e5077c476b2ed336484451b79e9c75b677c6b3dc2d1fd649d6c0a0e5cd2fa63b

Sharing

Copy URL Twitter E-mail

General

Target

e5077c476b2ed336484451b79e9c75b677c6b3dc2d1fd649d6c0a0e5cd2fa63b
Size

6.7MB
MD5

d28d8dfed2e4f463d6ee45fabc2f76d8
SHA1

a05216b0844d2412cbb1760fe6f1b9c5017631d8
SHA256

e5077c476b2ed336484451b79e9c75b677c6b3dc2d1fd649d6c0a0e5cd2fa63b
SHA512

55cf85534de53387062b903348ec111f428446aceceba86b9425c569f006c388fe708d71fcaa38ddb13d903b75aeb33f4eb10cb415e94bc3bdb02514ea9e4dbf
SSDEEP

196608:VbbCrToTbKTdhxXPL5ORGHwonwqNBMrM/qPRxIs2B:VkToTbKaGQow4/qPRxI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5077c476b2ed336484451b79e9c75b677c6b3dc2d1fd649d6c0a0e5cd2fa63b

Files

e5077c476b2ed336484451b79e9c75b677c6b3dc2d1fd649d6c0a0e5cd2fa63b
.exe windows:5 windows x86 arch:x86

a7659cf2c8df0b58e8769c9d586fbff7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
PlaySoundA

avifil32

AVIFileExit
AVIStreamRelease
AVIFileRelease
AVISaveOptionsFree
AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamWrite

msvfw32

ICOpen
ord2
ICClose
ICSendMessage

opengl32

glTexCoord2d
glAlphaFunc
glGetDoublev
glMultMatrixd
glOrtho
glLoadIdentity
glMatrixMode
glViewport
glLightfv
glFlush
glColor3ub
glLineStipple
glGetBooleanv
glClear
wglDeleteContext
glFinish
glLoadMatrixd
glInitNames
glRenderMode
glSelectBuffer
glIsEnabled
glReadPixels
glClearDepth
glColor4fv
wglCreateContext
glDrawElements
glVertexPointer
glDisableClientState
glNormalPointer
glEnableClientState
glGetFloatv
wglGetCurrentDC
glVertex3f
wglMakeCurrent
glTranslatef
glGetMaterialfv
glPopMatrix
glCallLists
glRasterPos3d
glColor3fv
glMaterialfv
glTranslated
glListBase
glPushMatrix
glNormal3dv
glBegin
glEnd
glVertex3dv
glVertex3d
glPolygonMode
glEnable
glDisable
glColor4f
glColor3f
glPopName
glPushName
glRotated
glPointSize
glLineWidth
glRasterPos3dv
glBlendFunc
glDepthFunc
glDeleteLists
wglUseFontBitmapsA
glIsList
glTexParameteri
glBindTexture
glScalef
glNormal3d
glDeleteTextures
glColor3d
glPolygonStipple
glRotatef
glNormal3f
glScaled
glGetIntegerv
glShadeModel
glPushAttrib
glPopAttrib
glMultMatrixf
glGenLists
glNewList
glMaterialf
glNormal3fv
glTexCoord2f
glVertex3fv
glEndList
glCallList
glGenTextures
glPixelStorei

glu32

gluTessBeginPolygon
gluTessEndPolygon
gluTessEndContour
gluTessVertex
gluTessBeginContour
gluQuadricNormals
gluTessCallback
gluNewTess
gluBuild2DMipmaps
gluPerspective
gluQuadricDrawStyle
gluCylinder
gluPickMatrix
gluNewQuadric
gluSphere
gluDeleteQuadric
gluUnProject
gluProject

vcncdll

?GetNumValues@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
MillingSettingForFANUC
GetUserPassword
?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
??1CIniFile@@UAE@XZ
?ReadFile@CIniFile@@QAE_NXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0CIniFile@@QAE@XZ
?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?Load@CPicture@@QAEHPAEH@Z
GetAnsweredPaperDirPath
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
?SetKey@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?WriteString@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
??1CRegistry@@QAE@XZ
PositionToolForMilling
EditLanguageTool
OpenLogFile
TransferSSCNCAnsweredPaper
SetCallBackReloadMachineModel
SetCallBackupdateMachineModel3DM
?GetKeyName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
GetCurMachineModelID
MillMacColorSet
?Stop@CDirectSound@@QAEXXZ
GetUploadedWPDirPath
SendFtpFile
WorkpieceBarSetting
DummyCheckVCNCDLL702
SetSystemName
CheckAnnualLicense
IsOEM
OnCncAbout
SelectMillCeneterForFANUC
CheckUpdate
DecryptSSCNCStringReturnKey
GetCharsetName
OnOpenChmHelp
GetEdgeFinder
SetMillingStick
SetMillingClamp
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AA_N@Z
??0CDirectSound@@QAE@XZ
?Create@CDirectSound@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCWnd@@@Z
?GetValueMaterial@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCGLMaterial@@@Z
GetGeneralToolParam
SetCallBackSetViewBusyOrFree
GetLangFileName
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetValueRGBA@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM@Z
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?WriteFile@CIniFile@@QAEXXZ
?SetValueRGBA@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM_N@Z
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
SetLanIniPath
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValue3V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?Reset@CIniFile@@QAEXXZ
?FindKey@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
TransferLicense
??0CRegistry@@QAE@XZ
?GetValue2V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z
?Play@CDirectSound@@QAEXKH@Z
OnTipOfDay
SetVCNCDllLanguage
SetVCNCDllUnit
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
??0CPicture@@QAE@XZ
??1CDirectSound@@UAE@XZ
??1CTimeEncrypt@@UAE@XZ
?IsTimeOut@CTimeEncrypt@@QAEHHPAH@Z
?SetTrialDayLimit@CTimeEncrypt@@QAEXH@Z
??0CTimeEncrypt@@QAE@XZ
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
EncryptSSCNCStringReturnKey

ijl15

ord5
ord2
ord3

sssd

DummyCheckDLL700
CheckSoftDog
GetHostSerial
GetMachineSerial2
SetSSSDLanguage
GetDongleID
CheckSoftDogPassword
IsValidateTime
IsDemoSoftDog
GetMachineSerial
CheckMachineRegisterNo

ws2_32

select
getsockname
closesocket
ioctlsocket
send
recv
__WSAFDIsSet
getsockopt
WSACleanup
ntohs
inet_ntoa
htons
htonl
bind
WSAStartup
WSAGetLastError
getpeername
connect
sendto
recvfrom
shutdown
ntohl
setsockopt
socket
accept
listen

openthreadswin32

?unlock@Mutex@OpenThreads@@UAEHXZ
?lock@Mutex@OpenThreads@@UAEHXZ
?wait@Condition@OpenThreads@@UAEHPAVMutex@2@@Z
?signal@Condition@OpenThreads@@UAEHXZ
??0Mutex@OpenThreads@@QAE@XZ
??0Condition@OpenThreads@@QAE@XZ
??1Mutex@OpenThreads@@UAE@XZ
??1Condition@OpenThreads@@UAE@XZ

kernel32

FindResourceExW
SearchPathA
GetProfileIntA
GetNumberFormatA
GetTempPathA
GetCurrentDirectoryA
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
SetErrorMode
GlobalFlags
LocalReAlloc
QueryPerformanceFrequency
GetWindowsDirectoryA
GlobalReAlloc
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetDiskFreeSpaceA
GetTempFileNameA
SetLastError
FindClose
FindNextFileW
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
MultiByteToWideChar
GetFullPathNameW
SetHandleInformation
Sleep
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
GetLastError
ReadFile
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceW
lstrlenA
MulDiv
MoveFileA
CopyFileA
DeleteFileA
LoadLibraryA
GetModuleHandleA
GetProcAddress
DeactivateActCtx
ActivateActCtx
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByteEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
SetCurrentDirectoryA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetTickCount
TerminateThread
CreateProcessA
FreeResource
FindResourceA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEvent
GetSystemDefaultUILanguage
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetFileAttributesA
CreateDirectoryA
WinExec
lstrcatA
GetUserDefaultLangID
GetModuleFileNameA
CreateEventA
OutputDebugStringA
GetCurrentThreadId
FormatMessageA
GetVersionExA
OpenFile
SetThreadPriority
ResumeThread
lstrcpyA
GlobalHandle
TerminateProcess
InitializeCriticalSection
InterlockedExchange
SetFilePointer
CreateFileW
LocalFree
LocalAlloc
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
RaiseException
GetDriveTypeW
FindFirstFileExW
RtlUnwind
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetModuleHandleW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetModuleFileNameW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
GetTimeZoneInformation
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
HeapSize
GetStringTypeW
SetStdHandle
GetLocaleInfoW
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
GetFullPathNameA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenW
GlobalSize
GetThreadLocale
CreateActCtxW
ReleaseActCtx
lstrcmpA
FindNextFileA
FindFirstFileA
SuspendThread
GetStringTypeExA
lstrcmpiA
LockFile
UnlockFile
GetFileSize
GetVolumeInformationA
GetShortPathNameA
ReplaceFileA
SetFileTime
GetFileTime
HeapQueryInformation

user32

CharUpperA
GetMenuItemInfoA
GetKeyNameTextA
MapVirtualKeyA
DestroyCursor
SetParent
WaitMessage
ShowOwnedPopups
SetLayeredWindowAttributes
LoadAcceleratorsW
SetWindowContextHelpId
GetAsyncKeyState
RealChildWindowFromPoint
InvalidateRgn
UnregisterClassA
PostThreadMessageA
GetTabbedTextExtentW
GetDCEx
DestroyAcceleratorTable
NotifyWinEvent
SetClassLongA
DrawEdge
ToAsciiEx
GetKeyboardLayout
CreateAcceleratorTableA
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
InvertRect
HideCaret
CopyImage
RegisterClipboardFormatA
GetUpdateRect
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
GetWindowRgn
CheckDlgButton
CharNextA
GetMenuState
GetMenuStringA
SendDlgItemMessageA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
PostQuitMessage
GetMessageA
MessageBoxA
DestroyIcon
LoadIconW
ChildWindowFromPoint
GetCapture
SetCursorPos
mouse_event
SendInput
GetIconInfo
DrawIcon
LoadIconA
CreateWindowExA
ShowWindow
SetWindowsHookExA
wsprintfA
DestroyWindow
GetCursor
GetSystemMenu
EnumChildWindows
SetWindowPos
DrawMenuBar
MessageBeep
ClipCursor
GetMenu
DestroyMenu
ValidateRect
LoadMenuA
SetMenu
GetMonitorInfoA
GetDesktopWindow
CheckMenuItem
CreatePopupMenu
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
TrackPopupMenu
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
CloseTouchInputHandle
GetTouchInputInfo
GetClassInfoA
PeekMessageA
DispatchMessageA
TranslateMessage
PrintWindow
SetScrollPos
GetScrollPos
LockWindowUpdate
IsZoomed
RemoveMenu
ModifyMenuA
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
AppendMenuA
DeleteMenu
CreateMenu
BeginPaint
EndPaint
AdjustWindowRectEx
MoveWindow
MapDialogRect
DrawFrameControl
RegisterClassA
SetFocus
GetDlgCtrlID
LoadStringA
IsChild
ChildWindowFromPointEx
IsWindow
GetActiveWindow
IntersectRect
IsRectEmpty
RegisterHotKey
InflateRect
SubtractRect
GetKeyboardState
UnhookWindowsHookEx
GetKeyState
CallNextHookEx
ClientToScreen
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetFocus
LoadMenuW
GetSubMenu
WindowFromPoint
SystemParametersInfoA
IsWindowVisible
UpdateWindow
DrawTextA
FrameRect
UnionRect
SetRectEmpty
SetRect
DrawFocusRect
LoadBitmapA
GetClassNameA
GetWindow
SetWindowRgn
PostMessageA
KillTimer
SetTimer
GetDC
FillRect
LoadBitmapW
OffsetRect
CallWindowProcA
SetWindowLongA
GetWindowLongA
RedrawWindow
DefWindowProcA
RegisterWindowMessageA
DrawIconEx
ReleaseCapture
GetMessagePos
GetSystemMetrics
GetSysColor
LoadImageA
GetCursorPos
SetCursor
GetWindowTextA
LoadCursorA
LoadCursorW
EnableWindow
GetParent
SetCapture
InvalidateRect
ReleaseDC
GetWindowDC
ScreenToClient
GetClientRect
GetWindowRect
SendMessageA
PtInRect
CopyRect
DrawStateA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
IsIconic
InsertMenuItemA
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DefMDIChildProcA
DefFrameProcA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
EnumDisplayMonitors
SetDlgItemTextA
CopyAcceleratorTableA

gdi32

SetPixelV
ExtFloodFill
GetBoundsRect
EnumFontFamiliesExA
GetNearestPaletteIndex
SetPixel
CreateRoundRectRgn
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
StretchDIBits
GetCharWidthA
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetRectRgn
CreateRectRgnIndirect
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
CreateFontA
PatBlt
GetTextExtentPoint32A
SelectObject
GetStockObject
GetObjectA
CreateCompatibleDC
StretchBlt
DeleteObject
CreatePen
CreateSolidBrush
CreateFontIndirectA
Ellipse
BitBlt
GetTextMetricsA
DeleteDC
GetDeviceCaps
CreateDCA
CreateCompatibleBitmap
CreateRectRgn
CombineRgn
SetTextAlign
GetPixel
GetSystemPaletteEntries
CreateBitmap
Polygon
Rectangle
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetPolyFillMode
RestoreDC
SaveDC
GetTextColor
CopyMetaFileA
SetPaletteEntries
SelectPalette
RealizePalette
GetPaletteEntries
SetDIBits
GdiFlush
SetStretchBltMode
CreateDIBSection
SetDIBColorTable
CreateHatchBrush
SetTextColor
SetBkMode
PlgBlt
Polyline
PtInRegion
CreatePolygonRgn
SwapBuffers
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDIBColorTable
LPtoDP
DPtoLP
GetMapMode
GetBkColor
CreateHalftonePalette
CreatePalette
GetDIBits
CreateFontW
GetTextExtentPointA
SetROP2
FrameRgn
SetBkColor
EndPath
BeginPath
InvertRgn
FillRgn
PathToRegion
RoundRect
OffsetRgn

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA
GetJobA

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExW

shell32

SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
SHGetFileInfoA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA
SHGetPathFromIDListA
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs

comctl32

ImageList_GetIconSize
InitializeFlatSB
FlatSB_EnableScrollBar
_TrackMouseEvent

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionW
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA

ole32

CoTaskMemFree
RevokeDragDrop
RegisterDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoLockObjectExternal
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID

oleaut32

VarBstrFromDate
VariantCopy
OleCreateFontIndirect
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocString
SafeArrayDestroy
SysStringLen
SysAllocStringByteLen
SysFreeString

wsock32

WSASetLastError

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdipCloneImage
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromScan0
GdipGetImageEncoders
GdipGetImageGraphicsContext
GdipGetImagePixelFormat

lacewing

??1Client@Lacewing@@QAE@XZ
??0Client@Lacewing@@QAE@XZ
?RegisterHandlerConnect@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnectionDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Client@Lacewing@@QAEXP6AXAAV12@W4Type@TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?SendServer@Client@Lacewing@@QAEXHPBDHH@Z
?ToString@Error@Lacewing@@QAEPBDXZ
?Connected@Client@Lacewing@@QAE_NXZ
?Connect@Client@Lacewing@@QAEXPBDH_N@Z
?RegisterHandlerChannelListComplete@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerError@Client@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoin@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoinDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeave@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerLeaveDenied@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@W4Type@DenyStatus@2@@ZW44HandlerMode@2@@Z
?RegisterHandlerNameSet@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameChanged@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerPeerConnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerChangeName@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@PBD@ZW4Type@HandlerMode@2@@Z

lib3ds-2_0

lib3ds_mesh_calculate_face_normals
lib3ds_file_open
lib3ds_matrix_copy
lib3ds_matrix_inv
lib3ds_matrix_identity
lib3ds_file_mesh_for_node
lib3ds_file_free
lib3ds_mesh_calculate_vertex_normals
lib3ds_matrix_translate
lib3ds_matrix_mult

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

openal32

alcOpenDevice
alGenBuffers
alGenSources
alSourcei
alSourcef
alSourcePlay
alcCloseDevice
alcDestroyContext
alcMakeContextCurrent
alcGetContextsDevice
alcGetCurrentContext
alGetEnumValue
alBufferData
alGetError
alcGetString
alcCreateContext
alSourcePause
alDeleteBuffers
alDeleteSources
alSourceStop

hookmouse

InstallHookMouse
UnInstallHookMouse

hookkeyboard

UnInstallKeyBoardHook
InstallKeyBoardHook

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

wininet

DeleteUrlCacheEntry

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Exports

Exports

??0CLogo@@QAE@XZ
??0CSTLReader@@QAE@XZ
??1CSTLReader@@UAE@XZ
?ClearG3DPrimitiveArray@CSTLReader@@QAEXAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?Read3DMFile@CSTLReader@@QAEHPADAAUCG3DModel@@@Z
?ReadGpaFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFileMesh@CSTLReader@@QAEHPAD@Z
?Write3DMFile@CSTLReader@@QAEHPADABUCG3DModel@@@Z
?WriteGpaFile@CSTLReader@@QAEHPADABV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 369KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7659cf2c8df0b58e8769c9d586fbff7

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

opengl32

glu32

vcncdll

ijl15

sssd

ws2_32

openthreadswin32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wsock32

oledlg

urlmon

gdiplus

lacewing

lib3ds-2_0

version

openal32

hookmouse

hookkeyboard

oleacc

wininet

imm32

Exports

Exports

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

.rdata Size: 602KB - Virtual size: 602KB

.data Size: 47KB - Virtual size: 148KB

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.reloc Size: 369KB - Virtual size: 368KB

.text
Size: 3.6MB - Virtual size: 3.6MB

.rdata
Size: 602KB - Virtual size: 602KB

.data
Size: 47KB - Virtual size: 148KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

.reloc
Size: 369KB - Virtual size: 368KB