ed69a8f8cb94efd9403871421ac757b6f66603272a1a146ea4a020dbed5342d7

Sharing

Copy URL Twitter E-mail

General

Target

ed69a8f8cb94efd9403871421ac757b6f66603272a1a146ea4a020dbed5342d7
Size

5.5MB
MD5

dbe0bcf2811f7d588ce363d8c07b696e
SHA1

e844196c77c5d89b0af07e4797e6906e8044ff22
SHA256

ed69a8f8cb94efd9403871421ac757b6f66603272a1a146ea4a020dbed5342d7
SHA512

765994c32105f2c53394cd90ac438c136a760e19eb9bd810d4ee6ec5022dfbd30347756219a04b71e1729b09ead73218fcab30ab9ca16560a9831f45bd3e050d
SSDEEP

98304:ISoo49Dre3KXEr7ojLbnosYcx0tjCNIVYDu8Sw//BSTWP/dScRJw8EJfRnj7xDzJ:loo4RS3NUfcsYcejw//xRJw8EJDDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed69a8f8cb94efd9403871421ac757b6f66603272a1a146ea4a020dbed5342d7

Files

ed69a8f8cb94efd9403871421ac757b6f66603272a1a146ea4a020dbed5342d7
.exe windows:5 windows x86 arch:x86

da7056e0cced0ab6a3e043cee7aeb5dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
PlaySoundA

avifil32

AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamWrite
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit

msvfw32

ICOpen
ord2
ICClose
ICSendMessage

opengl32

glViewport
glNormal3dv
glColor4f
glDepthFunc
glLightfv
glFlush
glColor3ub
glLineStipple
glGetBooleanv
glPolygonMode
glClear
wglDeleteContext
glFinish
glLoadMatrixf
glIsEnabled
glInitNames
glRenderMode
glSelectBuffer
glReadPixels
glClearDepth
glMatrixMode
wglCreateContext
glPointSize
glDrawElements
glVertexPointer
glDisableClientState
glNormalPointer
glEnableClientState
glGetFloatv
wglGetCurrentDC
glLightModelf
glClearColor
glLoadIdentity
glOrtho
glMultMatrixd
glGetDoublev
glPopMatrix
glCallLists
glRasterPos3d
glColor3fv
glMaterialfv
glTranslated
glListBase
glPushMatrix
glDeleteLists
glIsList
glTexParameteri
glBindTexture
glPixelStorei
glGenTextures
glCallList
glEndList
glEnd
glVertex3fv
glTexCoord2f
glNormal3fv
glBegin
glBlendFunc
glDisable
glEnable
wglMakeCurrent
glAlphaFunc
glTexCoord2d
glVertex3dv
glLineWidth
glColor4fv
glRotatef
glTranslatef
glColor3d
glPopName
glPushName
glPolygonStipple
glScalef
glColor3f
glDeleteTextures
glNormal3d
glVertex3d
glGetIntegerv
glShadeModel
glVertex3f
glNormal3f
glPushAttrib
glScaled
glRotated
glPopAttrib
glMultMatrixf
glGenLists
glNewList
glMaterialf
wglUseFontBitmapsA

glu32

gluPickMatrix
gluProject
gluPerspective
gluBuild2DMipmaps
gluQuadricNormals
gluCylinder
gluDeleteQuadric
gluSphere
gluNewQuadric
gluQuadricDrawStyle
gluUnProject

vcncdll

GetUserPassword
?Load@CPicture@@QAEHPAEH@Z
GetAnsweredPaperDirPath
?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??1CIniFile@@UAE@XZ
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
GetTrapezoidThreadInsertParam
??0CRegistry@@QAE@XZ
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
?SetKey@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?WriteString@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
??1CRegistry@@QAE@XZ
?GetValue2V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
WorkpieceSetting
PositionTool
EditLanguageTool
OpenLogFile
TransferSSCNCAnsweredPaper
?DeleteKey@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
SetCallBackupdateMachineModel3DM
SetCallBackSetViewBusyOrFree
GetCurMachineModelID
?Stop@CDirectSound@@QAEXXZ
SelectLathe2ForFANUCForUTEC
SelectLathe2ForFANUC
DummyCheckVCNCDLL702
SetSystemName
CheckAnnualLicense
IsOEM
OnCncAbout
CheckUpdate
DecryptSSCNCStringReturnKey
GetCharsetName
GetUploadedWPDirPath
SendFtpFile
OnOpenChmHelp
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AA_N@Z
GetLangFileName
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z
??0CDirectSound@@QAE@XZ
?GetNumValues@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetKeyName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
SetCallBackReloadMachineModel
?FindKey@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?Create@CDirectSound@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCWnd@@@Z
?ReadFile@CIniFile@@QAE_NXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0CIniFile@@QAE@XZ
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueRGBA@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM@Z
?WriteFile@CIniFile@@QAEXXZ
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
?SetValueRGBA@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM_N@Z
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
SetLanIniPath
?GetValue3V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?Reset@CIniFile@@QAEXXZ
GetSRDCNToolParam
?GetValueMaterial@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCGLMaterial@@@Z
TransferLicense
?Play@CDirectSound@@QAEXKH@Z
OnTipOfDay
SetVCNCDllLanguage
SetVCNCDllUnit
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
??0CPicture@@QAE@XZ
??1CDirectSound@@UAE@XZ
??1CTimeEncrypt@@UAE@XZ
?IsTimeOut@CTimeEncrypt@@QAEHHPAH@Z
?SetTrialDayLimit@CTimeEncrypt@@QAEXH@Z
??0CTimeEncrypt@@QAE@XZ
EncryptSSCNCStringReturnKey

ijl15

ord2
ord5
ord3

sssd

SetSSSDLanguage
CheckMachineRegisterNo
GetHostSerial
DummyCheckDLL700
GetMachineSerial
IsValidateTime
CheckSoftDog
GetMachineSerial2
GetDongleID
CheckSoftDogPassword
IsDemoSoftDog

ws2_32

getpeername
accept
socket
setsockopt
bind
__WSAFDIsSet
getsockopt
WSACleanup
ntohl
shutdown
recvfrom
sendto
getsockname
closesocket
ioctlsocket
send
recv
connect
select
ntohs
inet_ntoa
htons
htonl
WSAStartup
WSAGetLastError
listen

openthreadswin32

?lock@Mutex@OpenThreads@@UAEHXZ
?wait@Condition@OpenThreads@@UAEHPAVMutex@2@@Z
?signal@Condition@OpenThreads@@UAEHXZ
??0Mutex@OpenThreads@@QAE@XZ
??0Condition@OpenThreads@@QAE@XZ
??1Mutex@OpenThreads@@UAE@XZ
??1Condition@OpenThreads@@UAE@XZ
?unlock@Mutex@OpenThreads@@UAEHXZ

kernel32

GetTempPathA
GetCurrentDirectoryA
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
SetErrorMode
GlobalFlags
LocalReAlloc
GlobalReAlloc
GetNumberFormatA
GetProfileIntA
SearchPathA
FindResourceExW
GetWindowsDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetLastError
FindClose
FindNextFileW
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
MultiByteToWideChar
GetFullPathNameW
SetHandleInformation
Sleep
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
GetLastError
ReadFile
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceW
lstrlenA
LoadLibraryA
GetModuleHandleA
GetProcAddress
DeactivateActCtx
ActivateActCtx
MulDiv
DeleteFileA
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByteEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
SetCurrentDirectoryA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetTickCount
TerminateThread
FreeResource
FindResourceA
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetSystemDefaultUILanguage
FreeLibrary
GetFileAttributesA
CreateProcessA
CreateDirectoryA
WinExec
lstrcatA
GetUserDefaultLangID
GetModuleFileNameA
CopyFileA
CreateEventA
OutputDebugStringA
GetCurrentThreadId
FormatMessageA
GetVersionExA
OpenFile
SetThreadPriority
ResumeThread
lstrcpyA
GlobalHandle
TerminateProcess
InitializeCriticalSection
InterlockedExchange
SetFilePointer
CreateFileW
LocalFree
LocalAlloc
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
RaiseException
GetDriveTypeW
FindFirstFileExW
RtlUnwind
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetModuleHandleW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetModuleFileNameW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
GetTimeZoneInformation
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
HeapSize
GetStringTypeW
SetStdHandle
GetLocaleInfoW
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
GetFullPathNameA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenW
GlobalSize
GetThreadLocale
CreateActCtxW
ReleaseActCtx
lstrcmpA
SuspendThread
GetStringTypeExA
lstrcmpiA
MoveFileA
LockFile
UnlockFile
GetFileSize
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
FindNextFileA
ReplaceFileA
SetFileTime
HeapQueryInformation

user32

ValidateRect
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
CharUpperA
GetMenuItemInfoA
GetKeyNameTextA
MapVirtualKeyA
DestroyCursor
GetSystemMenu
SetParent
WaitMessage
ShowOwnedPopups
SetLayeredWindowAttributes
LoadAcceleratorsW
CharNextA
GetAsyncKeyState
RealChildWindowFromPoint
CopyAcceleratorTableA
InvalidateRgn
UnregisterClassA
PostThreadMessageA
GetTabbedTextExtentW
GetDCEx
DestroyAcceleratorTable
NotifyWinEvent
SetClassLongA
DrawEdge
ToAsciiEx
GetKeyboardLayout
CreateAcceleratorTableA
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
InvertRect
HideCaret
CopyImage
RegisterClipboardFormatA
GetUpdateRect
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
GetMenuState
GetMenuStringA
SendDlgItemMessageA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
PostQuitMessage
GetMessageA
MessageBoxA
DestroyIcon
LoadIconW
ChildWindowFromPoint
GetCapture
SetCursorPos
mouse_event
SendInput
GetIconInfo
DrawIcon
LoadIconA
CreateWindowExA
ShowWindow
SetWindowsHookExA
wsprintfA
DestroyWindow
GetCursor
EnumChildWindows
SetWindowPos
MessageBeep
DrawMenuBar
ClipCursor
GetMenu
UnpackDDElParam
EnumDisplayMonitors
LoadMenuA
SetMenu
GetMonitorInfoA
GetDesktopWindow
CreatePopupMenu
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
TrackPopupMenu
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
CloseTouchInputHandle
GetTouchInputInfo
GetClassInfoA
PeekMessageA
DispatchMessageA
TranslateMessage
PrintWindow
SetScrollPos
GetScrollPos
LockWindowUpdate
IsZoomed
RemoveMenu
ModifyMenuA
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
CreateMenu
BeginPaint
EndPaint
AdjustWindowRectEx
MoveWindow
MapDialogRect
DrawFrameControl
RegisterClassA
SetFocus
GetDlgCtrlID
LoadStringA
IsChild
ChildWindowFromPointEx
IsWindow
GetActiveWindow
IntersectRect
IsRectEmpty
LoadBitmapA
GetWindow
InflateRect
GetKeyboardState
UnhookWindowsHookEx
GetKeyState
CallNextHookEx
ClientToScreen
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetFocus
LoadMenuW
GetSubMenu
SetWindowRgn
GetClassNameA
WindowFromPoint
SystemParametersInfoA
IsWindowVisible
UpdateWindow
DrawTextA
FrameRect
LoadBitmapW
UnionRect
OffsetRect
SetRectEmpty
SetRect
GetDC
KillTimer
SetTimer
PostMessageA
DrawFocusRect
FillRect
CallWindowProcA
SetWindowLongA
GetWindowLongA
RedrawWindow
DefWindowProcA
RegisterWindowMessageA
DrawIconEx
ReleaseCapture
GetMessagePos
GetSystemMetrics
GetSysColor
LoadImageA
GetCursorPos
SetCursor
GetWindowTextA
LoadCursorA
LoadCursorW
EnableWindow
GetParent
SetCapture
InvalidateRect
ReleaseDC
GetWindowDC
ScreenToClient
GetClientRect
GetWindowRect
SendMessageA
PtInRect
CopyRect
DrawStateA
ReuseDDElParam
LoadAcceleratorsA
IsIconic
InsertMenuItemA
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DefFrameProcA
DefMDIChildProcA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
DestroyMenu
CheckDlgButton
SetWindowContextHelpId

gdi32

EnumFontFamiliesExA
GetNearestPaletteIndex
SetPixel
CreateRoundRectRgn
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
StretchDIBits
GetCharWidthA
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetRectRgn
CreateRectRgnIndirect
FillRgn
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
GetBoundsRect
SetPixelV
CreateFontA
PatBlt
GetTextExtentPoint32A
SelectObject
GetStockObject
GetObjectA
CreateCompatibleDC
StretchBlt
ExtFloodFill
MoveToEx
LineTo
IntersectClipRect
DeleteObject
CreateSolidBrush
GetSystemPaletteEntries
CreateFontIndirectA
CreateBitmap
CreateCompatibleBitmap
ExcludeClipRect
GetClipBox
SetMapMode
SetPolyFillMode
RestoreDC
SaveDC
GetTextColor
CopyMetaFileA
SetPaletteEntries
SelectPalette
RealizePalette
GetPaletteEntries
SetDIBits
GdiFlush
SetStretchBltMode
CreateDIBSection
SetDIBColorTable
CreateHatchBrush
SetTextColor
SetBkMode
PlgBlt
Polyline
PtInRegion
CreatePolygonRgn
SwapBuffers
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDIBColorTable
LPtoDP
DPtoLP
GetMapMode
GetBkColor
CreateHalftonePalette
CreatePalette
GetDIBits
CreateFontW
GetTextExtentPointA
SetROP2
FrameRgn
CreateDCA
GetDeviceCaps
Ellipse
SetBkColor
DeleteDC
GetTextMetricsA
RoundRect
OffsetRgn
CombineRgn
CreateRectRgn
Rectangle
CreatePen
GetPixel
BitBlt
Polygon

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA
GetJobA

advapi32

RegEnumKeyA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
RegDeleteKeyA

shell32

SHBrowseForFolderA
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs
SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteA

comctl32

_TrackMouseEvent
FlatSB_EnableScrollBar
InitializeFlatSB
ImageList_GetIconSize

shlwapi

PathIsDirectoryA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionW

ole32

CoRevokeClassObject
CoRegisterMessageFilter
RegisterDragDrop
DoDragDrop
OleFlushClipboard
RevokeDragDrop
OleGetClipboard
CoLockObjectExternal
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
OleIsCurrentClipboard

oleaut32

VarBstrFromDate
VariantCopy
OleCreateFontIndirect
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocString
SafeArrayDestroy
SysStringLen
SysAllocStringByteLen
SysFreeString

oledlg

ord8

urlmon

URLDownloadToFileA

wsock32

WSASetLastError

gdiplus

GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipGetImagePaletteSize
GdipCreateBitmapFromFile
GdipSetInterpolationMode
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipFree

lacewing

??1Client@Lacewing@@QAE@XZ
??0Client@Lacewing@@QAE@XZ
?RegisterHandlerConnect@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnectionDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Client@Lacewing@@QAEXP6AXAAV12@W4Type@TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?SendServer@Client@Lacewing@@QAEXHPBDHH@Z
?ToString@Error@Lacewing@@QAEPBDXZ
?Connected@Client@Lacewing@@QAE_NXZ
?Connect@Client@Lacewing@@QAEXPBDH_N@Z
?RegisterHandlerChannelListComplete@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerError@Client@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoin@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoinDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeave@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerLeaveDenied@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@W4Type@DenyStatus@2@@ZW44HandlerMode@2@@Z
?RegisterHandlerNameSet@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameChanged@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerPeerConnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerChangeName@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@PBD@ZW4Type@HandlerMode@2@@Z

lib3ds-2_0

lib3ds_matrix_translate
lib3ds_file_open
lib3ds_file_free
lib3ds_matrix_identity
lib3ds_file_mesh_for_node
lib3ds_matrix_copy
lib3ds_matrix_inv
lib3ds_mesh_calculate_vertex_normals
lib3ds_mesh_calculate_face_normals
lib3ds_matrix_mult

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

openal32

alcDestroyContext
alcMakeContextCurrent
alcGetContextsDevice
alcGetCurrentContext
alGetEnumValue
alBufferData
alGetError
alcGetString
alcCreateContext
alcOpenDevice
alDeleteBuffers
alDeleteSources
alSourceStop
alSourcePause
alSourcePlay
alSourcef
alSourcei
alGenSources
alGenBuffers
alcCloseDevice

hookmouse

UnInstallHookMouse
InstallHookMouse

hookkeyboard

UnInstallKeyBoardHook
InstallKeyBoardHook

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

wininet

DeleteUrlCacheEntry

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Exports

Exports

??0CLogo@@QAE@XZ
??0CSTLReader@@QAE@XZ
??1CSTLReader@@UAE@XZ
?ClearG3DPrimitiveArray@CSTLReader@@QAEXAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?Read3DMFile@CSTLReader@@QAEHPADAAUCG3DModel@@@Z
?ReadGpaFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFileMesh@CSTLReader@@QAEHPAD@Z
?Write3DMFile@CSTLReader@@QAEHPADABUCG3DModel@@@Z
?WriteGpaFile@CSTLReader@@QAEHPADABV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 543KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da7056e0cced0ab6a3e043cee7aeb5dd

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

opengl32

glu32

vcncdll

ijl15

sssd

ws2_32

openthreadswin32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

wsock32

gdiplus

lacewing

lib3ds-2_0

version

openal32

hookmouse

hookkeyboard

oleacc

wininet

imm32

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 543KB - Virtual size: 542KB

.data Size: 45KB - Virtual size: 533KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 316KB - Virtual size: 316KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 543KB - Virtual size: 542KB

.data
Size: 45KB - Virtual size: 533KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 316KB - Virtual size: 316KB