NEAS[.]badabe855936609cff3bdbae0ee1ae80[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.badabe855936609cff3bdbae0ee1ae80.exe
Size

5.3MB
MD5

badabe855936609cff3bdbae0ee1ae80
SHA1

e45741483a5e752f341fccb8ccbfdc3e976b301c
SHA256

9c0b10ba84c54a8ccac14253bb33f8ade4b5809b1970254ef730e28b52b8d8fa
SHA512

7abcb4a3447be5fc9e0714ab06dea1070d732887bfe9d209bca6a8ccf82b3ef8aaf63154d54b4b4b1ce5fc359adab21500664dfc85ec4a5cab3c9f08447bc252
SSDEEP

98304:bqkWm3fqJgP2H9iRgfP0tKakPDqlpP1sCbSiYLquKn6BvZgPiutZsFhv2qVTIVgx:+koJgP2H9iRgfP0tKakPDqlpP1sCbSiU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.badabe855936609cff3bdbae0ee1ae80.exe

Files

NEAS.badabe855936609cff3bdbae0ee1ae80.exe
.exe windows:4 windows x86

6707e10431d3a135739d411ba10ac856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetReadFile

msvcrt

strerror
vfprintf
wcsstr

kernel32

HeapReAlloc
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetHandleCount
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
IsBadCodePtr
CompareStringA
CompareStringW
GetCurrentProcessId
GlobalMemoryStatus
QueryPerformanceCounter
FlushConsoleInputBuffer
HeapAlloc
GetStdHandle
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
HeapFree
SetStdHandle
GetACP
GetCommandLineA
GetStartupInfoA
CreateDirectoryA
GetSystemTimeAsFileTime
SetEnvironmentVariableA
ExitProcess
GetDriveTypeA
GetFileType
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapValidate
IsBadReadPtr
IsBadWritePtr
RaiseException
RtlUnwind
SetErrorMode
GetOEMCP
GetProcessVersion
SizeofResource
GlobalFlags
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetCurrentThread
GetProfileIntA
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
GetFileTime
SetFileTime
GetTempFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
WaitForSingleObject
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
LoadLibraryA
FreeLibrary
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
WideCharToMultiByte
GetModuleHandleA
GetProcAddress
FindResourceExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateProcessA
TerminateProcess
GetDiskFreeSpaceA
SetFileAttributesA
CreateFileA
GetTickCount
Sleep
lstrcatA
WinExec
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
GetModuleFileNameA
DeleteFileA
RemoveDirectoryA
SetLastError
GetComputerNameA
CopyFileA
_lread
OpenFile
_llseek
_lclose
OutputDebugStringA
lstrcpyA
GlobalLock
MulDiv
GlobalSize
GlobalAlloc
GlobalReAlloc
GlobalFree
GlobalUnlock
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
GetVersion
GetVersionExA
GetFullPathNameA
MultiByteToWideChar
WriteFile
ReadFile
CloseHandle
GetLastError
GetCurrentDirectoryA
SetCurrentDirectoryA
FormatMessageA
lstrlenA
LocalAlloc
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
GetProfileStringA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
DebugBreak

user32

GetSystemMenu
SetParent
GetWindowThreadProcessId
WaitMessage
RegisterClipboardFormatA
ShowOwnedPopups
PostQuitMessage
MessageBeep
GetNextDlgGroupItem
CharNextA
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
GetAsyncKeyState
LoadStringA
ValidateRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
CharUpperA
wvsprintfA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetDlgItemInt
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
RegisterClassA
TrackPopupMenu
SetWindowPlacement
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
GetWindowTextLengthA
GetWindowTextA
EndPaint
BeginPaint
GetWindowDC
SetWindowContextHelpId
CopyImage
SetMenuItemInfoA
DrawIcon
CheckMenuItem
SetActiveWindow
FindWindowA
RedrawWindow
GetCaretPos
TranslateMessage
LoadMenuA
ClipCursor
IsClipboardFormatAvailable
IntersectRect
GetClassInfoA
DefWindowProcA
DrawFrameControl
MapDialogRect
SetCaretPos
EnableMenuItem
MessageBoxExA
ChildWindowFromPoint
GetMessagePos
GetFocus
SetWindowLongA
GetCursorPos
GetCapture
ReleaseCapture
PtInRect
SetCapture
GetMenu
DrawMenuBar
GetDialogBaseUnits
LoadIconA
ScreenToClient
UpdateWindow
IsRectEmpty
LoadCursorA
IsWindowVisible
IsZoomed
SetClassLongA
GetDlgItem
GetClassLongA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
SetWindowPos
GetWindowPlacement
GetWindow
IsIconic
GetKeyState
LoadImageA
DrawStateA
FrameRect
InflateRect
DrawFocusRect
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
IsMenu
GetWindowLongA
DestroyCursor
GetMenuStringA
GetSubMenu
GrayStringA
TabbedTextOutA
DeleteMenu
RemoveMenu
LoadBitmapA
GetSysColorBrush
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
InsertMenuA
AppendMenuA
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetClassNameA
GetDCEx
LockWindowUpdate
GetProcessWindowStation
GetUserObjectInformationW
UnregisterClassA
PostThreadMessageA
CopyAcceleratorTableA
SetMenu
GetTabbedTextExtentA
GetSysColor
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
GetMessageA
DispatchMessageA
PeekMessageA
IsWindow
SetWindowRgn
KillTimer
SetTimer
GetSystemMetrics
MessageBoxA
GetWindowRect
GetClientRect
SendMessageA
EnableWindow
wsprintfA
OffsetRect
SetRectEmpty
EqualRect
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
InvertRect

gdi32

OffsetRgn
Pie
GetDIBColorTable
CreateHalftonePalette
RoundRect
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetTextMetricsA
GetCurrentPositionEx
CreateDCA
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
CreateRectRgnIndirect
SetRectRgn
GetCharWidthA
CreateFontA
SetAbortProc
CopyMetaFileA
EnumFontFamiliesExA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetROP2
GetTextFaceA
GetWindowOrgEx
GetRgnBox
PtInRegion
ResetDCA
GetMapMode
StretchBlt
SelectPalette
RealizePalette
GetDIBits
GetCurrentObject
EndPage
EndDoc
StartDocA
CreateBitmap
CreatePalette
AbortDoc
GetBkColor
GetViewportOrgEx
GetClipBox
StartPage
SetDIBitsToDevice
SetTextColor
GetStockObject
Rectangle
Escape
ExtTextOutA
TextOutA
PatBlt
RectVisible
PtVisible
GetObjectA
GetPixel
SetPixel
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
Ellipse
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetBkMode
GetDeviceCaps
CreateSolidBrush
FillRgn
CreateDIBitmap
StretchDIBits
LPtoDP
DPtoLP
Polyline
Polygon
GetTextColor
FrameRgn
GetTextExtentPoint32A
CreateRoundRectRgn
CreateRectRgn
CombineRgn
GetTextExtentPointA
CreateFontIndirectA
CreatePolygonRgn
CreateICA
CreatePen
SetBkColor

comdlg32

ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
GetFileTitleA
CommDlgExtendedError
ChooseColorA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegConnectRegistryA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegGetKeySecurity
RegLoadKeyA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegReplaceKeyA
RegRestoreKeyA
RegSaveKeyA
RegSetKeySecurity
RegSetValueExA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegCreateKeyA
RegCloseKey
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
RegUnLoadKeyA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ExtractIconA

comctl32

ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageInfo
ord8
ord17
ImageList_Destroy
ImageList_Create
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

CoUninitialize
OleInitialize
CoFreeUnusedLibraries
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRevokeClassObject
CreateStreamOnHGlobal
CoRegisterMessageFilter
CLSIDFromProgID
CoCreateInstance
OleRun
CoInitialize
CoRegisterClassObject
CoTaskMemAlloc
OleIsCurrentClipboard
OleGetClipboard
CreateILockBytesOnHGlobal
OleDuplicateData
CLSIDFromString
DoDragDrop
OleFlushClipboard
OleSetClipboard
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
OleUninitialize

olepro32

ord253

oleaut32

RevokeActiveObject
GetActiveObject
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
RegisterActiveObject
SysAllocStringByteLen
SysFreeString
SysAllocString
SafeArrayCreate
SafeArrayPutElement
SysAllocStringLen
SafeArrayGetUBound
SysStringByteLen
SafeArrayGetElemsize
SafeArrayGetDim
VariantChangeType
VarBstrFromDate
SysStringLen
LoadTypeLi
VariantTimeToSystemTime
SafeArrayGetElement
VariantCopy
VariantClear
VariantInit
GetErrorInfo

winmm

PlaySoundA

ws2_32

sendto
recvfrom
WSAAsyncSelect
htonl
bind
accept
WSASetLastError
gethostname
shutdown
recv
socket
htons
getservbyname
inet_addr
gethostbyname
ioctlsocket
closesocket
connect
WSAGetLastError
select
__WSAFDIsSet
getpeername
WSAStartup
WSACleanup
send
inet_ntoa

Exports

Exports

?classCBASxml@CBASxml@@2UCRuntimeClass@@B
?classCChartFrame@CChartFrame@@2UCRuntimeClass@@B
?classCChartView@CChartView@@2UCRuntimeClass@@B
?classCChildFrame10@CChildFrame10@@2UCRuntimeClass@@B
?classCChildFrame11@CChildFrame11@@2UCRuntimeClass@@B
?classCChildFrame12@CChildFrame12@@2UCRuntimeClass@@B
?classCChildFrame13@CChildFrame13@@2UCRuntimeClass@@B
?classCChildFrame14@CChildFrame14@@2UCRuntimeClass@@B
?classCChildFrame15@CChildFrame15@@2UCRuntimeClass@@B
?classCChildFrame16@CChildFrame16@@2UCRuntimeClass@@B
?classCChildFrame1@CChildFrame1@@2UCRuntimeClass@@B
?classCChildFrame2@CChildFrame2@@2UCRuntimeClass@@B
?classCChildFrame3@CChildFrame3@@2UCRuntimeClass@@B
?classCChildFrame4@CChildFrame4@@2UCRuntimeClass@@B
?classCChildFrame5@CChildFrame5@@2UCRuntimeClass@@B
?classCChildFrame6@CChildFrame6@@2UCRuntimeClass@@B
?classCChildFrame7@CChildFrame7@@2UCRuntimeClass@@B
?classCChildFrame8@CChildFrame8@@2UCRuntimeClass@@B
?classCChildFrame9@CChildFrame9@@2UCRuntimeClass@@B
?classCChildFrame@CChildFrame@@2UCRuntimeClass@@B
?classCDetailFileDialog@CDetailFileDialog@@2UCRuntimeClass@@B
?classCDlgEBWizard1@CDlgEBWizard1@@2UCRuntimeClass@@B
?classCDlgEBWizard2@CDlgEBWizard2@@2UCRuntimeClass@@B
?classCDlgEBWizard3@CDlgEBWizard3@@2UCRuntimeClass@@B
?classCDlgEBWizard4@CDlgEBWizard4@@2UCRuntimeClass@@B
?classCDlgEBWizard5@CDlgEBWizard5@@2UCRuntimeClass@@B
?classCDlgEBWizard@CDlgEBWizard@@2UCRuntimeClass@@B
?classCDlgEBWizardAUS1@CDlgEBWizardAUS1@@2UCRuntimeClass@@B
?classCDlgEBWizardAUS2@CDlgEBWizardAUS2@@2UCRuntimeClass@@B
?classCDlgEBWizardAUS3@CDlgEBWizardAUS3@@2UCRuntimeClass@@B
?classCDlgEBWizardAUS4@CDlgEBWizardAUS4@@2UCRuntimeClass@@B
?classCDlgEBWizardAUS5@CDlgEBWizardAUS5@@2UCRuntimeClass@@B
?classCDlgEBWizardAUS@CDlgEBWizardAUS@@2UCRuntimeClass@@B
?classCGrid2@CGrid2@@2UCRuntimeClass@@B
?classCGrid3@CGrid3@@2UCRuntimeClass@@B
?classCGrid6@CGrid6@@2UCRuntimeClass@@B
?classCReindex@CReindex@@2UCRuntimeClass@@A
?classCSpreadSheet@CSpreadSheet@@2UCRuntimeClass@@B
?classCViewAuditTrail@CViewAuditTrail@@2UCRuntimeClass@@B
?classCViewBankReconciliation@CViewBankReconciliation@@2UCRuntimeClass@@B
?classCViewCashflowSummaryReport@CViewCashflowSummaryReport@@2UCRuntimeClass@@B
?classCViewCashflowVariance@CViewCashflowVariance@@2UCRuntimeClass@@B
?classCViewChartOfAccounts@CViewChartOfAccounts@@2UCRuntimeClass@@B
?classCViewComments@CViewComments@@2UCRuntimeClass@@B
?classCViewCredAtb@CViewCredAtb@@2UCRuntimeClass@@B
?classCViewCredBalancesCr@CViewCredBalancesCr@@2UCRuntimeClass@@B
?classCViewCredBalancesLd@CViewCredBalancesLd@@2UCRuntimeClass@@B
?classCViewCredTrans@CViewCredTrans@@2UCRuntimeClass@@B
?classCViewCreditorMaint@CViewCreditorMaint@@2UCRuntimeClass@@B
?classCViewDaysPostings@CViewDaysPostings@@2UCRuntimeClass@@B
?classCViewDebAtb@CViewDebAtb@@2UCRuntimeClass@@B
?classCViewDebCustomerDetails@CViewDebCustomerDetails@@2UCRuntimeClass@@B
?classCViewDebCustomerPurchase@CViewDebCustomerPurchase@@2UCRuntimeClass@@B
?classCViewDebCustomerShortList@CViewDebCustomerShortList@@2UCRuntimeClass@@B
?classCViewDebDaysPostings@CViewDebDaysPostings@@2UCRuntimeClass@@B
?classCViewDebHistoryReport@CViewDebHistoryReport@@2UCRuntimeClass@@B
?classCViewDebMonthsPostings@CViewDebMonthsPostings@@2UCRuntimeClass@@B
?classCViewDebPreStatement@CViewDebPreStatement@@2UCRuntimeClass@@B
?classCViewDebSalanNames@CViewDebSalanNames@@2UCRuntimeClass@@B
?classCViewDebSalanReport@CViewDebSalanReport@@2UCRuntimeClass@@B
?classCViewDebStockItemList@CViewDebStockItemList@@2UCRuntimeClass@@B
?classCViewDebtors@CViewDebtors@@2UCRuntimeClass@@B
?classCViewGSTMonthlyDiscrepancies@CViewGSTMonthlyDiscrepancies@@2UCRuntimeClass@@B
?classCViewGSTReturn@CViewGSTReturn@@2UCRuntimeClass@@B
?classCViewGSTSettingAus@CViewGSTSettingAus@@2UCRuntimeClass@@B
?classCViewGSTSummary@CViewGSTSummary@@2UCRuntimeClass@@B
?classCViewGSTSummaryAus@CViewGSTSummaryAus@@2UCRuntimeClass@@B
?classCViewGSTTransitionalReturn@CViewGSTTransitionalReturn@@2UCRuntimeClass@@B
?classCViewItemDetails@CViewItemDetails@@2UCRuntimeClass@@B
?classCViewLedgerMaint@CViewLedgerMaint@@2UCRuntimeClass@@B
?classCViewLedgerMonth@CViewLedgerMonth@@2UCRuntimeClass@@B
?classCViewMCBKLogReport@CViewMCBKLogReport@@2UCRuntimeClass@@B
?classCViewMCListClients@CViewMCListClients@@2UCRuntimeClass@@B
?classCViewMClientBalances@CViewMClientBalances@@2UCRuntimeClass@@B
?classCViewMClientBalancesDaily@CViewMClientBalancesDaily@@2UCRuntimeClass@@B
?classCViewMonthlyStatAll@CViewMonthlyStatAll@@2UCRuntimeClass@@B
?classCViewMonthlyStatement@CViewMonthlyStatement@@2UCRuntimeClass@@B
?classCViewMonthlyStatementByRef@CViewMonthlyStatementByRef@@2UCRuntimeClass@@B
?classCViewPayeeCodeName@CViewPayeeCodeName@@2UCRuntimeClass@@B
?classCViewPayeeDetails@CViewPayeeDetails@@2UCRuntimeClass@@B
?classCViewPayeeTotYTD@CViewPayeeTotYTD@@2UCRuntimeClass@@B
?classCViewPrepaymentList@CViewPrepaymentList@@2UCRuntimeClass@@B
?classCViewPrintGSTReturn@CViewPrintGSTReturn@@2UCRuntimeClass@@B
?classCViewPrintGSTTransitionalReturn@CViewPrintGSTTransitionalReturn@@2UCRuntimeClass@@B
?classCViewProjectCost@CViewProjectCost@@2UCRuntimeClass@@B
?classCViewSinglePayeeYTD@CViewSinglePayeeYTD@@2UCRuntimeClass@@B
?classCViewTransaction@CViewTransaction@@2UCRuntimeClass@@B
?classCViewTrialBalance@CViewTrialBalance@@2UCRuntimeClass@@B
?classCViewUnpresentedCheques@CViewUnpresentedCheques@@2UCRuntimeClass@@B
?classCViewUpdatedCashflow@CViewUpdatedCashflow@@2UCRuntimeClass@@B
?eventsinkMap@CDlgDebDesignInvoice@@1UAFX_EVENTSINKMAP@@B
?messageMap@CBackupDlg@@1UAFX_MSGMAP@@B
?messageMap@CBackupOnlineRestore@@1UAFX_MSGMAP@@B
?messageMap@CButtonAllKB@@1UAFX_MSGMAP@@B
?messageMap@CButtonTab@@1UAFX_MSGMAP@@B
?messageMap@CButtonTabEnt@@1UAFX_MSGMAP@@B
?messageMap@CChartFrame@@1UAFX_MSGMAP@@B
?messageMap@CChartView@@1UAFX_MSGMAP@@B
?messageMap@CChartWnd@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame10@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame11@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame12@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame13@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame14@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame15@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame16@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame1@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame2@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame3@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame4@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame5@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame6@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame7@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame8@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame9@@1UAFX_MSGMAP@@B
?messageMap@CChildFrame@@1UAFX_MSGMAP@@B
?messageMap@CColorPickerDlg@@1UAFX_MSGMAP@@B
?messageMap@CCoolButton@@1UAFX_MSGMAP@@B
?messageMap@CCustomiseEB@@1UAFX_MSGMAP@@B
?messageMap@CDetailFileDialog@@1UAFX_MSGMAP@@B
?messageMap@CDlgAccountNew@@1UAFX_MSGMAP@@B
?messageMap@CDlgAccountSelect@@1UAFX_MSGMAP@@B
?messageMap@CDlgAccountantsReports@@1UAFX_MSGMAP@@B
?messageMap@CDlgAcctCode@@1UAFX_MSGMAP@@B
?messageMap@CDlgAcctcodeAus@@1UAFX_MSGMAP@@B
?messageMap@CDlgBLPayeeCode@@1UAFX_MSGMAP@@B
?messageMap@CDlgBatchNumber@@1UAFX_MSGMAP@@B
?messageMap@CDlgBitCodeMaintenace@@1UAFX_MSGMAP@@B
?messageMap@CDlgBitList@@1UAFX_MSGMAP@@B
?messageMap@CDlgBlinkGSTMap@@1UAFX_MSGMAP@@B
?messageMap@CDlgBusy1@@1UAFX_MSGMAP@@B
?messageMap@CDlgBusy@@1UAFX_MSGMAP@@B
?messageMap@CDlgCASelect@@1UAFX_MSGMAP@@B
?messageMap@CDlgCashflowHeadings@@1UAFX_MSGMAP@@B
?messageMap@CDlgChangeLedgerName@@1UAFX_MSGMAP@@B
?messageMap@CDlgChangeMonthAll@@1UAFX_MSGMAP@@B
?messageMap@CDlgChartOfAccountsOptions@@1UAFX_MSGMAP@@B
?messageMap@CDlgCheckCW@@1UAFX_MSGMAP@@B
?messageMap@CDlgCheckMI@@1UAFX_MSGMAP@@B
?messageMap@CDlgCheckMIAus@@1UAFX_MSGMAP@@B
?messageMap@CDlgChkBankLink@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredAdnSetUp@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredBalReportOpts@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredBuildBatch@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredListPayees@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredMaintenance@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredPaylinkAcct@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredPaylinkAcctAus@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredPaylinkSetup@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredProcessBatches@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredProcessManChks@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredReviewBatch@@1UAFX_MSGMAP@@B
?messageMap@CDlgCredSelectTrans@@1UAFX_MSGMAP@@B
?messageMap@CDlgDCNumber@@1UAFX_MSGMAP@@B
?messageMap@CDlgDOP@@1UAFX_MSGMAP@@B
?messageMap@CDlgDailyCashManagerWarning@@1UAFX_MSGMAP@@B
?messageMap@CDlgDateRange@@1UAFX_MSGMAP@@B
?messageMap@CDlgDateRangeExt@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebAccountEnq@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebAgeTransaction@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebBalances@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebDeleteInvoices@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebDesignInvoice@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebExportAddresses@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebGSTLevel@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebImportMasterTrade@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebImportPriceBook@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebInvJobcardText@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebInvoiceMessages@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebInvoiceNumber@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebInvoiceSearch@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebLabelJobCardFlag@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebList@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebListInvoiceMessages@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebMSWordSetup@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebMaintStockItems@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSACList@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSTextList@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSalanc@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSalesAnalysis@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSelectCustomerHistory@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSelectInvStationery@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSelectJobCardStationery@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSelectStatementStationery@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSetAbsolutePosition@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSetBrowseMode@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSetDefaultInvoiceMessage@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebShowBorders@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebShowDetails@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebSortByCodeOrName@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebStandardTexts@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebStatementComments@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebStockItemList@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebUpdateBalances@@1UAFX_MSGMAP@@B
?messageMap@CDlgDebUpdateBalancesMessage@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizard1@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizard2@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizard3@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizard4@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizard5@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizard@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizardAUS1@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizardAUS2@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizardAUS3@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizardAUS4@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizardAUS5@@1UAFX_MSGMAP@@B
?messageMap@CDlgEBWizardAUS@@1UAFX_MSGMAP@@B
?messageMap@CDlgEOYReset@@1UAFX_MSGMAP@@B
?messageMap@CDlgEdataEdit@@1UAFX_MSGMAP@@B
?messageMap@CDlgEditAccount@@1UAFX_MSGMAP@@B
?messageMap@CDlgEditScreenColumns@@1UAFX_MSGMAP@@B
?messageMap@CDlgEmailAddress@@1UAFX_MSGMAP@@B
?messageMap@CDlgEmailEdataEditMC@@1UAFX_MSGMAP@@B
?messageMap@CDlgEmailRestore@@1UAFX_MSGMAP@@B
?messageMap@CDlgExtendedDateSelection@@1UAFX_MSGMAP@@B
?messageMap@CDlgGSTDetailReportSettings@@1UAFX_MSGMAP@@B
?messageMap@CDlgGSTRateChange@@1UAFX_MSGMAP@@B
?messageMap@CDlgGSTReturnSplit@@1UAFX_MSGMAP@@B
?messageMap@CDlgGetDateInYear@@1UAFX_MSGMAP@@B
?messageMap@CDlgGetSuspense@@1UAFX_MSGMAP@@B
?messageMap@CDlgGlobalRecode@@1UAFX_MSGMAP@@B
?messageMap@CDlgGstDateRange@@1UAFX_MSGMAP@@B
?messageMap@CDlgHelpServices@@1UAFX_MSGMAP@@B
?messageMap@CDlgHelpServicesAus@@1UAFX_MSGMAP@@B
?messageMap@CDlgImportBankLinkCA@@1UAFX_MSGMAP@@B
?messageMap@CDlgLCMOptions@@1UAFX_MSGMAP@@B
?messageMap@CDlgLExpTrBal@@1UAFX_MSGMAP@@B
?messageMap@CDlgLedgerExpAdvMap@@1UAFX_MSGMAP@@B
?messageMap@CDlgLedgerExport@@1UAFX_MSGMAP@@B
?messageMap@CDlgLedgerExportAus@@1UAFX_MSGMAP@@B
?messageMap@CDlgLexpSage@@1UAFX_MSGMAP@@B
?messageMap@CDlgListBankTrans@@1UAFX_MSGMAP@@B
?messageMap@CDlgListCredTrans@@1UAFX_MSGMAP@@B
?messageMap@CDlgListDCMTrans@@1UAFX_MSGMAP@@B
?messageMap@CDlgListLedger@@1UAFX_MSGMAP@@B
?messageMap@CDlgListLedgerSusp@@1UAFX_MSGMAP@@B
?messageMap@CDlgListOptions@@1UAFX_MSGMAP@@B
?messageMap@CDlgListPayees@@1UAFX_MSGMAP@@B
?messageMap@CDlgListingOptions@@1UAFX_MSGMAP@@B
?messageMap@CDlgLoadNewDatabase@@1UAFX_MSGMAP@@B
?messageMap@CDlgMBEditName@@1UAFX_MSGMAP@@B
?messageMap@CDlgMBName@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCAddClient@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCDataSort@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCDeleteClient@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCEDSClients@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCRegister@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCRegisterClient@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCRegisterDatalink@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCReqClientRegistration@@1UAFX_MSGMAP@@B
?messageMap@CDlgMCSelectClient@@1UAFX_MSGMAP@@B
?messageMap@CDlgMISetup@@1UAFX_MSGMAP@@B
?messageMap@CDlgMISetupAus@@1UAFX_MSGMAP@@B
?messageMap@CDlgMISetupUSA@@1UAFX_MSGMAP@@B
?messageMap@CDlgMonth@@1UAFX_MSGMAP@@B
?messageMap@CDlgNumber@@1UAFX_MSGMAP@@B
?messageMap@CDlgPDFPageSettings@@1UAFX_MSGMAP@@B
?messageMap@CDlgPasswordEnter@@1UAFX_MSGMAP@@B
?messageMap@CDlgPasswordNew@@1UAFX_MSGMAP@@B
?messageMap@CDlgPayeeListOpt@@1UAFX_MSGMAP@@B
?messageMap@CDlgPaylinkDelete@@1UAFX_MSGMAP@@B
?messageMap@CDlgPreview@@1UAFX_MSGMAP@@B
?messageMap@CDlgProcessDCM@@1UAFX_MSGMAP@@B
?messageMap@CDlgProcessDate@@1UAFX_MSGMAP@@B
?messageMap@CDlgProjectList@@1UAFX_MSGMAP@@B
?messageMap@CDlgProjectMaintenance@@1UAFX_MSGMAP@@B
?messageMap@CDlgPurchReRegister@@1UAFX_MSGMAP@@B
?messageMap@CDlgReRegister@@1UAFX_MSGMAP@@B
?messageMap@CDlgRegister@@1UAFX_MSGMAP@@B
?messageMap@CDlgRegisterDatalink@@1UAFX_MSGMAP@@B
?messageMap@CDlgRegisterInvoicePrinting@@1UAFX_MSGMAP@@B
?messageMap@CDlgReportMargin@@1UAFX_MSGMAP@@B
?messageMap@CDlgRestoreSelectBankAccountYear@@1UAFX_MSGMAP@@B
?messageMap@CDlgReviewTransactions@@1UAFX_MSGMAP@@B
?messageMap@CDlgSaveSpreadsheet@@1UAFX_MSGMAP@@B
?messageMap@CDlgSelectDate@@1UAFX_MSGMAP@@B
?messageMap@CDlgSelectPayee@@1UAFX_MSGMAP@@B
?messageMap@CDlgSelectSpreadSheet@@1UAFX_MSGMAP@@B
?messageMap@CDlgSetMargins@@1UAFX_MSGMAP@@B
?messageMap@CDlgThreeButton@@1UAFX_MSGMAP@@B
?messageMap@CDlgTrEditMessage@@1UAFX_MSGMAP@@B
?messageMap@CDlgTransCodeCredMain@@1UAFX_MSGMAP@@B
?messageMap@CDlgUnmatchedTransEmail@@1UAFX_MSGMAP@@B
?messageMap@CDlgUserDetails@@1UAFX_MSGMAP@@B
?messageMap@CGrid2@@1UAFX_MSGMAP@@B
?messageMap@CGrid3@@1UAFX_MSGMAP@@B
?messageMap@CGrid4@@1UAFX_MSGMAP@@B
?messageMap@CGrid5@@1UAFX_MSGMAP@@B
?messageMap@CGrid6@@1UAFX_MSGMAP@@B
?messageMap@CJblApp@@1UAFX_MSGMAP@@B
?messageMap@CKey2Edit@@1UAFX_MSGMAP@@B
?messageMap@CKey3Edit@@1UAFX_MSGMAP@@B
?messageMap@CKey4Edit@@1UAFX_MSGMAP@@B
?messageMap@CKey6Edit@@1UAFX_MSGMAP@@B
?messageMap@CKey8Edit@@1UAFX_MSGMAP@@B
?messageMap@CKey9Edit@@1UAFX_MSGMAP@@B
?messageMap@CKeyEdit@@1UAFX_MSGMAP@@B
?messageMap@CNotifyButton@@1UAFX_MSGMAP@@B
?messageMap@CRestoreCYear@@1UAFX_MSGMAP@@B
?messageMap@CSelectChYear@@1UAFX_MSGMAP@@B
?messageMap@CViewAuditTrail@@1UAFX_MSGMAP@@B
?messageMap@CViewBankReconciliation@@1UAFX_MSGMAP@@B
?messageMap@CViewCashflowSummaryReport@@1UAFX_MSGMAP@@B
?messageMap@CViewCashflowVariance@@1UAFX_MSGMAP@@B
?messageMap@CViewChartOfAccounts@@1UAFX_MSGMAP@@B
?messageMap@CViewComments@@1UAFX_MSGMAP@@B
?messageMap@CViewCredAtb@@1UAFX_MSGMAP@@B
?messageMap@CViewCredBalancesCr@@1UAFX_MSGMAP@@B
?messageMap@CViewCredBalancesLd@@1UAFX_MSGMAP@@B
?messageMap@CViewCredTrans@@1UAFX_MSGMAP@@B
?messageMap@CViewCreditorMaint@@1UAFX_MSGMAP@@B
?messageMap@CViewDaysPostings@@1UAFX_MSGMAP@@B
?messageMap@CViewDebAtb@@1UAFX_MSGMAP@@B
?messageMap@CViewDebCustomerDetails@@1UAFX_MSGMAP@@B
?messageMap@CViewDebCustomerPurchase@@1UAFX_MSGMAP@@B
?messageMap@CViewDebCustomerShortList@@1UAFX_MSGMAP@@B
?messageMap@CViewDebDaysPostings@@1UAFX_MSGMAP@@B
?messageMap@CViewDebHistoryReport@@1UAFX_MSGMAP@@B
?messageMap@CViewDebMonthsPostings@@1UAFX_MSGMAP@@B
?messageMap@CViewDebPreStatement@@1UAFX_MSGMAP@@B
?messageMap@CViewDebSalanNames@@1UAFX_MSGMAP@@B
?messageMap@CViewDebSalanReport@@1UAFX_MSGMAP@@B
?messageMap@CViewDebStockItemList@@1UAFX_MSGMAP@@B
?messageMap@CViewDebtors@@1UAFX_MSGMAP@@B
?messageMap@CViewGSTMonthlyDiscrepancies@@1UAFX_MSGMAP@@B
?messageMap@CViewGSTReturn@@1UAFX_MSGMAP@@B
?messageMap@CViewGSTSettingAus@@1UAFX_MSGMAP@@B
?messageMap@CViewGSTSummary@@1UAFX_MSGMAP@@B
?messageMap@CViewGSTSummaryAus@@1UAFX_MSGMAP@@B
?messageMap@CViewGSTTransitionalReturn@@1UAFX_MSGMAP@@B
?messageMap@CViewItemDetails@@1UAFX_MSGMAP@@B
?messageMap@CViewLedgerMaint@@1UAFX_MSGMAP@@B
?messageMap@CViewLedgerMonth@@1UAFX_MSGMAP@@B
?messageMap@CViewMCBKLogReport@@1UAFX_MSGMAP@@B
?messageMap@CViewMCListClients@@1UAFX_MSGMAP@@B
?messageMap@CViewMClientBalances@@1UAFX_MSGMAP@@B
?messageMap@CViewMClientBalancesDaily@@1UAFX_MSGMAP@@B
?messageMap@CViewMonthlyStatAll@@1UAFX_MSGMAP@@B
?messageMap@CViewMonthlyStatement@@1UAFX_MSGMAP@@B
?messageMap@CViewMonthlyStatementByRef@@1UAFX_MSGMAP@@B
?messageMap@CViewPayeeCodeName@@1UAFX_MSGMAP@@B
?messageMap@CViewPayeeDetails@@1UAFX_MSGMAP@@B
?messageMap@CViewPayeeTotYTD@@1UAFX_MSGMAP@@B
?messageMap@CViewPrepaymentList@@1UAFX_MSGMAP@@B
?messageMap@CViewPrintGSTReturn@@1UAFX_MSGMAP@@B
?messageMap@CViewPrintGSTTransitionalReturn@@1UAFX_MSGMAP@@B
?messageMap@CViewProjectCost@@1UAFX_MSGMAP@@B
?messageMap@CViewSinglePayeeYTD@@1UAFX_MSGMAP@@B
?messageMap@CViewTransaction@@1UAFX_MSGMAP@@B
?messageMap@CViewTrialBalance@@1UAFX_MSGMAP@@B
?messageMap@CViewUnpresentedCheques@@1UAFX_MSGMAP@@B
?messageMap@CViewUpdatedCashflow@@1UAFX_MSGMAP@@B
?messageMap@DlgCredSelectMSWTemplate@@1UAFX_MSGMAP@@B
?messageMap@DlgDebHistoryPurge@@1UAFX_MSGMAP@@B
?messageMap@DlgDebIndexFixup@@1UAFX_MSGMAP@@B
?messageMap@DlgMIDateRange@@1UAFX_MSGMAP@@B

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 568KB - Virtual size: 565KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 663KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6707e10431d3a135739d411ba10ac856

Headers

File Characteristics

Imports

wininet

msvcrt

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

winmm

ws2_32

Exports

Exports

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 568KB - Virtual size: 565KB

.data Size: 292KB - Virtual size: 663KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 568KB - Virtual size: 565KB

.data
Size: 292KB - Virtual size: 663KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB