7df4712eb86268da87c76bddf77de8e0e1951e1bbd3a8ee54fa0d0f00245fba2

Sharing

Copy URL Twitter E-mail

General

Target

7df4712eb86268da87c76bddf77de8e0e1951e1bbd3a8ee54fa0d0f00245fba2
Size

6.0MB
MD5

c79f349d33a6250af0458f0bd7c7fa9a
SHA1

bddd0b688eb0773f6b6394dc26c59e28d6ddef9d
SHA256

7df4712eb86268da87c76bddf77de8e0e1951e1bbd3a8ee54fa0d0f00245fba2
SHA512

67b2d6b7f7b04a14be107d74bf542289ebfa9b51db36c78f5dd4ceae8898e58f1fec5e02a1e3df0ce3be7ec4bc52c5699b432449c44cf9f43e2e581f58674763
SSDEEP

98304:N48yr6a7GydldA1z1ZeV5vT5Cl+tq7hru6NMatrfqw2PPJu9J3PYKsOQibFOPRxK:S8yr6a7TfcSV5vTo/5rtOFPAAKsOQqFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7df4712eb86268da87c76bddf77de8e0e1951e1bbd3a8ee54fa0d0f00245fba2

Files

7df4712eb86268da87c76bddf77de8e0e1951e1bbd3a8ee54fa0d0f00245fba2
.exe windows:5 windows x86 arch:x86

e1320535da2389580119107e7829895e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
PlaySoundA

avifil32

AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamWrite
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit

msvfw32

ICOpen
ord2
ICSendMessage
ICClose

opengl32

glRotatef
glColor4fv
glLineWidth
glVertex3dv
glTranslatef
glAlphaFunc
wglMakeCurrent
glGetDoublev
glMultMatrixd
glOrtho
glLoadIdentity
glMatrixMode
glViewport
glNormal3dv
glColor4f
glDepthFunc
glLightfv
glFlush
glColor3ub
glLineStipple
glGetBooleanv
glPolygonMode
glClear
wglDeleteContext
glFinish
glLoadMatrixf
glIsEnabled
glInitNames
glRenderMode
glSelectBuffer
glReadPixels
glClearDepth
wglUseFontBitmapsA
wglCreateContext
glPointSize
glDrawElements
glVertexPointer
glDisableClientState
glNormalPointer
glEnableClientState
glGetFloatv
wglGetCurrentDC
glLightModelf
glClearColor
glColor3d
glPopName
glPushName
glPolygonStipple
glScalef
glColor3f
glDeleteTextures
glNormal3d
glVertex3d
glGetIntegerv
glShadeModel
glVertex3f
glNormal3f
glPushAttrib
glScaled
glRotated
glPopAttrib
glMultMatrixf
glGenLists
glNewList
glMaterialf
glEnable
glDisable
glBlendFunc
glBegin
glNormal3fv
glTexCoord2f
glVertex3fv
glEnd
glEndList
glCallList
glGenTextures
glPixelStorei
glBindTexture
glTexParameteri
glIsList
glDeleteLists
glPushMatrix
glListBase
glTranslated
glMaterialfv
glColor3fv
glRasterPos3d
glCallLists
glPopMatrix
glTexCoord2d

glu32

gluPickMatrix
gluProject
gluPerspective
gluBuild2DMipmaps
gluQuadricNormals
gluCylinder
gluDeleteQuadric
gluSphere
gluNewQuadric
gluQuadricDrawStyle
gluUnProject

vcncdll

GetUserPassword
?Load@CPicture@@QAEHPAEH@Z
GetAnsweredPaperDirPath
?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
??1CIniFile@@UAE@XZ
?ReadFile@CIniFile@@QAE_NXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0CIniFile@@QAE@XZ
GetTrapezoidThreadInsertParam
??0CRegistry@@QAE@XZ
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
?SetKey@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?WriteString@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
??1CRegistry@@QAE@XZ
?GetValue2V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
WorkpieceSetting
PositionTool
EditLanguageTool
OpenLogFile
TransferSSCNCAnsweredPaper
?DeleteKey@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
SetCallBackupdateMachineModel3DM
SetCallBackSetViewBusyOrFree
GetCurMachineModelID
?Stop@CDirectSound@@QAEXXZ
SelectLathe2ForFANUCForUTEC
SelectLathe2ForFANUC
GetCharsetName
DummyCheckVCNCDLL702
SetSystemName
CheckAnnualLicense
IsOEM
OnCncAbout
CheckUpdate
DecryptSSCNCStringReturnKey
??0CTimeEncrypt@@QAE@XZ
?SetTrialDayLimit@CTimeEncrypt@@QAEXH@Z
?IsTimeOut@CTimeEncrypt@@QAEHHPAH@Z
??1CTimeEncrypt@@UAE@XZ
GetUploadedWPDirPath
SendFtpFile
OnOpenChmHelp
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AA_N@Z
?GetNumValues@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetKeyName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
SetCallBackReloadMachineModel
?FindKey@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
GetLangFileName
?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueRGBA@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM@Z
?WriteFile@CIniFile@@QAEXXZ
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
?SetValueRGBA@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM_N@Z
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
SetLanIniPath
?GetValue3V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?Reset@CIniFile@@QAEXXZ
GetSRDCNToolParam
?GetValueMaterial@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCGLMaterial@@@Z
TransferLicense
?Play@CDirectSound@@QAEXKH@Z
OnTipOfDay
SetVCNCDllLanguage
SetVCNCDllUnit
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
??0CPicture@@QAE@XZ
??1CDirectSound@@UAE@XZ
EncryptSSCNCStringReturnKey
?Create@CDirectSound@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCWnd@@@Z
??0CDirectSound@@QAE@XZ
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z

ijl15

ord2
ord5
ord3

sssd

SetSSSDLanguage
CheckMachineRegisterNo
GetHostSerial
DummyCheckDLL700
GetMachineSerial
IsValidateTime
CheckSoftDog
GetMachineSerial2
GetDongleID
CheckSoftDogPassword
IsDemoSoftDog

ws2_32

getpeername
accept
socket
setsockopt
bind
__WSAFDIsSet
getsockopt
WSACleanup
ntohl
shutdown
recvfrom
sendto
getsockname
closesocket
ioctlsocket
send
recv
connect
select
ntohs
inet_ntoa
htons
htonl
WSAStartup
WSAGetLastError
listen

openthreadswin32

??1Mutex@OpenThreads@@UAE@XZ
??0Condition@OpenThreads@@QAE@XZ
??0Mutex@OpenThreads@@QAE@XZ
?signal@Condition@OpenThreads@@UAEHXZ
?wait@Condition@OpenThreads@@UAEHPAVMutex@2@@Z
?lock@Mutex@OpenThreads@@UAEHXZ
?unlock@Mutex@OpenThreads@@UAEHXZ
??1Condition@OpenThreads@@UAE@XZ

kernel32

GetTempPathA
GetCurrentDirectoryA
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
SetErrorMode
GetWindowsDirectoryA
GetNumberFormatA
SearchPathA
FindResourceExW
HeapQueryInformation
GetProfileIntA
GlobalFlags
LocalReAlloc
GlobalReAlloc
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetUserDefaultUILanguage
ConvertDefaultLocale
SetLastError
FindClose
FindNextFileW
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
MultiByteToWideChar
GetFullPathNameW
SetHandleInformation
Sleep
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
GetLastError
ReadFile
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceW
lstrlenA
MulDiv
MoveFileA
CopyFileA
DeleteFileA
LoadLibraryA
GetModuleHandleA
GetProcAddress
DeactivateActCtx
ActivateActCtx
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByteEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
SetCurrentDirectoryA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetTickCount
TerminateThread
FreeResource
FindResourceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEvent
GetSystemDefaultUILanguage
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetFileAttributesA
CreateProcessA
CreateDirectoryA
WinExec
lstrcatA
GetUserDefaultLangID
GetModuleFileNameA
CreateEventA
OutputDebugStringA
GetCurrentThreadId
FormatMessageA
GetVersionExA
OpenFile
SetThreadPriority
ResumeThread
lstrcpyA
GlobalHandle
TerminateProcess
InitializeCriticalSection
InterlockedExchange
SetFilePointer
CreateFileW
LocalFree
LocalAlloc
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
RaiseException
GetDriveTypeW
FindFirstFileExW
RtlUnwind
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetModuleHandleW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetModuleFileNameW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
GetTimeZoneInformation
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
HeapSize
GetStringTypeW
SetStdHandle
GetLocaleInfoW
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
GetFullPathNameA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenW
GlobalSize
GetThreadLocale
CreateActCtxW
ReleaseActCtx
lstrcmpA
FindNextFileA
FindFirstFileA
SuspendThread
GetStringTypeExA
lstrcmpiA
LockFile
UnlockFile
GetFileSize
GetVolumeInformationA
GetShortPathNameA
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA

user32

EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
ValidateRect
CharUpperA
GetMenuItemInfoA
GetKeyNameTextA
MapVirtualKeyA
DestroyCursor
GetSystemMenu
SetParent
WaitMessage
ShowOwnedPopups
SetLayeredWindowAttributes
LoadAcceleratorsW
SetWindowContextHelpId
DefFrameProcA
RealChildWindowFromPoint
CopyAcceleratorTableA
InvalidateRgn
UnregisterClassA
PostThreadMessageA
GetTabbedTextExtentW
GetDCEx
DestroyAcceleratorTable
NotifyWinEvent
SetClassLongA
DrawEdge
ToAsciiEx
GetKeyboardLayout
CreateAcceleratorTableA
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
InvertRect
HideCaret
CopyImage
RegisterClipboardFormatA
GetUpdateRect
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
GetWindowRgn
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
CharNextA
GetMenuState
GetMenuStringA
SendDlgItemMessageA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
PostQuitMessage
GetMessageA
MessageBoxA
DestroyIcon
LoadIconW
ChildWindowFromPoint
GetCapture
SetCursorPos
mouse_event
SendInput
GetIconInfo
DrawIcon
LoadIconA
CreateWindowExA
ShowWindow
SetWindowsHookExA
wsprintfA
DestroyWindow
GetCursor
UnpackDDElParam
SetWindowPos
MessageBeep
DrawMenuBar
ClipCursor
GetMenu
DestroyMenu
EnumDisplayMonitors
LoadMenuA
SetMenu
GetMonitorInfoA
GetDesktopWindow
CreatePopupMenu
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
TrackPopupMenu
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
CloseTouchInputHandle
GetTouchInputInfo
GetClassInfoA
PrintWindow
SetScrollPos
GetScrollPos
LockWindowUpdate
IsZoomed
RemoveMenu
ModifyMenuA
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
CreateMenu
PeekMessageA
DispatchMessageA
TranslateMessage
BeginPaint
EndPaint
AdjustWindowRectEx
MoveWindow
MapDialogRect
DrawFrameControl
RegisterClassA
SetFocus
GetDlgCtrlID
LoadStringA
IsChild
ChildWindowFromPointEx
IsWindow
GetActiveWindow
IntersectRect
IsRectEmpty
RegisterHotKey
InflateRect
SubtractRect
GetKeyboardState
UnhookWindowsHookEx
GetKeyState
CallNextHookEx
ClientToScreen
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetFocus
LoadMenuW
GetSubMenu
WindowFromPoint
SystemParametersInfoA
IsWindowVisible
UpdateWindow
DrawTextA
FrameRect
UnionRect
SetRectEmpty
SetRect
DrawFocusRect
LoadBitmapA
GetClassNameA
GetWindow
SetWindowRgn
PostMessageA
KillTimer
SetTimer
GetDC
FillRect
LoadBitmapW
OffsetRect
CallWindowProcA
SetWindowLongA
GetWindowLongA
RedrawWindow
DefWindowProcA
RegisterWindowMessageA
DrawIconEx
ReleaseCapture
GetMessagePos
GetSystemMetrics
GetSysColor
LoadImageA
GetCursorPos
SetCursor
GetWindowTextA
LoadCursorA
LoadCursorW
EnableWindow
GetParent
SetCapture
InvalidateRect
ReleaseDC
GetWindowDC
ScreenToClient
GetClientRect
GetWindowRect
SendMessageA
PtInRect
DrawStateA
ReuseDDElParam
LoadAcceleratorsA
IsIconic
InsertMenuItemA
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
EnumChildWindows
DefMDIChildProcA
GetAsyncKeyState
CopyRect

gdi32

GetNearestPaletteIndex
SetPixel
CreateRoundRectRgn
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
StretchDIBits
GetCharWidthA
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetRectRgn
CreateRectRgnIndirect
EnumFontFamiliesExA
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
GetBoundsRect
SetPixelV
CreateFontA
PatBlt
GetTextExtentPoint32A
SelectObject
GetStockObject
GetObjectA
CreateCompatibleDC
StretchBlt
ExtFloodFill
LineTo
IntersectClipRect
ExcludeClipRect
DeleteObject
CreatePen
CreateSolidBrush
CreateFontIndirectA
Ellipse
BitBlt
GetClipBox
SetMapMode
SetPolyFillMode
RestoreDC
SaveDC
GetTextColor
CopyMetaFileA
SetPaletteEntries
SelectPalette
RealizePalette
GetPaletteEntries
SetDIBits
GdiFlush
SetStretchBltMode
CreateDIBSection
SetDIBColorTable
CreateHatchBrush
SetTextColor
SetBkMode
PlgBlt
Polyline
PtInRegion
CreatePolygonRgn
SwapBuffers
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDIBColorTable
LPtoDP
DPtoLP
GetMapMode
GetBkColor
CreateHalftonePalette
CreatePalette
GetDIBits
CreateFontW
GetTextExtentPointA
SetROP2
FrameRgn
SetBkColor
EndPath
BeginPath
InvertRgn
FillRgn
PathToRegion
RoundRect
OffsetRgn
Rectangle
Polygon
CreateBitmap
GetSystemPaletteEntries
GetPixel
CombineRgn
CreateRectRgn
CreateCompatibleBitmap
CreateDCA
GetDeviceCaps
DeleteDC
GetTextMetricsA

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA
GetJobA

advapi32

RegEnumKeyA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
RegDeleteKeyA

shell32

SHAppBarMessage
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs
SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteA

comctl32

_TrackMouseEvent
FlatSB_EnableScrollBar
InitializeFlatSB
ImageList_GetIconSize

shlwapi

PathIsDirectoryA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionW

ole32

CoRevokeClassObject
CoRegisterMessageFilter
RegisterDragDrop
DoDragDrop
OleFlushClipboard
RevokeDragDrop
OleGetClipboard
CoLockObjectExternal
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
OleIsCurrentClipboard

oleaut32

VariantTimeToSystemTime
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VarUdateFromDate
VariantClear
VariantChangeType
SysStringLen
SysAllocStringByteLen
SysFreeString
OleCreateFontIndirect
VarBstrFromDate
VariantCopy
VariantInit
SysAllocStringLen

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipCreateFromHDC
GdiplusStartup
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipSetInterpolationMode
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageEncoders
GdipGetImageWidth

wsock32

WSASetLastError

lacewing

?RegisterHandlerPeerChangeName@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@PBD@ZW4Type@HandlerMode@2@@Z
??1Client@Lacewing@@QAE@XZ
??0Client@Lacewing@@QAE@XZ
?SendServer@Client@Lacewing@@QAEXHPBDHH@Z
?ToString@Error@Lacewing@@QAEPBDXZ
?Connected@Client@Lacewing@@QAE_NXZ
?Connect@Client@Lacewing@@QAEXPBDH_N@Z
?RegisterHandlerChannelListComplete@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnect@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnectionDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Client@Lacewing@@QAEXP6AXAAV12@W4Type@TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerError@Client@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoin@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoinDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeave@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerLeaveDenied@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@W4Type@DenyStatus@2@@ZW44HandlerMode@2@@Z
?RegisterHandlerNameSet@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameChanged@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerPeerConnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z

lib3ds-2_0

lib3ds_matrix_translate
lib3ds_file_open
lib3ds_file_free
lib3ds_matrix_identity
lib3ds_file_mesh_for_node
lib3ds_matrix_copy
lib3ds_matrix_inv
lib3ds_mesh_calculate_vertex_normals
lib3ds_mesh_calculate_face_normals
lib3ds_matrix_mult

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

openal32

alcCloseDevice
alcDestroyContext
alcMakeContextCurrent
alcGetContextsDevice
alcGetCurrentContext
alGetEnumValue
alBufferData
alGetError
alcGetString
alcCreateContext
alcOpenDevice
alDeleteBuffers
alDeleteSources
alSourceStop
alSourcePause
alSourcePlay
alSourcef
alSourcei
alGenSources
alGenBuffers

hookmouse

UnInstallHookMouse
InstallHookMouse

hookkeyboard

UnInstallKeyBoardHook
InstallKeyBoardHook

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

wininet

DeleteUrlCacheEntry

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

Exports

Exports

??0CLogo@@QAE@XZ
??0CSTLReader@@QAE@XZ
??1CSTLReader@@UAE@XZ
?ClearG3DPrimitiveArray@CSTLReader@@QAEXAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?Read3DMFile@CSTLReader@@QAEHPADAAUCG3DModel@@@Z
?ReadGpaFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFileMesh@CSTLReader@@QAEHPAD@Z
?Write3DMFile@CSTLReader@@QAEHPADABUCG3DModel@@@Z
?WriteGpaFile@CSTLReader@@QAEHPADABV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 539KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1320535da2389580119107e7829895e

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

opengl32

glu32

vcncdll

ijl15

sssd

ws2_32

openthreadswin32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

wsock32

lacewing

lib3ds-2_0

version

openal32

hookmouse

hookkeyboard

oleacc

wininet

imm32

Exports

Exports

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 567KB - Virtual size: 566KB

.data Size: 45KB - Virtual size: 539KB

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.reloc Size: 338KB - Virtual size: 338KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 567KB - Virtual size: 566KB

.data
Size: 45KB - Virtual size: 539KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

.reloc
Size: 338KB - Virtual size: 338KB