7151f80c57175334ff52117d87dea759d5ee177eb74f47b29b142a0001f457d1

Sharing

Copy URL Twitter E-mail

General

Target

7151f80c57175334ff52117d87dea759d5ee177eb74f47b29b142a0001f457d1
Size

1.5MB
MD5

a5abc072e7ecb53e069ffb2b75b13daf
SHA1

058a9bd0c1c4a6486b94e62577f4040d7e710ae1
SHA256

7151f80c57175334ff52117d87dea759d5ee177eb74f47b29b142a0001f457d1
SHA512

4c02ff4e39f889ce17abf4f2a0515e82d97a33970d63b64d9616092fac6ef70127ec17e640e5c2bc16f0f83a05a9e9ca72a27c80d54d5519fa94583086f766e2
SSDEEP

24576:f8gSExmYUEBCg6d8WV5V9VmsF9ddvd4yWoS7EhB566:f8gLm6c8WrVZ9eyWKh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7151f80c57175334ff52117d87dea759d5ee177eb74f47b29b142a0001f457d1

Files

7151f80c57175334ff52117d87dea759d5ee177eb74f47b29b142a0001f457d1
.exe windows:4 windows x86 arch:x86

fc47d2534af018411c299a3a294c5ecd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

graphics

llpp
DWG_SetBackgroundColor
?SetColorType@CDwgExport@@QAEXH@Z
lppp
?SaveRasterImage@@YAHPAUHBITMAP__@@HPBD@Z
DWG_SetProgressCallBackFuns
DWG_SetAuditPrintSummaryCallbackFunc
DWG_SetAuditPrintErrorCallbackFunc
?DeleteDrawing@CDrawing@@SAXPAV1@@Z
?CreateDrawing@CDrawing@@SAPAV1@XZ
UninitDLL
InitDLL
?CanDrawPolyPolygon@CDwgExport@@UAE_NXZ
DWG_SetPasswordCallbackFunc
?DWG_SetFindFileCallbackFunc@@YAXP6A_NPBDPAD@Z@Z
??1CDwgExport@@UAE@XZ
?TextParam@CDwgExport@@UAEXPBD0NNNN@Z
ppll
??0CDwgExport@@QAE@XZ
DWG_SetSearchDirectories

kernel32

HeapCreate
VirtualFree
IsBadWritePtr
GetStringTypeA
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetDateFormatA
GetTimeFormatA
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
TerminateProcess
ExitProcess
RtlUnwind
GetFileTime
GetFileAttributesA
FindResourceExA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GetCurrentDirectoryA
GlobalFlags
FindNextFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
VirtualProtect
FormatMessageA
LocalFree
SetLastError
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
InterlockedDecrement
WritePrivateProfileStringA
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
SetErrorMode
CreateDirectoryA
GetTempPathA
GetTempFileNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
LoadLibraryA
GetProcAddress
CopyFileA
FreeLibrary
lstrcpyA
FindFirstFileA
FindClose
GlobalSize
WriteFile
CreateFileA
CloseHandle
GetFileSize
ReadFile
GlobalReAlloc
SetFilePointer
GlobalHandle
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetProcessHeap
HeapAlloc
HeapFree
GetLastError
lstrcmpiA
CompareStringA
CompareStringW
GetVersion
MultiByteToWideChar
lstrcpynA
GetTimeZoneInformation
MulDiv
RaiseException
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
lstrlenA
FreeResource
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
GetStringTypeW

user32

InsertMenuItemA
SetRectEmpty
SetMenu
EndPaint
BeginPaint
GetWindowDC
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DefMDIChildProcA
DefFrameProcA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsChild
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenuItemID
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClassInfoA
RegisterClassA
SetWindowPlacement
DefWindowProcA
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
SetFocus
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
EnableMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
IsWindowVisible
GetKeyState
ValidateRect
GetLastActivePopup
ShowOwnedPopups
PostQuitMessage
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
ReuseDDElParam
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
CheckMenuItem
CreatePopupMenu
TrackPopupMenu
wsprintfA
DestroyMenu
TrackMouseEvent
DrawFocusRect
DrawFrameControl
GetActiveWindow
MessageBoxA
GetFocus
CallWindowProcA
GetCapture
InvalidateRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IntersectRect
PtInRect
IsRectEmpty
GetCursorPos
DestroyCursor
GetSystemMenu
AppendMenuA
CreateMenu
DrawEdge
DrawStateA
FillRect
LoadBitmapA
OffsetRect
InflateRect
CopyRect
LoadImageA
MapVirtualKeyA
GetKeyNameTextA
SetMenuItemInfoA
CopyAcceleratorTableA
GetMenuItemInfoA
DestroyIcon
SystemParametersInfoA
CharUpperA
GetDoubleClickTime
PostThreadMessageA
SetForegroundWindow
IsIconic
DrawMenuBar
InsertMenuA
DeleteMenu
ClientToScreen
GetMenu
GetMenuState
GetMenuItemCount
PeekMessageA
DispatchMessageA
GetParent
SetCapture
ModifyMenuA
GetSubMenu
UnpackDDElParam
GetAsyncKeyState
MapDialogRect
GetTabbedTextExtentA
LockWindowUpdate
GetDCEx
SetTimer
SetRect
ReleaseCapture
SetWindowLongA
GetSystemMetrics
LoadCursorA
SetCursor
ScreenToClient
KillTimer
GetDC
ReleaseDC
UnregisterClassA
EnableWindow
GetClientRect
GetWindowRect
GetSysColor
SendMessageA
RedrawWindow
UpdateWindow
LoadMenuA
LoadAcceleratorsA
GetSysColorBrush
WindowFromPoint
SetParent
GetWindowLongA
IsZoomed
LoadIconA
PostMessageA
IsWindow
TranslateMessage

gdi32

SetStretchBltMode
SetDIBColorTable
CreateDIBSection
CreateHalftonePalette
GetDIBColorTable
CreateDCA
StretchDIBits
SetBkColor
DPtoLP
SetPaletteEntries
ResizePalette
SetSystemPaletteUse
GetNearestPaletteIndex
CreateHatchBrush
GetWinMetaFileBits
LineTo
MoveToEx
PolyPolygon
SelectClipPath
EndPath
BeginPath
SaveDC
RestoreDC
GetCurrentObject
PtVisible
GetClipBox
SetTextColor
SetBkMode
ExcludeClipRect
SelectClipRgn
GetPixel
SetViewportOrgEx
GdiFlush
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetTextAlign
CloseMetaFile
DeleteMetaFile
GetCharWidthA
CreateFontA
GetBkColor
GetMapMode
PatBlt
Ellipse
CreateBitmap
GetTextMetricsA
GetObjectA
CreateFontIndirectA
CreatePatternBrush
GetStockObject
CreateDIBitmap
EnumFontFamiliesA
GetTextExtentPoint32A
Rectangle
CreateRectRgn
SelectPalette
GetSystemPaletteEntries
RealizePalette
GetPaletteEntries
GetDIBits
CreatePalette
EnumFontFamiliesExA
SetPixel
CreateBrushIndirect
Escape
ExtTextOutA
TextOutA
Polygon
BitBlt
CreateSolidBrush
SetROP2
StartDocA
StartPage
EndPage
EndDoc
CloseEnhMetaFile
CreateEnhMetaFileA
GetDeviceCaps
IntersectClipRect
DeleteEnhMetaFile
SetMapMode
GetWindowExtEx
SetWindowExtEx
SetWindowOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
OffsetViewportOrgEx
DeleteDC
CreatePen
Arc
StretchBlt
RectVisible

comdlg32

GetFileTitleA
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegOpenKeyExA

shell32

SHBrowseForFolderA
DragQueryFileA
ShellExecuteA
SHGetFileInfoA
SHGetMalloc
DragFinish
DragAcceptFiles
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder

comctl32

ImageList_GetIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Add
ImageList_Create
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_AddMasked

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oleaut32

VariantClear
SysAllocStringLen
VariantInit
VariantChangeType

Exports

Exports

??0CDwgExport@@QAE@ABV0@@Z
??4CDwgExport@@QAEAAV0@ABV0@@Z
??_7CDwgExport@@6B@
?BeginEntityDraw@CDwgExport@@UAE_NPBD00K00PBN@Z
?EndEntityDraw@CDwgExport@@UAEXXZ
?PopClipPolygon@CDwgExport@@UAEXXZ
?PushClipPolygon@CDwgExport@@UAEXHPAUPointStruct@@@Z
?Raster@CDwgExport@@UAEXNNHHHHHHPAX0J0@Z

Sections

.text
Size: 972KB - Virtual size: 971KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MyShareM
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fc47d2534af018411c299a3a294c5ecd

Headers

File Characteristics

Imports

graphics

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 972KB - Virtual size: 971KB

.rdata Size: 200KB - Virtual size: 196KB

.data Size: 12KB - Virtual size: 55KB

MyShareM Size: 8KB - Virtual size: 4KB

.rsrc Size: 324KB - Virtual size: 328KB

.text
Size: 972KB - Virtual size: 971KB

.rdata
Size: 200KB - Virtual size: 196KB

.data
Size: 12KB - Virtual size: 55KB

MyShareM
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 324KB - Virtual size: 328KB