7845fd2b2482c76ccdcaa032255336b54fb89340befad6998f305c400cd5b1b6

Sharing

Copy URL Twitter E-mail

General

Target

7845fd2b2482c76ccdcaa032255336b54fb89340befad6998f305c400cd5b1b6
Size

181KB
MD5

54d17f754689f242977cbbdfe60a4785
SHA1

ac8c9c17b88d44d29b4853874019fcda9e9e5c37
SHA256

7845fd2b2482c76ccdcaa032255336b54fb89340befad6998f305c400cd5b1b6
SHA512

90c3d8f613844428a9357134c43f0e219fbb05f90dd5c5150bea4a9a5419bf9a9f87ee5b6f9859de88836e8fa9e1928bb2b6b8efff4caa2769fcd57eb3dbefbc
SSDEEP

3072:pMEKrXwMFJ/JT4JtTOFLp0RwTDlSGWPiMeXftLmZE3:pMP7TJQwToFPCftLmg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7845fd2b2482c76ccdcaa032255336b54fb89340befad6998f305c400cd5b1b6

Files

7845fd2b2482c76ccdcaa032255336b54fb89340befad6998f305c400cd5b1b6
.dll windows x86

9701abf0456ee170d1f8f734adf47ba0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pbtctrls

?SetColWidth@CCustomGrid@@QAEXHH@Z
?SetRowHeight@CCustomGrid@@QAEXM@Z
?SetCellDefaultBKColor@CCustomGrid@@QAEXK@Z
?SetCellDefaultTextColor@CCustomGrid@@QAEXK@Z
?SetCellDefaultTextFont@CCustomGrid@@QAEXABUtagLOGFONTW@@@Z
?SetCellDefaultTextFormat@CCustomGrid@@QAEXI@Z
?ShowGrid@CCustomGrid@@QAEXH@Z
?SetCols@CCustomGrid@@QAEHHH@Z
?SetActiveCurrCell@CCustomGrid@@QAEXXZ
?AddRows@CCustomGrid@@QAEHHH@Z
?SetCellText@CCustomGrid@@QAEXHHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetCellTextColor@CCustomGrid@@QAEXHHK@Z
?GetActiveCell@CCustomGrid@@QAEHAAH0@Z
??0CCustomGrid@@QAE@XZ
?DeleteRows@CCustomGrid@@QAEHHH@Z
??1CCustomGrid@@UAE@XZ

gdiplus

GdipDeleteGraphics
GdipGetImageHeight
GdipDeleteBrush
GdipCreateSolidFill
GdipCreateFromHDC

mfc120u

ord4838
ord7543
ord1130
ord6452
ord9090
ord6032
ord9137
ord12095
ord2719
ord13616
ord6123
ord6462
ord1471
ord999
ord7331
ord1386
ord887
ord4843
ord14094
ord1049
ord324
ord2480
ord3129
ord7704
ord2948
ord7699
ord286
ord3562
ord9349
ord13404
ord9258
ord358
ord5020
ord7542
ord992
ord1467
ord2265
ord7881
ord6758
ord10131
ord5667
ord12799
ord12094
ord12126
ord10314
ord8099
ord4546
ord12006
ord8921
ord10896
ord11271
ord3362
ord3361
ord3122
ord12122
ord12114
ord7825
ord12818
ord6121
ord13612
ord3263
ord3260
ord8092
ord2718
ord10166
ord10168
ord10167
ord10165
ord10169
ord5557
ord11600
ord11601
ord9020
ord4047
ord5821
ord11811
ord14447
ord8846
ord6875
ord10883
ord9116
ord3224
ord13738
ord12134
ord12132
ord1711
ord1723
ord1731
ord1727
ord1736
ord4879
ord4920
ord4887
ord4899
ord4895
ord4891
ord4928
ord4916
ord4883
ord4932
ord4905
ord4867
ord4874
ord4909
ord4459
ord9574
ord4451
ord3013
ord14449
ord7807
ord14455
ord6774
ord11592
ord13563
ord5838
ord2640
ord11999
ord3898
ord3330
ord3329
ord3223
ord12043
ord5157
ord5454
ord5664
ord9231
ord5430
ord5693
ord5160
ord5316
ord5137
ord7609
ord7610
ord7600
ord5314
ord8101
ord10136
ord9091
ord8658
ord10737
ord3790
ord12048
ord9299
ord8699
ord13997
ord2204
ord10353
ord4049
ord7384
ord1110
ord6392
ord6469
ord3839
ord296
ord1042
ord4772
ord2262
ord1108
ord462
ord3809
ord6252
ord14527
ord6253
ord3806
ord1509
ord325
ord1050
ord2323
ord2366
ord2369
ord2334
ord2368
ord485
ord2226
ord2332
ord2142
ord2258
ord2357
ord7004
ord1506
ord1508
ord14528
ord6251
ord14526
ord7884
ord12402
ord14326
ord11858
ord11857
ord3795
ord1992
ord4109
ord9279
ord14454
ord7806
ord14448
ord12413
ord12412
ord2444
ord5262
ord8206
ord12736
ord8268
ord8352
ord265
ord266
ord11964

msvcr120

malloc
modf
swprintf_s
_CxxThrowException
__RTDynamicCast
memcpy
__CxxFrameHandler3
__clean_type_info_names_internal
_except_handler4_common
?terminate@@YAXXZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
_except1
memset
??1exception@std@@UAE@XZ
memmove
??0exception@std@@QAE@ABV01@@Z
_wtoi
_purecall
round
_vswprintf_c_l
free
??0exception@std@@QAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
swscanf_s
_wcsicmp

kernel32

InitializeCriticalSection
TryEnterCriticalSection
WideCharToMultiByte
OutputDebugStringW
LeaveCriticalSection
InitializeCriticalSectionEx
GetLastError
EnterCriticalSection
DecodePointer
DeleteCriticalSection
Sleep
LocalAlloc
LocalFree
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
GetModuleFileNameW

user32

PostMessageW
DeferWindowPos
GetDesktopWindow
InvalidateRect
SetParent
EnableWindow
GetClientRect
GetParent
IsWindow
ScreenToClient
SetLayeredWindowAttributes
GetWindowLongW
SetWindowLongW
SendMessageW
FrameRect
FillRect
UnhookWindowsHookEx
CopyRect
IsWindowVisible
ReleaseDC
GetDC
SetWindowsHookExW
CallNextHookEx
GetWindowRect

gdi32

GetObjectW
CreateFontIndirectW
CreatePen
CreateSolidBrush
DeleteObject

shell32

ExtractIconW

msvcp120

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??1_Lockit@std@@QAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_BADOFF@std@@3_JB
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_init
_Mtx_lock
_Mtx_unlock
_Mtx_destroy
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??0_Lockit@std@@QAE@H@Z

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW

Exports

Exports

?EnableMouseWheelChangeActiveRow@CCustomGrid@@QAEXH@Z
?GetActiveRowBKColor@CCustomGrid@@QAEKXZ
?GetActiveRowGridColor@CCustomGrid@@QAEKXZ
?GetActiveRowSelfBK@CCustomGrid@@QAEHXZ
?GetActiveRowSelfGrid@CCustomGrid@@QAEHXZ
?GetActiveRowSelfTextColor@CCustomGrid@@QAEHXZ
?GetActiveRowSelfTextFont@CCustomGrid@@QAEHXZ
?GetActiveRowSelfTextFormat@CCustomGrid@@QAEHXZ
?GetActiveRowTextColor@CCustomGrid@@QAEKXZ
?GetActiveRowTextFont@CCustomGrid@@QAE?AUtagLOGFONTW@@XZ
?GetActiveRowTextFormat@CCustomGrid@@QAEHXZ
?GetBeginCol@CCustomGrid@@QAEHXZ
?GetBeginRow@CCustomGrid@@QAEHXZ
?GetCellDefaultBKColor@CCustomGrid@@QAEXAAK@Z
?GetCellDefaultTextColor@CCustomGrid@@QAEXAAK@Z
?GetCellDefaultTextFormat@CCustomGrid@@QAEXAAI@Z
?GetCellTextShowAll@CCustomGrid@@QAEHXZ
?GetCols@CCustomGrid@@QAEHXZ
?GetFixedCols@CCustomGrid@@QAEHXZ
?GetFixedRows@CCustomGrid@@QAEHXZ
?GetGestureStatus@CCustomGrid@@UAEKVCPoint@@@Z
?GetKeyMsgDisposeFlag@CCustomGrid@@QAEHXZ
?GetOnlyShowOutsideGridLine@CCustomGrid@@QAEHXZ
?GetReverseFixedCols@CCustomGrid@@QAEHXZ
?GetReverseFixedRows@CCustomGrid@@QAEHXZ
?GetRows@CCustomGrid@@QAEHXZ
?GetShowCols@CCustomGrid@@QAEHXZ
?GetShowRows@CCustomGrid@@QAEHXZ
?IsDrawCellCallback@CCustomGrid@@QAEHXZ
?IsShowHorScrollBar@CCustomGrid@@QAEHXZ
?IsShowVerScrollBar@CCustomGrid@@QAEHXZ
?OnlyShowWholeCell@CCustomGrid@@QAEXH@Z
?SetActiveRowBKColor@CCustomGrid@@QAEXK@Z
?SetActiveRowGridColor@CCustomGrid@@QAEXK@Z
?SetActiveRowSelfBK@CCustomGrid@@QAEXH@Z
?SetActiveRowSelfGrid@CCustomGrid@@QAEXH@Z
?SetActiveRowSelfTextColor@CCustomGrid@@QAEXH@Z
?SetActiveRowSelfTextFont@CCustomGrid@@QAEXH@Z
?SetActiveRowSelfTextFormat@CCustomGrid@@QAEXH@Z
?SetActiveRowTextColor@CCustomGrid@@QAEXK@Z
?SetActiveRowTextFont@CCustomGrid@@QAEXABUtagLOGFONTW@@@Z
?SetActiveRowTextFormat@CCustomGrid@@QAEXH@Z
?SetBackColor@CCustomGrid@@QAEXK@Z
?SetCellTextShowAll@CCustomGrid@@QAEXH@Z
?SetDrawActiveRowBKEx@CCustomGrid@@QAEXH@Z
?SetDrawActiveRowGridLeft@CCustomGrid@@QAEXH@Z
?SetDrawActiveRowGridRight@CCustomGrid@@QAEXH@Z
?SetDrawCellCallback@CCustomGrid@@QAEXH@Z
?SetGridColor@CCustomGrid@@QAEXK@Z
?SetKeyMsgDisposeFlag@CCustomGrid@@QAEXH@Z
?SetMoveColEnable@CCustomGrid@@QAEXH@Z
?SetMoveRowEnable@CCustomGrid@@QAEXH@Z
?SetOnlyShowOutsideGridLine@CCustomGrid@@QAEXH@Z
?SetResizeColEnable@CCustomGrid@@QAEXH@Z
?SetRightBegin@CCustomGrid@@QAEXH@Z
?SetScrollBarHeight@CCustomGrid@@QAEXH@Z
?SetScrollBarWidth@CCustomGrid@@QAEXH@Z
?SetTabCtrlWidth@CCustomGrid@@QAEXH@Z
?SetbDisplayStar@CCustomGrid@@QAEXH@Z
?__autoclassinit2@CCustomGrid@@QAEXI@Z
CreateComponent

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9701abf0456ee170d1f8f734adf47ba0

Headers

DLL Characteristics

File Characteristics

Imports

pbtctrls

gdiplus

mfc120u

msvcr120

kernel32

user32

gdi32

shell32

msvcp120

rpcrt4

Exports

Exports

Sections

.text Size: 121KB - Virtual size: 121KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 121KB - Virtual size: 121KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 11KB