155e4c6a206d82b6852e66363d305a8c79c16ffafa2190cc7d9c95d3d8addfa9

Sharing

Copy URL

Twitter E-mail

General

Target

155e4c6a206d82b6852e66363d305a8c79c16ffafa2190cc7d9c95d3d8addfa9
Size

6.4MB
MD5

92cd972a29577eaee04d567b821b633f
SHA1

7a2f6dc488db3e5d7af3258f8c41527177953670
SHA256

155e4c6a206d82b6852e66363d305a8c79c16ffafa2190cc7d9c95d3d8addfa9
SHA512

bce8afea77c95f1b199a3be883f37fddff3d787c387b7ae6e8f182ea499aa872acf21f4ffb8da093cd25ea7344467a6ef599498ca44bff13a0d34c85cb7bdeb3
SSDEEP

196608:DXPvd2nRoTbKG73nFcA0ZK/q9AMmu8CbxAF1L:DdoRoTbKSd/nM6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155e4c6a206d82b6852e66363d305a8c79c16ffafa2190cc7d9c95d3d8addfa9

Files

155e4c6a206d82b6852e66363d305a8c79c16ffafa2190cc7d9c95d3d8addfa9
.exe windows:5 windows x86 arch:x86

fdb7784a2a5101f8a5633e7f7621e1ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
PlaySoundA

avifil32

AVIFileExit
AVIStreamRelease
AVIFileRelease
AVISaveOptionsFree
AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamWrite

msvfw32

ICOpen
ord2
ICClose
ICSendMessage

opengl32

glVertex3f
glColor4fv
glTexCoord2d
glAlphaFunc
glGetDoublev
glMultMatrixd
glOrtho
glLoadIdentity
glMatrixMode
glViewport
glLightfv
glFlush
glColor3ub
glLineStipple
glGetBooleanv
glClear
wglDeleteContext
glFinish
glLoadMatrixd
glInitNames
glRenderMode
glSelectBuffer
glIsEnabled
wglMakeCurrent
glClearDepth
wglUseFontBitmapsA
wglCreateContext
glDrawElements
glVertexPointer
glDisableClientState
glNormalPointer
glEnableClientState
glGetFloatv
wglGetCurrentDC
glTranslatef
glGetMaterialfv
glScalef
glNormal3d
glPopMatrix
glCallLists
glRasterPos3d
glColor3fv
glMaterialfv
glTranslated
glListBase
glPushMatrix
glNormal3dv
glBegin
glEnd
glVertex3dv
glVertex3d
glPolygonMode
glEnable
glDisable
glColor4f
glColor3f
glPopName
glPushName
glRotated
glPointSize
glLineWidth
glRasterPos3dv
glBlendFunc
glReadPixels
glDepthFunc
glDeleteLists
glIsList
glTexParameteri
glBindTexture
glDeleteTextures
glColor3d
glPolygonStipple
glRotatef
glNormal3f
glScaled
glGetIntegerv
glShadeModel
glPushAttrib
glPopAttrib
glMultMatrixf
glGenLists
glNewList
glMaterialf
glNormal3fv
glTexCoord2f
glVertex3fv
glEndList
glCallList
glGenTextures
glPixelStorei

glu32

gluTessBeginContour
gluTessEndPolygon
gluTessEndContour
gluTessVertex
gluQuadricNormals
gluTessBeginPolygon
gluTessCallback
gluNewTess
gluBuild2DMipmaps
gluPerspective
gluQuadricDrawStyle
gluCylinder
gluPickMatrix
gluNewQuadric
gluSphere
gluDeleteQuadric
gluUnProject
gluProject

vcncdll

?GetNumValues@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
MillingSettingForFANUC
GetUserPassword
?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetValueRGBA@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM@Z
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?Load@CPicture@@QAEHPAEH@Z
GetAnsweredPaperDirPath
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
?SetKey@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?WriteString@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
??1CRegistry@@QAE@XZ
PositionToolForMilling
EditLanguageTool
OpenLogFile
TransferSSCNCAnsweredPaper
SetCallBackReloadMachineModel
SetCallBackupdateMachineModel3DM
?GetKeyName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
GetCurMachineModelID
MillMacColorSet
?Stop@CDirectSound@@QAEXXZ
GetUploadedWPDirPath
SendFtpFile
WorkpieceBarSetting
DummyCheckVCNCDLL702
SetSystemName
CheckAnnualLicense
IsOEM
OnCncAbout
SelectMillCeneterForFANUC
CheckUpdate
DecryptSSCNCStringReturnKey
GetCharsetName
OnOpenChmHelp
GetEdgeFinder
SetMillingStick
SetMillingClamp
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AA_N@Z
??0CDirectSound@@QAE@XZ
?Create@CDirectSound@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCWnd@@@Z
?GetValueMaterial@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCGLMaterial@@@Z
GetGeneralToolParam
SetCallBackSetViewBusyOrFree
GetLangFileName
?ReadFile@CIniFile@@QAE_NXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?WriteFile@CIniFile@@QAEXXZ
?SetValueRGBA@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM_N@Z
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
SetLanIniPath
??1CIniFile@@UAE@XZ
??0CIniFile@@QAE@XZ
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValue3V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?Reset@CIniFile@@QAEXXZ
?FindKey@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
TransferLicense
??0CRegistry@@QAE@XZ
?GetValue2V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z
?Play@CDirectSound@@QAEXKH@Z
OnTipOfDay
SetVCNCDllLanguage
SetVCNCDllUnit
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
??0CPicture@@QAE@XZ
??1CDirectSound@@UAE@XZ
??1CTimeEncrypt@@UAE@XZ
?IsTimeOut@CTimeEncrypt@@QAEHHPAH@Z
?SetTrialDayLimit@CTimeEncrypt@@QAEXH@Z
??0CTimeEncrypt@@QAE@XZ
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
EncryptSSCNCStringReturnKey

ijl15

ord5
ord2
ord3

sssd

DummyCheckDLL700
CheckSoftDog
GetHostSerial
GetMachineSerial2
SetSSSDLanguage
GetDongleID
CheckSoftDogPassword
IsValidateTime
IsDemoSoftDog
GetMachineSerial
CheckMachineRegisterNo

ws2_32

select
getsockname
closesocket
ioctlsocket
send
recv
__WSAFDIsSet
getsockopt
WSACleanup
ntohs
inet_ntoa
htons
htonl
bind
WSAStartup
WSAGetLastError
getpeername
connect
sendto
recvfrom
shutdown
ntohl
setsockopt
socket
accept
listen

openthreadswin32

?unlock@Mutex@OpenThreads@@UAEHXZ
?lock@Mutex@OpenThreads@@UAEHXZ
?wait@Condition@OpenThreads@@UAEHPAVMutex@2@@Z
?signal@Condition@OpenThreads@@UAEHXZ
??0Mutex@OpenThreads@@QAE@XZ
??0Condition@OpenThreads@@QAE@XZ
??1Mutex@OpenThreads@@UAE@XZ
??1Condition@OpenThreads@@UAE@XZ

kernel32

FindResourceExW
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetCurrentDirectoryA
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
SetErrorMode
GlobalFlags
LocalReAlloc
GlobalReAlloc
GetPrivateProfileStringA
QueryPerformanceFrequency
WritePrivateProfileStringA
GetPrivateProfileIntA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
SetLastError
FindClose
FindNextFileW
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
MultiByteToWideChar
GetFullPathNameW
SetHandleInformation
Sleep
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
GetLastError
ReadFile
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceW
lstrlenA
MulDiv
LoadLibraryA
GetModuleHandleA
GetProcAddress
DeactivateActCtx
ActivateActCtx
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByteEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
SetCurrentDirectoryA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetTickCount
TerminateThread
CreateProcessA
CopyFileA
FreeResource
FindResourceA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEvent
GetSystemDefaultUILanguage
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetFileAttributesA
CreateDirectoryA
WinExec
lstrcatA
GetUserDefaultLangID
GetModuleFileNameA
CreateEventA
OutputDebugStringA
GetCurrentThreadId
FormatMessageA
GetVersionExA
DeleteFileA
OpenFile
SetThreadPriority
ResumeThread
lstrcpyA
GlobalHandle
TerminateProcess
InitializeCriticalSection
InterlockedExchange
SetFilePointer
CreateFileW
LocalFree
LocalAlloc
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
RaiseException
GetDriveTypeW
FindFirstFileExW
RtlUnwind
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetModuleHandleW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetModuleFileNameW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
GetTimeZoneInformation
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
HeapSize
GetStringTypeW
SetStdHandle
GetLocaleInfoW
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
GetFullPathNameA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenW
GlobalSize
GetThreadLocale
CreateActCtxW
ReleaseActCtx
lstrcmpA
SuspendThread
GetStringTypeExA
lstrcmpiA
MoveFileA
LockFile
UnlockFile
GetFileSize
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
FindNextFileA
ReplaceFileA
HeapQueryInformation

user32

CharUpperA
GetMenuItemInfoA
GetKeyNameTextA
MapVirtualKeyA
DestroyCursor
SetParent
WaitMessage
ShowOwnedPopups
SetLayeredWindowAttributes
LoadAcceleratorsW
SetWindowContextHelpId
GetAsyncKeyState
CopyAcceleratorTableA
InvalidateRgn
UnregisterClassA
PostThreadMessageA
GetTabbedTextExtentW
GetDCEx
DestroyAcceleratorTable
NotifyWinEvent
SetClassLongA
DrawEdge
ToAsciiEx
GetKeyboardLayout
CreateAcceleratorTableA
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
InvertRect
HideCaret
CopyImage
RegisterClipboardFormatA
GetUpdateRect
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
CheckDlgButton
CharNextA
GetMenuState
GetMenuStringA
SendDlgItemMessageA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
PostQuitMessage
GetMessageA
MessageBoxA
DestroyIcon
LoadIconW
ChildWindowFromPoint
GetCapture
SetCursorPos
mouse_event
SendInput
GetIconInfo
DrawIcon
LoadIconA
CreateWindowExA
ShowWindow
SetWindowsHookExA
wsprintfA
DestroyWindow
GetCursor
GetSystemMenu
EnumChildWindows
SetWindowPos
DrawMenuBar
MessageBeep
ClipCursor
CreateDialogIndirectParamA
DestroyMenu
EnumDisplayMonitors
LoadMenuA
SetMenu
GetMonitorInfoA
GetDesktopWindow
CheckMenuItem
CreatePopupMenu
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
InflateRect
TrackPopupMenu
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
CloseTouchInputHandle
GetTouchInputInfo
GetClassInfoA
PeekMessageA
DispatchMessageA
TranslateMessage
PrintWindow
SetScrollPos
GetScrollPos
LockWindowUpdate
IsZoomed
RemoveMenu
ModifyMenuA
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
AppendMenuA
DeleteMenu
CreateMenu
BeginPaint
EndPaint
AdjustWindowRectEx
MoveWindow
MapDialogRect
DrawFrameControl
RegisterClassA
SetFocus
GetDlgCtrlID
LoadStringA
IsChild
ChildWindowFromPointEx
IsWindow
GetActiveWindow
IntersectRect
IsRectEmpty
LoadBitmapA
GetWindow
GetKeyboardState
UnhookWindowsHookEx
GetKeyState
CallNextHookEx
ClientToScreen
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetFocus
LoadMenuW
GetSubMenu
SetWindowRgn
GetClassNameA
WindowFromPoint
SystemParametersInfoA
IsWindowVisible
UpdateWindow
DrawTextA
FrameRect
LoadBitmapW
UnionRect
SetRectEmpty
SetRect
PostMessageA
DrawFocusRect
KillTimer
SetTimer
GetDC
FillRect
OffsetRect
CallWindowProcA
SetWindowLongA
GetWindowLongA
RedrawWindow
DefWindowProcA
RegisterWindowMessageA
DrawIconEx
ReleaseCapture
GetMessagePos
GetSystemMetrics
GetSysColor
LoadImageA
GetCursorPos
SetCursor
GetWindowTextA
LoadCursorA
LoadCursorW
EnableWindow
GetParent
SetCapture
InvalidateRect
ReleaseDC
GetWindowDC
ScreenToClient
GetClientRect
GetWindowRect
SendMessageA
PtInRect
CopyRect
DrawStateA
GetNextDlgTabItem
EndDialog
ValidateRect
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
IsIconic
InsertMenuItemA
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DefMDIChildProcA
DefFrameProcA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
GetMenu
SetDlgItemTextA
RealChildWindowFromPoint

gdi32

SetPixelV
ExtFloodFill
GetBoundsRect
FillRgn
EnumFontFamiliesExA
GetNearestPaletteIndex
SetPixel
CreateRoundRectRgn
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
StretchDIBits
GetCharWidthA
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetRectRgn
CreateRectRgnIndirect
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
CreateFontA
PatBlt
GetTextExtentPoint32A
SelectObject
GetStockObject
GetObjectA
CreateCompatibleDC
StretchBlt
DeleteObject
DeleteDC
GetDeviceCaps
CreateDCA
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleBitmap
Ellipse
BitBlt
GetSystemPaletteEntries
CreateBitmap
Polygon
GetPixel
GetLayout
CreatePen
Rectangle
CreateRectRgn
CombineRgn
OffsetRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetPolyFillMode
RestoreDC
SaveDC
GetTextColor
CopyMetaFileA
SetPaletteEntries
SelectPalette
RealizePalette
GetPaletteEntries
SetDIBits
GdiFlush
SetStretchBltMode
CreateDIBSection
SetDIBColorTable
CreateHatchBrush
SetTextColor
SetBkMode
PlgBlt
Polyline
PtInRegion
CreatePolygonRgn
SwapBuffers
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDIBColorTable
LPtoDP
DPtoLP
GetMapMode
GetBkColor
CreateHalftonePalette
CreatePalette
GetDIBits
CreateFontW
GetTextExtentPointA
SetROP2
FrameRgn
SetBkColor
GetTextMetricsA
RoundRect

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA
GetJobA

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExW

shell32

SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
SHGetFileInfoA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA
SHGetPathFromIDListA
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs

comctl32

ImageList_GetIconSize
InitializeFlatSB
FlatSB_EnableScrollBar
_TrackMouseEvent

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionW
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA

ole32

CoTaskMemFree
RevokeDragDrop
RegisterDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoLockObjectExternal
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID

oleaut32

VarBstrFromDate
VariantCopy
SysAllocStringByteLen
SysFreeString
OleCreateFontIndirect
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocString
SafeArrayDestroy
SysStringLen

wsock32

WSASetLastError

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdipCloneImage
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromScan0
GdipGetImageEncoders
GdipGetImageGraphicsContext
GdipGetImagePixelFormat

lacewing

??1Client@Lacewing@@QAE@XZ
??0Client@Lacewing@@QAE@XZ
?RegisterHandlerConnect@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnectionDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Client@Lacewing@@QAEXP6AXAAV12@W4Type@TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?SendServer@Client@Lacewing@@QAEXHPBDHH@Z
?ToString@Error@Lacewing@@QAEPBDXZ
?Connected@Client@Lacewing@@QAE_NXZ
?Connect@Client@Lacewing@@QAEXPBDH_N@Z
?RegisterHandlerChannelListComplete@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerError@Client@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoin@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoinDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeave@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerLeaveDenied@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@W4Type@DenyStatus@2@@ZW44HandlerMode@2@@Z
?RegisterHandlerNameSet@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameChanged@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerPeerConnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerChangeName@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@PBD@ZW4Type@HandlerMode@2@@Z

lib3ds-2_0

lib3ds_mesh_calculate_face_normals
lib3ds_file_open
lib3ds_matrix_copy
lib3ds_matrix_inv
lib3ds_matrix_identity
lib3ds_file_mesh_for_node
lib3ds_file_free
lib3ds_mesh_calculate_vertex_normals
lib3ds_matrix_translate
lib3ds_matrix_mult

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

openal32

alcOpenDevice
alGenBuffers
alGenSources
alSourcei
alSourcef
alSourcePlay
alcCloseDevice
alcDestroyContext
alcMakeContextCurrent
alcGetContextsDevice
alcGetCurrentContext
alGetEnumValue
alBufferData
alGetError
alcGetString
alcCreateContext
alSourcePause
alDeleteBuffers
alDeleteSources
alSourceStop

hookmouse

InstallHookMouse
UnInstallHookMouse

hookkeyboard

UnInstallKeyBoardHook
InstallKeyBoardHook

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

wininet

DeleteUrlCacheEntry

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Exports

Exports

??0CLogo@@QAE@XZ
??0CSTLReader@@QAE@XZ
??1CSTLReader@@UAE@XZ
?ClearG3DPrimitiveArray@CSTLReader@@QAEXAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?Read3DMFile@CSTLReader@@QAEHPADAAUCG3DModel@@@Z
?ReadGpaFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFileMesh@CSTLReader@@QAEHPAD@Z
?Write3DMFile@CSTLReader@@QAEHPADABUCG3DModel@@@Z
?WriteGpaFile@CSTLReader@@QAEHPADABV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdb7784a2a5101f8a5633e7f7621e1ed

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

opengl32

glu32

vcncdll

ijl15

sssd

ws2_32

openthreadswin32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wsock32

oledlg

urlmon

gdiplus

lacewing

lib3ds-2_0

version

openal32

hookmouse

hookkeyboard

oleacc

wininet

imm32

Exports

Exports

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 577KB - Virtual size: 577KB

.data Size: 47KB - Virtual size: 139KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 348KB - Virtual size: 347KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 577KB - Virtual size: 577KB

.data
Size: 47KB - Virtual size: 139KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 348KB - Virtual size: 347KB