ftool400win32[.]zip

Resubmissions

02/11/2023, 01:29

231102-bwgrxsgg39 3

17/07/2023, 01:06

230717-bgj9haad2z 3

Sharing

Copy URL Twitter E-mail

General

Target

ftool400win32.zip
Size

2.4MB
MD5

e5b50588e244632d252fa3e9680e41ed
SHA1

928baae5a38f2ebdee3ba5caeb23c6eab951cb21
SHA256

c57a52cca820dfa6c910a74f370a72c360934187a71330ce86a5b4661933f431
SHA512

cdb1988368145f4b61d617a71f2dddeaebef0193f7af2ef655ce76e5ab0d874159af648e184ebda7a7df0836e1c2f780a69f8593807bc023b8b48d58ba76bf51
SSDEEP

49152:EGIcH8KPfJAY/fk3V1wKBoj8NieF5jQ0IRrlSfQcyBLHuW9nuaHN:EGIccKZ6l1wMo+l5jsRJWQcyB/9jt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ftool.exe

Files

ftool400win32.zip
.zip
Ftool.exe
.exe windows:6 windows x86

69e667c3d2d35c86f8b75abfa01fd14d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glPopAttrib
glVertex2i
glVertex2d
glPushAttrib
glPushClientAttrib
glTexCoord2f
glVertex2f
glGetIntegerv
glTranslatef
glTranslated
glTexParameteri
glTexImage2D
glTexEnvi
glTexCoord2d
glScissor
glRotated
glReadPixels
glRasterPos2i
glRasterPos2d
glPushMatrix
glPopMatrix
glPolygonStipple
glPolygonMode
glPointSize
glPixelZoom
glPixelStorei
glOrtho
glMultMatrixd
glMatrixMode
glMapGrid1f
glMapGrid1d
glMap1d
glLogicOp
glLoadIdentity
glLineWidth
glLineStipple
glIsEnabled
glHint
glGenTextures
glFlush
glEvalMesh1
glEnd
glEnable
glDrawPixels
wglCreateContext
glDisable
glDeleteTextures
glCopyPixels
glColor4ub
glClearColor
glClear
glBlendFunc
glBindTexture
glBegin
glTexSubImage2D
glViewport
glGetString
wglShareLists
wglMakeCurrent
wglGetProcAddress
wglGetCurrentDC
wglGetCurrentContext
wglDeleteContext
glPopClientAttrib

kernel32

GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
GetCPInfo
GetOEMCP
IsValidCodePage
SetFilePointerEx
GetCurrentProcessId
RaiseException
RtlUnwind
HeapAlloc
GetCommandLineA
HeapReAlloc
ResumeThread
ExitThread
CreateThread
AreFileApisANSI
GetModuleHandleExW
ExitProcess
DecodePointer
EncodePointer
HeapFree
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
DeleteCriticalSection
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
GetProcessHeap
SetConsoleCtrlHandler
LoadLibraryExW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleCP
HeapSize
SetStdHandle
GetStringTypeW
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
OutputDebugStringW
SetEnvironmentVariableA
WriteConsoleW
SetEndOfFile
GetVersion
GlobalMemoryStatus
LoadLibraryA
FlushConsoleInputBuffer
GetStdHandle
GetCurrentDirectoryW
FindClose
ReadConsoleInputA
SetConsoleMode
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFullPathNameW
GetACP
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetLocalTime
lstrcpynW
GetSystemDefaultUILanguage
GetVersionExW
GetModuleHandleW
GetFileAttributesW
GetCPInfoExW
CompareStringW
FormatMessageW
LocalFree
GetModuleFileNameW
GetCurrentThreadId
CreateMutexW
ReleaseMutex
GetLastError
GetCommandLineW
lstrcpyW
MulDiv
GetCPInfoExA
IsDebuggerPresent
GetComputerNameA
GetVersionExA
GetSystemInfo
FreeLibrary
LoadLibraryW
lstrlenW
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameA
GetTempPathA
GetFileType
CreateFileA
WriteFile
CloseHandle
SetCurrentDirectoryA
GetModuleFileNameA
Sleep
CreateFileW
DeleteFileW
GetFileSize
ReadFile
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree

user32

SendMessageW
DefWindowProcW
CallWindowProcW
GetClassInfoW
CreateWindowExW
DestroyWindow
ShowWindow
SetWindowPos
IsWindowVisible
SendInput
MapVirtualKeyW
EnableWindow
IsWindowEnabled
GetSystemMetrics
RedrawWindow
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SetCursorPos
SetCursor
ClientToScreen
ScreenToClient
ChildWindowFromPointEx
GetWindowLongW
SetWindowLongW
GetParent
SetParent
LoadCursorW
GetAsyncKeyState
GetWindowRect
GetCursorPos
GetDesktopWindow
SystemParametersInfoA
PostMessageW
IsMenu
GetActiveWindow
SetMenu
GetMenuState
DrawMenuBar
CreateMenu
CreatePopupMenu
DestroyMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
GetClassLongW
IsWindow
GetMenuItemID
RemoveMenu
SetMenuItemBitmaps
TrackPopupMenu
GetMenuInfo
SetMenuInfo
InsertMenuItemW
GetMenuItemInfoW
SetMenuItemInfoW
SetForegroundWindow
GetMessageExtraInfo
SetFocus
SystemParametersInfoW
GetSysColor
RegisterClipboardFormatW
GetClipboardFormatNameW
DragDetect
GetFocus
GetKeyState
GetCaretPos
DrawEdge
InflateRect
RegisterClassW
UpdateLayeredWindow
SetLayeredWindowAttributes
IsIconic
IsZoomed
EndDialog
GetDlgItem
SetCapture
ReleaseCapture
BeginPaint
EndPaint
InvalidateRect
GetClientRect
GetWindow
LoadImageW
DefFrameProcW
DefMDIChildProcW
CreateMDIWindowW
GetWindowInfo
DestroyCursor
DestroyIcon
CreateIconIndirect
PtInRect
GetComboBoxInfo
EnumWindows
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
EnumDisplayMonitors
GetCapture
SetScrollPos
ShowScrollBar
EnableScrollBar
SetScrollInfo
GetScrollInfo
ShowCursor
GetKeyboardLayout
VkKeyScanA
MapVirtualKeyA
DrawFrameControl
DrawTextW
DrawFocusRect
FrameRect
SetTimer
KillTimer
MessageBoxIndirectW
GetClassLongA
TrackMouseEvent
RegisterWindowMessageW
PostQuitMessage
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
SetRect
CheckMenuRadioItem
ScrollDC
SetWindowRgn
ReleaseDC
GetDC
GetForegroundWindow
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
FillRect

gdi32

SetPixelFormat
ResizePalette
DescribePixelFormat
ChoosePixelFormat
CreateRectRgnIndirect
GetObjectW
GetObjectType
ExcludeClipRect
SetDCBrushColor
CreateMetaFileW
SetWinMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFileW
EnumEnhMetaFile
SetMetaFileBitsEx
GetMetaFileW
DeleteMetaFile
GetTextFaceW
PolyBezierTo
SwapBuffers
Polyline
Polygon
CreatePolygonRgn
TextOutW
MoveToEx
ExtCreatePen
StrokePath
StrokeAndFillPath
SetArcDirection
SelectClipPath
PathToRegion
FillPath
EndPath
GetEnhMetaFileBits
CreateEnhMetaFileW
CloseEnhMetaFile
SelectObject
GetMetaFileBitsEx
GetDIBits
CloseFigure
BeginPath
ArcTo
ModifyWorldTransform
GetWorldTransform
GetTextMetricsW
SetTextAlign
SetTextColor
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode
SetPixelV
SetGraphicsMode
SetBkMode
SetBkColor
SelectPalette
SelectClipRgn
RealizePalette
Rectangle
PtInRegion
Pie
PatBlt
OffsetRgn
PlgBlt
MaskBlt
LineTo
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetGraphicsMode
Ellipse
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
GetDeviceCaps
GetBitmapDimensionEx
DeleteObject
DeleteDC
CreateCompatibleDC
PolyBezier
CreatePenIndirect
CreatePen
CreatePalette
CreateFontW
CreateFontIndirectW
CreateEllipticRgn
CreateDIBPatternBrushPt
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
Chord
BitBlt
Arc
EndPage
StartPage
EndDoc
StartDocW
DeleteEnhMetaFile
GdiFlush
CreateDIBSection
CloseMetaFile

winspool.drv

OpenPrinterA
ClosePrinter
DeviceCapabilitiesW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
ChooseFontW
PrintDlgW
ChooseColorW
PrintDlgA

advapi32

CryptGenRandom
RegOpenKeyExW
RegQueryValueExW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
CryptAcquireContextA
CryptReleaseContext
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
GetUserNameA

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteA
ord74
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW

ole32

OleInitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
ReleaseStgMedium
CoCreateInstance
CoUninitialize
CoInitializeEx
OleUninitialize
CoLockObjectExternal

comctl32

InitCommonControlsEx
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord14
ord13
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetIconSize
ImageList_Draw

gdiplus

GdipAddPathStringI
GdipAddPathLineI
GdipAddPathArcI
GdipAddPathBezierI
GdipDeleteRegion
GdipAddPathEllipseI
GdipAddPathPieI
GdipAddPathPolygonI
GdipCreateHBITMAPFromBitmap
GdipAddPathPie
GdipAddPathEllipse
GdipAddPathClosedCurve
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipGetPathLastPoint
GdipClosePathFigure
GdipSetPathFillMode
GdipResetPath
GdipDeletePath
GdipCreatePath
GdipAlloc
GdipFree
GdipCreateFromHDC
GdipCreateFromHWND
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipBitmapSetResolution
GdipFlush
GdipResetWorldTransform
GdipGraphicsClear
GdipCreateCachedBitmap
GdipDeleteCachedBitmap
GdipDrawCachedBitmap
GdipCreateFromHDC2
GdipAddPathClosedCurveI
GdipRecordMetafileFileNameI
GdipGetHemfFromMetafile
GdipTransformPath
GdipRecordMetafileI
GdipCreateMatrix2
GdipDeleteMatrix
GdipSetMatrixElements
GdipMultiplyMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipIsMatrixIdentity
GdipCreateRegion
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionPath
GdipCloneRegion
GdipMeasureString
GdipDrawString
GdipGetLogFontW
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFont
GdipCreateFont
GdipGetLineSpacing
GdipGetCellDescent
GdipGetCellAscent
GdipGetEmHeight
GdipGetGenericFontFamilySansSerif
GdipCloneFontFamily
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipGetMetafileHeaderFromMetafile
GdipIsVisiblePointI
GdipResetClip
GdipSetClipRegion
GdipSetClipPath
GdipDrawImagePointsRectI
GdipDrawImagePointsRect
GdipDrawImageRectRectI
GdipDrawImageRectRect
GdipFillClosedCurveI
GdipFillClosedCurve
GdipFillPath
GdipFillPieI
GdipFillPie
GdipFillEllipseI
GdipFillEllipse
GdipFillPolygonI
GdipFillPolygon
GdipFillRectangleI
GdipFillRectangle
GdipDrawClosedCurveI
GdipDrawClosedCurve
GdipDrawPath
GdipDrawEllipseI
GdipDrawEllipse
GdipDrawRectangleI
GdipDrawRectangle
GdipDrawBeziersI
GdipDrawBeziers
GdipDrawArcI
GdipDrawArc
GdipDrawLinesI
GdipDrawLines
GdipDrawLineI
GdipDrawLine
GdipTransformPointsI
GdipGetDpiY
GdipGetDpiX
GdipSetPageScale
GdipSetPageUnit
GdipGetWorldTransform
GdipSetWorldTransform
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipSetCompositingQuality
GdiplusStartup
GdipCreateMatrix
GdipSetCompositingMode
GdipReleaseDC
GdipGetDC
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipBitmapSetPixel
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCloneBitmapAreaI
GdipCreateBitmapFromGraphics
GdipGetImagePaletteSize
GdipSetImagePalette
GdipGetImagePixelFormat
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipGetImageWidth
GdipSetPenDashArray
GdipSetPenDashStyle
GdipSetPenColor
GdipSetPenLineJoin
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenLineCap197819
GdipSetPenWidth
GdipDeletePen
GdipCreatePen2
GdipCreatePen1
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientI
GdipCreatePathGradient
GdipSetLineColors
GdipCreateLineBrushI
GdipSetSolidFillColor
GdipCreateSolidFill
GdipCreateTexture
GdipGetHatchStyle
GdipCreateHatchBrush
GdipGetBrushType
GdipDeleteBrush
GdipCloneBrush
GdipIsVisibleRegionPointI
GdipGetRegionHRgn
GdipGetRegionBoundsI
GdipTranslateRegionI
GdipCombineRegionRegion
GdipSetEmpty
GdipAddPathPolygon

iphlpapi

GetAdaptersAddresses

ws2_32

socket
shutdown
setsockopt
sendto
send
recvfrom
recv
listen
getsockopt
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
accept
ntohl
inet_addr
WSAGetLastError
select
getnameinfo
freeaddrinfo
getaddrinfo
getservbyname
ntohs
htons
WSACleanup
WSAStartup
WSASetLastError

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 957KB - Virtual size: 957KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

69e667c3d2d35c86f8b75abfa01fd14d

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

comctl32

gdiplus

iphlpapi

ws2_32

Sections

.text Size: 3.9MB - Virtual size: 3.9MB

.rdata Size: 957KB - Virtual size: 957KB

.data Size: 1.1MB - Virtual size: 3.5MB

.rsrc Size: 124KB - Virtual size: 123KB

.text
Size: 3.9MB - Virtual size: 3.9MB

.rdata
Size: 957KB - Virtual size: 957KB

.data
Size: 1.1MB - Virtual size: 3.5MB

.rsrc
Size: 124KB - Virtual size: 123KB