetBkColor
FlatSB_SetScrollProp
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Remove
PropertySheetA
CreateToolbarEx
DestroyPropertySheetPage
ImageList_GetFlags
InitCommonControls
FlatSB_GetScrollInfo
FlatSB_GetScrollProp
CreatePropertySheetPageA
FlatSB_SetScrollRange
ImageList_SetFlags
ShowHideMenuCtl
InitMUILanguage
ImageList_SetDragCursorImage
GetEffectiveClientRect
ImageList_LoadImageW
FlatSB_EnableScrollBar
MakeDragList
UninitializeFlatSB
CreatePropertySheetPage
ImageList_SetBkColor
ImageList_Write
PropertySheetW
ImageList_GetImageCount
PropertySheet
CreateStatusWindowW
ImageList_LoadImageA
CreateUpDownControl
ImageList_Duplicate
ImageList_GetDragImage
DrawInsert
ImageList_DragLeave
CreateToolbar
InitCommonControlsEx
ImageList_DragMove
ImageList_Add
ImageList_Merge
ImageList_GetIconSize
LBItemFromPt
ImageList_SetOverlayImage
ImageList_Read
ImageList_SetIconSize
ImageList_SetImageCount
InitializeFlatSB
ImageList_Replace
ImageList_GetImageRect
CreateStatusWindowA
ImageList_DrawIndirect
ImageList_Create
CreatePropertySheetPageW

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
PrintDlgExA
WantArrows
ReplaceTextA
PageSetupDlgW
dwOKSubclass
dwLBSubclass
LoadAlterBitmap
ChooseColorA
FindTextA
GetOpenFileNameW
ChooseFontA
GetSaveFileNameW
GetFileTitleW
GetFileTitleA
GetSaveFileNameA
ReplaceTextW
ChooseColorW
ChooseFontW
PageSetupDlgA
PrintDlgW
CommDlgExtendedError
PrintDlgA
FindTextW
GetOpenFileNameA

shlwapi

StrStrIA

wsock32

send

msvcrt

_gcvt

Exports

Exports

;n�f��Y#�gJ/As�(�L}�Ǡ�8=^%��-Z��#̬N�$w��N��*�H#�}��,��0bI܍��@XU�M�O��Yu��@a��I��?o��f��`�⻗�P�/mʩ^{N�Qk6�9�[�O�Ҙ��tP�xQ:��&L��:o�H߁Ba�#��a�?�G��&>K=�S�A3]��r�x��Zq�k��0��+gs��a/��F�%Q�b�=�k\�We6zm�Z~��T��ܕY�C><}�꧋�J��v;~�B��%�4Z�$��/s�4|��܀�LjU�,��{�!ׂ߮'`�c�Z��Þ��vV^�t�J��1��if��\��~��R>YL3'yhkqw��"v�9�"W�r�L~��! s�>B��@"|�D�|$�T�Ixľ��@B2j��²[�i�{0�udq~H/��*l�Lq�p�n�3�7�a쟣u�䝪��(~�R*G ��z�wuG��?͗�HF�0JI֜\- ��1�� ؾ�Z[��O�;)��6t�^�Ԁ=�tٓ��דy��~��F`�c$��K��*��]E�G��GЮ��U6 �� 6@f�#�4�_��B��P�>�CR'�j ƞ_��%>ϙ,\�A]�_�r˲b�?��~Y&ﾉo��l��0ص(��&�uP̓�g�E��\�1�c��4�9�Y]5��J7��bȌ�x��k2+��Z��]��ںv�sJ�oP��-�%�@/9�W�>Kݞ�*h��{c��ή c�oy�n�#W(�^��y��b޹ԉXӻ��ݭIs9��p$��q�3��`K��M5[}뺀��]�;J��74|yp��}��m��4��w�J�.i!�d= J�:��2��uQ\c��lyoWi��#�8�X��o=r��aq�Fu�r%��-k-��;��/�k�^��"�%q�6@�� UI��y%��{p��6坴Iz�2�X��O��Twn��-�oʖmjuk��ǡ-�U6o�/��8�G��^Td�PBjS�p��X8"Vi��D�Ap�l6O-�P`� �Y��3��K�'ؔ��5x(�@� �O�;�N{0�uN��9��2��2�M)�J�5��OOR{�s ,�uh��g#D"��,��u��j��ū39 ��ў6��*i�x�x�: �T��;�M�8G�7��/e�l�OwA5�$��#t�Z�/b�JcR̟��=�$��!Y��e��m�>��v�`��S�Nl�S��%��4V��á��_�#� �R|q��^Y��)f@�x��Aݴ��j�eu�pL�R��Ϳ�?x�ԏ�� _�e@�&��z��"N��T;, �U*�x�g)��t ��c�eD� ��.��E'of��%k!jQ�[r9�t��4��Q��5ϧY�EX�a-d�0 P?L��W�miƉ��)�_�sE�d՞!.B��ЃQno��} �؛0��v��H�_�qWA�,��`��v퍫��o9�&}Ӥ��ih�It��>��*��UZʦ؟��y%��">.�D�I��!��?m��6Հ�f<��l��h!a��\�R+�*�t�g�8��~h=�j��U�L�9O��(l�,�D�(��c�&�H��ٓyG;��俫�3^Z�Y��^�⟵��6��8��4=�|�VD=wx��W��sEq"] k�E�V�&��-��u��l^�ӹL'f��wJ��~r�Չѓw}i�׎vLÅoE�x��R�=R4uT�mn��%�n��U>��'�XQA�&��U7��g�©'�g6BE��p� �7��х�W�B$� C��prG�Q`O�oI�w>�C:��1B��Yu�$�2b��?7�.U�J=Q��t��Q��2�lIP.��Y��݆�+�2;]�I�G�,z�,z?�^��Z�a�4B��ah�jo9�ӹg�`*��|�n.UjXB�Qp��Y��"�EK�\;�:u��Ԝ��%��m3�KZ��V{��~��k��1��Ed"h��]ǳrl5��h.��f�gh �ͤ*y��-j��pzz��ohh�Y�r��{�r��p��,��)�>�:��;4`��~�o��)քڱ��y��#!�'� N��{7�uH�u�#��6aD��Tu�#�|:��Ca�]� ��=1�Vy7�q�r('�cj=��m��r>��f��z�8�o^'y��֜��( צ_��h��w,ѕ�ڌ��X�F'�j~��MoY茔�H�p�۹2=��(��ܘ_�!1�B5J��^;�* ��_9 V� ǭs�]}�{��:�z��y��y9�-��Tp�b�_%��B��j�H�qg-r�dg��F��H�0Ts�� 0��QE6>W�n��>�~��G3�^�Q�!��=��"9��(��y�eBT8��΋nb��JH� -�gz�z��%h�2��{~��?D5g��݂5�p/�W/w�� 9)fo]��9�W�7�D��"�/�Wt�NU�BnL��/=�K��g�fd��x�e��&�Zy�M��%G6��s�a�ٵV]Ǘ�PT:�mj:�r�zS�YS��:g�9��;��o}�&��c�`�� {��5�N��w�[mUn"J�J��G#I��7Ȃ�D:Wy{{f#P�uRN:��-�l��Ҳ�8��Ї��\"��q�p��ő�<�'%#��8�-s1��3.澌��p ;Q��7��ŭ؈��k��,ag:�x�`A�c�D�u�{�Ӗ��*��Qg��i%=R*\�UZhV7��Ƅ��>,�s.yqƥ��׼j�a�ņ��2��p&��^��K�;��Ջé^U��9`�ق�R� t�$�ن��p��F�CW��h��/)��>�[��c��Ё�

Sections

CODE
Size: - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 728KB - Virtual size: 728KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a56b82a25cfd25900a42e21834073cc9

Code Sign

41:79:ea:1b:ec:59:d4:ca:7e:66:86:28:32:55:54:80Certificate

Extended Key Usages

Key Usages

30:64:b1:9e:58:32:d4:be:f9:ba:c1:65:fe:cc:59:dc:d3:08:57:14Signer

Signature Validations

Verification

04/11/2022, 15:46 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

comctl32

shell32

comdlg32

shlwapi

wsock32

msvcrt

Exports

Exports

Sections

CODE Size: - Virtual size: 703KB

DATA Size: - Virtual size: 18KB

BSS Size: - Virtual size: 4KB

.idata Size: - Virtual size: 35KB

.tls Size: - Virtual size: 28B

.rdata Size: - Virtual size: 24B

.text Size: - Virtual size: 171KB

.itext Size: 728KB - Virtual size: 728KB

.reloc Size: 512B - Virtual size: 352B

.rsrc Size: 20KB - Virtual size: 87KB

41:79:ea:1b:ec:59:d4:ca:7e:66:86:28:32:55:54:80
Certificate

30:64:b1:9e:58:32:d4:be:f9:ba:c1:65:fe:cc:59:dc:d3:08:57:14
Signer

04/11/2022, 15:46
Valid: false

CODE
Size: - Virtual size: 703KB

DATA
Size: - Virtual size: 18KB

BSS
Size: - Virtual size: 4KB

.idata
Size: - Virtual size: 35KB

.tls
Size: - Virtual size: 28B

.rdata
Size: - Virtual size: 24B

.text
Size: - Virtual size: 171KB

.itext
Size: 728KB - Virtual size: 728KB

.reloc
Size: 512B - Virtual size: 352B

.rsrc
Size: 20KB - Virtual size: 87KB