ImageEditorMain
Static task
static1
Behavioral task
behavioral1
Sample
5003b382fea61b230e8bf3c0d62a4632aad85a3b895aa2053f27749ebe27d4f1.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
5003b382fea61b230e8bf3c0d62a4632aad85a3b895aa2053f27749ebe27d4f1.dll
Resource
win10v2004-20230621-en
General
-
Target
5003b382fea61b230e8bf3c0d62a4632aad85a3b895aa2053f27749ebe27d4f1
-
Size
3.9MB
-
MD5
6baa7e958be17cee02f237b657bdbd55
-
SHA1
bdbef54e1161fd0406968e6afde2286c187746fa
-
SHA256
5003b382fea61b230e8bf3c0d62a4632aad85a3b895aa2053f27749ebe27d4f1
-
SHA512
6bd1fab36c95bca6c2bd547527bc19d62d57aa2369deb2b836f7d95e04ea79f4a79083ffd325ceb36b73bb41f86f14ce3ba9d2877ab539bcece82d7a55fd98db
-
SSDEEP
49152:rGhy1ECOB7BR8WlGp+FBtxwy7qCf9Cxz82yIPjDPC7RfUTjPI3oDP3KSKBjWhwy6:gFBtxCZtHCiD/K/kKQMr79sk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5003b382fea61b230e8bf3c0d62a4632aad85a3b895aa2053f27749ebe27d4f1
Files
-
5003b382fea61b230e8bf3c0d62a4632aad85a3b895aa2053f27749ebe27d4f1.dll windows x64
1f64fb9ac4cdaa19d00a2895b4a7b906
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CreateFileA
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapSize
HeapValidate
UnlockFileEx
GetFullPathNameA
LockFile
OutputDebugStringA
HeapCreate
AreFileApisANSI
FormatMessageW
DeviceIoControl
GetFileSizeEx
LoadLibraryA
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
ReleaseMutex
CreateMutexW
GetEnvironmentVariableW
WideCharToMultiByte
GetSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
SetFilePointer
EncodePointer
OutputDebugStringW
IsDebuggerPresent
DeleteFileA
SetEndOfFile
HeapReAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
FormatMessageA
GetACP
GetSystemInfo
LockResource
InitializeCriticalSection
TryEnterCriticalSection
GetFileAttributesExW
CreateFileW
FindFirstFileW
MulDiv
LoadLibraryW
GetVersionExW
CloseHandle
SetEvent
CreateEventW
WaitForMultipleObjects
lstrcpyW
Sleep
lstrlenW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
SetUnhandledExceptionFilter
LoadLibraryExW
GetTickCount
lstrcmpiW
FreeLibrary
GetModuleHandleW
LocalFree
GetProcAddress
FindResourceW
LoadResource
MultiByteToWideChar
SetErrorMode
GetModuleFileNameW
GetLongPathNameW
GetCommandLineW
SizeofResource
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetFileTime
WriteFile
ReadFile
FindClose
FindNextFileW
lstrcatW
SetLastError
FlushFileBuffers
WaitForSingleObject
GlobalMemoryStatusEx
FreeResource
OpenMutexW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetLocalTime
GetLogicalDriveStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
GetCurrentProcess
QueryDosDeviceW
GetProcessHeap
HeapAlloc
OpenProcess
HeapFree
GetExitCodeProcess
CreateProcessW
GetCurrentProcessId
ResetEvent
MoveFileW
GetTempFileNameW
CopyFileW
MoveFileExW
GetWindowsDirectoryW
GetCurrentDirectoryW
DeleteFileW
SetFileAttributesW
GetTempPathW
GetFullPathNameW
CreateDirectoryW
GetFileTime
GetFileSize
GetVersionExA
GetFileAttributesW
ExpandEnvironmentStringsW
InitializeSListHead
ResumeThread
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
user32
GetWindowRect
ScreenToClient
GetWindowLongW
SetClassLongW
SetCursor
GetWindowLongPtrW
CallWindowProcW
SetWindowPos
IntersectRect
SetRectEmpty
TrackMouseEvent
SetCapture
ReleaseCapture
GetWindowThreadProcessId
GetLastActivePopup
AttachThreadInput
GetForegroundWindow
GetClassNameW
SetForegroundWindow
wsprintfW
FindWindowW
EqualRect
DestroyCursor
GetMenuStringW
InsertMenuW
SetRect
RegisterWindowMessageW
UnionRect
EndDialog
IsWindowEnabled
GetMenuItemInfoW
CheckMenuRadioItem
MessageBoxW
GetMenuItemCount
LoadStringA
SetWindowTextW
MessageBeep
CreatePopupMenu
LoadStringW
SetMenuItemInfoW
MapWindowPoints
SetMenuDefaultItem
DestroyMenu
TranslateAcceleratorW
LoadIconW
TrackPopupMenuEx
RemoveMenu
AppendMenuW
PostQuitMessage
CreateMenu
MonitorFromPoint
GetDC
IsWindowVisible
MonitorFromWindow
GetMonitorInfoW
IsRectEmpty
UpdateLayeredWindow
ReleaseDC
RedrawWindow
SetFocus
SetWindowLongW
IsZoomed
GetDlgItem
InvalidateRect
IsIconic
GetCursorPos
BeginPaint
EndPaint
GetWindow
GetParent
ShowWindow
MoveWindow
GetClientRect
UnregisterClassW
SendMessageW
PostMessageW
GetActiveWindow
LoadImageW
GetClassInfoExW
SystemParametersInfoW
GetDesktopWindow
LoadCursorW
IsWindow
RegisterClassExW
GetSystemMetrics
CreateWindowExW
SetWindowLongPtrW
TranslateMessage
CharNextW
PeekMessageW
DispatchMessageW
DestroyWindow
DefWindowProcW
GetMessageW
KillTimer
SetClipboardData
DestroyCaret
GetClipboardData
CreateCaret
EmptyClipboard
CloseClipboard
SetTimer
OpenClipboard
SetCaretPos
DrawTextW
CopyRect
DialogBoxParamW
GetKeyState
PtInRect
OffsetRect
gdi32
SetBrushOrgEx
SelectClipRgn
SetArcDirection
SetDCBrushColor
SetStretchBltMode
SetROP2
SetDCPenColor
CreateDIBSection
GetTextColor
SetGraphicsMode
SetBkColor
CreateFontIndirectW
SetWorldTransform
CreateSolidBrush
StretchBlt
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SetViewportOrgEx
CreateRectRgn
CreatePolygonRgn
CreateEllipticRgn
CombineRgn
SelectObject
GetStockObject
DeleteDC
GetTextExtentPoint32W
SetTextColor
SetBkMode
DeleteObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
advapi32
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
GetUserNameW
shell32
SHGetFileInfoW
CommandLineToArgvW
DragQueryFileW
DragFinish
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
RevokeDragDrop
CreateStreamOnHGlobal
RegisterDragDrop
CoCreateInstance
oleaut32
VarUI4FromStr
msvcp140
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
comctl32
InitCommonControlsEx
_TrackMouseEvent
msimg32
AlphaBlend
2345miniui
?WindowDefKeyPressed@RCMiniUIDialog@RC@@EEAA_NIII@Z
?Play@RCMiniUIGifView@RC@@QEAAXXZ
?SetItemText@RCMiniUIDialogView@RC@@QEAA_NIAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetItemText@RCMiniUIDialogView@RC@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I@Z
?SetBounds@RCMiniUIView@RC@@QEAAXAEBUtagRECT@@@Z
?GetBounds@RCMiniUIView@RC@@QEBA?AUtagRECT@@XZ
?OnEsc@RCMiniUIDialogView@RC@@UEAAXXZ
?OnEnter@RCMiniUIDialogView@RC@@UEAAXXZ
?DoModal@RCMiniUIDialog@RC@@QEAA_JPEAUHWND__@@_J@Z
?GetGlobalSkinPool@RCMiniUIManner@RC@@SAPEAVRCMiniUISkinPoolInterface@2@XZ
?GetGlobalStylePool@RCMiniUIManner@RC@@SAPEAVRCMiniUIStylePoolInterface@2@XZ
?GetMessageLoop@RCMiniUIAppModule@RC@@QEAAPEAVCMessageLoop@WTL@@XZ
?CreateCurrentThreadMessageLoop@RCMiniUIAppModule@RC@@QEAAXXZ
?Term@RCMiniUIAppModule@RC@@QEAAXXZ
?Init@RCMiniUIAppModule@RC@@QEAAXPEAUHINSTANCE__@@@Z
?Instance@RCMiniUIAppModule@RC@@SAAEAV12@XZ
?GetGolobalStringPool@RCMiniUIResourceManager@RC@@SAPEAVRCMiniUIStringPoolInterface@2@XZ
?GetGolobalFontPool@RCMiniUIResourceManager@RC@@SAPEAVRCMiniUIFontPoolInterface@2@XZ
?ReflectNotifications@?$CWindowImplRoot@VRCMiniAtlWindow@@@ATL@@QEAA_JI_K_JAEAH@Z
?IsChecked@RCMiniUiImgChkBox@RC@@QEAA_NXZ
?SetChecked@RCMiniUiImgChkBox@RC@@QEAAX_N@Z
?GetViewByID@RCMiniUIDialogView@RC@@QEBAPEAVRCMiniUIView@2@H@Z
?OnDialogTimer@RCMiniUIDialogView@RC@@UEAA_NIPEAX@Z
?OnMouseMoveInDialog@RCMiniUIDialogView@RC@@UEAAXAEBVCPoint@WTL@@I@Z
?GetToolTip@RCMiniUIDialogView@RC@@UEAAAEAV?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@XZ
?GetRootView@RCMiniUIDialogView@RC@@UEAAPEAVRCMiniUIView@2@XZ
?BeforeWindowDestroy@RCMiniUIDialogView@RC@@UEAAXXZ
?GetHWND@RCMiniUIDialog@RC@@UEAAPEAUHWND__@@XZ
??1RCMiniUIDialog@RC@@UEAA@XZ
??0RCMiniUIDialog@RC@@QEAA@I@Z
?EndDialog@?$CDialogImpl@VRCMiniUIDialog@RC@@VRCMiniAtlWindow@@@ATL@@QEAAHH@Z
?GetDialogProc@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UEAAP6A_JPEAUHWND__@@I_K_J@ZXZ
?OnFinalMessage@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UEAAXPEAUHWND__@@@Z
?ProcessWindowMessage@RCMiniUIDialog@RC@@UEAAHPEAUHWND__@@I_K_JAEA_JK@Z
?OnDialogSkinChanged@RCMiniUIDialogView@RC@@UEAAXXZ
?OnAnimateHideEnded@RCMiniUIDialogView@RC@@UEAAXXZ
?OnAnimateShowEnded@RCMiniUIDialogView@RC@@UEAAXXZ
?OnMouseLeaveDialog@RCMiniUIDialogView@RC@@UEAAXXZ
?OnMouseEnterDialog@RCMiniUIDialogView@RC@@UEAAXXZ
?OnDropFiles@RCMiniUIDialogView@RC@@UEAAXAEBV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?OnFirstLayouted@RCMiniUIDialogView@RC@@UEAAXXZ
imm32
ImmAssociateContextEx
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmAssociateContext
ImmCreateContext
ImmGetVirtualKey
ImmDestroyContext
gdiplus
GdipGetClipBoundsI
GdipGetMatrixElements
GdipGetClip
GdipDeleteRegion
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipCreateFontFromLogfontW
GdipCreateBitmapFromHBITMAP
GdipDrawRectangle
GdipSetPixelOffsetMode
GdipGetImageEncoders
GdipCreateFromHDC
GdipCreateMatrix
GdipCreateRegion
GdipGetRegionHRgn
GdipGetImageEncodersSize
GdipDrawLineI
GdipSetStringFormatLineAlign
GdipNewInstalledFontCollection
GdipGetFontCollectionFamilyList
GdipGetFontCollectionFamilyCount
GdipCloneFontFamily
GdipGetFamilyName
GdipBitmapGetPixel
GdipResetClip
GdipSetClipHrgn
GdipSetSolidFillColor
GdipTranslateTextureTransform
GdipReleaseDC
GdipGetDC
GdipCreateTexture
GdipResetTextureTransform
GdipCreateFromHWND
GdipMeasureString
GdipDrawImageRectI
GdipTransformPointsI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSetCompositingMode
GdipDrawImageRectRectI
GdipSetClipRectI
GdipCreateBitmapFromFile
GdipSaveImageToFile
GdipCloneImage
GdipDisposeImage
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipGraphicsClear
GdipGetImagePixelFormat
GdipCloneBitmapAreaI
GdipScaleWorldTransform
GdipResetWorldTransform
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipFillPolygonI
GdipSetImageAttributesColorMatrix
GdipSetCompositingQuality
GdipDrawRectangleI
GdipCreateFontFamilyFromName
GdipSaveGraphics
GdipDrawImageRectRect
GdipDrawEllipseI
GdipDisposeImageAttributes
GdipCreateFont
GdipCreateImageAttributes
GdipGetGenericFontFamilySansSerif
GdipDrawLinesI
GdipDrawString
GdipSetImageAttributesWrapMode
GdipFillEllipseI
GdipCloneStringFormat
GdipSetTextRenderingHint
GdipStringFormatGetGenericTypographic
GdipRotateWorldTransform
GdipRestoreGraphics
GdipDeleteStringFormat
GdipFillRectangleI
GdipFillRectangle
GdipDeleteFont
GdipGetImageWidth
GdipTranslateWorldTransform
GdipDeletePen
GdipGetWorldTransform
GdipCreatePen1
GdipDrawImagePointRectI
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteBrush
GdipAlloc
GdipCreateSolidFill
GdipFree
GdipCloneBrush
GdipDeleteMatrix
dbghelp
MiniDumpWriteDump
vcruntime140
memcpy
_purecall
wcsstr
__std_type_info_name
strstr
_CxxThrowException
__std_type_info_destroy_list
memset
__RTDynamicCast
memchr
memcmp
memmove
__std_exception_copy
__std_exception_destroy
strrchr
__std_terminate
__std_type_info_compare
wcsrchr
__C_specific_handler
wcschr
__RTtypeid
__CxxFrameHandler3
api-ms-win-crt-heap-l1-1-0
calloc
_aligned_malloc
_callnewh
_recalloc
malloc
realloc
free
_msize
_aligned_free
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_beginthreadex
_errno
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_crt_atexit
_execute_onexit_table
_endthreadex
_initterm
_cexit
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
__stdio_common_vswscanf
__stdio_common_vswprintf
api-ms-win-crt-string-l1-1-0
wcsncpy_s
wcscpy_s
strncmp
strncpy_s
towlower
towupper
strcmp
wcsncpy
tolower
strcspn
_stricmp
_wcsicmp
_wcsnicmp
api-ms-win-crt-utility-l1-1-0
qsort
rand
srand
api-ms-win-crt-time-l1-1-0
_mktime64
_localtime64
_localtime64_s
_time64
api-ms-win-crt-convert-l1-1-0
_wtoi
_wtof
wcstoul
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
api-ms-win-crt-math-l1-1-0
floor
floorf
acosf
cosf
pow
sinf
sqrt
modf
sqrtf
cos
acos
_dtest
expf
Exports
Exports
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 664KB - Virtual size: 663KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 808KB - Virtual size: 807KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ