TVPaint Animation 11[.]7[.]1 Pro (64bits) (DEMO)[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

TVPaint Animation 11.7.1 Pro (64bits) (DEMO).exe
Size

14.2MB
MD5

b085cc128e4bdd6ca25080eaa4bedd6a
SHA1

06a1a86273320fa7d68a20652945369058cfd9f8
SHA256

ae121082243154b51b0ecdf4e02030f1690ee6995b29f372296dfda31e998c9e
SHA512

05f66bf9d0935b086de1f417b84a2f532e6295ce8268db447f173d8b30ffe158c3ece23cd589534986006a82f69746d1148176e9d0ad7b8e33dde6f95a2a481b
SSDEEP

393216:xecqz41wNu+j74L8NLadW1ISAAa17sCz8M/aRKRiIRCaD8Ar0IAiTRu1rcPfbQuI:xQsGu

Score

1^/10

Malware Config

Signatures

Files

TVPaint Animation 11.7.1 Pro (64bits) (DEMO).exe
.exe windows x64

fb112271e0a420bcbc960ff5bdd1de37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

iphlpapi

IcmpCloseHandle
IcmpCreateFile
IcmpSendEcho
GetAdaptersInfo

advapi32

DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptGetProvParam
RegCloseKey
RegCreateKeyW
RegDeleteValueA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
GetUserNameW
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegSetValueExA
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
CryptGenRandom
CryptDestroyKey
CryptReleaseContext
CryptSetHashParam

comdlg32

GetSaveFileNameW
CommDlgExtendedError
PrintDlgA
GetOpenFileNameW

gdi32

DeleteObject
SetSystemPaletteUse
PolyPolyline
CreateDCA
SetStretchBltMode
SelectPalette
EndDoc
StartPage
EndPage
TextOutA
DeleteDC
CreateCompatibleDC
RealizePalette
GetSystemPaletteEntries
CreatePalette
GetDeviceCaps
GdiFlush
GetPixel
ExtTextOutW
CreateCompatibleBitmap
GetTextMetricsW
SetTextColor
SetMapMode
SetDCPenColor
SetBkColor
Rectangle
GetTextExtentPoint32W
GetStockObject
CreateSolidBrush
CreatePen
GetKerningPairsW
GetTextMetricsA
GetCharacterPlacementW
GetFontLanguageInfo
GetGlyphOutlineW
EnumFontFamiliesExW
CreateFontW
CreateDIBSection
CreateDCW
BitBlt
GetObjectA
CreateBitmap
StartDocA
SelectObject
GetTextFaceW
StretchDIBits

msacm32

acmStreamConvert
acmStreamClose
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen

winmm

sndPlaySoundW
waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen

avifil32

AVIFileExit
AVIFileInit
AVIStreamLength
AVIStreamRead
AVIStreamReadFormat
AVIStreamInfoW
AVIFileInfoW
AVIFileOpenW
AVIStreamGetFrameClose
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIStreamInfoA
AVIStreamRelease
AVIFileGetStream
AVIFileRelease
AVIFileOpenA
AVIFileInfoA

shlwapi

PathMatchSpecW
StrRetToBufW
PathCombineW
PathFindNextComponentW

wsock32

WSACleanup
WSAGetLastError
accept
listen
socket
__WSAFDIsSet
bind
closesocket
setsockopt
WSAStartup
send
select
recvfrom
recv
inet_addr
ioctlsocket
htons
getsockopt
inet_ntoa
connect
sendto

shell32

ord155
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW
SHOpenFolderAndSelectItems
SHBrowseForFolderW
SHParseDisplayName
ShellExecuteW
FindExecutableW
DragQueryFileA
SHFileOperationW
DragAcceptFiles
SHGetMalloc
SHGetFolderLocation

ole32

CoUninitialize
CoCreateGuid
CoInitialize
CoRegisterClassObject
CoCreateFreeThreadedMarshaler
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance

user32

OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
DrawIconEx
DestroyIcon
ClientToScreen
SetCursor
GetUserObjectInformationW
GetProcessWindowStation
EmptyClipboard
MessageBoxW
GetAsyncKeyState
ReleaseDC
GetCursorPos
GetDesktopWindow
GetFocus
MessageBeep
DrawFocusRect
FillRect
GetWindowLongPtrA
SetWindowLongPtrA
SetClassLongPtrA
SetCursorPos
LoadIconA
GetSystemMetrics
wsprintfW
MessageBoxA
DdeInitializeA
DdeUninitialize
DdeConnect
DdeDisconnect
DdeClientTransaction
DdeAccessData
DdeUnaccessData
DdeFreeDataHandle
DdeCreateStringHandleA
DdeFreeStringHandle
GetDC
SystemParametersInfoA
UnregisterClassA
CharNextA
CharNextW
GetMessageW
TranslateMessage
PackDDElParam
GetMouseMovePointsEx
DispatchMessageW
PeekMessageW
SendMessageA
PostMessageA
LoadCursorA
SetWindowTextW
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
AdjustWindowRectEx
GetWindowRect
GetClientRect
RegisterClassExA
InvalidateRect
EndPaint
BeginPaint
GetWindowDC
SetForegroundWindow
SetActiveWindow
UpdateWindow
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetKeyState
IsZoomed
IsIconic
SetWindowPlacement
GetWindowPlacement
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExA

imm32

ImmReleaseContext
ImmGetContext
ImmAssociateContext
ImmCreateContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmNotifyIME
ImmSetCompositionFontA
ImmGetOpenStatus

kernel32

GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetFileAttributesExW
HeapSize
FlushFileBuffers
HeapReAlloc
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
HeapFree
HeapAlloc
SetConsoleCtrlHandler
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
VirtualQuery
VirtualProtect
GetSystemInfo
WriteConsoleW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetConsoleCP
CreateDirectoryW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetDriveTypeW
QueryPerformanceFrequency
LoadLibraryExW
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
GetStringTypeW
LCMapStringW
CompareStringW
EncodePointer
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
CreateEventW
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
ExitProcess
SystemTimeToFileTime
GetSystemTime
ExpandEnvironmentStringsA
PeekNamedPipe
VerifyVersionInfoA
GetSystemDirectoryA
VerSetConditionMask
WaitForSingleObjectEx
FormatMessageA
SetLastError
SleepEx
GetTickCount64
SetConsoleMode
ReadConsoleW
ReadConsoleA
GetConsoleMode
GetEnvironmentVariableW
GlobalMemoryStatus
GetTickCount
QueryPerformanceCounter
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
GetModuleHandleExW
FormatMessageW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetFileType
GetStdHandle
RtlVirtualUnwind
SwitchToThread
GetCurrentProcessId
lstrcmpiA
GlobalGetAtomNameW
GlobalGetAtomNameA
GlobalAddAtomA
WinExec
GlobalDeleteAtom
GlobalMemoryStatusEx
CreateMutexA
SetErrorMode
GetFullPathNameW
IsDBCSLeadByte
FindResourceA
RtlUnwind
SizeofResource
LoadResource
LoadLibraryExA
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
InitializeCriticalSectionEx
RaiseException
DecodePointer
OpenFile
lstrcatA
WideCharToMultiByte
GetACP
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
GetCurrentProcess
SetPriorityClass
VirtualAlloc
VirtualFree
CreateFileW
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
GetFileSizeEx
SetFilePointerEx
SetEvent
WaitForSingleObject
CreateEventA
WaitForMultipleObjects
GetSystemTimeAsFileTime
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetTempPathW
GetModuleFileNameW
GetComputerNameW
GetLocaleInfoW
GetUserDefaultUILanguage
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
GetCurrentThread
SetThreadPriority
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
GetLastError
GetWindowsDirectoryA
LoadLibraryA

oleaut32

RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysStringLen
SysFreeString
SysAllocString
UnRegisterTypeLi

ws2_32

shutdown
htonl
ntohl
gethostname
getpeername
WSASetLastError
getnameinfo
freeaddrinfo
getaddrinfo
ntohs
WSAIoctl
getsockname

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty

wldap32

ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord46
ord143
ord301
ord200
ord30
ord79

normaliz

IdnToAscii

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 10.3MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 451KB - Virtual size: 900KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb112271e0a420bcbc960ff5bdd1de37

Headers

DLL Characteristics

File Characteristics

Imports

iphlpapi

advapi32

comdlg32

gdi32

msacm32

winmm

avifil32

shlwapi

wsock32

shell32

ole32

user32

imm32

kernel32

oleaut32

ws2_32

crypt32

wldap32

normaliz

version

Sections

.text Size: 10.3MB - Virtual size: 10.3MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 451KB - Virtual size: 900KB

.pdata Size: 417KB - Virtual size: 417KB

_RDATA Size: 50KB - Virtual size: 49KB

.rsrc Size: 181KB - Virtual size: 180KB

.text
Size: 10.3MB - Virtual size: 10.3MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 451KB - Virtual size: 900KB

.pdata
Size: 417KB - Virtual size: 417KB

_RDATA
Size: 50KB - Virtual size: 49KB

.rsrc
Size: 181KB - Virtual size: 180KB