ae8da3772c8fa8f0af5cf1d7aa3ac9b7024ce3854a3da7e3994a4a84a728fe4c

Sharing

Copy URL

Twitter E-mail

General

Target

ae8da3772c8fa8f0af5cf1d7aa3ac9b7024ce3854a3da7e3994a4a84a728fe4c
Size

4.4MB
MD5

290f14c09c80205690bb5151e202f5f2
SHA1

e90a9e6df0dc372138cb0ff24b2c0ce28e827aaf
SHA256

ae8da3772c8fa8f0af5cf1d7aa3ac9b7024ce3854a3da7e3994a4a84a728fe4c
SHA512

950a5d695a37ce6ac5e9e16bad23e28ec9c2071c650615230f26fb71fb04725ce0ae667064bf31ae441a74eaeab618e546905ab6b1bf89bc94c501d7df1e5e17
SSDEEP

98304:c+gv/XnL47TAYU9JZv8mNxtQ5KP6OT0fvZTQzkSsRnSMJV7EkYN0Ns5:bgXX4dU9Jm2xtQm0fv+lYnSAV7dg0q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae8da3772c8fa8f0af5cf1d7aa3ac9b7024ce3854a3da7e3994a4a84a728fe4c

Files

ae8da3772c8fa8f0af5cf1d7aa3ac9b7024ce3854a3da7e3994a4a84a728fe4c
.dll windows:5 windows x64

42dcb38100c709b3b8095f519f880bb3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libufun

UF_allocate_memory
uc4574
UF_get_fail_message
UF_print_syslog
UF_DRAW_ask_views
UF_DRAW_update_one_view
UF_TEXT_translate_string
UF_ask_system_info
UF_VIEW_cycle_objects
UF_DRAW_ask_num_views
UF_DRAW_ask_view_of_drawing
UF_ASSEM_ask_part_occ_children
UF_CFI_ask_file_exist
UF_ATTR_read_value
UF_ASSEM_ask_root_part_occ
UF_PART_open
UF_get_release
UF_DRAW_open_drawing
UF_DRAW_ask_drawing_info
UF_LAYER_set_status
UF_LAYER_cycle_by_layer
UF_LAYER_ask_status
UF_OBJ_set_blank_status
UF_DRAW_upd_out_of_date_views
UF_OBJ_ask_name
UF_PART_set_display_part
UF_PART_ask_part_tag
UF_PART_free_load_status
UF_PART_is_loaded
UF_free
UF_PLOT_ask_default_job_name
UF_PLOT_ask_default_banner_options
UF_PLOT_print_plot_layout
UF_PLOT_add_job_to_plot_layout
UF_PLOT_ask_session_job_options
UF_PLOT_clear_plot_layout
UF_PLOT_ask_printer_names
UF_ask_application_module
UF_DRAW_ask_current_drawing
UF_DRAW_ask_drawings
UF_PART_ask_display_part
uc4576
UF_PART_ask_part_name
UF_initialize
UF_is_initialized
UF_terminate
UF_UI_write_listing_window
UF_UI_open_listing_window
UF_UI_is_listing_window_open
UF_translate_variable

libugopenint

uc1601
UF_MB_ask_button_id
UF_UI_get_default_parent
UF_VIEW_fit_view

kernel32

GlobalLock
Sleep
DeleteFileA
GetCurrentProcess
LocalFree
FormatMessageA
GetModuleHandleW
VirtualQuery
WriteProfileStringA
GlobalFree
GlobalAlloc
SetFilePointer
GetFileSize
GetModuleFileNameA
FreeLibrary
GetModuleHandleExA
FindClose
FindFirstFileA
GetEnvironmentVariableA
CreateDirectoryA
CreateMutexA
ReleaseMutex
QueryDosDeviceA
LocalAlloc
MulDiv
GlobalSize
CopyFileA
lstrcmpW
LoadLibraryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
SetThreadPriority
ResumeThread
lstrcmpA
GetCurrentProcessId
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
GetFileAttributesExA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileSizeEx
GetFileTime
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
TlsGetValue
InitializeCriticalSection
GlobalUnlock
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
GetOEMCP
GetSystemDirectoryW
GetACP
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetNumberFormatA
GetTickCount
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
RaiseException
RtlPcToFileHeader
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlUnwindEx
GetDateFormatA
GetTimeFormatA
EncodePointer
DecodePointer
HeapFree
HeapAlloc
FlsSetValue
GetCommandLineA
VirtualAlloc
SetThreadStackGuarantee
HeapReAlloc
ExitThread
CreateThread
ExitProcess
SetStdHandle
GetFileType
HeapSize
HeapQueryInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
FlsGetValue
FlsFree
FlsAlloc
IsValidCodePage
GetTimeZoneInformation
HeapSetInformation
HeapCreate
HeapDestroy
GetStdHandle
LCMapStringW
GetStringTypeW
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
CompareStringW
WriteConsoleW
GetProcessHeap
CreateFileW
GetCurrentDirectoryA
lstrcpyA
lstrcatA
LoadLibraryExA
CreateFileA
TlsAlloc
DeviceIoControl
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
ReadFile
CloseHandle
WaitForSingleObject
GetVersionExA
GetVersion
MultiByteToWideChar
lstrcmpiA
lstrlenA
GetCPInfo
FreeResource
FindResourceA
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetLastError
DeactivateActCtx
GetLastError
ActivateActCtx
lstrlenW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemInfo
SetEnvironmentVariableA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetMessageTime
UnhookWindowsHookEx
GetWindowLongPtrA
DestroyWindow
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageA
SetActiveWindow
GetLastActivePopup
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassLongPtrA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
InflateRect
SendDlgItemMessageA
GetCursorPos
CheckDlgButton
GetDlgItemInt
SetDlgItemInt
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
TranslateMessage
GetMessageA
GetWindowDC
BeginPaint
EndPaint
GetWindowThreadProcessId
GetKeyNameTextA
MapVirtualKeyA
IntersectRect
EndDialog
CreateDialogIndirectParamA
PostQuitMessage
ShowOwnedPopups
CharUpperA
UnregisterClassA
LoadCursorA
RealChildWindowFromPoint
TranslateAcceleratorA
BringWindowToTop
InsertMenuItemA
IsIconic
LoadAcceleratorsA
ReleaseCapture
LoadMenuA
ReuseDDElParam
UnpackDDElParam
CopyImage
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadCursorW
IsRectEmpty
GetSystemMenu
SetParent
UnionRect
IsZoomed
SetWindowRgn
DestroyAcceleratorTable
NotifyWinEvent
GetAsyncKeyState
PeekMessageA
SetCapture
MessageBeep
DrawFrameControl
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetNextDlgGroupItem
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UpdateLayeredWindow
PostThreadMessageA
WaitMessage
SetMenuDefaultItem
IsClipboardFormatAvailable
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
RegisterClipboardFormatA
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
MapDialogRect
DrawIcon
GetWindowRgn
DrawStateA
GetIconInfo
CreateIconIndirect
IsMenu
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
DrawIconEx
DestroyIcon
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetSysColorBrush
GetSysColor
EnableWindow
GetDesktopWindow
ReleaseDC
GetDC
RemoveMenu
ModifyMenuA
InsertMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
DeleteMenu
CreatePopupMenu
ClientToScreen
GetClientRect
GetWindowRect
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoA
GetClassInfoExA
RegisterClassA
OffsetRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
GetMenu
SetWindowPos
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
EnableMenuItem
CheckMenuItem
SetWindowLongA
IsWindow
SetRectEmpty
PtInRect
DestroyMenu
GetMenuStringA
SendMessageTimeoutA
LoadIconA
FindWindowA
GetMessagePos
LoadIconW
KillTimer
SetTimer
LoadMenuW
GetForegroundWindow
RegisterWindowMessageA
SetWindowLongPtrA
CallWindowProcA
DestroyCursor
LoadImageA
PostMessageA
SetCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
InvalidateRect
GetActiveWindow
CreateMenu
DrawEdge
SendMessageA
DrawFocusRect
SetClassLongPtrA
FrameRect
FillRect
LoadBitmapW
CopyRect
SetRect
AdjustWindowRectEx
WinHelpA

gdi32

SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
GetObjectType
CreateRectRgnIndirect
SetRectRgn
CombineRgn
DPtoLP
CreateDIBitmap
GetTextMetricsA
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetBkColor
StretchDIBits
CreateFontA
GetCharWidthA
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreatePolygonRgn
StretchBlt
GetTextColor
CreateEllipticRgn
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
Polyline
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
PtInRegion
FillRgn
CreateDCA
CopyMetaFileA
CreateBitmap
SetPixelV
GetTextFaceA
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
SetBkColor
SetTextColor
GetStockObject
GetTextExtentPoint32W
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32A
SetPixel
GetPixel
BitBlt
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
CreatePen
SetDIBColorTable
GetRgnBox

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

EnumPrintersA
ord202
SetPrinterA
DocumentPropertiesA
ord201
OpenPrinterA
GetPrinterA
ClosePrinter

advapi32

RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA

shell32

SHAppBarMessage
DragFinish
DragQueryFileA
ShellExecuteA
SHGetFileInfoA
SHBrowseForFolderA
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsDirectoryA
PathIsUNCA

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoTaskMemFree
DoDragDrop
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium

oleaut32

SysAllocStringLen
SysAllocString
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipFree
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipAlloc

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Exports

Exports

quick_cam_print1

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 565KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OjY
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xf]
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.4dm
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42dcb38100c709b3b8095f519f880bb3

Headers

DLL Characteristics

File Characteristics

Imports

libufun

libugopenint

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

setupapi

iphlpapi

version

oleacc

gdiplus

imm32

winmm

Exports

Exports

Sections

.text Size: - Virtual size: 1.7MB

.rdata Size: - Virtual size: 565KB

.data Size: - Virtual size: 135KB

.pdata Size: - Virtual size: 81KB

text Size: - Virtual size: 2KB

data Size: - Virtual size: 1KB

.OjY Size: - Virtual size: 1.5MB

.xf] Size: 6KB - Virtual size: 6KB

.4dm Size: 4.4MB - Virtual size: 4.4MB

.reloc Size: 512B - Virtual size: 156B

.rsrc Size: 39KB - Virtual size: 54KB

.text
Size: - Virtual size: 1.7MB

.rdata
Size: - Virtual size: 565KB

.data
Size: - Virtual size: 135KB

.pdata
Size: - Virtual size: 81KB

text
Size: - Virtual size: 2KB

data
Size: - Virtual size: 1KB

.OjY
Size: - Virtual size: 1.5MB

.xf]
Size: 6KB - Virtual size: 6KB

.4dm
Size: 4.4MB - Virtual size: 4.4MB

.reloc
Size: 512B - Virtual size: 156B

.rsrc
Size: 39KB - Virtual size: 54KB