winbox[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

winbox.exe
Size

1.6MB
MD5

80ed7311b5ef826e96720a124cb52217
SHA1

63f7b99e99c9ee04519b42e33ec0a70abf8cecc6
SHA256

d31341517794dd369ca1163605460a45dd5643def70429eaed4129045a72069e
SHA512

dabdcf402c64797b7b61f22e43aefe748016e0659497bc780944a934180091d22884fb83bbea1ca8a0a40cad8518cfb4b151f1afa18472cb57dc7d72eadc3142
SSDEEP

49152:W27BKQOEvsRP15RTf27AU9RgH5ND0R5aCjA+49x:W27BTOzRt5miCjA+49x

Score

1^/10

Malware Config

Signatures

Files

winbox.exe
.exe windows x86

b3e72ca8d65110cf08d14b224b2db147

Code Sign

0d:56:d4:7e:5c:30:43:0c:b5:84:02:d4:b5:e3:92:42
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/02/2020, 00:00

Not After

10/05/2023, 00:00

Subject

SERIALNUMBER=40003286799,CN=Mikrotikls SIA,O=Mikrotikls SIA,L=Riga,C=LV,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024c56

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:83:04:d0:0f:24:f7:05:91:63:e2:49:2d:e3:c4:5c:b6:57:a7:1c:9b:93:9a:f1:71:d1:d2:a1:9f:63:8b:1d
Signer

Actual PE Digest

51:83:04:d0:0f:24:f7:05:91:63:e2:49:2d:e3:c4:5c:b6:57:a7:1c:9b:93:9a:f1:71:d1:d2:a1:9f:63:8b:1d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA

comctl32

InitCommonControls

comdlg32

GetOpenFileNameA
GetSaveFileNameA

crypt32

CertGetNameStringA

dbghelp

SymFromAddr
SymGetLineFromAddr64
SymInitialize

gdi32

BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontA
CreateFontIndirectW
CreateHatchBrush
CreatePatternBrush
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
GetCharWidth32A
GetCharWidthA
GetClipBox
GetDIBits
GetDeviceCaps
GetObjectW
GetPixel
GetStockObject
GetTextColor
GetTextExtentExPointA
GetTextMetricsA
IntersectClipRect
LineTo
MoveToEx
OffsetViewportOrgEx
OffsetWindowOrgEx
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetROP2
SetTextColor
TextOutA

iphlpapi

GetAdaptersAddresses

kernel32

Beep
CloseHandle
CreateDirectoryA
CreateFileA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
FileTimeToDosDateTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FormatMessageA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetFileSize
GetFileTime
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalLock
GlobalSize
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryExA
LoadResource
LocalFree
LockResource
MoveFileExA
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RemoveDirectoryA
RtlCaptureStackBackTrace
SetHandleInformation
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile

msvcrt

__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_atoi64
_cexit
_errno
_exit
_initterm
_iob
_msize
_onexit
_snprintf
_stricmp
_ui64toa
_vsnprintf
abort
atoi
calloc
exit
fclose
feof
ferror
fgets
fopen
fprintf
fputs
fread
free
fseek
fwprintf
fwrite
isalnum
isalpha
isdigit
islower
isprint
isspace
isupper
isxdigit
log10
malloc
memchr
memcmp
memcpy
memmove
localtime
gmtime
perror
puts
raise
rand
realloc
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcpy
strftime
strlen
strncmp
strncpy
strtol
strtoul
tolower
toupper
vfprintf
time
wcscpy
_snwprintf
_write
_stricmp
_strdup
_read
_lseek

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemFree
DoDragDrop
OleGetClipboard
OleInitialize
OleSetClipboard
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop

shell32

CommandLineToArgvW
DragQueryFileA
SHBrowseForFolderA
SHCreateDirectoryExA
SHGetPathFromIDListA
ShellExecuteA

user32

AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
CallWindowProcA
ClientToScreen
CloseClipboard
CreateCaret
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DeferWindowPos
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DrawEdge
DrawFocusRect
DrawIconEx
DrawTextExA
DrawTextExW
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndPaint
FillRect
FrameRect
GetActiveWindow
GetCapture
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDoubleClickTime
GetFocus
GetKeyState
GetMenu
GetMenuItemCount
GetMessageA
GetMessagePos
GetMonitorInfoA
GetParent
GetPropA
GetScrollPos
GetSysColor
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
InsertMenuItemA
IntersectRect
InvalidateRect
IsClipboardFormatAvailable
KillTimer
LoadBitmapA
LoadCursorA
LoadImageA
LockWindowUpdate
MessageBoxW
MonitorFromRect
OpenClipboard
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
RemovePropA
ScreenToClient
ScrollWindowEx
SendMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetFocus
SetMenu
SetMenuItemInfoA
SetPropA
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
UnionRect
UpdateWindow
WindowFromPoint

wininet

HttpQueryInfoA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetOpenUrlA
InternetReadFileExA
InternetSetStatusCallback

wintrust

WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WinVerifyTrustEx

ws2_32

WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSAAsyncSelect
WSACancelAsyncRequest
WSAGetLastError
WSAStartup
bind
closesocket
connect
freeaddrinfo
getaddrinfo
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
ntohl
ntohs
recv
recvfrom
send
sendto
setsockopt
socket

Exports

Exports

_Z10createEnumPK8MapEntry
_Z10createEnumPPKc
_Z10createFlagP5IIconjRK6string
_Z10createFlagcRK6stringRK5Colori
_Z10createFontP7HFONT__i
_Z10createFontibbbi
_Z10createMenuv
_Z10doDraggingP5IBaseP10ICopyHooksRK5Point
_Z10getServicePKcS0_
_Z10loadBitmapP11HINSTANCE__i
_Z10loadCursorP11HINSTANCE__i
_Z10loadCursorPKc
_Z10openWindowP15IWindowProducerPv
_Z10openWindowP5IBaseRK6string
_Z10packArray8RK6vectorIjE
_Z10sbigNumberPKc
_Z10sbuttonSepj
_Z10sclockDatePKc
_Z10sclockTimePKc
_Z10scommunityPKc
_Z10sipAddressPKc
_Z10smultiBitsPKc
_Z10sseparatorv
_Z10sstatusBarv
_Z10unpackDataP6stringRS_
_Z11castServiceP8IServicej
_Z11createGraphP11IGraphModel
_Z11createLabelRK6stringb
_Z11createMeterv
_Z11createProxyP7ILooper
_Z11createTableb
_Z11dumpFormatsP11IDataObject
_Z11enableDebugb
_Z11getSettingsjPjj
_Z11isDebuggingv
_Z11isLocalCopyP11IDataObject
_Z11numPairLessP10NumberPairS0_
_Z11packArray16RK6vectorIjE
_Z11removeTimerP13EventListenerPv
_Z11sbigBitratePKc
_Z11sbigDecimalPKc
_Z11schangeRatePKc
_Z11sfixedPointPKc
_Z11sip6AddressPKc
_Z11smacAddressPKc
_Z11smultiTuplePKc
_Z11snumberListPKc
_Z11sobjectTypePKc
_Z11string2enumRK6stringP5IEnumPj
_Z12altConvertorRK6memberRK6vectorIS_ERKS2_I9ReferenceI10IConvertorEERKS2_IjE
_Z12altConvertorRK6vectorI6memberERKS_I9ReferenceI10IConvertorEE
_Z12createBitmapP9HBITMAP__
_Z12createHeaderRK6string
_Z12createPackerv
_Z12getObjectMapPKj
_Z12loadSettingsRK6string
_Z12lookupObjectRK6stringS1_jP15IObjectConsumer
_Z12mbr_type_Rawv
_Z12openedWindowP15IWindowProducerPv
_Z12saveSettingsRK6string
_Z12scolumnAliasPKc
_Z12scontextMenuPKc
_Z12sdateAndTimePKc
_Z12smallSetViewRK6stringP10NumberPairP5IEnumbjb
_Z12smultiNumberPKc
_Z12smultiStringPKc
_Z12snumberRangePKc
_Z12snumberTablePKc
_Z12sstringArrayPKc
_Z12unpackArray8P6stringR6vectorIjE
_Z13addToLauncherP10IMenuEntryj
_Z13addToLauncherP13EventListenerRK6stringP5IIconj
_Z13addToLauncherP15IWindowProducerRK6stringP5IIconj
_Z13arrayAccessorj
_Z13createGridRowP8IGridRowib
_Z13createHandlerP13IHandlerHooksj
_Z13createMDIPaneRK6stringP5IIconii
_Z13createMessagev
_Z13createToolbarb
_Z13createTooltipRK6string
_Z13enumConvertorP5IEnumjb
_Z13getMainWindowv
_Z13getPersistentP7IWindow
_Z13monitorAppletRK6stringP7IObjectRK6memberP10IConvertor
_Z13number2stringjj
_Z13sintegerRangePKc
_Z13smultiNetworkPKc
_Z13unpackArray16P6stringR6vectorIjE
_Z14addToDashboardP7IAppletRK6string
_Z14createCheckBoxRK6string
_Z14createComboBoxP5IEnumb
_Z14createDeckPanev
_Z14createFlowPaneibb
_Z14createGridPaneiib
_Z14createMsgEventP5IBasejl
_Z14createStockPeni
_Z14createTextEditbb
_Z14disableServicePKcS0_
_Z14integer2stringi
_Z14mbr_type_Arrayv
_Z14openCommentForP7IObject
_Z14queryInterfaceRK5_GUIDPPvS1_P8IUnknown
_Z14removeSettingsj
_Z14sbigChangeRatePKc
_Z14showMessageBoxRK6stringS1_P13EventListener
_Z14smultiNetwork6PKc
_Z14smultiTristatePKc
_Z15copyToClipboardP5IBaseP10ICopyHooks
_Z15createCOMObject5_GUIDS_
_Z15createDashboardv
_Z15createEnumEventN10IEnumEvent9EventTypeEjb
_Z15createFieldPaneb
_Z15createObjectMapP14IObjectFactoryPKjbj
_Z15createObjectMapPFPvRKN2nv7messageEENS0_6u32_idEPKjbj
_Z15createObjectMapPFPvRKN2nv7messageEEPKjbj
_Z15createPopupMenuv
_Z15createRadioBandv
_Z15createScrollBarb
_Z15createSeparatorb
_Z15createStackPaneiRK6Insets
_Z15createStaticBoxRK6stringj
_Z15createStatusBarv
_Z15createTableDatav
_Z15createTablePanebb
_Z15getObjectHolderPKj
_Z15loadAllSettingsRK5Point
_Z15mbr_type_stringv
_Z15removeTimerByIDj
_Z15showProgressBoxRK6stringS1_P13EventListener
_Z15showQuestionBoxRK6stringS1_P13EventListener
_Z15smultiBigNumberPKc
_Z15smultiIPAddressPKc
_Z16createDataObjectP10ICopyHooks
_Z16createDoitWindowP7IObjectRK6stringiS3_S3_
_Z16createFramedPaneRK6string
_Z16createHatchBrushiRK5Color
_Z16createMessageBoxRK6stringS1_
_Z16createNullWindowjP13EventListener
_Z16createObjectGridP7IObjectRK6stringj
_Z16createObjectPaneP7IObjectib
_Z16createOneTabPanev
_Z16createSolidBrushRK5Color
_Z16createStatusTextP10IStatusBarj
_Z16createStockBrushi
_Z16createTabbedPanev
_Z16getAnsiFixedFontv
_Z16getGlobalHandlerv
_Z16integerConvertoriiii
_Z16mbr_type_genericj
_Z16postfixConvertorP10IConvertorRK6string
_Z16registerProviderRK6stringP15IObjectProvider
_Z16sgridMultiNumberPKc
_Z16sip6ZonedAddressPKc
_Z16smultiIP6AddressPKc
_Z16smultilineStringPKc
_Z16snumberRangeListPKc
_Z16storeAllSettingsv
_Z17createFilteredMapP11IGenericMapP9PredicateP14IObjectFactoryb
_Z17createObjectQueryP7IObjectP14IObjectFactoryS0_PKjbj
_Z17createProgressBoxRK6stringS1_
_Z17createQueryWindowP12IObjectQueryibbb
_Z17createQuestionBoxRK6stringS1_
_Z17createRadioButtonRK6stringP10IRadioBand
_Z17createSetupWindowP13ISetupManager
_Z17createSetupWindowP7IObject
_Z17createTableWindowRK6stringb
_Z17createWidgetEventP5IBase
_Z17createWindowClassRK6stringjP8HBRUSH__P5IIconii
_Z17createWindowEventP7IWindowji
_Z17getDefaultGUIFontv
_Z17getWindowNotifierv
_Z17mbr_type_BigArrayv
_Z17sbigBitChangeRatePKc
_Z17showBigMessageBoxRK6stringS1_
_Z17sipAddressAndPortPKc
_Z17smultiNumberRangePKc
_Z17tristateConvertorP10IConvertor
_Z18addToLauncherGroupP13EventListenerRK6stringS3_j
_Z18addToLauncherGroupP15IWindowProducerRK6stringS3_j
_Z18createActionWindowP13IObjectActionibP13EventListenerS2_b
_Z18createBalancedPanei
_Z18createContainerMapPFPvRKN2nv7messageEEPKjb
_Z18createMessageEventRKN2nv7messageE
_Z18createObjectActionP7IObjectS0_PKj
_Z18createObjectHolderP7IObjectPKjb
_Z18createObjectWindowP7IObjectibb
_Z18createPatternBrushP11HINSTANCE__i
_Z18createSetupManagerPFPvRKN2nv7messageEEPKj
_Z18fitWindowInMonitorR4RectRK5Point
_Z18fitWindowInTheRectR4RectRK5PointRKS_
_Z18getDefaultBoldFontv
_Z18initCommentManagerv
_Z18loadIconFromBitmapP11HINSTANCE__ii
_Z18pasteFromClipboardP5IBaseP11IPasteHooks
_Z18registerDropTargetP5IBaseP11IPasteHooks
_Z18registerPersistentP5IBaseP11IPersistent
_Z18unregisterProviderRK6stringP15IObjectProvider
_Z19createBigMessageBoxRK6stringS1_
_Z19createBoundsContextv
_Z19createIPAddressEditv
_Z19getErrorDescriptionjRK6string
_Z19mbr_type_NumberPairv
_Z19smultiTristateArrayPKc
_Z20createActiveXControlP7IWindowRK5_GUIDPP8IUnknownP11IStatusText
_Z20createCompactButtonsP5IIconS0_j
_Z20createSurroundedPaneii
_Z20dateAndTimeConvertorbj
_Z20getDefaultItalicFontv
_Z20unregisterDropTargetP5IBase
_Z20unregisterPersistentP5IBaseP11IPersistent
_Z21createArrayGraphModelPvjP10IConvertorjj
_Z22createOrderedObjectMapP14IObjectFactoryPKjbbj
_Z22createOrderedObjectMapPFPvRKN2nv7messageEENS0_6u32_idEPKjbbj
_Z22createOrderedObjectMapPFPvRKN2nv7messageEEPKjbbj
_Z23createSlidingGraphModeljP10IConvertor
_Z23createSlidingGraphModeljRK6string
_Z24createDataRateGraphModelj
_Z25createOrderedContainerMapPFPvRKN2nv7messageEEPKjb
_Z3sasPKc
_Z4cmapPKc
_Z4initR6member
_Z4initR6memberRKS_
_Z4initR6memberjP11member_type
_Z4pathj
_Z4pathjj
_Z4pathjjjj
_Z4sagePKc
_Z4snotPKc
_Z4soptPKc
_Z4ssetPKc
_Z4stabPKc
_Z5cdoitPKc
_Z5cenumP5CEnumS0_
_Z5cenumPK8MapEntry
_Z5cenumPKPKc
_Z5cenumPKj
_Z5cenumRK10enumfilter
_Z5cenumRK10offsetenum
_Z5cenumRK7defenum
_Z5cenumRK8slotenum
_Z5cenumRK9mapfilter
_Z5cenumRK9queryenum
_Z5cenumRK9remapenum
_Z5citemPKc
_Z5ctypev
_Z5pslotPKcP9Predicate
_Z5sboolPKc
_Z5scondPKc
_Z5sdatePKc
_Z5sdeckPKc
_Z5sdeckv
_Z5sdoitPKc
_Z5senumPKc
_Z5sfilePKc
_Z5sflagPKcc
_Z5sunitPKc
_Z6assignR6memberRKS_
_Z6caliasPKc
_Z6concatP4SlotS0_PKc
_Z6concatPKcP4SlotS0_
_Z6concatPKcS0_S0_
_Z6cqueryPKc
_Z6csetupPKc
_Z6saboutv
_Z6saliasPKc
_Z6sbytesPKc
_Z6sgraphPKc
_Z6sgroupPKc
_Z6slabelPKc
_Z6smultiPKc
_Z6stablev
_Z6stuplePKc
_Z6sunionPKc
_Z7cactionPKc
_Z7destroyR6member
_Z7getDataP11IDataObjectjPv
_Z7getDataP11IDataObjectjPvj
_Z7hasDataP11IDataObjectj
_Z7isErrorRKN2nv7messageEPjP6string
_Z7pobjectPKjP9Predicate
_Z7sactivev
_Z7senablev
_Z7setDataP11IDataObjectjPvj
_Z7sfilterPKcP5CEnum
_Z7skbytesPKc
_Z7snumberPKc
_Z7sprefixPKc
_Z7spresetv
_Z7sscriptPKc
_Z7ssecretPKc
_Z7sstatusPKc
_Z7sstatusv
_Z7sstringPKc
_Z7stogglePKc
_Z8addTimerjP13EventListenerPvb
_Z8enumViewRK6stringP6NumberP5IEnumbb
_Z8getLoginv
_Z8hasTimerP13EventListenerPv
_Z8loadIconP11HINSTANCE__i
_Z8packDataRK6string
_Z8packDataj
_Z8saddressPKc
_Z8sautosetPKc
_Z8sbigUnitPKc
_Z8sbitratePKc
_Z8scommentv
_Z8sdecimalPKc
_Z8sdynamicv
_Z8sintegerPKc
_Z8sinvalidv
_Z8slotListv
_Z8snetmaskPKc
_Z8snetworkPKc
_Z8snumflagv
_Z8stoolbarv
_Z8sversionPKc
_Z8textViewRK6stringPvP10IConvertorjj
_Z9addSourceP11IDataObjectP5IBase
_Z9addTargetP11IDataObjectP5IBase
_Z9createPenRK5Color
_Z9createPeniiRK5Color
_Z9cterminalPKc
_Z9getLooperv
_Z9sbigBytesPKc
_Z9sgraphBoxv
_Z9sgridCellPKc
_Z9showErrorRK6stringRKN2nv7messageE
_Z9showErrorRK6stringS1_
_Z9sintervalPKc
_Z9smultiRawPKc
_Z9snetwork6PKc
_Z9spasswordPKc
_Z9stristatePKc
_ZN10IConvertor4castEj
_ZN10SBigNumber2idEN2nv6u64_idE
_ZN10SIPAddress2idEN2nv7be32_idE
_ZN10SStatusBar3addER5ASlot
_ZN10SStatusBar4pathEjj
_ZN10SStatusBar4pathEjjj
_ZN11IFramedPane10setMarginsERK6Insets
_ZN11IFramedPane11computeSizeEii
_ZN11IFramedPane12getFrameRectEv
_ZN11IFramedPane13setForegroundERK5Color
_ZN11IFramedPane14getHeadingSizeEv
_ZN11IFramedPane14setColumnWidthEj
_ZN11IFramedPane18minimumColumnWidthEv
_ZN11IFramedPane4castEj
_ZN11IFramedPane5paintEP3IDC
_ZN11IFramedPane6layoutEv
_ZN11IFramedPane6setTopEP7IWindow
_ZN11IFramedPane7realizeEP7IWindow
_ZN11IFramedPane7setTextERK6string
_ZN11IFramedPane9setCenterEP7IWindow
_ZN11IFramedPaneC1ERK6string
_ZN11IFramedPaneC2ERK6string
_ZN11IFramedPaneD0Ev
_ZN11IFramedPaneD1Ev
_ZN11IFramedPaneD2Ev
_ZN11SFixedPoint2idEN2nv6u32_idE
_ZN11SIP6Address2idEN2nv8addr6_idE
_ZN11SMACAddress13randomDefaultEv
_ZN11SMACAddress2idEN2nv6raw_idE
_ZN11SMACAddress3defEh
_ZN11SMultiTuple3addER6AMulti
_ZN11SMultiTuple3sepEPKc
_ZN11SMultiTupleC1Ev
_ZN11SMultiTupleC2Ev
_ZN11SMultiTupleD0Ev
_ZN11SMultiTupleD1Ev
_ZN11SMultiTupleD2Ev
_ZN11SNumberList15createConvertorEv
_ZN11SNumberList15createFilterForEP5IEnum
_ZN11SNumberList18getColumnAlignmentEv
_ZN11SNumberList2idEN2nv12u32_array_idE
_ZN11SNumberList4copyEPvPKv
_ZN11SNumberList4ctorEPv
_ZN11SNumberList4dtorEPv
_ZN11SNumberList6getMbrEv
_ZN11SNumberList7realizeEP10SlotMaster
_ZN11SNumberListC1Ev
_ZN11SNumberListC2Ev
_ZN11SNumberListD0Ev
_ZN11SNumberListD1Ev
_ZN11SNumberListD2Ev
_ZN12ObjectMapRef12getObjectMapEv
_ZN12ObjectMapRefC1Ejj
_ZN12ObjectMapRefC2Ejj
_ZN12SContextMenu4linkEPKcS1_P13SlotConvertorb
_ZN12SContextMenu4openEPKcS1_S1_
_ZN12SDateAndTime13getFieldWidthEv
_ZN12SDateAndTime15createConvertorEv
_ZN12SDateAndTime2idEN2nv6u32_idE
_ZN12SDateAndTime2idEN2nv6u32_idES1_
_ZN12SDateAndTime4copyEPvPKv
_ZN12SDateAndTime4ctorEPv
_ZN12SDateAndTime6getMbrEv
_ZN12SDateAndTime7realizeEP10SlotMaster
_ZN12SDateAndTimeC1Ev
_ZN12SDateAndTimeC2Ev
_ZN12SDateAndTimeD0Ev
_ZN12SDateAndTimeD1Ev
_ZN12SDateAndTimeD2Ev
_ZN12SMultiNumber2idEN2nv12u32_array_idE
_ZN12SMultiNumber2idEN2nv13bool_array_idE
_ZN12SMultiNumber4copyEPvPKv
_ZN12SMultiNumber4ctorEPv
_ZN12SMultiNumber4dtorEPv
_ZN12SMultiNumber5optIDEN2nv12u32_array_idE
_ZN12SMultiNumber5optIDEN2nv7bool_idENS0_12u32_array_idE
_ZN12SMultiNumber6getMbrEv
_ZN12SMultiNumber7realizeEP10SlotMaster
_ZN12SMultiNumberC1Ev
_ZN12SMultiNumberC2Ev
_ZN12SMultiNumberD0Ev
_ZN12SMultiNumberD1Ev
_ZN12SMultiNumberD2Ev
_ZN12SMultiString2idEN2nv15string_array_idE
_ZN12SMultiString5optIDEN2nv15string_array_idE
_ZN12SMultiString5optIDEN2nv7bool_idENS0_15string_array_idE
_ZN12SNumberRange15createConvertorEv
_ZN12SNumberRange15createFilterForEP5IEnum
_ZN12SNumberRange18getColumnAlignmentEv
_ZN12SNumberRange2idEN2nv6u32_idES1_
_ZN12SNumberRange4copyEPvPKv
_ZN12SNumberRange4ctorEPv
_ZN12SNumberRange6getMbrEv
_ZN12SNumberRange7realizeEP10SlotMaster
_ZN12SNumberRangeC1Ev
_ZN12SNumberRangeC2Ev
_ZN12SNumberRangeD0Ev
_ZN12SNumberRangeD1Ev
_ZN12SNumberRangeD2Ev
_ZN13SIntegerRange2idEN2nv6u32_idES1_
_ZN13SMultiNetwork2idEN2nv13be32_array_idE
_ZN13SMultiNetwork2idEN2nv13be32_array_idES1_
_ZN13SMultiNetwork4copyEPvPKv
_ZN13SMultiNetwork4ctorEPv
_ZN13SMultiNetwork4dtorEPv
_ZN13SMultiNetwork5optIDEN2nv7bool_idENS0_13be32_array_idES2_
_ZN13SMultiNetwork6getMbrEv
_ZN13SMultiNetwork7realizeEP10SlotMaster
_ZN13SMultiNetworkC1Ev
_ZN13SMultiNetworkC2Ev
_ZN13SMultiNetworkD0Ev
_ZN13SMultiNetworkD1Ev
_ZN13SMultiNetworkD2Ev
_ZN13SlotCondition2onEP4SlotP9Predicate
_ZN13SlotCondition2onEP9Predicate
_ZN13SlotCondition2onEPKcP9Predicate
_ZN13SlotCondition2onEPKcS1_P9Predicate
_ZN13SlotCondition4orOnEPKc
_ZN14SMultiNetwork62idEN2nv14addr6_array_idENS0_12u32_array_idE
_ZN14SMultiNetwork65optIDEN2nv7bool_idENS0_14addr6_array_idENS0_12u32_array_idE
_ZN15SMultiBigNumber2idEN2nv12u64_array_idE
_ZN15SMultiIPAddress2idEN2nv13be32_array_idE
_ZN15SMultiIPAddressC1Ev
_ZN15SMultiIPAddressC2Ev
_ZN15SMultiIPAddressD0Ev
_ZN15SMultiIPAddressD1Ev
_ZN15SMultiIPAddressD2Ev
_ZN16SGridMultiNumber2idEN2nv12u32_array_idEj
_ZN16SIP6ZonedAddress2idEN2nv8addr6_idENS0_6u32_idE
_ZN16SMultiIP6Address2idEN2nv14addr6_array_idE
_ZN16SMultiMACNetwork2idEN2nv12raw_array_idES1_
_ZN16SMultiMACNetwork4copyEPvPKv
_ZN16SMultiMACNetwork4ctorEPv
_ZN16SMultiMACNetwork4dtorEPv
_ZN16SMultiMACNetwork5optIDEN2nv7bool_idENS0_12raw_array_idES2_
_ZN16SMultiMACNetwork6getMbrEv
_ZN16SMultiMACNetwork7realizeEP10SlotMaster
_ZN16SMultiMACNetworkC1Ev
_ZN16SMultiMACNetworkC2Ev
_ZN16SMultiMACNetworkD0Ev
_ZN16SMultiMACNetworkD1Ev
_ZN16SMultiMACNetworkD2Ev
_ZN16SNumberRangeList15createConvertorEv
_ZN16SNumberRangeList15createFilterForEP5IEnum
_ZN16SNumberRangeList18getColumnAlignmentEv
_ZN16SNumberRangeList2idEN2nv12u32_array_idE
_ZN16SNumberRangeList4copyEPvPKv
_ZN16SNumberRangeList4ctorEPv
_ZN16SNumberRangeList4dtorEPv
_ZN16SNumberRangeList6getMbrEv
_ZN16SNumberRangeList7realizeEP10SlotMaster
_ZN16SNumberRangeListC1Ev
_ZN16SNumberRangeListC2Ev
_ZN16SNumberRangeListD0Ev
_ZN16SNumberRangeListD1Ev
_ZN16SNumberRangeListD2Ev
_ZN17SIPAddressAndPort2idEN2nv7be32_idENS0_6u32_idE
_ZN17SMultiNumberRange2idEN2nv12u32_array_idE
_ZN17SMultiNumberRange2idEN2nv12u32_array_idES1_
_ZN17SMultiNumberRange4copyEPvPKv
_ZN17SMultiNumberRange4ctorEPv
_ZN17SMultiNumberRange4dtorEPv
_ZN17SMultiNumberRange5optIDEN2nv7bool_idENS0_12u32_array_idES2_
_ZN17SMultiNumberRange6getMbrEv
_ZN17SMultiNumberRange7realizeEP10SlotMaster
_ZN17SMultiNumberRangeC1Ev
_ZN17SMultiNumberRangeC2Ev

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3e72ca8d65110cf08d14b224b2db147

Code Sign

0d:56:d4:7e:5c:30:43:0c:b5:84:02:d4:b5:e3:92:42Certificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

51:83:04:d0:0f:24:f7:05:91:63:e2:49:2d:e3:c4:5c:b6:57:a7:1c:9b:93:9a:f1:71:d1:d2:a1:9f:63:8b:1dSigner

Headers

File Characteristics

Imports

advapi32

comctl32

comdlg32

crypt32

dbghelp

gdi32

iphlpapi

kernel32

msvcrt

ole32

shell32

user32

wininet

wintrust

ws2_32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 266KB - Virtual size: 265KB

.bss Size: - Virtual size: 6KB

.edata Size: 35KB - Virtual size: 34KB

.idata Size: 10KB - Virtual size: 10KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 169KB - Virtual size: 169KB

.reloc Size: 92KB - Virtual size: 91KB

0d:56:d4:7e:5c:30:43:0c:b5:84:02:d4:b5:e3:92:42
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

51:83:04:d0:0f:24:f7:05:91:63:e2:49:2d:e3:c4:5c:b6:57:a7:1c:9b:93:9a:f1:71:d1:d2:a1:9f:63:8b:1d
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 266KB - Virtual size: 265KB

.bss
Size: - Virtual size: 6KB

.edata
Size: 35KB - Virtual size: 34KB

.idata
Size: 10KB - Virtual size: 10KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 169KB - Virtual size: 169KB

.reloc
Size: 92KB - Virtual size: 91KB