c2a733802acba048d46f25c4183e3ac172033be02e921de2967727cae106abbb

Sharing

Copy URL Twitter E-mail

General

Target

c2a733802acba048d46f25c4183e3ac172033be02e921de2967727cae106abbb
Size

491KB
MD5

1cc919c60e2cbaf8719969638092eff9
SHA1

2255f3d70d8799943a7a740c1081616ca15f5438
SHA256

c2a733802acba048d46f25c4183e3ac172033be02e921de2967727cae106abbb
SHA512

72b6fc4fcf7dcffddbb6c2e1295c10ba4b7c22b6d66cf26bc16305b1d7e9b2ba59f1a62bed8140991909c9d9f4ac2fcee03a59348fe402a5694c8888fd333ae1
SSDEEP

6144:P14f9xvvtaUhrA0PvMs+4oT27G1nvFQqMiTBtbF8ArxwTk:6f9lPd+NDvMaWTk

Score

1^/10

Malware Config

Signatures

Files

c2a733802acba048d46f25c4183e3ac172033be02e921de2967727cae106abbb
.exe windows x86

1ca4e51710d3ad66a113e99de5d5d3b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

hid

HidD_SetNumInputBuffers
HidD_GetHidGuid
HidD_FlushQueue
HidD_GetAttributes

cfhimport

?Read@CFHDxf@@QAEHXZ
?Read@CFHDut@@QAEHXZ
?Open@CFHDut@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??1CFHDut@@QAE@XZ
??0CFHDut@@QAE@XZ
?Read@CFHISO@@QAEHXZ
?Open@CFHISO@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??1CFHISO@@QAE@XZ
??0CFHDxf@@QAE@XZ
??1CFHDxf@@QAE@XZ
?Open@CFHDxf@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0CFHPlt@@QAE@XZ
??1CFHPlt@@QAE@XZ
?Open@CFHPlt@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?Read@CFHPlt@@QAEHXZ
??0CFHISO@@QAE@XZ

fhimage

?AddBodyShape@CFHImageEx@@QAEHPAVCWnd@@PAVCFHBodyData@@@Z
?GetMaxLengh@CFHImageEx@@QAENXZ
?ClearImage@CFHDrawImage@@QAEHXZ
?GetOutline@CFHImageEx@@QAEHPAVCFHShapeData@@@Z
?ReLoad@CFHDrawImage@@QAEHH@Z
??1CFHImageEx@@QAE@XZ
?MatchImageDistance@CFHImageEx@@QAEHAAN0@Z
?MatchImage@CFHImageEx@@QAEHAAN0@Z
?SetScale@CFHImageEx@@QAEHNNN@Z
??0CFHDrawImage@@QAE@XZ
??1CFHDrawImage@@QAE@XZ
?DestroyImage@CFHDrawImage@@QAEHXZ
??0CFHGetImagePath@@QAE@XZ
??1CFHGetImagePath@@QAE@XZ
?Open@CFHGetImagePath@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetDPI@CFHGetImagePath@@QAENXZ
?LoadImageW@CFHDrawImage@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@NHHHH@Z
?GetColorValue@CFHGetImagePath@@QAEHXZ
?GetPickMode@CFHGetImagePath@@QAEHXZ
?GetLarger@CFHGetImagePath@@QAENXZ
?GetWhileNumber@CFHGetImagePath@@QAEHXZ
?GetArea@CFHGetImagePath@@QAENXZ
?GetCounterNumber@CFHGetImagePath@@QAEHXZ
?ReadXY@CFHGetImagePath@@QAEHAAN0@Z
?GetInCounter@CFHGetImagePath@@QAEHXZ
?GetInArea@CFHGetImagePath@@QAENXZ
?GetInCounterNumber@CFHGetImagePath@@QAEHXZ
?GetNextInCounter@CFHGetImagePath@@QAEHXZ
?GetCameraMode@CFHImageEx@@QAEHXZ
??0CFHImageEx@@QAE@XZ
?DisableConnect@CFHImageEx@@QAEHXZ
?ConnectImage@CFHImageEx@@QAEHPAVCWnd@@@Z
?CameraToVector@CFHImageEx@@QAEHPAVCWnd@@H@Z
?GetMoveDistance@CFHImageEx@@QAEHAAN0@Z
??4CFHDrawImage@@QAEAAV0@ABV0@@Z
?GetOutlineSize@CFHImageEx@@QAEHXZ
?ConnectCamera@CFHImageEx@@QAEHPAVCWnd@@@Z

fhmotion

?UpdateShowArea@CFHMotion@@QAEXVCRect@@0@Z
?Carve@CFHPrintManager@@QAEHH@Z
?SetVR@CFHMotion@@QAEHHHPAM@Z
?ShowHide3D@CFHMotion@@QAEHH@Z
?Print_Range@CFHPrintManager@@QAEHXZ
??1CFHM_NCUnit@@UAE@XZ
??1CFHPrintManager@@QAE@XZ
??1CFHM_NCCode@@QAE@XZ
?GetToolName@CFHMotion@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
??1CFHMotion@@QAE@XZ
?GetToolIndex@CFHMotion@@QAEHH@Z
?SetReg@CFHMotion@@QAEHGH@Z
?SetOUT_IDLE@CFHMotion@@QAEHHH@Z
?Run@CFHMotion@@QAEHG@Z
?SetFirstPoint@CFHMotion@@QAEHMM@Z
?GetFirstPoint@CFHPrintManager@@QAEHNN@Z
?GetMarkSrc@CFHPrintManager@@QAEHH@Z
?SetOutLink@CFHMotion@@QAEHHH@Z
?SetTip@CFHMotion@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?JogMove@CFHMotion@@QAEHHMM@Z
??0CFHM_NCCode@@QAE@XZ
?Clear@CFHM_NCCode@@QAEXXZ
??0CFHM_NCUnit@@QAE@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0CFHMotion@@QAE@XZ
?Setup@CFHMotion@@QAEHPAVCWnd@@VCRect@@11PAVCFHPopMenu@@@Z
?Setup@CFHPrintManager@@QAEXPAVCFHMotion@@PAVCFHShapeData@@@Z
?KeyMoveMotion@CFHMotion@@QAEHIH@Z
?CommandMSG@CFHMotion@@QAEHIJ@Z
?GetVersionName@CFHMotion@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?Exit@CFHMotion@@QAEHXZ
?GetRunMode@CFHMotion@@QAEHAAH@Z
?UninstallGCode@CFHMotion@@QAEXXZ
?Print@CFHPrintManager@@QAEHHH@Z
?SetCCDDownUp@CFHMotion@@QAEHH@Z
?Zoom@CFHMotion@@QAEHHHH@Z
?GetOut@CFHMotion@@QAEHH@Z
?CopyDataEx@CFHM_NCCode@@QAEHABV1@@Z
?LoadLibaryFile@CFHMotion@@QAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?Update3D@CFHMotion@@QAEHXZ
?Print_Continue@CFHPrintManager@@QAEHHHAAH@Z
?Print_Single@CFHPrintManager@@QAEHHHH@Z
?Print_CCD@CFHPrintManager@@QAEHHH@Z
?IsMacIDLE@CFHMotion@@QAEHXZ
?GetHomeState@CFHMotion@@QAEHXZ
?GetLinkState@CFHMotion@@QAEHXZ
?SetMarkToOrign@CFHPrintManager@@QAEHXZ
?SetOut@CFHMotion@@QAEHHH@Z
?ActivateMsg@CFHMotion@@QAEHI@Z

fhshapewnd

?ClearPump@CFHShapeWnd@@QAEHXZ
?AddPump@CFHShapeWnd@@QAEHHHNNNN@Z
?GetDisableTool@CFHShapeWnd@@QAEHXZ
?Set2@CFHProjectData@@QAEHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@NNNNHHHH@Z
?KeyMessage@CFHProjectData@@QAEHIII@Z
?ClearModifyProject@CFHProjectData@@QAEXXZ
?ReadWrite@CFHProjectData@@QAEHHPAVCWnd@@PAVCFHNestData@@PAVCFHBodyData@@PAVCFHShapeData@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetLayoutRect@CFHProjectData@@QAEXAAVCRect@@@Z
?GetScreenScale@CFHProjectData@@QAENXZ
?Get@CFHProjectData@@QAEHHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AAN111AAH222@Z
?SetModifyProjector@CFHProjectData@@QAEHHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ResetRect@CFHProjectData@@QAEHHH@Z
?Add@CFHProjectData@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@NNNNHHHHPAVCWnd@@PAVCFHNestData@@PAVCFHBodyData@@PAVCFHShapeData@@@Z
?Delete@CFHProjectData@@QAEHH@Z
?Swap@CFHProjectData@@QAEHHH@Z
?Reset@CFHProjectData@@QAEHH@Z
?ReadWrite@CFHShapeWnd@@QAEHH@Z
?Zoom@CFHShapeWnd@@QAEXHNVCPoint@@VCRect@@@Z
?GetTool@CFHShapeWnd@@QAEHXZ
??1CFHShapeWnd@@UAE@XZ
??0CFHShapeWnd@@QAE@XZ
?CalcRect@CFHShapeWnd@@QAEXXZ
?SetDrawShape@CFHProjectData@@QAEHPAX@Z
?Setup@CFHShapeWnd@@QAEXPAVCWnd@@VCRect@@@Z
?KeyMsg@CFHShapeWnd@@QAEHIII@Z
?ResetMatrix@CFHShapeWnd@@QAEHXZ
?SetTool@CFHShapeWnd@@QAEXH@Z
?DeleteVectorPoint@CFHShapeWnd@@QAEHXZ
?OppSelectVectorPoint@CFHShapeWnd@@QAEHXZ
?SetDisableTool@CFHShapeWnd@@QAEHH@Z

fhskin

??0CFHButton@@QAE@XZ
??0CFHPopMenu@@QAE@XZ
??1CFHPopMenu@@UAE@XZ
??0CFHMenu@@QAE@XZ
??1CFHMenu@@UAE@XZ
?GetRect@CFHLayoutManager@@SA?AVCRect@@H@Z
?GetTempInt@CFHLayoutManager@@SAHH@Z
?GetRealSize@CFHLayoutManager@@SAHH@Z
?Setup@CFHButton@@QAEHPAVCWnd@@VCRect@@HV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@IHH@Z
?SelectLan@CFHLayoutManager@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@00@Z
?AddItem@CFHCombo@@QAEXPAVCMenuItem@@@Z
?SetItem@CFHCombo@@QAEXH@Z
??0CFolderDialog@@QAE@PB_W0PAVCWnd@@I@Z
??1CFolderDialog@@UAE@XZ
?DoModal@CFolderDialog@@UAEHXZ
?GetIndex@CFHCombo@@QAEHXZ
?LBUp@CFHRectDoubleEdit@@QAEHVCPoint@@PAVCWnd@@@Z
?LBUp@CFHRectButton@@QAEHVCPoint@@PAVCWnd@@@Z
?Set@CFHRectDoubleEdit@@QAEXIVCRect@@PANIIIIIIHHHH@Z
?SetName@CFHRectDoubleEdit@@QAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetLayoutStyle@CFHLayoutManager@@SAIXZ
?SetColor@CFHLayoutManager@@SAXHK@Z
?ReadWriteSkin@CFHLayoutManager@@SAHH@Z
??0CFHQREncode@@QAE@XZ
?EncodeData@CFHQREncode@@QAEHHHHHPB_WH@Z
??1CFHQREncode@@QAE@XZ
?clear@CFHCombo@@QAEHXZ
??0CFHRectDoubleEdit@@QAE@IVCRect@@PANIIIIIIHHHH@Z
?SetLayoutStyle@CFHLayoutManager@@SAXI@Z
?InitLayout@CFHLayoutManager@@SAXXZ
??1CFHToolBar@@UAE@XZ
??1CFHStatic@@UAE@XZ
?SetVersionLimit@CFHLayoutManager@@SAXHH@Z
?ResetLayout@CFHLayoutManager@@SAXXZ
??0CFHAESModeOfOperation@@QAE@XZ
??1CFHAESModeOfOperation@@QAE@XZ
?set_key@CFHAESModeOfOperation@@QAEXPAE@Z
?set_mode@CFHAESModeOfOperation@@QAEXW4FHAESMode_t@@@Z
?set_iv@CFHAESModeOfOperation@@QAEXPAE@Z
?Encrypt@CFHAESModeOfOperation@@QAEHPAEH0@Z
?Base64ToChar@CFHAESModeOfOperation@@QAEHPAEHPAD@Z
?CharToBase64@CFHAESModeOfOperation@@QAEHPADHPAE@Z
?Decrypt@CFHAESModeOfOperation@@QAEHPAEH0@Z
??0CFHToolBar@@QAE@XZ
??0CFHStatic@@QAE@XZ
?Setup@CFHToolBar@@QAEXPAVCWnd@@VCRect@@@Z
?GetMenuAndBarDis@CFHLayoutManager@@SAHXZ
?GetTextHeight_S@CFHLayoutManager@@SAHXZ
?AddItem@CFHToolBar@@QAEXPAVCMenuItem@@@Z
?Setup@CFHStatic@@QAEXPAVCWnd@@VCRect@@@Z
?clear@CFHMenu@@QAEHXZ
?RemoveAll@CFHToolBar@@QAEXXZ
?SetKeyTip@CMenuItem@@QAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetLanguage@CFHLayoutManager@@SAHXZ
?SetLanguage@CFHLayoutManager@@SAXH@Z
??0CSkinDlgFloatPara@@QAE@PAVCWnd@@@Z
??1CSkinDlgFloatPara@@UAE@XZ
??0CFHRectFloatEdit@@QAE@IVCRect@@PAMIIIIIIHHHH@Z
?SetName@CFHRectFloatEdit@@QAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetMode@CFHStatic@@QAEHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetFenge@CFHLayoutManager@@SAHXZ
?SetFenge@CFHLayoutManager@@SAXH@Z
?ReadWriteLayout@CFHLayoutManager@@SAHH@Z
?Setup@CFHPopMenu@@QAEHPAVCWnd@@VCRect@@@Z
??0CMenuItem@@QAE@IV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@IH0HHH0I@Z
?AddItem@CFHMenu@@QAEXPAVCMenuItem@@@Z
?Setup@CFHMenu@@QAEHPAVCWnd@@VCRect@@@Z
?SetItem@CFHMenu@@QAEXH@Z
?GetFont@CFHLayoutManager@@SAPAVCFont@@H@Z
?GetColor@CFHLayoutManager@@SAKH@Z
?RelayEvent@CFHPopMenu@@QAEXPAUtagMSG@@@Z
?Setup@CFHCombo@@QAEHPAVCWnd@@VCRect@@I@Z
?GetVersionLimit@CFHLayoutManager@@SAHH@Z
??1CFHShowRect@@UAE@XZ
??0CFHShowRect@@QAE@XZ
??1CFHCombo@@UAE@XZ
??0CFHCombo@@QAE@XZ
FHShowMsgEx
?SetHotCode@CFHRectDoubleEdit@@SAXH@Z
?GetHotCode@CFHRectDoubleEdit@@SAHXZ
?MouseMove@CFHRectButton@@QAEHVCPoint@@PAVCWnd@@@Z
?SetHotCode@CFHRectButton@@SAXH@Z
?GetHotCode@CFHRectButton@@SAHXZ
?MouseMove@CFHRectDoubleEdit@@QAEHVCPoint@@PAVCWnd@@@Z
?LBDown@CFHRectButton@@QAEHVCPoint@@PAVCWnd@@@Z
?LBDown@CFHRectDoubleEdit@@QAEHVCPoint@@PAVCWnd@@@Z
?Draw@CFHRectButton@@QAEXPAVCDC@@PAVCBrush@@11@Z
?Draw@CFHRectDoubleEdit@@QAEXPAVCDC@@PAVCBrush@@11@Z
?SetName@CFHRectButton@@QAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?Set@CFHRectButton@@QAEXIVCRect@@IIIIIIHHHH@Z
??1CFHRectDoubleEdit@@UAE@XZ
??0CFHRectDoubleEdit@@QAE@XZ
??1CFHRectButton@@UAE@XZ
??0CFHRectButton@@QAE@XZ
??1CFHButton@@UAE@XZ
?GetIndex@CFHMenu@@QAEHXZ

shape

??1CFHDiscriminate@@QAE@XZ
?ReadWrite@CFHDiscriminate@@QAEHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0CFHLayers@@QAE@XZ
??1CFHLayers@@QAE@XZ
?ReadWrite@CFHLayers@@QAEHH@Z
?Clear@CFHLayers@@QAEHXZ
??1CFHLayer@@UAE@XZ
??0CFHLayer@@QAE@XZ
?GetFHLayer@CFHLayer@@QAEXAAV1@@Z
?CreateBoot@CFHFileOperate@@SAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ReadWriteDefault@CFHMainData@@QAEHH@Z
??0CFHOptimizeShape@@QAE@XZ
??1CFHOptimizeShape@@QAE@XZ
?ReadWrite@CFHOptimizeShape@@QAEHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetEntites@CFHShapeData@@QAEPAVCShape@@H@Z
??0CSelfShape@@QAE@XZ
??1CSelfShape@@QAE@XZ
?DrawCircle@CSelfShape@@QAEXPAVCDC@@NNN@Z
?DrawBound@CSelfShape@@QAEXPAVCDC@@NNNNN@Z
?DrawHalfCircle@CSelfShape@@QAEXPAVCDC@@NNNNH@Z
?DrawSqCircle@CSelfShape@@QAEXPAVCDC@@NNNNNHN@Z
?DrawArc@CSelfShape@@QAEXPAVCDC@@NNNNNHH@Z
?GetCircle@CSelfShape@@QAEPAVCPolylineShape@@NNN@Z
?GetBound@CSelfShape@@QAEPAVCPolylineShape@@NNNNN@Z
?GetHalfCircle@CSelfShape@@QAEPAVCPolylineShape@@NNNNH@Z
?GetSqCircle@CSelfShape@@QAEPAVCPolylineShape@@NNNNNHN@Z
??0CPolylineShape@@QAE@XZ
??0CFHDiscriminate@@QAE@XZ
?AddEntites@CFHShapeData@@QAEHPAVCShape@@@Z
?GetLayer@CFHShapeData@@QAEPAVCFHLayer@@H@Z
?GetBodyShape@CFHShapeData@@QAEPAVCBodyShape@@H@Z
??1CFHShapeData@@UAE@XZ
?SetDis@CShape@@SAXHHH@Z
??1CFHMainData@@QAE@XZ
??1CFHBodyData@@UAE@XZ
?CalcMatrix@CFHShapeData@@QAEHXZ
?SetDst@CFHTransShape@@QAEHHNN@Z
?CalcTemp@CFHTransShape@@QAEHH@Z
?Trans@CFHTransShape@@QAEHAAN0@Z
??0CFHShapeData@@QAE@XZ
?ClearAll@CFHShapeData@@QAEHXZ
?AddEntites@CFHShapeData@@QAEHABVCObArray@@@Z
?AddBodyShape@CFHShapeData@@QAEHABVCObArray@@@Z
?RotateSelect@CFHShapeData@@QAEHNNNHH@Z
?MirrorSelect@CFHShapeData@@QAEHNNHH@Z
?FILE_ReadWrite@CFHShapeData@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?GetMaxRect@CFHShapeData@@QAEHXZ
?SetMaxRect@CFHShapeData@@QAEHH@Z
?Auto@CFHOptimizeShape@@QAEHPAVCFHShapeData@@H@Z
?Auto@CFHDiscriminate@@QAEHPAVCFHShapeData@@H@Z
?Sort@CFHOptimizeShape@@QAEHH@Z
?AutoEx@CFHOptimizeShape@@QAEHPAVCFHShapeData@@PAVCFHBodyData@@H@Z
??0CFHBodyData@@QAE@XZ
?GetColor@CFHACIColor@@SAKH@Z
?GetArc@CSelfShape@@QAEHPAVCPolylineShape@@NNNNNH@Z
?AddToolTable@CFHShapeData@@QAEHHNNN@Z
?FindMiddle@CFHOptimizeShape@@QAEHH@Z
?OverCut@CFHOptimizeShape@@QAEHH@Z
?Scale@CFHOptimizeShape@@QAEHHNN@Z
?Zero@CFHOptimizeShape@@QAEHH@Z
?Velet@CFHOptimizeShape@@QAEHH@Z
?Pick@CFHOptimizeShape@@QAEHH@Z
?CalcBound@CShape@@QAEHNVCPoint@@H@Z
?AutoLayer@CFHShapeData@@QAEHMH@Z
?RemoveBodyShape@CFHShapeData@@QAEHXZ
?RemoveEntites@CFHShapeData@@QAEHXZ
?Add@CFHShapeData@@QAEHABV1@@Z
?FILE_ISO@CFHShapeData@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HH0@Z
?SetDash@CFHShapeData@@QAEHNN@Z
?SetRank@CFHShapeData@@QAEHHHNN@Z
?FILE_PLT@CFHShapeData@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HH0@Z
?FILE_Redo@CFHShapeData@@QAEHXZ
?FILE_Undo@CFHShapeData@@QAEHXZ
?IsHaveSel@CFHShapeData@@QAEHXZ
?SetWorkCount@CFHShapeData@@QAEHHH@Z
?DeleteWorkCount@CFHShapeData@@QAEHH@Z
?ClearWorkCount@CFHShapeData@@QAEHH@Z
?RectangleSelected@CFHShapeData@@QAEHXZ
?OppSelect@CFHShapeData@@QAEHXZ
?GroupShape@CFHShapeData@@QAEHH@Z
?DeleteSelect@CFHShapeData@@QAEHXZ
?CopySelect@CFHShapeData@@QAEHXZ
?MirrorSel@CFHShapeData@@QAEHXZ
?FILE_OPERATE_ReUndo@CFHShapeData@@QAEHHNVCPoint@@H@Z
?SetAllSign@CFHShapeData@@QAEHH@Z
?SaveFile@CFHMainData@@QAEHXZ
?FILE_AutoTemp@CFHShapeData@@QAEHXZ
?MoveSelect@CFHShapeData@@QAEHNN@Z
?GetHaveSelRect@CFHShapeData@@QAEHAAN000@Z
?AllSelect@CFHShapeData@@QAEHXZ
??0CFHMainData@@QAE@XZ

mfc120u

ord11601
ord11600
ord5557
ord10169
ord10165
ord10167
ord10168
ord10166
ord2718
ord8092
ord3260
ord3263
ord13612
ord6121
ord3122
ord3361
ord3362
ord4049
ord11271
ord12006
ord8242
ord12755
ord4814
ord266
ord280
ord820
ord1349
ord2341
ord13115
ord7704
ord13404
ord6652
ord3761
ord3641
ord6696
ord12957
ord2711
ord14432
ord3831
ord2952
ord8627
ord4181
ord3147
ord6123
ord13616
ord2719
ord9012
ord12095
ord9137
ord6032
ord9090
ord6491
ord1471
ord999
ord1176
ord3650
ord3654
ord6452
ord1130
ord8693
ord8247
ord1520
ord3129
ord13997
ord2967
ord5824
ord285
ord2948
ord12510
ord7930
ord498
ord9299
ord13135
ord13991
ord14457
ord3773
ord12956
ord365
ord1108
ord8920
ord10895
ord12047
ord5865
ord6402
ord6922
ord3634
ord12966
ord13822
ord2347
ord2343
ord7331
ord982
ord1457
ord2204
ord2303
ord2348
ord7543
ord14406
ord1987
ord4895
ord1141
ord4672
ord4692
ord8059
ord5495
ord5488
ord2954
ord5491
ord2844
ord1684
ord12625
ord2823
ord12792
ord10260
ord9020
ord992
ord1467
ord819
ord7881
ord2163
ord949
ord13771
ord4546
ord1521
ord6758
ord10131
ord5667
ord12799
ord4899
ord12126
ord10314
ord8099
ord12122
ord12114
ord5821
ord3809
ord6252
ord14527
ord6253
ord14528
ord6251
ord14526
ord7884
ord12402
ord14326
ord11858
ord11857
ord1992
ord7825
ord12818
ord4047
ord4109
ord9279
ord14454
ord7806
ord14448
ord12413
ord12412
ord2444
ord5262
ord8206
ord12736
ord8268
ord8352
ord1043
ord306
ord12431
ord5022
ord5019
ord8346
ord6404
ord1447
ord973
ord970
ord1444
ord11847
ord12300
ord2857
ord2173
ord4842
ord10919
ord501
ord1140
ord4050
ord5485
ord6219
ord2130
ord12430
ord265
ord6128
ord8773
ord8639
ord14459
ord6436
ord1688
ord1648
ord4891
ord4928
ord4916
ord4883
ord4932
ord4905
ord4867
ord4874
ord4909
ord4459
ord9574
ord4451
ord3013
ord14449
ord7807
ord14455
ord6774
ord11592
ord13563
ord5838
ord2640
ord11999
ord3898
ord462
ord7004
ord1508
ord3330
ord3329
ord3223
ord12043
ord5157
ord5454
ord11964
ord3795
ord11811
ord14447
ord8846
ord6875
ord10883
ord3224
ord13738
ord12134
ord12132
ord1711
ord1723
ord1731
ord1727
ord1736
ord4879
ord4920
ord7542
ord4887
ord5664
ord9231
ord5430
ord5693
ord5160
ord5316
ord5137
ord7609
ord7610
ord7600
ord5314
ord8101
ord10136
ord9091
ord4754
ord14367
ord2843
ord2832
ord2336
ord4573
ord1057
ord346
ord11837
ord1139
ord500
ord1687
ord1518
ord9116
ord8921
ord12048
ord10896
ord3790
ord3821
ord12958
ord13907
ord358
ord13153
ord12941
ord2480
ord6389
ord2478
ord1105
ord450
ord1386
ord887
ord9938
ord4843
ord1506
ord286
ord14094
ord5327
ord8699
ord10353
ord7384
ord3766
ord1110
ord6392
ord6469
ord3839
ord296
ord2367
ord1042
ord4772
ord2262
ord503
ord4048
ord12094

msvcr120

rand
srand
_CIatan2
_CxxThrowException
__CxxFrameHandler3
_libm_sse2_cos_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_mktime64
exit
_localtime64_s
wcsftime
_time64
memcpy
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
_except_handler4_common
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??1type_info@@UAE@XZ
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
memset
isalnum
?terminate@@YAXXZ
_recalloc
calloc
free
_resetstkoflw
malloc
setlocale
memcpy_s
_wtof

kernel32

DeleteFileW
InterlockedExchange
GetFileAttributesW
GetProcAddress
WaitForSingleObject
CreateProcessW
CopyFileW
OutputDebugStringW
GetCurrentProcess
SetPriorityClass
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TerminateThread
GetLastError
Sleep
GetModuleHandleW
GetModuleFileNameW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
WriteFile
ReadFile
CancelIo
CreateFileA
LocalFree
LocalAlloc
LoadLibraryA
GetLocalTime
GetTickCount
CreateEventA
CloseHandle
ReleaseMutex
CreateMutexA
DecodePointer

user32

PtInRect
InvalidateRect
IsWindowVisible
IntersectRect
EqualRect
EnableWindow
PostMessageW
FrameRect
FillRect
SendMessageW
GetWindow
OffsetRect
GetClientRect
GetKeyState
SetTimer
KillTimer
DrawFrameControl
GetWindowRect
GetClassInfoW
DefWindowProcW
LoadCursorW
DestroyCursor
ClipCursor
GetParent
SetCursor
GetDesktopWindow
IsWindow
GetPropW
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
LoadIconW
GetSystemMenu
AppendMenuW
GetSystemMetrics
DrawIcon
RemovePropW
SetPropW
GetWindowTextW
SetCapture
ReleaseCapture
DrawFocusRect

gdi32

CreateCompatibleDC
BitBlt
CreatePen
CreateSolidBrush
RoundRect
CreateBitmap
PatBlt
SetPixel
StretchBlt
Rectangle
DeleteObject
DeleteDC
SelectObject
SetDIBColorTable
GetObjectW
CreateDIBSection
GetDIBColorTable
CreateCompatibleBitmap

msimg32

TransparentBlt
AlphaBlend

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

comctl32

InitCommonControlsEx
_TrackMouseEvent

ole32

CoInitialize
CoUninitialize

gdiplus

GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown
GdiplusStartup

msvcp120

?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ

Exports

Exports

??0CFHDrawImage@@QAE@ABV0@@Z
??0CFHM_NCCode@@QAE@ABV0@@Z
??0CFHM_NCUnit@@QAE@ABV0@@Z
??0CFHMotion@@QAE@ABV0@@Z
??0CFHNCFileEx@@QAE@ABV0@@Z
??0CFHPumpShow@@QAE@XZ
??1CFHPumpShow@@UAE@XZ
??4CFHACIColor@@QAEAAV0@ABV0@@Z
??4CFHAESModeOfOperation@@QAEAAV0@ABV0@@Z
??4CFHConverUnit@@QAEAAV0@ABV0@@Z
??4CFHDiscriminate@@QAEAAV0@ABV0@@Z
??4CFHFileOperate@@QAEAAV0@ABV0@@Z
??4CFHGetImagePath@@QAEAAV0@ABV0@@Z
??4CFHImageEx@@QAEAAV0@ABV0@@Z
??4CFHLayoutManager@@QAEAAV0@ABV0@@Z
??4CFHM_NCCode@@QAEAAV0@ABV0@@Z
??4CFHM_NCUnit@@QAEAAV0@ABV0@@Z
??4CFHMotion@@QAEAAV0@ABV0@@Z
??4CFHNCFileEx@@QAEAAV0@ABV0@@Z
??4CFHPrintManager@@QAEAAV0@ABV0@@Z
??4CFHQREncode@@QAEAAV0@ABV0@@Z
??4CFHTransShape@@QAEAAV0@ABV0@@Z
??4CSelfShape@@QAEAAV0@ABV0@@Z
??_7CFHM_NCUnit@@6B@
??_7CFHPumpShow@@6B@
??_FCFolderDialog@@QAEXXZ
??_FCSkinDlgFloatPara@@QAEXXZ
?C2W@CBodyShape@@QAEXAAN0VCPoint@@N1H@Z
?C2W@CFHShapeWnd@@QAEXAAN0VCPoint@@@Z
?C2W@CFHShoeListWnd@@QAE?AVCPoint@@HH@Z
?C2W@CFHShoeListWnd@@QAE?AVCPoint@@V2@@Z
?C2W@CFHShoeListWnd@@QAEXAAVCRect@@@Z
?C2W@CSelfShape@@QAEXAAN0VCPoint@@@Z
?C2W@CShape@@QAEXAAN0VCPoint@@N1H@Z
?Corss@CFHMathPoly@@QAENNNNNNN@Z
?GetBI@CFolderDialog@@QAEAAU_browseinfoW@@XZ
?GetBI@CFolderDialog@@QBEABU_browseinfoW@@XZ
?GetBodyShapeSize@CFHShapeData@@QAEHXZ
?GetConnectMode@CFHMotion@@QBEHXZ
?GetEntitesSize@CFHShapeData@@QAEHXZ
?GetFolderImage@CFolderDialog@@QBEHXZ
?GetFolderName@CFolderDialog@@QBEPB_WXZ
?GetFolderPath@CFolderDialog@@QBEPB_WXZ
?GetKeyTip@CMenuItem@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetLayerSize@CFHShapeData@@QAEHXZ
?GetLayers_P@CFHShapeData@@QAEPAVCFHLayers@@XZ
?GetMode@CFHTransShape@@QBEHXZ
?GetName@CMenuItem@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetNameN@CMenuItem@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetNumber@CFHProjectData@@QBEHXZ
?GetPconnectMode@CFHMotion@@QAEPAHXZ
?GetSelectedFolder@CFolderDialog@@QBEPB_WXZ
?GetTip@CMenuItem@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetXMaxIndex@CBodyShape@@QAEHXZ
?GetXMinIndex@CBodyShape@@QAEHXZ
?GetYMaxIndex@CBodyShape@@QAEHXZ
?GetYMinIndex@CBodyShape@@QAEHXZ
?GetpEntites@CFHShapeData@@QAEPAVCObArray@@XZ
?IsConvx@CFHMathPoly@@QAEHNN@Z
?IsCutting@CFHMotion@@QAEHXZ
?IsMiddle@CFHEdage@@QAEHNNN@Z
?IsNearDis@CShape@@QAEHNNN@Z
?MouseInRect@CBodyShape@@QAEHVCRect@@@Z
?MouseInRect@CShape@@QAEHVCRect@@@Z
?NXPL@CFHCollision@@QAENNNNNNN@Z
?NXPLex@CFHCollision@@QAENNNNNNN@Z
?NYPL@CFHCollision@@QAENNNNNNN@Z
?NYPLex@CFHCollision@@QAENNNNNNN@Z
?P2W@CBodyShape@@QAEXAAN0VCPoint@@NNHH@Z
?P2W@CShape@@QAEXAAN0VCPoint@@NNHH@Z
?PTP@CFHEdage@@QAENNNNN@Z
?PTP@CFHMathPoly@@QAENNNNN@Z
?SetCheck@CFHRectButton@@QAEHH@Z
?SetCheck@CFHRectDoubleEdit@@QAEHH@Z
?SetCheck@CFHRectFloatEdit@@QAEHH@Z
?SetConnectMode@CFHMotion@@QAEXH@Z
?SetMode@CFHButton@@QAEXH@Z
?SetMode@CFHChildButton@@QAEXH@Z
?SetOperateStep@CFHShapeData@@QAEXH@Z
?SetReleaeMouse@CFHButton@@QAEXH@Z
?SetReleaeMouse@CFHChildButton@@QAEXH@Z
?SetReleaseMouse@CFHRectButton@@QAEXH@Z
?SetReleaseMouse@CFHRectDoubleEdit@@QAEXH@Z
?SetReleaseMouse@CFHRectFloatEdit@@QAEXH@Z
?SetRemark@CFHPropItem@@QAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetState@CFHRectButton@@QAEXH@Z
?SetState@CFHRectDoubleEdit@@QAEXH@Z
?SetState@CFHRectFloatEdit@@QAEXH@Z
?SetTransParent@CFHButton@@QAEXH@Z
?SetTransParent@CFHChildButton@@QAEXH@Z
?SetTransparent@CFHRectButton@@QAEXH@Z
?SetTransparent@CFHRectDoubleEdit@@QAEXH@Z
?SetTransparent@CFHRectFloatEdit@@QAEXH@Z
?SetXMaxIndex@CBodyShape@@QAEXH@Z
?SetXMinIndex@CBodyShape@@QAEXH@Z
?SetYMaxIndex@CBodyShape@@QAEXH@Z
?SetYMinIndex@CBodyShape@@QAEXH@Z
?UpdateTipString@CFHShapeManagerWnd@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?W2C@CBodyShape@@QAE?AVCPoint@@NNNV2@H@Z
?W2C@CFHShapeWnd@@QAE?AVCPoint@@NN@Z
?W2C@CFHShoeListWnd@@QAE?AVCPoint@@HH@Z
?W2C@CFHShoeListWnd@@QAE?AVCPoint@@V2@@Z
?W2C@CFHShoeListWnd@@QAEXAAVCRect@@@Z
?W2C@CSelfShape@@QAE?AVCPoint@@NN@Z
?W2C@CShape@@QAE?AVCPoint@@NNNV2@H@Z
?W2P@CBodyShape@@QAE?AVCPoint@@NNNNHH@Z
?W2P@CShape@@QAE?AVCPoint@@NNNNHH@Z
?XP2L@CFHCollision@@QAENNNNNNN@Z
?XPL@CFHCollision@@QAENNNNNNN@Z
?XPLex@CFHCollision@@QAENNNNNNN@Z
?YP2L@CFHCollision@@QAENNNNNNN@Z
?YPL@CFHCollision@@QAENNNNNNN@Z
?YPLex@CFHCollision@@QAENNNNNNN@Z
?is_base64@CFHAESModeOfOperation@@AAE_NE@Z

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ca4e51710d3ad66a113e99de5d5d3b1

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

hid

cfhimport

fhimage

fhmotion

fhshapewnd

fhskin

shape

mfc120u

msvcr120

kernel32

user32

gdi32

msimg32

advapi32

comctl32

ole32

gdiplus

msvcp120

Exports

Exports

Sections

.text Size: 327KB - Virtual size: 327KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 12KB - Virtual size: 16KB

.text
Size: 327KB - Virtual size: 327KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 12KB - Virtual size: 16KB