licensehelperdlg[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

licensehelperdlg.exe
Size

948KB
MD5

f4be96de8b434c4413e3f07362fc78e7
SHA1

08b06c7066d401f11e7fe96ad20ea4eabbd84a22
SHA256

6d30220273d289f063eb857e7ba589fb6280eae930f5783d094d89acaeb80f36
SHA512

4cdbf6d2338a9f843c0333f8bf7426682b75336f15870dc6b050de7f52e284bf0c024e8f3996b008e6fb27ab7ad29428c2c25df875709b3efc42f755a1f0a5c7
SSDEEP

12288:v3N/uMGCRIxERYG8Dst2079EGnqzNfmgLAIWebRrgx7ZGL79/F1SR:PMM1qxEz794x1ATG547GRK

Score

N/A

Malware Config

Signatures

Files

licensehelperdlg.exe
.exe windows x86

10f654c2b60fea4716303a8ec4061d61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
IsBadWritePtr
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapSize
TerminateProcess
VirtualQuery
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
GetSystemTime
GetEnvironmentVariableA
CreateFileA
DeviceIoControl
GetSystemInfo
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
RtlUnwind
GetStartupInfoW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
WritePrivateProfileStringW
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
GetShortPathNameW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFindAtomW
GetModuleHandleA
lstrcatW
GetVersionExA
MulDiv
FormatMessageW
LocalFree
SetLastError
GetTickCount
GlobalFree
FreeResource
CloseHandle
GlobalAddAtomW
GetCurrentThread
lstrcmpW
GlobalDeleteAtom
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
LoadLibraryW
GetLocaleInfoW
LoadLibraryA
GetProcAddress
GetDateFormatW
lstrlenA
WideCharToMultiByte
GetComputerNameW
OutputDebugStringW
GlobalAlloc
GlobalLock
GlobalUnlock
LockResource
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetLastError
GetModuleFileNameW
GetModuleHandleW
lstrcpyW
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
IsChild
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CharNextW
DrawIcon
SendMessageW
IsIconic
GetClientRect
OpenClipboard
LoadIconW
EnableWindow
GetSystemMetrics
CloseClipboard
SetClipboardData
EmptyClipboard
LoadImageW
UnregisterClassW
CopyRect
PtInRect
GetWindowTextLengthW
GetWindowTextW
RegisterWindowMessageW
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetDC
ReleaseDC
wsprintfW
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxW
GetLastActivePopup
GetWindow
SetWindowContextHelpId
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
LoadBitmapW
GetMenuCheckMarkDimensions
CheckMenuItem
MessageBoxA
EnableMenuItem
GetMenuState
ModifyMenuW
GetParent
GetFocus
SetMenuItemBitmaps
UnhookWindowsHookEx
PostMessageW
PostQuitMessage
SetCursor
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
CallNextHookEx
SetWindowsHookExW
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetDesktopWindow
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
CharUpperW
GetSysColorBrush
LoadCursorW
DestroyIcon
SetCapture
ReleaseCapture
PostThreadMessageW
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyMenu
RegisterClipboardFormatW
SetWindowPos
MapDialogRect
SetFocus
CopyAcceleratorTableW

gdi32

ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetWindowExtEx
GetBkColor
GetTextColor
GetRgnBox
SetViewportExtEx
GetMapMode
GetViewportExtEx
DeleteObject
SetMapMode
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
RestoreDC
SaveDC
CreateRectRgnIndirect
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetUserNameA
RegSetValueW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW

shell32

ExtractIconW

comctl32

ImageList_Destroy
ord17

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
StringFromCLSID
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoRegisterClassObject
CoRevokeClassObject
CoDisconnectObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
CoRegisterMessageFilter

oleaut32

VarUI4FromStr
SafeArrayLock
OleCreateFontIndirect
LoadTypeLi
SystemTimeToVariantTime
SafeArrayDestroy
SysStringLen
SysStringByteLen
SysAllocStringLen
VariantChangeType
VariantCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayPutElement
SafeArrayRedim
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayGetElement
VariantClear
VariantInit
SysFreeString
SysAllocString
SafeArrayUnlock

Sections

.text
Size: 372KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10f654c2b60fea4716303a8ec4061d61

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 372KB - Virtual size: 369KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 212KB - Virtual size: 352KB

.rsrc Size: 300KB - Virtual size: 299KB

.text
Size: 372KB - Virtual size: 369KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 212KB - Virtual size: 352KB

.rsrc
Size: 300KB - Virtual size: 299KB