tk86t[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tk86t.dll
Size

1.5MB
MD5

4b6270a72579b38c1cc83f240fb08360
SHA1

1a161a014f57fe8aa2fadaab7bc4f9faaac368de
SHA256

cd2f60075064dfc2e65c88b239a970cb4bd07cb3eec7cc26fb1bf978d4356b08
SHA512

0c81434d8c205892bba8a4c93ff8fc011fb8cfb72cfec172cf69093651b86fd9837050bd0636315840290b28af83e557f2205a03e5c344239356874fce0c72b9
SSDEEP

24576:C1Bvnu8AyQD9FLi543GLUKuPO6EinYTVAiueFoC+vMvE58KOJ0wd98ydeyRP/ecr:CIyQD9FU43GLUKuPO6EinYTVAFSvESKI

Score

1^/10

Malware Config

Signatures

Files

tk86t.dll
.dll windows:6 windows x64 arch:x64

122ccc329f9b840c1d56dabb6d865c8e

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:3e:d5:ed:a0:65:d1:b8:c9:1d:fc:f9:2a:6c:9b:d8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/12/2018, 00:00

Not After

22/12/2021, 12:00

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Wolfeboro,ST=New Hampshire,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:9a:3c:1e:84:53:c1:70:62:cd:f7:5b:e3:ac:b1:15:71:44:09:3a:32:7c:ca:ef:62:ee:a6:70:24:8e:e7:8f
Signer

Actual PE Digest

60:9a:3c:1e:84:53:c1:70:62:cd:f7:5b:e3:ac:b1:15:71:44:09:3a:32:7c:ca:ef:62:ee:a6:70:24:8e:e7:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExW
GetLocaleInfoW
GetLastError
IsDebuggerPresent
LocalFree
FormatMessageW
MultiByteToWideChar
MulDiv
GetTickCount
GetModuleHandleW
GetProcAddress
SetCurrentDirectoryW
GetCurrentDirectoryW
GetCurrentThreadId
GetFullPathNameW
OutputDebugStringW
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetLocaleInfoA
FindResourceW
LoadResource
LockResource
DisableThreadLibraryCalls
GetFileType
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsDBCSLeadByte
LoadLibraryW
FreeLibrary
GetCommState
GetConsoleMode
InitializeSListHead
GetStdHandle

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

gdi32

RectInRegion
CombineRgn
GetRgnBox
CreateDIBSection
CreateDCW
CreateRectRgn
CreateRectRgnIndirect
SetRectRgn
GetMapMode
GetObjectA
DPtoLP
UpdateColors
GetDIBits
GetPixel
GetTextExtentPoint32A
PatBlt
GetTextFaceW
GetTextCharset
EnumFontFamiliesW
GetTextMetricsW
TextOutW
TranslateCharsetInfo
SetMapMode
GetTextFaceA
Pie
SetBkColor
SetTextColor
StretchDIBits
DeleteObject
ResizePalette
CreatePalette
SetPaletteEntries
SelectPalette
GetDeviceCaps
GetNearestPaletteIndex
GetStockObject
RealizePalette
GetPaletteEntries
GetNearestColor
ExtTextOutW
SetROP2
CreateBitmap
CloseFigure
CreateSolidBrush
Polygon
SelectClipRgn
Rectangle
ExtCreatePen
CreatePen
SetBkMode
EndPath
DeleteDC
SetPolyFillMode
CreatePatternBrush
StrokeAndFillPath
StrokePath
Polyline
OffsetClipRgn
Chord
BeginPath
CreateDIBitmap
CreateCompatibleDC
GetBkMode
Arc
SelectObject
GetTextExtentPoint32W
CreateCompatibleBitmap
BitBlt
SetBrushOrgEx
GetCharWidthW
GetCharWidthA
SetTextAlign
CreateFontIndirectW
GetFontData
GetTextExtentPointA
TextOutA

user32

SystemParametersInfoW
ToUnicode
VkKeyScanW
MapVirtualKeyW
GetKeyState
GetCursorPos
CreateMenu
GetClientRect
RemoveMenu
InsertMenuW
DrawMenuBar
DestroyMenu
LoadBitmapW
RegisterClassW
GetCapture
GetAsyncKeyState
TrackPopupMenu
CreatePopupMenu
UnregisterClassW
GetMenuItemCount
DestroyWindow
CallWindowProcW
GetMessagePos
GetSystemMenu
SendInput
ReleaseCapture
SetCapture
ClientToScreen
WindowFromPoint
GetFocus
GetWindowRect
SetParent
SetScrollInfo
MoveWindow
ShowWindow
GetWindowTextW
IsIconic
SetForegroundWindow
GetDesktopWindow
IsZoomed
LoadIconW
SetLayeredWindowAttributes
EnumWindows
SetMenu
GetForegroundWindow
CreateIconFromResource
CreateIconIndirect
DestroyIcon
GetClassLongPtrW
GetWindowPlacement
SetClassLongPtrW
SetActiveWindow
IsWindowVisible
CreateIconFromResourceEx
GetWindow
AdjustWindowRectEx
PeekMessageA
DestroyCaret
GetKeyboardLayout
CreateCaret
SetCaretPos
MessageBeep
ScreenToClient
GetLastInputInfo
PostMessageW
GetMessageA
GetMessageW
RegisterClassExW
DrawFrameControl
DrawEdge
GetSysColorBrush
InvalidateRect
FillRect
ScrollWindowEx
MessageBoxW
SendMessageW
CallNextHookEx
EndDialog
SetWindowTextW
GetWindowLongPtrW
IsWindow
PeekMessageW
UnhookWindowsHookEx
SetWindowsHookExW
wsprintfW
GetDlgItem
GetParent
UpdateWindow
EnableWindow
LoadCursorFromFileA
LoadCursorA
SetCursor
GetDC
ReleaseDC
GetClipboardOwner
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
IsClipboardFormatAvailable
DefWindowProcW
SetWindowPos
SetWindowLongPtrW
CreateWindowExW
GetSystemMetrics
SetFocus
DrawFocusRect
GetSysColor
BeginPaint
EndPaint
LoadCursorW

api-ms-win-crt-math-l1-1-0

floor
fabs
sin
pow
atan
cos
log10
fmod
_hypot
atan2
sqrt

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

wcsncmp
strcmp
isprint
isalnum
strncpy
wcsncpy
_stricmp
_strnicmp
isupper
strncmp
isdigit
isspace
isxdigit

api-ms-win-crt-convert-l1-1-0

strtoul
strtol
atof
atoi
strtod

api-ms-win-crt-time-l1-1-0

_ctime64
_time64

api-ms-win-crt-runtime-l1-1-0

_initterm
_configure_narrow_argv
_seh_filter_dll
abort
_initterm_e
_cexit
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-utility-l1-1-0

qsort

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetFileInfoW

comdlg32

ChooseFontW
CommDlgExtendedError
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree

comctl32

InitCommonControlsEx

imm32

ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

vcruntime140

memcpy
__C_specific_handler
memmove
wcsrchr
memcmp
strrchr
strchr
strstr
__std_type_info_destroy_list
memset

Exports

Exports

TkAllocWindow
TkBTreeNumLines
TkBezierPoints
TkBezierScreenPoints
TkBindEventProc
TkBindFree
TkBindInit
TkCanvasDashParseProc
TkCanvasDashPrintProc
TkChangeEventWindow
TkClipBox
TkClipCleanup
TkClipInit
TkComputeAnchor
TkCreateCursorFromData
TkCreateFrame
TkCreateMainWindow
TkCreateRegion
TkCreateThreadExitHandler
TkCreateXEventSource
TkCurrentTime
TkDebugBitmap
TkDebugBorder
TkDebugColor
TkDebugConfig
TkDebugCursor
TkDebugFont
TkDeleteAllImages
TkDeleteThreadExitHandler
TkDestroyRegion
TkDoConfigureNotify
TkDrawAngledChars
TkDrawAngledTextLayout
TkDrawInsetFocusHighlight
TkEventDeadWindow
TkFillPolygon
TkFindStateNum
TkFindStateNumObj
TkFindStateString
TkFocusDeadWindow
TkFocusFilterEvent
TkFocusFree
TkFocusKeyEvent
TkFontPkgFree
TkFontPkgInit
TkFreeBindingTags
TkGCCleanup
TkGetBitmapData
TkGetBitmapPredefTable
TkGetButtPoints
TkGetCursorByName
TkGetDefaultScreenName
TkGetDisplay
TkGetDisplayList
TkGetDisplayOf
TkGetFocusWin
TkGetInterpNames
TkGetMainInfoList
TkGetMiterPoints
TkGetOptionSpec
TkGetPointerCoords
TkGetServerInfo
TkGetWindowFromObj
TkGrabDeadWindow
TkGrabState
TkInOutEvents
TkIncludePoint
TkInstallFrameMenu
TkIntersectAngledTextLayout
TkIntersectRegion
TkKeysymToString
TkLineToArea
TkLineToPoint
TkMakeBezierCurve
TkMakeBezierPostscript
TkMakeRawCurve
TkMakeRawCurvePostscript
TkOffsetParseProc
TkOffsetPrintProc
TkOptionClassChanged
TkOptionDeadWindow
TkOrientParseProc
TkOrientPrintProc
TkOvalToArea
TkOvalToPoint
TkPhotoGetValidRegion
TkPixelParseProc
TkPixelPrintProc
TkPointerDeadWindow
TkPointerEvent
TkPolygonToArea
TkPolygonToPoint
TkPositionInTree
TkPutImage
TkQueueEventForAllChildren
TkReadBitmapFile
TkRectInRegion
TkScrollWindow
TkSelDeadWindow
TkSelEventProc
TkSelGetSelection
TkSelInit
TkSelPropProc
TkSetFocusWin
TkSetPixmapColormap
TkSetRegion
TkSetWindowMenuBar
TkSmoothParseProc
TkSmoothPrintProc
TkStateParseProc
TkStatePrintProc
TkStringToKeysym
TkStylePkgFree
TkStylePkgInit
TkSubtractRegion
TkTextChanged
TkTextGetIndex
TkTextIndexBackBytes
TkTextIndexForwBytes
TkTextInsertDisplayProc
TkTextMakeByteIndex
TkTextPrintIndex
TkTextSetMark
TkTextXviewCmd
TkThickPolyLineToArea
TkToplevelWindowForCommand
TkUnderlineAngledTextLayout
TkUnionRectWithRegion
TkWinCancelMouseTimer
TkWinChildProc
TkWinClipboardRender
TkWinDialogDebug
TkWinEmbeddedEventProc
TkWinFillRect
TkWinGetBorderPixels
TkWinGetDrawableDC
TkWinGetMenuSystemDefault
TkWinGetModifierState
TkWinGetPlatformId
TkWinGetPlatformTheme
TkWinGetSystemPalette
TkWinGetWrapperWindow
TkWinHandleMenuEvent
TkWinIndexOfColor
TkWinReleaseDrawableDC
TkWinResendEvent
TkWinSelectPalette
TkWinSetForegroundWindow
TkWinSetHINSTANCE
TkWinSetMenu
TkWinSetWindowPos
TkWinWmCleanup
TkWinXCleanup
TkWinXInit
TkWmAddToColormapWindows
TkWmDeadWindow
TkWmFocusToplevel
TkWmMapWindow
TkWmNewWindow
TkWmProtocolEventProc
TkWmRemoveFromColormapWindows
TkWmRestackToplevel
TkWmSetClass
TkWmStackorderToplevel
TkWmUnmapWindow
Tk_3DBorderColor
Tk_3DBorderGC
Tk_3DHorizontalBevel
Tk_3DVerticalBevel
Tk_AddOption
Tk_Alloc3DBorderFromObj
Tk_AllocBitmapFromObj
Tk_AllocColorFromObj
Tk_AllocCursorFromObj
Tk_AllocFontFromObj
Tk_AllocStyleFromObj
Tk_AttachHWND
Tk_BindEvent
Tk_CanvasDrawableCoords
Tk_CanvasEventuallyRedraw
Tk_CanvasGetCoord
Tk_CanvasGetCoordFromObj
Tk_CanvasGetTextInfo
Tk_CanvasPsBitmap
Tk_CanvasPsColor
Tk_CanvasPsFont
Tk_CanvasPsOutline
Tk_CanvasPsPath
Tk_CanvasPsStipple
Tk_CanvasPsY
Tk_CanvasSetOffset
Tk_CanvasSetStippleOrigin
Tk_CanvasTagsParseProc
Tk_CanvasTagsPrintProc
Tk_CanvasTkwin
Tk_CanvasWindowCoords
Tk_ChangeOutlineGC
Tk_ChangeWindowAttributes
Tk_CharBbox
Tk_ClearSelection
Tk_ClipboardAppend
Tk_ClipboardClear
Tk_CollapseMotionEvents
Tk_ComputeTextLayout
Tk_ConfigOutlineGC
Tk_ConfigureInfo
Tk_ConfigureValue
Tk_ConfigureWidget
Tk_ConfigureWindow
Tk_CoordsToWindow
Tk_CreateAnonymousWindow
Tk_CreateBinding
Tk_CreateBindingTable
Tk_CreateClientMessageHandler
Tk_CreateConsoleWindow
Tk_CreateErrorHandler
Tk_CreateEventHandler
Tk_CreateGenericHandler
Tk_CreateImageType
Tk_CreateItemType
Tk_CreateOldImageType
Tk_CreateOldPhotoImageFormat
Tk_CreateOptionTable
Tk_CreateOutline
Tk_CreatePhotoImageFormat
Tk_CreateSelHandler
Tk_CreateSmoothMethod
Tk_CreateStyle
Tk_CreateWindow
Tk_CreateWindowFromPath
Tk_DefineBitmap
Tk_DefineCursor
Tk_DeleteAllBindings
Tk_DeleteBinding
Tk_DeleteBindingTable
Tk_DeleteClientMessageHandler
Tk_DeleteErrorHandler
Tk_DeleteEventHandler
Tk_DeleteGenericHandler
Tk_DeleteImage
Tk_DeleteOptionTable
Tk_DeleteOutline
Tk_DeleteSelHandler
Tk_DestroyWindow
Tk_DisplayName
Tk_DistanceToTextLayout
Tk_DitherPhoto
Tk_Draw3DPolygon
Tk_Draw3DRectangle
Tk_DrawChars
Tk_DrawElement
Tk_DrawFocusHighlight
Tk_DrawTextLayout
Tk_Fill3DPolygon
Tk_Fill3DRectangle
Tk_FindPhoto
Tk_FontId
Tk_Free3DBorder
Tk_Free3DBorderFromObj
Tk_FreeBitmap
Tk_FreeBitmapFromObj
Tk_FreeColor
Tk_FreeColorFromObj
Tk_FreeColormap
Tk_FreeConfigOptions
Tk_FreeCursor
Tk_FreeCursorFromObj
Tk_FreeFont
Tk_FreeFontFromObj
Tk_FreeGC
Tk_FreeImage
Tk_FreeOptions
Tk_FreePixmap
Tk_FreeSavedOptions
Tk_FreeStyle
Tk_FreeStyleFromObj
Tk_FreeTextLayout
Tk_FreeXId
Tk_GCForColor
Tk_GeometryRequest
Tk_Get3DBorder
Tk_Get3DBorderFromObj
Tk_GetAllBindings
Tk_GetAnchor
Tk_GetAnchorFromObj
Tk_GetAtomName
Tk_GetBinding
Tk_GetBitmap
Tk_GetBitmapFromData
Tk_GetBitmapFromObj
Tk_GetCapStyle
Tk_GetColor
Tk_GetColorByValue
Tk_GetColorFromObj
Tk_GetColormap
Tk_GetCursor
Tk_GetCursorFromData
Tk_GetCursorFromObj
Tk_GetDash
Tk_GetElementBorderWidth
Tk_GetElementBox
Tk_GetElementId
Tk_GetElementSize
Tk_GetFont
Tk_GetFontFromObj
Tk_GetFontMetrics
Tk_GetGC
Tk_GetHINSTANCE
Tk_GetHWND
Tk_GetImage
Tk_GetImageMasterData
Tk_GetItemTypes
Tk_GetJoinStyle
Tk_GetJustify
Tk_GetJustifyFromObj
Tk_GetMMFromObj
Tk_GetNumMainWindows
Tk_GetOption
Tk_GetOptionInfo
Tk_GetOptionValue
Tk_GetPixels
Tk_GetPixelsFromObj
Tk_GetPixmap
Tk_GetRelief
Tk_GetReliefFromObj
Tk_GetRootCoords
Tk_GetScreenMM
Tk_GetScrollInfo
Tk_GetScrollInfoObj
Tk_GetSelection
Tk_GetStyle
Tk_GetStyleEngine
Tk_GetStyleFromObj
Tk_GetStyledElement
Tk_GetUid
Tk_GetUserInactiveTime
Tk_GetVRootGeometry
Tk_GetVisual
Tk_Grab
Tk_HWNDToWindow
Tk_HandleEvent
Tk_IdToWindow
Tk_ImageChanged
Tk_Init
Tk_InitConsoleChannels
Tk_InitOptions
Tk_InternAtom
Tk_Interp
Tk_IntersectTextLayout
Tk_MainEx
Tk_MainExW
Tk_MainLoop
Tk_MainWindow
Tk_MaintainGeometry
Tk_MakeWindowExist
Tk_ManageGeometry
Tk_MapWindow
Tk_MeasureChars
Tk_MoveResizeWindow
Tk_MoveToplevelWindow
Tk_MoveWindow
Tk_NameOf3DBorder
Tk_NameOfAnchor
Tk_NameOfBitmap
Tk_NameOfCapStyle
Tk_NameOfColor
Tk_NameOfCursor
Tk_NameOfFont
Tk_NameOfImage
Tk_NameOfJoinStyle
Tk_NameOfJustify
Tk_NameOfRelief
Tk_NameOfStyle
Tk_NameToWindow
Tk_OwnSelection
Tk_ParseArgv
Tk_PhotoBlank
Tk_PhotoExpand
Tk_PhotoExpand_Panic
Tk_PhotoGetImage
Tk_PhotoGetSize
Tk_PhotoPutBlock
Tk_PhotoPutBlock_NoComposite
Tk_PhotoPutBlock_Panic
Tk_PhotoPutZoomedBlock
Tk_PhotoPutZoomedBlock_NoComposite
Tk_PhotoPutZoomedBlock_Panic
Tk_PhotoSetSize
Tk_PhotoSetSize_Panic
Tk_PkgInitStubsCheck
Tk_PointToChar
Tk_PointerEvent
Tk_PostscriptBitmap
Tk_PostscriptColor
Tk_PostscriptFont
Tk_PostscriptFontName
Tk_PostscriptImage
Tk_PostscriptPath
Tk_PostscriptPhoto
Tk_PostscriptStipple
Tk_PostscriptY
Tk_PreserveColormap
Tk_QueueWindowEvent
Tk_RedrawImage
Tk_RegisterStyleEngine
Tk_RegisterStyledElement
Tk_ResetOutlineGC
Tk_ResetUserInactiveTime
Tk_ResizeWindow
Tk_RestackWindow
Tk_RestoreSavedOptions
Tk_RestrictEvents
Tk_SafeInit
Tk_SetAppName
Tk_SetBackgroundFromBorder
Tk_SetCaretPos
Tk_SetClass
Tk_SetClassProcs
Tk_SetGrid
Tk_SetInternalBorder
Tk_SetInternalBorderEx
Tk_SetMinimumRequestSize
Tk_SetOptions
Tk_SetTSOrigin
Tk_SetWindowBackground
Tk_SetWindowBackgroundPixmap
Tk_SetWindowBorder
Tk_SetWindowBorderPixmap
Tk_SetWindowBorderWidth
Tk_SetWindowColormap
Tk_SetWindowVisual
Tk_SizeOfBitmap
Tk_SizeOfImage
Tk_StrictMotif
Tk_TextLayoutToPostscript
Tk_TextWidth
Tk_TranslateWinEvent
Tk_UndefineCursor
Tk_UnderlineChars
Tk_UnderlineTextLayout
Tk_Ungrab
Tk_UnmaintainGeometry
Tk_UnmapWindow
Tk_UnsetGrid
Tk_UpdatePointer
TkpChangeFocus
TkpClaimFocus
TkpCloseDisplay
TkpCmapStressed
TkpDisplayWarning
TkpDrawFrame
TkpDrawHighlightBorder
TkpFreeCursor
TkpGetAppName
TkpGetCapture
TkpGetKeySym
TkpGetMS
TkpGetOtherWindow
TkpGetString
TkpGetSubFonts
TkpGetSystemDefault
TkpGetWrapperWindow
TkpInit
TkpInitKeymapInfo
TkpInitializeMenuBindings
TkpMakeContainer
TkpMakeMenuWindow
TkpMakeWindow
TkpMenuNotifyToplevelCreate
TkpMenuThreadInit
TkpOpenDisplay
TkpPrintWindowId
TkpRedirectKeyEvent
TkpScanWindowId
TkpSetCapture
TkpSetCursor
TkpSetKeycodeAndState
TkpSetMainMenubar
TkpSync
TkpTestembedCmd
TkpTesttextCmd
TkpUseWindow
TkpWmSetState
XAllocColor
XBell
XChangeGC
XChangeProperty
XChangeWindowAttributes
XClearWindow
XConfigureWindow
XCopyArea
XCopyPlane
XCreateBitmapFromData
XCreateColormap
XCreateGC
XCreateGlyphCursor
XCreateIC
XCreateImage
XCreatePixmapCursor
XDefineCursor

Sections

.text
Size: 1022KB - Virtual size: 1021KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

122ccc329f9b840c1d56dabb6d865c8e

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

03:3e:d5:ed:a0:65:d1:b8:c9:1d:fc:f9:2a:6c:9b:d8Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

60:9a:3c:1e:84:53:c1:70:62:cd:f7:5b:e3:ac:b1:15:71:44:09:3a:32:7c:ca:ef:62:ee:a6:70:24:8e:e7:8fSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

gdi32

user32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

shell32

comdlg32

ole32

comctl32

imm32

vcruntime140

Exports

Exports

Sections

.text Size: 1022KB - Virtual size: 1021KB

.rdata Size: 283KB - Virtual size: 283KB

.data Size: 35KB - Virtual size: 39KB

.pdata Size: 45KB - Virtual size: 44KB

.rsrc Size: 95KB - Virtual size: 94KB

.reloc Size: 16KB - Virtual size: 16KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

03:3e:d5:ed:a0:65:d1:b8:c9:1d:fc:f9:2a:6c:9b:d8
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

60:9a:3c:1e:84:53:c1:70:62:cd:f7:5b:e3:ac:b1:15:71:44:09:3a:32:7c:ca:ef:62:ee:a6:70:24:8e:e7:8f
Signer

.text
Size: 1022KB - Virtual size: 1021KB

.rdata
Size: 283KB - Virtual size: 283KB

.data
Size: 35KB - Virtual size: 39KB

.pdata
Size: 45KB - Virtual size: 44KB

.rsrc
Size: 95KB - Virtual size: 94KB

.reloc
Size: 16KB - Virtual size: 16KB