winbox[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

winbox.exe
Size

1.6MB
MD5

8bdd4dc75d8d47e0b76db4ad182fe8a1
SHA1

609b09495064f63f977697a5a000750952aa0c1d
SHA256

494ce796164c1a2dae4ca37e3ea277866068fd736fbb09dd651cb22923faee5a
SHA512

b6d11086791269b8dbc413224d71f28ab88e3e1822ea0395f514dd5dd690b0501ff8f65d715cc28ffe23a695f536e2268e80636d9b03f559b8f44384cf2acd10
SSDEEP

49152:UyvN6c3uh9cT5SN62WIewnTB2dU9RgH5ND035GCjA+7:Uyl73uh9cT5SZWwWCjA+7

Score

1^/10

Malware Config

Signatures

Files

winbox.exe
.exe windows x86

435501f4864b47816dd3f40cc7fe64b3

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:3d:94:bd:f8:b7:26:31:35:62:df:92:a9:9c:b6:84
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/04/2017, 00:00

Not After

15/04/2020, 12:00

Subject

SERIALNUMBER=40003286799,CN=Mikrotikls SIA,O=Mikrotikls SIA,POSTALCODE=LV1006,STREET=Aizkraukles 23,L=Riga,ST=Riga,C=LV,1.3.6.1.4.1.311.60.2.1.2=#13064c6174766961,1.3.6.1.4.1.311.60.2.1.3=#13024c56,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:f9:b5:b7:04:3a:b3:af:25:16:e8:85:7f:ec:c0:f7:5d:ff:6f:73
Signer

Actual PE Digest

f8:f9:b5:b7:04:3a:b3:af:25:16:e8:85:7f:ec:c0:f7:5d:ff:6f:73

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA

comctl32

InitCommonControls

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontA
CreateFontIndirectA
CreateHatchBrush
CreatePatternBrush
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
GetCharWidth32A
GetCharWidthA
GetClipBox
GetDIBits
GetObjectA
GetPixel
GetStockObject
GetTextColor
GetTextExtentExPointA
GetTextMetricsA
IntersectClipRect
LineTo
MoveToEx
OffsetViewportOrgEx
OffsetWindowOrgEx
PtVisible
RectVisible
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetROP2
SetTextColor
TextOutA

iphlpapi

GetAdaptersAddresses

kernel32

Beep
CloseHandle
CreateDirectoryA
CreateFileA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FormatMessageA
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetFileAttributesA
GetFileSize
GetFileTime
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalLock
GlobalSize
GlobalUnlock
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryExA
LoadResource
LocalFree
LockResource
MoveFileExA
MultiByteToWideChar
OpenFile
QueryPerformanceCounter
ReadFile
RemoveDirectoryA
SetHandleInformation
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile

msvcrt

_lseek
_read
_strdup
_stricmp
_stricoll
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_atoi64
_cexit
_errno
_fullpath
_iob
_isctype
_msize
_onexit
_pctype
_setmode
_snprintf
_stricmp
_ui64toa
abort
atexit
atoi
calloc
exit
fclose
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fwrite
getenv
gmtime
localeconv
localtime
log10
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
perror
puts
rand
realloc
setlocale
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strftime
strlen
strncmp
strncpy
strtol
strtoul
time
tolower
toupper
vfprintf
wcslen
wcstombs

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemFree
DoDragDrop
OleGetClipboard
OleInitialize
OleSetClipboard
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop

shell32

CommandLineToArgvW
DragQueryFileA
SHBrowseForFolderA
SHCreateDirectoryExA
SHGetPathFromIDListA
ShellExecuteA

user32

AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
CallWindowProcA
ClientToScreen
CloseClipboard
CreateCaret
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DeferWindowPos
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DrawEdge
DrawFocusRect
DrawIconEx
DrawStateA
DrawTextExA
DrawTextExW
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndPaint
FillRect
FrameRect
GetActiveWindow
GetCapture
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDoubleClickTime
GetFocus
GetKeyState
GetMenuItemCount
GetMessageA
GetMonitorInfoA
GetParent
GetPropA
GetScrollPos
GetSysColor
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
InsertMenuItemA
IntersectRect
InvalidateRect
IsClipboardFormatAvailable
KillTimer
LoadBitmapA
LoadCursorA
LoadImageA
LockWindowUpdate
MonitorFromRect
OpenClipboard
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
RemovePropA
ScreenToClient
ScrollWindowEx
SendMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetFocus
SetMenu
SetMenuItemInfoA
SetPropA
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
UnionRect
UpdateWindow
WindowFromPoint

wininet

HttpQueryInfoA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetOpenUrlA
InternetReadFileExA
InternetSetStatusCallback

ws2_32

WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSAAsyncSelect
WSACancelAsyncRequest
WSAGetLastError
WSAStartup
bind
closesocket
connect
freeaddrinfo
getaddrinfo
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
ntohl
ntohs
recv
recvfrom
send
sendto
setsockopt
socket

Exports

Exports

_Z10createEnumPK8MapEntry
_Z10createEnumPPKc
_Z10createFlagP5IIconjRK6string
_Z10createFlagcRK6stringRK5Colori
_Z10createFontPv
_Z10createFontibbbi
_Z10createMenuv
_Z10doDraggingP5IBaseP10ICopyHooksRK5Point
_Z10getServicePKcS0_
_Z10loadBitmapPvi
_Z10loadCursorPKc
_Z10loadCursorPvi
_Z10openWindowP15IWindowProducerPv
_Z10openWindowP5IBaseRK6string
_Z10packArray8RK6vectorIjE
_Z10sbigNumberPKc
_Z10sbuttonSepj
_Z10sclockDatePKc
_Z10sclockTimePKc
_Z10scommunityPKc
_Z10sipAddressPKc
_Z10smultiBitsPKc
_Z10sseparatorv
_Z10sstatusBarv
_Z10unpackDataP6stringRS_
_Z11castServiceP8IServicej
_Z11createGraphP11IGraphModel
_Z11createLabelRK6string
_Z11createMeterv
_Z11createProxyP7ILooper
_Z11createTableb
_Z11dumpFormatsP11IDataObject
_Z11enableDebugb
_Z11getSettingsjPjj
_Z11isDebuggingv
_Z11isLocalCopyP11IDataObject
_Z11numPairLessP10NumberPairS0_
_Z11packArray16RK6vectorIjE
_Z11removeTimerP13EventListenerPv
_Z11sbigBitratePKc
_Z11sbigDecimalPKc
_Z11schangeRatePKc
_Z11sfixedPointPKc
_Z11sip6AddressPKc
_Z11smacAddressPKc
_Z11smultiTuplePKc
_Z11snumberListPKc
_Z11sobjectTypePKc
_Z11string2enumRK6stringP5IEnumPj
_Z12altConvertorRK6memberRK6vectorIS_ERKS2_I9ReferenceI10IConvertorEERKS2_IjE
_Z12altConvertorRK6vectorI6memberERKS_I9ReferenceI10IConvertorEE
_Z12createBitmapPv
_Z12createHeaderRK6string
_Z12createPackerv
_Z12getObjectMapPKj
_Z12loadSettingsRK6string
_Z12lookupObjectRK6stringS1_jP15IObjectConsumer
_Z12mbr_type_Rawv
_Z12openedWindowP15IWindowProducerPv
_Z12saveSettingsRK6string
_Z12scolumnAliasPKc
_Z12scontextMenuPKc
_Z12sdateAndTimePKc
_Z12smallSetViewRK6stringP10NumberPairP5IEnumbj
_Z12smultiNumberPKc
_Z12smultiStringPKc
_Z12snumberRangePKc
_Z12snumberTablePKc
_Z12sstringArrayPKc
_Z12unpackArray8P6stringR6vectorIjE
_Z13addToLauncherP10IMenuEntryj
_Z13addToLauncherP13EventListenerRK6stringP5IIconj
_Z13addToLauncherP15IWindowProducerRK6stringP5IIconj
_Z13arrayAccessorj
_Z13createHandlerP13IHandlerHooksj
_Z13createMDIPaneRK6stringP5IIconii
_Z13createMessagev
_Z13createToolbarbj
_Z13createTooltipRK6string
_Z13enumConvertorP5IEnumjb
_Z13getMainWindowv
_Z13getPersistentP7IWindow
_Z13monitorAppletRK6stringP7IObjectRK6memberP10IConvertor
_Z13number2stringjj
_Z13sintegerRangePKc
_Z13smultiNetworkPKc
_Z13unpackArray16P6stringR6vectorIjE
_Z14addToDashboardP7IAppletRK6string
_Z14createCheckBoxRK6string
_Z14createComboBoxP5IEnumb
_Z14createDeckPanev
_Z14createFlowPaneibb
_Z14createGridPaneiib
_Z14createLightBoxRK6string
_Z14createMsgEventP5IBasejl
_Z14createStockPeni
_Z14createTextEditbb
_Z14disableServicePKcS0_
_Z14integer2stringi
_Z14mbr_type_Arrayv
_Z14openCommentForP7IObject
_Z14queryInterfaceRK5_GUIDPPvS1_P8IUnknown
_Z14removeSettingsj
_Z14sbigChangeRatePKc
_Z14showMessageBoxRK6stringS1_P13EventListener
_Z14smultiNetwork6PKc
_Z14smultiTristatePKc
_Z15copyToClipboardP5IBaseP10ICopyHooks
_Z15createCOMObject5_GUIDS_
_Z15createDashboardv
_Z15createEnumEventN10IEnumEvent9EventTypeEjb
_Z15createFieldPanev
_Z15createObjectMapP14IObjectFactoryPKjbj
_Z15createObjectMapPFPvRKN2nv7messageEENS0_6u32_idEPKjbj
_Z15createObjectMapPFPvRKN2nv7messageEEPKjbj
_Z15createPopupMenuv
_Z15createRadioBandv
_Z15createScrollBarb
_Z15createSeparatorb
_Z15createStaticBoxRK6stringj
_Z15createStatusBarv
_Z15createStockFonti
_Z15createTableDatav
_Z15createTablePanebb
_Z15getObjectHolderPKj
_Z15loadAllSettingsRK5Point
_Z15mbr_type_stringv
_Z15removeTimerByIDj
_Z15showProgressBoxRK6stringS1_P13EventListener
_Z15showQuestionBoxRK6stringS1_P13EventListener
_Z15smultiBigNumberPKc
_Z15smultiIPAddressPKc
_Z16createDataObjectP10ICopyHooks
_Z16createDoitWindowP7IObjectRK6stringiS3_S3_
_Z16createFramedPaneRK6string
_Z16createHatchBrushiRK5Color
_Z16createMessageBoxRK6stringS1_
_Z16createNullWindowjP13EventListener
_Z16createObjectGridP7IObjectRK6stringj
_Z16createObjectPaneP7IObjecti
_Z16createOneTabPanev
_Z16createSolidBrushRK5Color
_Z16createStatusTextP10IStatusBarj
_Z16createStockBrushi
_Z16createTabbedPanev
_Z16getAnsiFixedFontv
_Z16getGlobalHandlerv
_Z16integerConvertoriiii
_Z16mbr_type_genericj
_Z16postfixConvertorP10IConvertorRK6string
_Z16registerProviderRK6stringP15IObjectProvider
_Z16sgridMultiNumberPKc
_Z16sip6ZonedAddressPKc
_Z16smultiIP6AddressPKc
_Z16smultilineStringPKc
_Z16snumberRangeListPKc
_Z16storeAllSettingsv
_Z17createFilteredMapP11IGenericMapP9PredicateP14IObjectFactoryb
_Z17createObjectQueryP7IObjectP14IObjectFactoryS0_PKjbj
_Z17createProgressBoxRK6stringS1_
_Z17createQueryWindowP12IObjectQueryibbb
_Z17createQuestionBoxRK6stringS1_
_Z17createRadioButtonRK6stringP10IRadioBand
_Z17createSetupWindowP13ISetupManager
_Z17createSetupWindowP7IObject
_Z17createTableWindowRK6stringb
_Z17createWidgetEventP5IBase
_Z17createWindowClassRK6stringjPvP5IIconii
_Z17createWindowEventP7IWindowji
_Z17getDefaultGUIFontv
_Z17getWindowNotifierv
_Z17mbr_type_BigArrayv
_Z17sbigBitChangeRatePKc
_Z17showBigMessageBoxRK6stringS1_
_Z17sipAddressAndPortPKc
_Z17smultiNumberRangePKc
_Z17tristateConvertorP10IConvertor
_Z18addToLauncherGroupP13EventListenerRK6stringS3_j
_Z18addToLauncherGroupP15IWindowProducerRK6stringS3_j
_Z18createActionWindowP13IObjectActionibP13EventListenerS2_b
_Z18createBalancedPanei
_Z18createContainerMapPFPvRKN2nv7messageEEPKjb
_Z18createMessageEventRKN2nv7messageE
_Z18createObjectActionP7IObjectS0_PKj
_Z18createObjectHolderP7IObjectPKjb
_Z18createObjectWindowP7IObjectibb
_Z18createPatternBrushPvi
_Z18createSetupManagerPFPvRKN2nv7messageEEPKj
_Z18fitWindowInMonitorR4RectRK5Point
_Z18fitWindowInTheRectR4RectRK5PointRKS_
_Z18getDefaultBoldFontv
_Z18initCommentManagerv
_Z18loadIconFromBitmapPvi
_Z18pasteFromClipboardP5IBaseP11IPasteHooks
_Z18registerDropTargetP5IBaseP11IPasteHooks
_Z18registerPersistentP5IBaseP11IPersistent
_Z18unregisterProviderRK6stringP15IObjectProvider
_Z19createBigMessageBoxRK6stringS1_
_Z19createBoundsContextv
_Z19createIPAddressEditv
_Z19getErrorDescriptionjRK6string
_Z19mbr_type_NumberPairv
_Z19smultiTristateArrayPKc
_Z20createActiveXControlP7IWindowRK5_GUIDPP8IUnknownP11IStatusText
_Z20createCompactButtonsP5IIconS0_jiii
_Z20createSurroundedPaneii
_Z20dateAndTimeConvertorbj
_Z20getDefaultItalicFontv
_Z20unregisterDropTargetP5IBase
_Z20unregisterPersistentP5IBaseP11IPersistent
_Z21createArrayGraphModelPvjP10IConvertorjj
_Z22createOrderedObjectMapP14IObjectFactoryPKjbbj
_Z22createOrderedObjectMapPFPvRKN2nv7messageEENS0_6u32_idEPKjbbj
_Z22createOrderedObjectMapPFPvRKN2nv7messageEEPKjbbj
_Z23createSlidingGraphModeljP10IConvertor
_Z23createSlidingGraphModeljRK6string
_Z24createDataRateGraphModelj
_Z25createOrderedContainerMapPFPvRKN2nv7messageEEPKjb
_Z3sasPKc
_Z4cmapPKc
_Z4initR6member
_Z4initR6memberRKS_
_Z4initR6memberjP11member_type
_Z4pathj
_Z4pathjj
_Z4pathjjjj
_Z4sagePKc
_Z4snotPKc
_Z4soptPKc
_Z4ssetPKc
_Z4stabPKc
_Z5cdoitPKc
_Z5cenumP5CEnumS0_
_Z5cenumPK8MapEntry
_Z5cenumPKPKc
_Z5cenumPKj
_Z5cenumRK10enumfilter
_Z5cenumRK10offsetenum
_Z5cenumRK7defenum
_Z5cenumRK8slotenum
_Z5cenumRK9mapfilter
_Z5cenumRK9queryenum
_Z5cenumRK9remapenum
_Z5citemPKc
_Z5ctypev
_Z5pslotPKcP9Predicate
_Z5sboolPKc
_Z5scondPKc
_Z5sdatePKc
_Z5sdeckPKc
_Z5sdeckv
_Z5sdoitPKc
_Z5senumPKc
_Z5sfilePKc
_Z5sflagPKcc
_Z5sunitPKc
_Z6assignR6memberRKS_
_Z6caliasPKc
_Z6concatP4SlotS0_PKc
_Z6concatPKcP4SlotS0_
_Z6concatPKcS0_S0_
_Z6cqueryPKc
_Z6csetupPKc
_Z6saboutv
_Z6saliasPKc
_Z6sbytesPKc
_Z6sgraphPKc
_Z6sgroupPKc
_Z6slabelPKc
_Z6smultiPKc
_Z6stablev
_Z6stuplePKc
_Z6sunionPKc
_Z7cactionPKc
_Z7destroyR6member
_Z7getDataP11IDataObjectjPv
_Z7getDataP11IDataObjectjPvj
_Z7hasDataP11IDataObjectj
_Z7isErrorRKN2nv7messageEPjP6string
_Z7pobjectPKjP9Predicate
_Z7sactivev
_Z7senablev
_Z7setDataP11IDataObjectjPvj
_Z7sfilterPKcP5CEnum
_Z7skbytesPKc
_Z7snumberPKc
_Z7sprefixPKc
_Z7spresetv
_Z7sscriptPKc
_Z7ssecretPKc
_Z7sstatusPKc
_Z7sstatusv
_Z7sstringPKc
_Z7stogglePKc
_Z8addTimerjP13EventListenerPvb
_Z8enumViewRK6stringP6NumberP5IEnumbb
_Z8getLoginv
_Z8hasTimerP13EventListenerPv
_Z8loadIconPvi
_Z8packDataRK6string
_Z8packDataj
_Z8saddressPKc
_Z8sautosetPKc
_Z8sbigUnitPKc
_Z8sbitratePKc
_Z8scommentv
_Z8sdecimalPKc
_Z8sdynamicv
_Z8sintegerPKc
_Z8sinvalidv
_Z8slotListv
_Z8snetmaskPKc
_Z8snetworkPKc
_Z8snumflagv
_Z8stoolbarv
_Z8sversionPKc
_Z8textViewRK6stringPvP10IConvertorjj
_Z9addSourceP11IDataObjectP5IBase
_Z9addTargetP11IDataObjectP5IBase
_Z9createPenRK5Color
_Z9createPeniiRK5Color
_Z9cterminalPKc
_Z9getLooperv
_Z9sbigBytesPKc
_Z9sgraphBoxv
_Z9sgridCellPKc
_Z9showErrorRK6stringRKN2nv7messageE
_Z9showErrorRK6stringS1_
_Z9sintervalPKc
_Z9smultiRawPKc
_Z9snetwork6PKc
_Z9spasswordPKc
_Z9stristatePKc
_ZN10IConvertor4castEj
_ZN10SBigNumber2idEN2nv6u64_idE
_ZN10SIPAddress2idEN2nv7be32_idE
_ZN10SStatusBar3addER5ASlot
_ZN10SStatusBar4pathEjj
_ZN10SStatusBar4pathEjjj
_ZN11IFramedPane10setMarginsERK6Insets
_ZN11IFramedPane11computeSizeEii
_ZN11IFramedPane12getFrameRectEv
_ZN11IFramedPane13setForegroundERK5Color
_ZN11IFramedPane14getHeadingSizeEv
_ZN11IFramedPane14setColumnWidthEj
_ZN11IFramedPane18minimumColumnWidthEv
_ZN11IFramedPane4castEj
_ZN11IFramedPane5paintEP3IDC
_ZN11IFramedPane6layoutEv
_ZN11IFramedPane6setTopEP7IWindow
_ZN11IFramedPane7realizeEP7IWindow
_ZN11IFramedPane7setTextERK6string
_ZN11IFramedPane9setCenterEP7IWindow
_ZN11IFramedPaneC1ERK6string
_ZN11IFramedPaneC2ERK6string
_ZN11IFramedPaneD0Ev
_ZN11IFramedPaneD1Ev
_ZN11IFramedPaneD2Ev
_ZN11SFixedPoint2idEN2nv6u32_idE
_ZN11SIP6Address2idEN2nv8addr6_idE
_ZN11SMACAddress13randomDefaultEv
_ZN11SMACAddress2idEN2nv6raw_idE
_ZN11SMACAddress3defEh
_ZN11SMultiTuple3addER6AMulti
_ZN11SMultiTuple3sepEPKc
_ZN11SMultiTupleC1Ev
_ZN11SMultiTupleC2Ev
_ZN11SMultiTupleD0Ev
_ZN11SMultiTupleD1Ev
_ZN11SMultiTupleD2Ev
_ZN11SNumberList15createConvertorEv
_ZN11SNumberList15createFilterForEP5IEnum
_ZN11SNumberList18getColumnAlignmentEv
_ZN11SNumberList2idEN2nv12u32_array_idE
_ZN11SNumberList4copyEPvPKv
_ZN11SNumberList4ctorEPv
_ZN11SNumberList4dtorEPv
_ZN11SNumberList6getMbrEv
_ZN11SNumberList7realizeEP10SlotMaster
_ZN11SNumberListC1Ev
_ZN11SNumberListC2Ev
_ZN11SNumberListD0Ev
_ZN11SNumberListD1Ev
_ZN11SNumberListD2Ev
_ZN12ObjectMapRef12getObjectMapEv
_ZN12ObjectMapRefC1Ejj
_ZN12ObjectMapRefC2Ejj
_ZN12SContextMenu4linkEPKcS1_P13SlotConvertorb
_ZN12SContextMenu4openEPKcS1_S1_
_ZN12SDateAndTime13getFieldWidthEv
_ZN12SDateAndTime15createConvertorEv
_ZN12SDateAndTime2idEN2nv6u32_idE
_ZN12SDateAndTime2idEN2nv6u32_idES1_
_ZN12SDateAndTime4copyEPvPKv
_ZN12SDateAndTime4ctorEPv
_ZN12SDateAndTime6getMbrEv
_ZN12SDateAndTime7realizeEP10SlotMaster
_ZN12SDateAndTimeC1Ev
_ZN12SDateAndTimeC2Ev
_ZN12SDateAndTimeD0Ev
_ZN12SDateAndTimeD1Ev
_ZN12SDateAndTimeD2Ev
_ZN12SMultiNumber2idEN2nv12u32_array_idE
_ZN12SMultiNumber2idEN2nv13bool_array_idE
_ZN12SMultiNumber4copyEPvPKv
_ZN12SMultiNumber4ctorEPv
_ZN12SMultiNumber4dtorEPv
_ZN12SMultiNumber5optIDEN2nv12u32_array_idE
_ZN12SMultiNumber5optIDEN2nv7bool_idENS0_12u32_array_idE
_ZN12SMultiNumber6getMbrEv
_ZN12SMultiNumber7realizeEP10SlotMaster
_ZN12SMultiNumberC1Ev
_ZN12SMultiNumberC2Ev
_ZN12SMultiNumberD0Ev
_ZN12SMultiNumberD1Ev
_ZN12SMultiNumberD2Ev
_ZN12SMultiString2idEN2nv15string_array_idE
_ZN12SMultiString5optIDEN2nv15string_array_idE
_ZN12SMultiString5optIDEN2nv7bool_idENS0_15string_array_idE
_ZN12SNumberRange15createConvertorEv
_ZN12SNumberRange15createFilterForEP5IEnum
_ZN12SNumberRange18getColumnAlignmentEv
_ZN12SNumberRange2idEN2nv6u32_idES1_
_ZN12SNumberRange4copyEPvPKv
_ZN12SNumberRange4ctorEPv
_ZN12SNumberRange6getMbrEv
_ZN12SNumberRange7realizeEP10SlotMaster
_ZN12SNumberRangeC1Ev
_ZN12SNumberRangeC2Ev
_ZN12SNumberRangeD0Ev
_ZN12SNumberRangeD1Ev
_ZN12SNumberRangeD2Ev
_ZN13SIntegerRange2idEN2nv6u32_idES1_
_ZN13SMultiNetwork2idEN2nv13be32_array_idE
_ZN13SMultiNetwork2idEN2nv13be32_array_idES1_
_ZN13SMultiNetwork4copyEPvPKv
_ZN13SMultiNetwork4ctorEPv
_ZN13SMultiNetwork4dtorEPv
_ZN13SMultiNetwork5optIDEN2nv7bool_idENS0_13be32_array_idES2_
_ZN13SMultiNetwork6getMbrEv
_ZN13SMultiNetwork7realizeEP10SlotMaster
_ZN13SMultiNetworkC1Ev
_ZN13SMultiNetworkC2Ev
_ZN13SMultiNetworkD0Ev
_ZN13SMultiNetworkD1Ev
_ZN13SMultiNetworkD2Ev
_ZN13SlotCondition2onEP4SlotP9Predicate
_ZN13SlotCondition2onEP9Predicate
_ZN13SlotCondition2onEPKcP9Predicate
_ZN13SlotCondition2onEPKcS1_P9Predicate
_ZN13SlotCondition4orOnEPKc
_ZN14SMultiNetwork62idEN2nv14addr6_array_idENS0_12u32_array_idE
_ZN14SMultiNetwork65optIDEN2nv7bool_idENS0_14addr6_array_idENS0_12u32_array_idE
_ZN15SMultiBigNumber2idEN2nv12u64_array_idE
_ZN15SMultiIPAddress2idEN2nv13be32_array_idE
_ZN15SMultiIPAddressC1Ev
_ZN15SMultiIPAddressC2Ev
_ZN15SMultiIPAddressD0Ev
_ZN15SMultiIPAddressD1Ev
_ZN15SMultiIPAddressD2Ev
_ZN16SGridMultiNumber2idEN2nv12u32_array_idEj
_ZN16SIP6ZonedAddress2idEN2nv8addr6_idENS0_6u32_idE
_ZN16SMultiIP6Address2idEN2nv14addr6_array_idE
_ZN16SMultiMACNetwork2idEN2nv12raw_array_idES1_
_ZN16SMultiMACNetwork4copyEPvPKv
_ZN16SMultiMACNetwork4ctorEPv
_ZN16SMultiMACNetwork4dtorEPv
_ZN16SMultiMACNetwork5optIDEN2nv7bool_idENS0_12raw_array_idES2_
_ZN16SMultiMACNetwork6getMbrEv
_ZN16SMultiMACNetwork7realizeEP10SlotMaster
_ZN16SMultiMACNetworkC1Ev
_ZN16SMultiMACNetworkC2Ev
_ZN16SMultiMACNetworkD0Ev
_ZN16SMultiMACNetworkD1Ev
_ZN16SMultiMACNetworkD2Ev
_ZN16SNumberRangeList15createConvertorEv
_ZN16SNumberRangeList15createFilterForEP5IEnum
_ZN16SNumberRangeList18getColumnAlignmentEv
_ZN16SNumberRangeList2idEN2nv12u32_array_idE
_ZN16SNumberRangeList4copyEPvPKv
_ZN16SNumberRangeList4ctorEPv
_ZN16SNumberRangeList4dtorEPv
_ZN16SNumberRangeList6getMbrEv
_ZN16SNumberRangeList7realizeEP10SlotMaster
_ZN16SNumberRangeListC1Ev
_ZN16SNumberRangeListC2Ev
_ZN16SNumberRangeListD0Ev
_ZN16SNumberRangeListD1Ev
_ZN16SNumberRangeListD2Ev
_ZN17SIPAddressAndPort2idEN2nv7be32_idENS0_6u32_idE
_ZN17SMultiNumberRange2idEN2nv12u32_array_idE
_ZN17SMultiNumberRange2idEN2nv12u32_array_idES1_
_ZN17SMultiNumberRange4copyEPvPKv
_ZN17SMultiNumberRange4ctorEPv
_ZN17SMultiNumberRange4dtorEPv
_ZN17SMultiNumberRange5optIDEN2nv7bool_idENS0_12u32_array_idES2_
_ZN17SMultiNumberRange6getMbrEv
_ZN17SMultiNumberRange7realizeEP10SlotMaster
_ZN17SMultiNumberRangeC1Ev
_ZN17SMultiNumberRangeC2Ev

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

435501f4864b47816dd3f40cc7fe64b3

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

0c:3d:94:bd:f8:b7:26:31:35:62:df:92:a9:9c:b6:84Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

f8:f9:b5:b7:04:3a:b3:af:25:16:e8:85:7f:ec:c0:f7:5d:ff:6f:73Signer

Headers

File Characteristics

Imports

advapi32

comctl32

comdlg32

gdi32

iphlpapi

kernel32

msvcrt

ole32

shell32

user32

wininet

ws2_32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 245KB - Virtual size: 244KB

/4 Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 7KB

.edata Size: 35KB - Virtual size: 34KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 91KB - Virtual size: 91KB

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

0c:3d:94:bd:f8:b7:26:31:35:62:df:92:a9:9c:b6:84
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

f8:f9:b5:b7:04:3a:b3:af:25:16:e8:85:7f:ec:c0:f7:5d:ff:6f:73
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 245KB - Virtual size: 244KB

/4
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 7KB

.edata
Size: 35KB - Virtual size: 34KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 91KB - Virtual size: 91KB