btest[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

btest.exe
Size

750KB
MD5

c444c08180e3a09984e44dbeb9a64618
SHA1

30fad6699608e2acc21089cb3dae7de15fbea64f
SHA256

d972d4742690a44d25bf88f32548584db0d242af6f7b3155a139a4d14d429fd6
SHA512

6443d26d124c7188d7c42833a23b81a339a8736922040fb689b7351e29d38bfd7d4c7e430987aa442456f11d9051fb60240e72e0e88b0a00a587742af9a1a95d
SSDEEP

12288:ZViagJgal0wVihdFLS4RQn8FVmNfpZeC3x+X3I8sAzhPe2YsU6oLU9RgH5ND035h:ZPZafihdFLSg32ZeC30X3I83zQ2Yf6qQ

Score

1^/10

Malware Config

Signatures

Files

btest.exe
.exe windows x86

e3040a895b7ec2efa17cb0e50a53b53c

Code Sign

0d:56:d4:7e:5c:30:43:0c:b5:84:02:d4:b5:e3:92:42
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/02/2020, 00:00

Not After

10/05/2023, 00:00

Subject

SERIALNUMBER=40003286799,CN=Mikrotikls SIA,O=Mikrotikls SIA,L=Riga,C=LV,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024c56

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:fe:bd:2e:1a:68:75:eb:ae:2e:51:1a:50:ab:93:6a:b6:8b:d2:c9:66:f7:46:d5:39:cb:65:2c:c6:5e:3b:ae
Signer

Actual PE Digest

11:fe:bd:2e:1a:68:75:eb:ae:2e:51:1a:50:ab:93:6a:b6:8b:d2:c9:66:f7:46:d5:39:cb:65:2c:c6:5e:3b:ae

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=40003286799,CN=Mikrotikls SIA,O=Mikrotikls SIA,L=Riga,C=LV,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024c56

13/03/2020, 13:02
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA

comctl32

InitCommonControls

gdi32

BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontA
CreateFontIndirectA
CreateHatchBrush
CreatePatternBrush
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
GetCharWidth32A
GetCharWidthA
GetClipBox
GetDIBits
GetObjectA
GetPixel
GetStockObject
GetTextColor
GetTextExtentExPointA
GetTextExtentPoint32A
GetTextMetricsA
IntersectClipRect
LineTo
MoveToEx
OffsetViewportOrgEx
OffsetWindowOrgEx
PtVisible
RectVisible
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetROP2
SetTextColor
TextOutA

kernel32

CloseHandle
CreateDirectoryA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindResourceA
FormatMessageA
GetCommandLineA
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimes
GetTempFileNameA
GetTickCount
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
GlobalSize
GlobalUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadResource
LockResource
MoveFileExA
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

_lseek
_read
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_atoi64
_cexit
_errno
_iob
_isctype
_msize
_onexit
_pctype
_setmode
_snprintf
_ui64toa
abort
atexit
atoi
calloc
exit
fclose
fopen
fputc
fread
free
fseek
fwrite
getenv
gmtime
localeconv
localtime
log10
malloc
memchr
memcmp
memmove
memset
printf
rand
realloc
setlocale
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcpy
strftime
strncmp
strncpy
strtol
strtoul
time
tolower
toupper
vfprintf
wcslen

ole32

CoCreateInstance
DoDragDrop
OleGetClipboard
OleInitialize
OleSetClipboard
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop

user32

AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
CallWindowProcA
ClientToScreen
CloseClipboard
CreateCaret
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DeferWindowPos
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DrawEdge
DrawFocusRect
DrawIconEx
DrawStateA
DrawTextExA
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndPaint
FillRect
FrameRect
GetActiveWindow
GetCapture
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDoubleClickTime
GetFocus
GetKeyState
GetMenuItemCount
GetMessageA
GetParent
GetScrollPos
GetSysColor
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
InsertMenuItemA
IntersectRect
InvalidateRect
KillTimer
LoadBitmapA
LoadCursorA
LoadImageA
LockWindowUpdate
MessageBoxA
OpenClipboard
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindowEx
SendMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetFocus
SetMenuItemInfoA
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
UnionRect
UpdateWindow
WindowFromPoint

ws2_32

WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSAAsyncSelect
WSACancelAsyncRequest
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
htonl
htons
inet_addr
inet_ntoa
listen
ntohl
ntohs
recv
select
send
setsockopt
socket

Exports

Exports

_Z10createEnumPK8MapEntry
_Z10createEnumPPKc
_Z10createFlagP5IIconjRK6string
_Z10createFlagcRK6stringRK5Colori
_Z10createFontPv
_Z10createFontibbbi
_Z10createMenuv
_Z10doDraggingP5IBaseP10ICopyHooksRK5Point
_Z10loadBitmapPvi
_Z10loadCursorPKc
_Z10loadCursorPvi
_Z10openWindowP15IWindowProducerPv
_Z10openWindowP5IBaseRK6string
_Z10packArray8RK6vectorIjE
_Z10unpackDataP6stringRS_
_Z11createGraphP11IGraphModel
_Z11createLabelRK6string
_Z11createMeterv
_Z11createTableb
_Z11dumpFormatsP11IDataObject
_Z11getSettingsjPjj
_Z11isLocalCopyP11IDataObject
_Z11numPairLessP10NumberPairS0_
_Z11packArray16RK6vectorIjE
_Z11removeTimerP13EventListenerPv
_Z11string2enumRK6stringP5IEnumPj
_Z12altConvertorRK6memberRK6vectorIS_ERKS2_I9ReferenceI10IConvertorEERKS2_IjE
_Z12altConvertorRK6vectorI6memberERKS_I9ReferenceI10IConvertorEE
_Z12createBitmapPv
_Z12createHeaderRK6string
_Z12getActiveAppv
_Z12loadSettingsRK6string
_Z12loadSettingsRK6vectorIS_IhEE
_Z12lookupObjectRK6stringS1_jP15IObjectConsumer
_Z12mbr_type_Rawv
_Z12openedWindowP15IWindowProducerPv
_Z12saveSettingsR6vectorIS_IhEE
_Z12saveSettingsv
_Z12smallSetViewRK6stringP10NumberPairP5IEnumbj
_Z12unpackArray8P6stringR6vectorIjE
_Z13arrayAccessorj
_Z13createMDIPaneRK6stringP5IIconii
_Z13createMessagev
_Z13createToolbarbj
_Z13createTooltipRK6string
_Z13enumConvertorP5IEnumjb
_Z13getMainWindowv
_Z13getPersistentP7IWindow
_Z13number2stringjj
_Z13unpackArray16P6stringR6vectorIjE
_Z14createCheckBoxRK6string
_Z14createComboBoxP5IEnumb
_Z14createDeckPanev
_Z14createFlowPaneib
_Z14createGridPaneii
_Z14createLightBoxRK6string
_Z14createMsgEventP5IBasejl
_Z14createStockPeni
_Z14createTextEditbb
_Z14integer2stringi
_Z14mbr_type_Arrayv
_Z14processMessageP9IAppHooks
_Z14queryInterfaceRK5_GUIDPPvS1_P8IUnknown
_Z14removeSettingsj
_Z14showMessageBoxRK6stringS1_P13EventListener
_Z15copyToClipboardP5IBaseP10ICopyHooks
_Z15createCOMObject5_GUIDS_
_Z15createEnumEventN10IEnumEvent9EventTypeEjb
_Z15createFieldPanev
_Z15createPopupMenuv
_Z15createRadioBandv
_Z15createScrollBarb
_Z15createSeparatorb
_Z15createStaticBoxRK6stringj
_Z15createStatusBarv
_Z15createStockFonti
_Z15loadAllSettingsv
_Z15mbr_type_stringv
_Z15removeTimerByIDj
_Z15saveAllSettingsv
_Z15showProgressBoxRK6stringS1_P13EventListener
_Z15showQuestionBoxRK6stringS1_P13EventListener
_Z16createDataObjectP10ICopyHooks
_Z16createFramedPaneRK6string
_Z16createHatchBrushiRK5Color
_Z16createMessageBoxRK6stringS1_
_Z16createNullWindowjP13EventListener
_Z16createOneTabPanev
_Z16createSolidBrushRK5Color
_Z16createStatusTextP10IStatusBarj
_Z16createStockBrushi
_Z16createTabbedPanev
_Z16getAnsiFixedFontv
_Z16integerConvertoriiii
_Z16mbr_type_genericj
_Z16postfixConvertorP10IConvertorRK6string
_Z16registerProviderRK6stringP15IObjectProvider
_Z17createProgressBoxRK6stringS1_
_Z17createQuestionBoxRK6stringS1_
_Z17createRadioButtonRK6stringP10IRadioBand
_Z17createWidgetEventP5IBase
_Z17createWindowClassRK6stringjPvP5IIconii
_Z17createWindowEventP7IWindowji
_Z17getDefaultGUIFontv
_Z17getWindowNotifierv
_Z17haltWindowManagerv
_Z17initWindowManagerP19IWindowManagerHooksP8IMessage
_Z17mbr_type_BigArrayv
_Z17showBigMessageBoxRK6stringS1_
_Z17stopWindowManagerP8IMessage
_Z17tristateConvertorP10IConvertor
_Z18createBalancedPanei
_Z18createPatternBrushPvi
_Z18fitWindowInMonitorR4RectRK5Point
_Z18fitWindowInTheRectR4RectRK5PointRKS_
_Z18getDefaultBoldFontv
_Z18loadIconFromBitmapPvi
_Z18pasteFromClipboardP5IBaseP11IPasteHooks
_Z18registerDropTargetP5IBaseP11IPasteHooks
_Z18registerPersistentP5IBaseP11IPersistent
_Z18sizeOfAllocatedMemPv
_Z18unregisterProviderRK6stringP15IObjectProvider
_Z19createBigMessageBoxRK6stringS1_
_Z19createBoundsContextv
_Z19createIPAddressEditv
_Z19mbr_type_NumberPairv
_Z20createActiveXControlP7IWindowRK5_GUIDPP8IUnknownP11IStatusText
_Z20createCompactButtonsP5IIconS0_jii
_Z20createSurroundedPaneii
_Z20dateAndTimeConvertorb
_Z20getDefaultItalicFontv
_Z20unregisterDropTargetP5IBase
_Z20unregisterPersistentP5IBaseP11IPersistent
_Z21createArrayGraphModelPvjP10IConvertorjj
_Z23createSlidingGraphModeljP10IConvertor
_Z23createSlidingGraphModeljRK6string
_Z24createDataRateGraphModelj
_Z4endlR7ostream
_Z4initR6member
_Z4initR6memberRKS_
_Z4initR6memberjP11member_type
_Z6assignR6memberRKS_
_Z7destroyR6member
_Z7getDataP11IDataObjectjPv
_Z7getDataP11IDataObjectjPvj
_Z7hasDataP11IDataObjectj
_Z7setDataP11IDataObjectjPvj
_Z7setViewRK6stringP10NumberPairP5IEnumj
_Z7stopAppP9IAppHooks
_Z8addTimerjP13EventListenerPvb
_Z8enumViewRK6stringP6NumberP5IEnumbb
_Z8hasTimerP13EventListenerPv
_Z8loadIconPvi
_Z8packDataRK6string
_Z8packDataj
_Z8startAppPvP9IAppHooksRK6string
_Z8textViewRK6stringPvP10IConvertorjj
_Z9addSourceP11IDataObjectP5IBase
_Z9addTargetP11IDataObjectP5IBase
_Z9createPenRK5Color
_Z9createPeniiRK5Color
_ZN10IConvertor10getTooltipERK6string
_ZN10IConvertor10setNoValueEPv
_ZN10IConvertor11getCategoryEPv
_ZN10IConvertor11hasOptValueEPv
_ZN10IConvertor15getCategoryNameEPv
_ZN10IConvertor4castEj
_ZN10IConvertor8getAttrsEPv
_ZN10IConvertorD0Ev
_ZN10IConvertorD1Ev
_ZN10IConvertorD2Ev
_ZN11IFramedPane10setMarginsERK6Insets
_ZN11IFramedPane11computeSizeEii
_ZN11IFramedPane12getFrameRectEv
_ZN11IFramedPane13setForegroundERK5Color
_ZN11IFramedPane14getHeadingSizeEv
_ZN11IFramedPane14setColumnWidthEj
_ZN11IFramedPane18minimumColumnWidthEv
_ZN11IFramedPane4castEj
_ZN11IFramedPane5paintEP3IDC
_ZN11IFramedPane6layoutEv
_ZN11IFramedPane6setTopEP7IWindow
_ZN11IFramedPane7realizeEP7IWindow
_ZN11IFramedPane7setTextERK6string
_ZN11IFramedPane9setCenterEP7IWindow
_ZN11IFramedPaneC1ERK6string
_ZN11IFramedPaneC2ERK6string
_ZN11IFramedPaneD0Ev
_ZN11IFramedPaneD1Ev
_ZN11IFramedPaneD2Ev
_ZN11vector_base10insert_rawEPcjj
_ZN11vector_base11reserve_rawEjj
_ZN11vector_base8swap_rawERS_
_ZN11vector_base9erase_rawEPcS0_
_ZN11vector_baseC1Ev
_ZN11vector_baseC2Ev
_ZN11vector_baseD1Ev
_ZN11vector_baseD2Ev
_ZN3ios4setfEjj
_ZN4Rect6extendERK6Insets
_ZN4Rect6moveByEii
_ZN4Rect6narrowERK6Insets
_ZN4RectC1ERK5PointS2_
_ZN4RectC2ERK5PointS2_
_ZN5ColorC1Eiii
_ZN5ColorC2Eiii
_ZN5IView12isValidatingEP13EventListener
_ZN5IView16cancelValidationEv
_ZN5IView4hideEv
_ZN5IView4showEv
_ZN5IView6updateEv
_ZN5IViewD0Ev
_ZN5IViewD1Ev
_ZN5IViewD2Ev
_ZN5PointC1El
_ZN5PointC2El
_ZN6string13allocateBlockEj
_ZN6string15rangeInitializeEPKcS1_
_ZN6string4swapERS_
_ZN6string5clearEv
_ZN6string6assignEPKc
_ZN6string6assignEPKcj
_ZN6string6assignERKS_
_ZN6string6resizeEjc
_ZN6string7compareEPKcS1_S1_S1_
_ZN6string7freeptrEv
_ZN6string7reserveEj
_ZN6string9push_backEc
_ZN6stringC1EOS_
_ZN6stringC1EPKc
_ZN6stringC1EPKcS1_
_ZN6stringC1EPKcj
_ZN6stringC1ERKS_
_ZN6stringC1ERKS_jj
_ZN6stringC1Ejc
_ZN6stringC1Ev
_ZN6stringC2EOS_
_ZN6stringC2EPKc
_ZN6stringC2EPKcS1_
_ZN6stringC2EPKcj
_ZN6stringC2ERKS_
_ZN6stringC2ERKS_jj
_ZN6stringC2Ejc
_ZN6stringC2Ev
_ZN6stringaSEOS_
_ZN6vectorIhE5eraseEPhS1_
_ZN6vectorIhE6assignEPKhS2_
_ZN6vectorIhE6insertEPhPKhS3_
_ZN6vectorIhE6insertEPhjRKh
_ZN6vectorIhE6resizeEjRKh
_ZN6vectorIhE7reserveEj
_ZN6vectorIhEC1EPKhS2_
_ZN6vectorIhEC1ERKS0_
_ZN6vectorIhEC1Ej
_ZN6vectorIhEC1EjRKh
_ZN6vectorIhEC1Ev
_ZN6vectorIhEC2EPKhS2_
_ZN6vectorIhEC2ERKS0_
_ZN6vectorIhEC2Ej
_ZN6vectorIhEC2EjRKh
_ZN6vectorIhEC2Ev
_ZN6vectorIhED1Ev
_ZN6vectorIhED2Ev
_ZN7IWindow10createPaneEPS_
_ZN7IWindow10doRelayoutEv
_ZN7IWindow10findWindowEPv
_ZN7IWindow10fromScreenERK5Point
_ZN7IWindow10getExStyleEv
_ZN7IWindow10hasTabStopEv
_ZN7IWindow10invalidateERK4Rectb
_ZN7IWindow10invalidateEb
_ZN7IWindow10isRealizedEv
_ZN7IWindow10lockUpdateEv
_ZN7IWindow10onCtlColorEjlPl
_ZN7IWindow10onSetFocusEjlPl
_ZN7IWindow10setEnabledEb
_ZN7IWindow10setTabStopEb
_ZN7IWindow10setVisibleEb
_ZN7IWindow10showCursorEb
_ZN7IWindow10windowProcEPvjjl@16
_ZN7IWindow11computeSizeEii
_ZN7IWindow11isMaximizedEv
_ZN7IWindow11isTopWindowEv
_ZN7IWindow11onFocusLostEv
_ZN7IWindow11onKillFocusEjlPl
_ZN7IWindow11onLButtonUpEiRK5Point
_ZN7IWindow11onMouseMoveEiRK5Point
_ZN7IWindow11onRButtonUpEiRK5Point
_ZN7IWindow11postMessageEjjl
_ZN7IWindow11sendMessageEjjl
_ZN7IWindow12createCanvasEPS_iibPv
_ZN7IWindow12createWindowEPS_RK6stringjjPv
_ZN7IWindow12findWindowAtERK5Point
_ZN7IWindow12getLastChildEv
_ZN7IWindow12getTopParentEv
_ZN7IWindow12onMouseWheelEiRK5Pointi
_ZN7IWindow12requestFocusEv
_ZN7IWindow12unlockUpdateEv
_ZN7IWindow12updateCursorEjl
_ZN7IWindow13captureCursorEv
_ZN7IWindow13getBackgroundEv
_ZN7IWindow13getDialogCodeEP6tagMSG
_ZN7IWindow13getForegroundEv
_ZN7IWindow13onLButtonDownEiRK5Point
_ZN7IWindow13onRButtonDownEiRK5Point
_ZN7IWindow13releaseCursorEv
_ZN7IWindow13setBackgroundERK5Color
_ZN7IWindow13setForegroundERK5Color
_ZN7IWindow13showingWindowEb
_ZN7IWindow14getFocusWindowEv
_ZN7IWindow14getTrimmedTextEv
_ZN7IWindow15compactChildrenEv
_ZN7IWindow15createDragImageEP12IDragContextRK5Point
_ZN7IWindow15destroyChildrenEv
_ZN7IWindow15findMouseWindowERK5Point
_ZN7IWindow15onGetMinMaxInfoEjlPl
_ZN7IWindow15processMouseMsgEiRK5PointMS_FbiS2_E
_ZN7IWindow16getChildrenCountEv
_ZN7IWindow16getRestoreBoundsEv
_ZN7IWindow16getTooltipWindowERK5Point
_ZN7IWindow16onSysColorChangeEjlPl
_ZN7IWindow16sysColorsChangedEv
_ZN7IWindow17activateTopParentEv
_ZN7IWindow17clientAreaToFrameERK5Point
_ZN7IWindow17createAlienWindowEPS_Pv
_ZN7IWindow17createLightCanvasEPS_ii
_ZN7IWindow17createLightweightEPS_
_ZN7IWindow17frameToClientAreaERK5Point
_ZN7IWindow17hasCapturedCursorEv
_ZN7IWindow17onLButtonDblClickEiRK5Point
_ZN7IWindow17processDefaultMsgEjjlPl
_ZN7IWindow17processMouseWheelEiRK5Pointi
_ZN7IWindow18addDestroyListenerEP13EventListener
_ZN7IWindow18getVisibleChildrenER6vectorIPS_E
_ZN7IWindow18getWindowPlacementEPv
_ZN7IWindow18onWindowPosChangedEjlPl
_ZN7IWindow18setWindowPlacementEPv
_ZN7IWindow19getClientAreaBoundsEv
_ZN7IWindow21removeDestroyListenerEP13EventListener
_ZN7IWindow23parentVisibilityChangedEb
_ZN7IWindow3addEPS_
_ZN7IWindow4castEj
_ZN7IWindow5onMsgEjjlPl
_ZN7IWindow5paintEP3IDC
_ZN7IWindow6createEPS_
_ZN7IWindow6detachEv
_ZN7IWindow6layoutEv
_ZN7IWindow6onCharEci
_ZN7IWindow6removeEPS_
_ZN7IWindow6updateEv
_ZN7IWindow7destroyEv
_ZN7IWindow7getLongEi
_ZN7IWindow7getTextEv
_ZN7IWindow7hScrollEiRK4Recti
_ZN7IWindow7isShownEv
_ZN7IWindow7onFocusEv
_ZN7IWindow7onKeyUpEii
_ZN7IWindow7onPaintEjlPl
_ZN7IWindow7realizeEPS_
_ZN7IWindow7setLongEil
_ZN7IWindow7setTextERK6string
_ZN7IWindow7vScrollEiRK4Recti
_ZN7IWindow8activateEv
_ZN7IWindow8attachToEPvb
_ZN7IWindow8getChildEPS_
_ZN7IWindow8getClassEv
_ZN7IWindow8getStyleEv
_ZN7IWindow8hasFocusEv
_ZN7IWindow8isActiveEv
_ZN7IWindow8maximizeEb
_ZN7IWindow8onNotifyEjlPl
_ZN7IWindow8paintAllEP3IDC
_ZN7IWindow8relayoutEv
_ZN7IWindow8setStyleEi
_ZN7IWindow8toScreenERK5Point
_ZN7IWindow9destroyedEv
_ZN7IWindow9findChildERK5Point
_ZN7IWindow9getBoundsEv
_ZN7IWindow9getCursorERK5Point
_ZN7IWindow9getHandleEv
_ZN7IWindow9getParentEv
_ZN7IWindow9getZOrderEv
_ZN7IWindow9isEnabledEv
_ZN7IWindow9isVisibleEv
_ZN7IWindow9onCommandEjlPl
_ZN7IWindow9onDestroyEjlPl
_ZN7IWindow9onKeyDownEii
_ZN7IWindow9setBoundsEP14IBoundsContextRK4Recti
_ZN7IWindow9setZOrderEj
_ZN7IWindowC1Ev
_ZN7IWindowC2Ev
_ZN7IWindowD0Ev
_ZN7IWindowD1Ev
_ZN7IWindowD2Ev
_ZN7ostream3putEc
_ZN7ostream5flushEv
_ZN7ostream5seekpEj
_ZN7ostream5seekpEjj
_ZN7ostream5tellpEv
_ZN7ostream5writeEPKcj
_ZN8SysColorC1Ei
_ZN8SysColorC2Ei
_ZNK4Rect4joinERKS_
_ZNK4Rect5scaleERK5Point
_ZNK4Rect8includesERK5Point
_ZNK4Rect9intersectERKS_
_ZNK4RecteqERKS_
_ZNK5Color10brightnessEi
_ZNK6string4copyEPcjj
_ZNK6string6substrEjj
_ZNK6string7compareE11string_view
_ZNK6string7compareEPKc
_ZNK6string7compareERKS_
_ZTC11IFramedPane0_7IWindow
_ZTC11IFramedPane12_7IStatic
_ZTC11IFramedPane8_11IFieldTable
_ZTC5IView0_6IValue
_ZTT10IConvertor
_ZTT11IFramedPane
_ZTT5IView
_ZTT7IWindow
_ZTV10IConvertor
_ZTV11IFramedPane
_ZTV5IView
_ZTV7IWindow
_ZThn12_N11IFramedPane13setForegroundERK5Color
_ZThn12_N11IFramedPane7setTextERK6string
_ZThn12_N11IFramedPaneD0Ev
_ZThn12_N11IFramedPaneD1Ev
_ZThn8_N11IFramedPane14setColumnWidthEj
_ZThn8_N11IFramedPane18minimumColumnWidthEv
_ZThn8_N11IFramedPaneD0Ev
_ZThn8_N11IFramedPaneD1Ev
_ZTv0_n12_N10IConvertorD0Ev
_ZTv0_n12_N10IConvertorD1Ev
_ZTv0_n12_N11IFramedPaneD0Ev
_ZTv0_n12_N11IFramedPaneD1Ev
_ZTv0_n12_N5IViewD0Ev
_ZTv0_n12_N5IViewD1Ev
_ZTv0_n12_N7IWindowD0Ev
_ZTv0_n12_N7IWindowD1Ev
_ZTv0_n16_N10IConvertor4castEj
_ZTv0_n16_N11IFramedPane4castEj
_ZTv0_n16_N7IWindow4castEj
_ZlsR7ostream11string_view
_ZlsR7ostreamP9streambuf
_ZlsR7ostreamPKc
_ZlsR7ostreamPKv
_ZlsR7ostreamRK6string
_ZlsR7ostreamb
_ZlsR7ostreamc
_ZlsR7ostreamd
_ZlsR7ostreami
_ZlsR7ostreamj
_ZlsR7ostreamx
_ZlsR7ostreamy
__cxa_pure_virtual
cerr
cout

Sections

.text
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3040a895b7ec2efa17cb0e50a53b53c

Code Sign

0d:56:d4:7e:5c:30:43:0c:b5:84:02:d4:b5:e3:92:42Certificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

11:fe:bd:2e:1a:68:75:eb:ae:2e:51:1a:50:ab:93:6a:b6:8b:d2:c9:66:f7:46:d5:39:cb:65:2c:c6:5e:3b:aeSigner

Signature Validations

Verification

13/03/2020, 13:02 Valid: false

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

msvcrt

ole32

user32

ws2_32

Exports

Exports

Sections

.text Size: 517KB - Virtual size: 516KB

.data Size: 1024B - Virtual size: 576B

.rdata Size: 108KB - Virtual size: 108KB

.bss Size: - Virtual size: 5KB

.edata Size: 17KB - Virtual size: 16KB

.idata Size: 8KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 47KB - Virtual size: 47KB

0d:56:d4:7e:5c:30:43:0c:b5:84:02:d4:b5:e3:92:42
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

11:fe:bd:2e:1a:68:75:eb:ae:2e:51:1a:50:ab:93:6a:b6:8b:d2:c9:66:f7:46:d5:39:cb:65:2c:c6:5e:3b:ae
Signer

13/03/2020, 13:02
Valid: false

.text
Size: 517KB - Virtual size: 516KB

.data
Size: 1024B - Virtual size: 576B

.rdata
Size: 108KB - Virtual size: 108KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 17KB - Virtual size: 16KB

.idata
Size: 8KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 47KB - Virtual size: 47KB