2c32aa14e1d4f8a14e475dfb36a8ea17da82994869c87a82faada3e4e2f382d2

Sharing

Copy URL Twitter E-mail

General

Target

2c32aa14e1d4f8a14e475dfb36a8ea17da82994869c87a82faada3e4e2f382d2
Size

8.0MB
MD5

f0f7367ce899fed126b5ade6a64ec948
SHA1

e05262c4af83e6d9c459ba367982f839d3bfc869
SHA256

2c32aa14e1d4f8a14e475dfb36a8ea17da82994869c87a82faada3e4e2f382d2
SHA512

845ac79649b8a732d38001b9c89a7eb35211daa44360d1aa6a1723dd88b6707d347b7274b6b9ac7752eaf0f51665eaf0d12f00e61f62082a3b020c4832cc1d36
SSDEEP

98304:ueCzR48/b9NIcDxcewWxUJHdVxw451ZEe8M5sw/nytvVLhGn5NpNJGF/al3VpQro:ueqRF/Yc9cewtVJ8eAvVLhGn5NpKFjr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c32aa14e1d4f8a14e475dfb36a8ea17da82994869c87a82faada3e4e2f382d2

Files

2c32aa14e1d4f8a14e475dfb36a8ea17da82994869c87a82faada3e4e2f382d2
.exe windows:5 windows x86 arch:x86

60cd1d4e877da4a19cc3ef060d9fbaa7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
PlaySoundA

avifil32

AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIFileExit
AVIStreamSetFormat
AVIStreamWrite
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease

msvfw32

ord2
ICOpen
ICSendMessage
ICClose

opengl32

glPopMatrix
glRasterPos3d
glColor3fv
glMaterialfv
glTranslated
glListBase
glPushMatrix
glDeleteLists
glIsList
glTexParameteri
glBindTexture
glPixelStorei
glGenTextures
glCallList
glEndList
glEnd
glVertex3fv
glTexCoord2f
glNormal3fv
glBegin
glBlendFunc
glDisable
glEnable
glMaterialf
glNewList
glGenLists
glMultMatrixf
glPopAttrib
glRotated
glScaled
glPushAttrib
glNormal3f
glVertex3f
glShadeModel
glGetIntegerv
glVertex3d
glNormal3d
glDeleteTextures
glColor3f
glScalef
glPolygonStipple
glPushName
glPopName
glColor3d
glTranslatef
glRotatef
glColor4fv
glLineWidth
glVertex3dv
glTexCoord2d
glAlphaFunc
wglMakeCurrent
glGetDoublev
glMultMatrixd
glOrtho
glLoadIdentity
glMatrixMode
glViewport
glNormal3dv
glColor4f
glDepthFunc
glLightfv
glFlush
glColor3ub
glLineStipple
glGetBooleanv
glPolygonMode
glClear
wglDeleteContext
glFinish
glLoadMatrixf
glIsEnabled
glInitNames
glRenderMode
glSelectBuffer
glReadPixels
glClearDepth
wglUseFontBitmapsA
wglCreateContext
glPointSize
glDrawElements
glVertexPointer
glDisableClientState
glNormalPointer
glEnableClientState
glGetFloatv
wglGetCurrentDC
glLightModelf
glClearColor
glCallLists

glu32

gluPickMatrix
gluNewQuadric
gluSphere
gluDeleteQuadric
gluUnProject
gluProject
gluPerspective
gluBuild2DMipmaps
gluQuadricDrawStyle
gluQuadricNormals
gluCylinder

vcncdll

?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??1CIniFile@@UAE@XZ
?WriteString@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
??1CRegistry@@QAE@XZ
?GetValue2V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
WorkpieceSetting
PositionTool
EditLanguageTool
OpenLogFile
TransferSSCNCAnsweredPaper
SetCallBackReloadMachineModel
SetCallBackupdateMachineModel3DM
SetCallBackSetViewBusyOrFree
GetCurMachineModelID
?Stop@CDirectSound@@QAEXXZ
SelectLathe2ForFANUCForUTEC
SelectLathe2ForFANUC
GetCharsetName
DummyCheckVCNCDLL702
SetSystemName
CheckAnnualLicense
IsOEM
OnCncAbout
CheckUpdate
DecryptSSCNCStringReturnKey
GetTrapezoidThreadInsertParam
GetSRDCNToolParam
?GetKeyName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?GetNumValues@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?DeleteKey@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
GetUserPassword
?Load@CPicture@@QAEHPAEH@Z
GetAnsweredPaperDirPath
??0CTimeEncrypt@@QAE@XZ
?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?IsTimeOut@CTimeEncrypt@@QAEHHPAH@Z
??1CTimeEncrypt@@UAE@XZ
GetUploadedWPDirPath
SendFtpFile
OnOpenChmHelp
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AA_N@Z
GetLangFileName
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?ReadFile@CIniFile@@QAE_NXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0CIniFile@@QAE@XZ
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueRGBA@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM@Z
?WriteFile@CIniFile@@QAEXXZ
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
?SetValueRGBA@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM_N@Z
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
SetLanIniPath
?GetValue3V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?Reset@CIniFile@@QAEXXZ
?FindKey@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetValueMaterial@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCGLMaterial@@@Z
TransferLicense
?Play@CDirectSound@@QAEXKH@Z
??0CRegistry@@QAE@XZ
SetVCNCDllLanguage
SetVCNCDllUnit
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
??0CPicture@@QAE@XZ
??1CDirectSound@@UAE@XZ
EncryptSSCNCStringReturnKey
?SetKey@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
?SetTrialDayLimit@CTimeEncrypt@@QAEXH@Z
OnTipOfDay
?Create@CDirectSound@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCWnd@@@Z
??0CDirectSound@@QAE@XZ
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z

ijl15

ord5
ord2
ord3

sssd

SetSSSDLanguage
CheckMachineRegisterNo
GetHostSerial
GetMachineSerial2
DummyCheckDLL700
GetDongleID
CheckSoftDogPassword
IsDemoSoftDog
IsValidateTime
CheckSoftDog
GetMachineSerial

kernel32

LoadLibraryA
GetModuleHandleA
GetProcAddress
SetLastError
DeactivateActCtx
GetLastError
ActivateActCtx
FindClose
FindNextFileW
SystemTimeToFileTime
GetLocalTime
MultiByteToWideChar
GetFullPathNameW
SetHandleInformation
Sleep
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
ReadFile
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
CreateMutexA
ReleaseMutex
WaitForSingleObject
DeleteFileA
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByteEx
GlobalFree
GlobalUnlock
GlobalLock
MulDiv
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
SetCurrentDirectoryA
GetTickCount
TerminateThread
FreeResource
FindResourceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEvent
GetSystemDefaultUILanguage
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetFileAttributesA
CreateProcessA
CreateDirectoryA
WinExec
lstrcatA
GetUserDefaultLangID
GetModuleFileNameA
CopyFileA
CreateEventA
OutputDebugStringA
GetCurrentThreadId
FormatMessageA
GetVersionExA
OpenFile
SetThreadPriority
ResumeThread
GlobalHandle
TerminateProcess
InitializeCriticalSection
InterlockedExchange
SetFilePointer
CreateFileW
LocalFree
LocalAlloc
ExitProcess
lstrcmpW
LoadLibraryW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenW
GlobalSize
GetThreadLocale
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
GetCurrentProcessId
lstrcmpA
SuspendThread
GetStringTypeExA
lstrcmpiA
MoveFileA
FlushFileBuffers
LockFile
UnlockFile
lstrcpyA
GetFileSize
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
FindNextFileA
GetFileAttributesExA
LocalFileTimeToFileTime
SetFileTime
GetFileSizeEx
GetFileTime
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
GetModuleHandleW
GetLocaleInfoA
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
TlsGetValue
GlobalReAlloc
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
SetErrorMode
GetCurrentDirectoryA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
RtlUnwind
EncodePointer
DecodePointer
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
GetDriveTypeW
FindFirstFileExW
GetSystemTimeAsFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetStdHandle
HeapQueryInformation
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetStringTypeW
HeapCreate
SetHandleCount
GetTimeZoneInformation
GetConsoleCP
LCMapStringW
GetCurrentDirectoryW
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
CompareStringW
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
lstrlenA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
SetEndOfFile
GetNumberFormatA

user32

EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
InvertRect
HideCaret
CopyImage
RegisterClipboardFormatA
GetUpdateRect
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
ModifyMenuA
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
CreateMenu
PeekMessageA
DispatchMessageA
TranslateMessage
BeginPaint
EndPaint
AdjustWindowRectEx
MoveWindow
GetWindow
MapDialogRect
DrawFrameControl
RegisterClassA
SetFocus
GetDlgCtrlID
LoadStringA
IsChild
ChildWindowFromPointEx
IsWindow
GetActiveWindow
IntersectRect
IsRectEmpty
GetKeyboardState
UnhookWindowsHookEx
CheckDlgButton
CallNextHookEx
ClientToScreen
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetFocus
LoadMenuW
GetSubMenu
SetWindowRgn
GetClassNameA
WindowFromPoint
SystemParametersInfoA
IsWindowVisible
UpdateWindow
DrawTextA
FrameRect
LoadBitmapW
UnionRect
SetRectEmpty
SetRect
GetDC
KillTimer
PostMessageA
DrawFocusRect
FillRect
OffsetRect
CallWindowProcA
SetWindowLongA
GetWindowLongA
RedrawWindow
DefWindowProcA
RegisterWindowMessageA
DrawIconEx
ReleaseCapture
GetMessagePos
GetSystemMetrics
GetSysColor
LoadImageA
CreateAcceleratorTableA
SetCursor
GetWindowTextA
LoadCursorA
LoadCursorW
EnableWindow
GetParent
SetCapture
InvalidateRect
ReleaseDC
GetWindowDC
ScreenToClient
GetClientRect
GetWindowRect
SendMessageA
PtInRect
CopyRect
DrawStateA
GetKeyboardLayout
ToAsciiEx
DrawEdge
SetClassLongA
NotifyWinEvent
DestroyAcceleratorTable
GetDCEx
GetTabbedTextExtentW
PostThreadMessageA
UnregisterClassA
InvalidateRgn
CopyAcceleratorTableA
RealChildWindowFromPoint
GetAsyncKeyState
SetWindowContextHelpId
LoadAcceleratorsW
SetLayeredWindowAttributes
ShowOwnedPopups
WaitMessage
SetParent
GetSystemMenu
DestroyCursor
GetMenuItemInfoA
CharUpperA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ValidateRect
MapVirtualKeyA
GetKeyNameTextA
CharNextA
GetMenuState
GetMenuStringA
SendDlgItemMessageA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
PostQuitMessage
GetMessageA
MessageBoxA
LoadBitmapA
DestroyIcon
LoadIconW
ChildWindowFromPoint
GetCapture
SetCursorPos
mouse_event
SendInput
GetIconInfo
DrawIcon
LoadIconA
CreateWindowExA
ShowWindow
SetWindowsHookExA
wsprintfA
DestroyWindow
GetCursor
EnumChildWindows
SetWindowPos
MessageBeep
DrawMenuBar
ClipCursor
GetMenu
DestroyMenu
EnumDisplayMonitors
LoadMenuA
SetMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
IsIconic
InsertMenuItemA
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DefMDIChildProcA
DefFrameProcA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMonitorInfoA
GetDesktopWindow
CreatePopupMenu
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
InflateRect
TrackPopupMenu
GetSysColorBrush
GrayStringA
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetCursorPos
DrawTextExA
TabbedTextOutA
CloseTouchInputHandle
GetTouchInputInfo
GetClassInfoA
PrintWindow
SetScrollPos
GetScrollPos
LockWindowUpdate
IsZoomed
GetKeyState
RemoveMenu
SetTimer

gdi32

CreateCompatibleBitmap
CreateBitmap
GetSystemPaletteEntries
CreateSolidBrush
CreateDCA
GetDeviceCaps
DeleteDC
CreateFontIndirectA
DeleteObject
StretchBlt
CreateCompatibleDC
GetObjectA
GetStockObject
SelectObject
GetTextExtentPoint32A
PatBlt
Polygon
BitBlt
GetPixel
CreatePen
Rectangle
LineTo
CreateFontA
CreateRectRgn
CombineRgn
OffsetRgn
RoundRect
SetPixelV
ExtFloodFill
GetBoundsRect
FillRgn
EnumFontFamiliesExA
GetNearestPaletteIndex
CreateRoundRectRgn
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
StretchDIBits
GetCharWidthA
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetRectRgn
CreateRectRgnIndirect
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetPolyFillMode
RestoreDC
GetTextMetricsA
SetBkColor
Ellipse
FrameRgn
SetROP2
GetTextExtentPointA
CreateFontW
GetDIBits
CreatePalette
CreateHalftonePalette
GetBkColor
GetMapMode
DPtoLP
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
LPtoDP
GetDIBColorTable
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
SwapBuffers
CreatePolygonRgn
PtInRegion
Polyline
PlgBlt
SetBkMode
SetTextColor
CreateHatchBrush
SetDIBColorTable
CreateDIBSection
SetStretchBltMode
SetPixel
GdiFlush
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
SetDIBits
GetPaletteEntries
RealizePalette
SelectPalette
SetPaletteEntries
CopyMetaFileA
GetTextColor
SaveDC
MoveToEx

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA
GetJobA

advapi32

GetFileSecurityA
RegEnumKeyExA
RegCloseKey
RegEnumValueA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueA

shell32

ShellExecuteA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderA

comctl32

FlatSB_EnableScrollBar
InitializeFlatSB
ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathIsDirectoryA
PathFindExtensionW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA

ole32

CLSIDFromProgID
CoInitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CLSIDFromString
CoUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoTaskMemFree
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
RevokeDragDrop
RegisterDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoLockObjectExternal
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator

oleaut32

VariantCopy
VarBstrFromDate
VariantTimeToSystemTime
SysAllocString
SafeArrayDestroy
SysStringLen
SysAllocStringByteLen
SysFreeString
OleCreateFontIndirect
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VarUdateFromDate
SystemTimeToVariantTime

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

ws2_32

WSASetLastError
__WSAFDIsSet
getsockopt
recv
send
ioctlsocket
closesocket
getsockname
listen
bind
setsockopt
socket
accept
getpeername
select
ntohs
inet_ntoa
htons
htonl
WSAStartup
WSAGetLastError
connect
sendto
recvfrom
shutdown
ntohl
WSACleanup

openthreadswin32

??1Condition@OpenThreads@@UAE@XZ
??1Mutex@OpenThreads@@UAE@XZ
??0Condition@OpenThreads@@QAE@XZ
??0Mutex@OpenThreads@@QAE@XZ
?unlock@Mutex@OpenThreads@@UAEHXZ
?signal@Condition@OpenThreads@@UAEHXZ
?wait@Condition@OpenThreads@@UAEHPAVMutex@2@@Z
?lock@Mutex@OpenThreads@@UAEHXZ

lacewing

?RegisterHandlerJoin@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoinDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeave@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerLeaveDenied@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@W4Type@DenyStatus@2@@ZW44HandlerMode@2@@Z
?RegisterHandlerNameSet@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameChanged@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerPeerConnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnect@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnectionDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Client@Lacewing@@QAEXP6AXAAV12@W4Type@TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
??1Client@Lacewing@@QAE@XZ
??0Client@Lacewing@@QAE@XZ
?SendServer@Client@Lacewing@@QAEXHPBDHH@Z
?ToString@Error@Lacewing@@QAEPBDXZ
?Connected@Client@Lacewing@@QAE_NXZ
?Connect@Client@Lacewing@@QAEXPBDH_N@Z
?RegisterHandlerChannelListComplete@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerChangeName@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerError@Client@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z

lib3ds-2_0

lib3ds_matrix_identity
lib3ds_file_free
lib3ds_file_mesh_for_node
lib3ds_matrix_copy
lib3ds_matrix_inv
lib3ds_file_open
lib3ds_matrix_mult
lib3ds_mesh_calculate_vertex_normals
lib3ds_mesh_calculate_face_normals
lib3ds_matrix_translate

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

openal32

alSourcePlay
alDeleteSources
alSourceStop
alSourcePause
alSourcef
alSourcei
alGenSources
alGenBuffers
alcCloseDevice
alcDestroyContext
alcMakeContextCurrent
alcGetContextsDevice
alcGetCurrentContext
alGetEnumValue
alBufferData
alGetError
alcGetString
alcCreateContext
alcOpenDevice
alDeleteBuffers

hookmouse

InstallHookMouse
UnInstallHookMouse

hookkeyboard

UnInstallKeyBoardHook
InstallKeyBoardHook

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

DeleteUrlCacheEntry

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

Exports

Exports

??0CLogo@@QAE@XZ
??0CSTLReader@@QAE@XZ
??1CSTLReader@@UAE@XZ
?ClearG3DPrimitiveArray@CSTLReader@@QAEXAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?Read3DMFile@CSTLReader@@QAEHPADAAUCG3DModel@@@Z
?ReadGpaFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFileMesh@CSTLReader@@QAEHPAD@Z
?Write3DMFile@CSTLReader@@QAEHPADABUCG3DModel@@@Z
?WriteGpaFile@CSTLReader@@QAEHPADABV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 591KB - Virtual size: 590KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60cd1d4e877da4a19cc3ef060d9fbaa7

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

opengl32

glu32

vcncdll

ijl15

sssd

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

ws2_32

openthreadswin32

lacewing

lib3ds-2_0

version

openal32

hookmouse

hookkeyboard

oleacc

wininet

imm32

Exports

Exports

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 591KB - Virtual size: 590KB

.data Size: 46KB - Virtual size: 549KB

.rsrc Size: 3.9MB - Virtual size: 3.9MB

.reloc Size: 349KB - Virtual size: 349KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 591KB - Virtual size: 590KB

.data
Size: 46KB - Virtual size: 549KB

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

.reloc
Size: 349KB - Virtual size: 349KB