09227f6a4a4daf1b361812dc42b13656c855c8f7336f424fd3570bc51dae7d06

Sharing

Copy URL

Twitter E-mail

General

Target

09227f6a4a4daf1b361812dc42b13656c855c8f7336f424fd3570bc51dae7d06
Size

11.0MB
MD5

33eb495b302659e92333bc354673333d
SHA1

b0cf9a8886a3b19ef576afb0c9c260c514d6493a
SHA256

09227f6a4a4daf1b361812dc42b13656c855c8f7336f424fd3570bc51dae7d06
SHA512

738aeb151b79b10c1760c6649b8176462f7fabb46ba75f2ad346d6238e52a6544a3679eb4a6dbbb9109ba655cacd7528e764600c754e549d4877516ca31c2d90
SSDEEP

196608:Df/7Ka5t7eyoTbKot3+WEy6zTOvuc1L8vHHH4QTtb8oDX:DeaP5oTbKHyHul4QhY6X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09227f6a4a4daf1b361812dc42b13656c855c8f7336f424fd3570bc51dae7d06

Files

09227f6a4a4daf1b361812dc42b13656c855c8f7336f424fd3570bc51dae7d06
.exe windows:5 windows x86 arch:x86

3ea3dfb270f09e69addfcdec48ea73bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
PlaySoundA

avifil32

AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIFileExit
AVIStreamSetFormat
AVIStreamWrite
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease

msvfw32

ICClose
ord2
ICOpen
ICSendMessage

opengl32

glBindTexture
glGenTextures
glPopMatrix
glEnd
glVertex3d
glNormal3d
glBegin
glRotated
glTranslated
glPushMatrix
glMaterialfv
glColor4f
glCallLists
glRasterPos3d
glColor3fv
glListBase
glNormal3dv
glVertex3dv
glPolygonMode
glEnable
glDisable
glColor3f
glPopName
glPushName
glPointSize
glLineWidth
glRasterPos3dv
glBlendFunc
glDepthFunc
glDeleteLists
glIsList
glPixelStorei
glCallList
glEndList
glVertex3fv
glTexCoord2f
glNormal3fv
glMaterialf
glNewList
glGenLists
glMultMatrixf
glPopAttrib
glPushAttrib
glShadeModel
glGetIntegerv
glScaled
glNormal3f
glRotatef
glPolygonStipple
glColor3d
glDeleteTextures
glScalef
glGetMaterialfv
glTranslatef
wglMakeCurrent
glVertex3f
glColor4fv
glTexCoord2d
glAlphaFunc
glGetDoublev
glMultMatrixd
glOrtho
glLoadIdentity
glMatrixMode
glViewport
glLightfv
glFlush
glColor3ub
glLineStipple
glGetBooleanv
glClear
wglDeleteContext
glFinish
glLoadMatrixd
glInitNames
glRenderMode
glSelectBuffer
glIsEnabled
glReadPixels
glClearDepth
wglUseFontBitmapsA
wglCreateContext
glDrawElements
glVertexPointer
glDisableClientState
glNormalPointer
glEnableClientState
glGetFloatv
wglGetCurrentDC
glTexParameteri

glu32

gluTessCallback
gluTessBeginPolygon
gluTessBeginContour
gluBuild2DMipmaps
gluPerspective
gluCylinder
gluTessEndPolygon
gluTessEndContour
gluTessVertex
gluQuadricDrawStyle
gluQuadricNormals
gluPickMatrix
gluNewQuadric
gluSphere
gluDeleteQuadric
gluUnProject
gluProject
gluNewTess

vcncdll

?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
DeleteDirectoryWithR
?ReadFile@CIniFile@@QAE_NXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
IsOEM
CheckAnnualLicense
SetSystemName
DummyCheckVCNCDLL702
WorkpieceBarSetting
SendFtpFile
GetUploadedWPDirPath
?Stop@CDirectSound@@QAEXXZ
MillMacColorSet
GetCurMachineModelID
SetCallBackSetViewBusyOrFree
SetCallBackupdateMachineModel3DM
SetCallBackReloadMachineModel
TransferSSCNCAnsweredPaper
OpenLogFile
EditLanguageTool
PositionToolForMilling
??1CRegistry@@QAE@XZ
?WriteString@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?SetKey@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
??0CRegistry@@QAE@XZ
GetGeneralToolParam
?GetValueMaterial@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCGLMaterial@@@Z
?GetKeyName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?GetNumValues@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
MillingSettingForFANUC
GetUserPassword
DecryptSSCNCStringReturnKey
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
??0CTimeEncrypt@@QAE@XZ
?SetTrialDayLimit@CTimeEncrypt@@QAEXH@Z
?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
GetAnsweredPaperDirPath
CheckUpdate
??1CTimeEncrypt@@UAE@XZ
GetCharsetName
OnOpenChmHelp
GetEdgeFinder
SetMillingStick
GetLangFileName
??0CIniFile@@QAE@XZ
??1CIniFile@@UAE@XZ
?GetValueRGBA@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM@Z
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?WriteFile@CIniFile@@QAEXXZ
?SetValueRGBA@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM_N@Z
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
SetLanIniPath
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValue3V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?Reset@CIniFile@@QAEXXZ
?FindKey@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
TransferLicense
?GetValue2V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z
?Play@CDirectSound@@QAEXKH@Z
OnTipOfDay
SetVCNCDllLanguage
SetVCNCDllUnit
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
??0CPicture@@QAE@XZ
SetMillingClamp
OnCncAbout
SelectMillCeneterForFANUC
?Load@CPicture@@QAEHPAEH@Z
?IsTimeOut@CTimeEncrypt@@QAEHHPAH@Z
??1CDirectSound@@UAE@XZ
EncryptSSCNCStringReturnKey
?Create@CDirectSound@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCWnd@@@Z
??0CDirectSound@@QAE@XZ
GetAppDataDirPath
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AA_N@Z

ijl15

ord3
ord5
ord2

sssd

DummyCheckDLL700
SetSSSDLanguage
CheckMachineRegisterNo
GetHostSerial
CheckSoftDog
GetMachineSerial
GetDongleID
CheckSoftDogPassword
IsValidateTime
IsDemoSoftDog
GetMachineSerial2

kernel32

GetLocalTime
MultiByteToWideChar
GetFullPathNameW
SetHandleInformation
Sleep
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
GetLastError
ReadFile
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
lstrlenA
lstrcpyA
WaitForSingleObject
CreateProcessA
MulDiv
LoadLibraryA
GetModuleHandleA
GetProcAddress
DeactivateActCtx
ActivateActCtx
CopyFileA
SetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByteEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
ReleaseMutex
CreateMutexA
GetTickCount
TerminateThread
FreeResource
FindResourceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEvent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemDefaultUILanguage
FreeLibrary
GetFileAttributesA
CreateDirectoryA
WinExec
lstrcatA
GetUserDefaultLangID
GetModuleFileNameA
CreateEventA
OutputDebugStringA
GetCurrentThreadId
FormatMessageA
GetVersionExA
DeleteFileA
OpenFile
SetThreadPriority
ResumeThread
GlobalHandle
TerminateProcess
InitializeCriticalSection
InterlockedExchange
SetFilePointer
CreateFileW
LocalFree
LocalAlloc
ExitProcess
lstrcmpW
LoadLibraryW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenW
GlobalSize
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
WideCharToMultiByte
lstrcmpA
GetThreadLocale
SuspendThread
FindNextFileA
FindFirstFileA
GetStringTypeExA
lstrcmpiA
MoveFileA
FlushFileBuffers
LockFile
SystemTimeToFileTime
SetEndOfFile
GetFileSize
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
GetUserDefaultLCID
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
GetModuleHandleW
GetLocaleInfoA
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
WritePrivateProfileStringA
TlsGetValue
GlobalReAlloc
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
GetTempPathA
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
SetErrorMode
GetCurrentDirectoryA
GetWindowsDirectoryA
GetNumberFormatA
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
RtlUnwind
RaiseException
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
GetDriveTypeW
FindFirstFileExW
GetConsoleCP
GetConsoleMode
GetFileInformationByHandle
PeekNamedPipe
GetFileType
ReadConsoleInputA
SetConsoleMode
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetStdHandle
HeapQueryInformation
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
LCMapStringW
IsProcessorFeaturePresent
GetStringTypeW
HeapCreate
GetTimeZoneInformation
SetHandleCount
GetCurrentDirectoryW
WriteConsoleW
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
CompareStringW
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
GetProcessHeap
FindResourceW
LoadResource
LockResource
SizeofResource
FindNextFileW
FindClose
UnlockFile
SetLastError
GetCurrentProcessId
QueryPerformanceFrequency

user32

InvertRect
HideCaret
CopyImage
RegisterClipboardFormatA
GetUpdateRect
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
DeleteMenu
CreateMenu
PeekMessageA
DispatchMessageA
TranslateMessage
BeginPaint
EndPaint
AdjustWindowRectEx
MoveWindow
MapDialogRect
DrawFrameControl
RegisterClassA
SetFocus
GetDlgCtrlID
LoadStringA
IsChild
ChildWindowFromPointEx
IsWindow
IntersectRect
IsRectEmpty
GetKeyboardState
UnhookWindowsHookEx
CallNextHookEx
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetFocus
LoadMenuW
GetSubMenu
EqualRect
GetWindow
LoadBitmapA
GetClassNameA
GetActiveWindow
ClientToScreen
SetWindowRgn
SystemParametersInfoA
IsWindowVisible
UpdateWindow
DrawTextA
FrameRect
UnionRect
SetRectEmpty
SetRect
GetDC
KillTimer
DrawFocusRect
OffsetRect
PostMessageA
ModifyMenuA
CheckMenuItem
AppendMenuA
CreatePopupMenu
CallWindowProcA
SetWindowLongA
GetWindowLongA
RedrawWindow
DefWindowProcA
DrawIconEx
ReleaseCapture
GetMessagePos
GetSystemMetrics
GetSysColor
GetCursorPos
SetCursor
GetWindowTextA
LoadCursorA
LoadCursorW
GetNextDlgGroupItem
GetWindowDC
ScreenToClient
PtInRect
CopyRect
DrawStateA
GetParent
SetTimer
ReleaseDC
GetClientRect
GetWindowRect
SendMessageA
FillRect
LoadBitmapW
RegisterWindowMessageA
LoadImageA
EnableWindow
InvalidateRect
IsClipboardFormatAvailable
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
GetDCEx
GetTabbedTextExtentW
PostThreadMessageA
CreateAcceleratorTableA
GetKeyboardLayout
ToAsciiEx
DrawEdge
SetClassLongA
NotifyWinEvent
DestroyAcceleratorTable
InvalidateRgn
CopyAcceleratorTableA
UnregisterClassA
RealChildWindowFromPoint
GetAsyncKeyState
SetWindowContextHelpId
LoadAcceleratorsW
ShowOwnedPopups
WaitMessage
SetParent
DestroyCursor
CharUpperA
SetLayeredWindowAttributes
ValidateRect
MapVirtualKeyA
GetKeyNameTextA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
GetMenuStringA
SendDlgItemMessageA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
PostQuitMessage
GetMessageA
MessageBoxA
DestroyIcon
LoadIconW
ChildWindowFromPoint
GetCapture
SetCursorPos
mouse_event
SendInput
GetIconInfo
DrawIcon
LoadIconA
CreateWindowExA
ShowWindow
SetWindowsHookExA
wsprintfA
DestroyWindow
GetCursor
GetSystemMenu
EnumChildWindows
SetWindowPos
MessageBeep
GetMenuItemInfoA
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
IsIconic
InsertMenuItemA
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DefMDIChildProcA
DefFrameProcA
CharNextA
DrawMenuBar
ClipCursor
GetMenu
DestroyMenu
EnumDisplayMonitors
LoadMenuA
SetMenu
GetMonitorInfoA
GetDesktopWindow
GetForegroundWindow
GetWindowThreadProcessId
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetCapture
SetForegroundWindow
InflateRect
TrackPopupMenu
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
CloseTouchInputHandle
GetTouchInputInfo
GetClassInfoA
PrintWindow
SetScrollPos
GetScrollPos
LockWindowUpdate
IsZoomed
GetKeyState
RemoveMenu
WindowFromPoint

gdi32

SetBkColor
SetTextColor
GetPixel
Polygon
CreateBitmap
GetSystemPaletteEntries
CreateSolidBrush
CreateDCA
GetDeviceCaps
DeleteDC
StretchBlt
GetStockObject
GetTextExtentPoint32A
PatBlt
CreateFontA
ExtTextOutA
DeleteObject
CreateFontIndirectA
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
CreatePen
CreateRectRgn
CreateRoundRectRgn
PathToRegion
FillRgn
SetPolyFillMode
CreateCompatibleBitmap
FrameRgn
Polyline
Ellipse
RoundRect
SetPixelV
ExtFloodFill
GetBoundsRect
EnumFontFamiliesExA
GetNearestPaletteIndex
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
GetRgnBox
StretchDIBits
GetCharWidthA
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
SaveDC
CopyMetaFileA
SetPaletteEntries
SelectPalette
RealizePalette
GetPaletteEntries
SetDIBits
GdiFlush
SetStretchBltMode
CreateDIBSection
SetDIBColorTable
SetPixel
BeginPath
EndPath
GetTextMetricsA
RemoveFontResourceA
CreateHatchBrush
SetBkMode
PlgBlt
PtInRegion
CreatePolygonRgn
SwapBuffers
SetRectRgn
CreateRectRgnIndirect
GetTextColor
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
AddFontResourceA
CreatePalette
CreateHalftonePalette
GetDIBColorTable
Rectangle
CombineRgn
OffsetRgn
SetROP2
GetTextExtentPointA
CreateFontW
GetDIBits
GetBkColor
GetMapMode
DPtoLP
LPtoDP
PtVisible
RectVisible
TextOutA
Escape
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
RestoreDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA
GetJobA

advapi32

GetFileSecurityA
RegEnumKeyExA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
SetFileSecurityA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHAppBarMessage

comctl32

_TrackMouseEvent
FlatSB_EnableScrollBar
InitializeFlatSB
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionW

ole32

CoGetClassObject
CLSIDFromString
RegisterDragDrop
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoTaskMemFree
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoUninitialize
CoCreateInstance
CoInitialize
CoInitializeEx
CoCreateGuid
RevokeDragDrop
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleGetClipboard
CoLockObjectExternal
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize

oleaut32

SafeArrayDestroy
VariantCopy
SysStringLen
OleCreateFontIndirect
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VarUdateFromDate
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString
VariantTimeToSystemTime

ws2_32

send
ioctlsocket
closesocket
getsockname
listen
bind
setsockopt
socket
accept
getpeername
select
ntohs
inet_ntoa
htons
htonl
WSAStartup
WSAGetLastError
connect
sendto
recvfrom
shutdown
ntohl
WSACleanup
getsockopt
__WSAFDIsSet
WSASetLastError
recv

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageWidth

lacewing

?RegisterHandlerConnect@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnectionDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Client@Lacewing@@QAEXP6AXAAV12@W4Type@TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerError@Client@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoin@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoinDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeave@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerLeaveDenied@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@W4Type@DenyStatus@2@@ZW44HandlerMode@2@@Z
?RegisterHandlerNameSet@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameChanged@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerPeerConnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerChangeName@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerChannelListComplete@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
??1Client@Lacewing@@QAE@XZ
??0Client@Lacewing@@QAE@XZ
?Connect@Client@Lacewing@@QAEXPBDH_N@Z
?SendServer@Client@Lacewing@@QAEXHPBDHH@Z
?ToString@Error@Lacewing@@QAEPBDXZ
?Connected@Client@Lacewing@@QAE_NXZ

openthreadswin32

?unlock@Mutex@OpenThreads@@UAEHXZ
??1Condition@OpenThreads@@UAE@XZ
??1Mutex@OpenThreads@@UAE@XZ
??0Condition@OpenThreads@@QAE@XZ
??0Mutex@OpenThreads@@QAE@XZ
?signal@Condition@OpenThreads@@UAEHXZ
?wait@Condition@OpenThreads@@UAEHPAVMutex@2@@Z
?lock@Mutex@OpenThreads@@UAEHXZ

lib3ds-2_0

lib3ds_matrix_copy
lib3ds_file_open
lib3ds_file_free
lib3ds_matrix_inv
lib3ds_matrix_identity
lib3ds_file_mesh_for_node
lib3ds_mesh_calculate_vertex_normals
lib3ds_mesh_calculate_face_normals
lib3ds_matrix_translate
lib3ds_matrix_mult

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

openal32

alDeleteBuffers
alBufferData
alGetError
alcGetString
alcCreateContext
alcOpenDevice
alDeleteSources
alSourceStop
alSourcePause
alSourcePlay
alSourcef
alSourcei
alGenSources
alGenBuffers
alcCloseDevice
alcDestroyContext
alcMakeContextCurrent
alcGetContextsDevice
alcGetCurrentContext
alGetEnumValue

hookmouse

UnInstallHookMouse
InstallHookMouse

hookkeyboard

InstallKeyBoardHook
UnInstallKeyBoardHook

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

DeleteUrlCacheEntry

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Exports

Exports

??0CLogo@@QAE@XZ
??0CSTLReader@@QAE@XZ
??1CSTLReader@@UAE@XZ
?ClearG3DPrimitiveArray@CSTLReader@@QAEXAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?Read3DMFile@CSTLReader@@QAEHPADAAUCG3DModel@@@Z
?ReadGpaFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFileMesh@CSTLReader@@QAEHPAD@Z
?Write3DMFile@CSTLReader@@QAEHPADABUCG3DModel@@@Z
?WriteGpaFile@CSTLReader@@QAEHPADABV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ea3dfb270f09e69addfcdec48ea73bb

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

opengl32

glu32

vcncdll

ijl15

sssd

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

oledlg

urlmon

gdiplus

lacewing

openthreadswin32

lib3ds-2_0

version

openal32

hookmouse

hookkeyboard

oleacc

wininet

imm32

Exports

Exports

Sections

.text Size: 3.9MB - Virtual size: 3.9MB

.rdata Size: 618KB - Virtual size: 617KB

.data Size: 47KB - Virtual size: 147KB

.rsrc Size: 6.1MB - Virtual size: 6.1MB

.reloc Size: 384KB - Virtual size: 384KB

.text
Size: 3.9MB - Virtual size: 3.9MB

.rdata
Size: 618KB - Virtual size: 617KB

.data
Size: 47KB - Virtual size: 147KB

.rsrc
Size: 6.1MB - Virtual size: 6.1MB

.reloc
Size: 384KB - Virtual size: 384KB