bf024d4817cbafea3b7011c71e5015772b2cf5680cc91aa0947fd2920a1e3df0

Sharing

Copy URL Twitter E-mail

General

Target

bf024d4817cbafea3b7011c71e5015772b2cf5680cc91aa0947fd2920a1e3df0
Size

6.3MB
MD5

f22c10c7866e6a648a9542cb1d767dfe
SHA1

3d4cdc9a46d0b21a46a238ad79ba3557342caf19
SHA256

bf024d4817cbafea3b7011c71e5015772b2cf5680cc91aa0947fd2920a1e3df0
SHA512

6c36f4d227ea9c88ddd84a8ebfe7cf58af8d982b042958d5d8b6e0d8ff2e7d072c91b62ed94ed3fe2bd734fedb6f8fd57588a7bdb6d30bfb02ebcca159649d8d
SSDEEP

98304:+eoLkK+mfLemQFKhSjnzv6mwpJOa7AZcBbAi4oH9VwICtFw9Qdfq7odRgDXEG:+nz+mfL2FKhSjzv6pcNo8bdfq7odiD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf024d4817cbafea3b7011c71e5015772b2cf5680cc91aa0947fd2920a1e3df0

Files

bf024d4817cbafea3b7011c71e5015772b2cf5680cc91aa0947fd2920a1e3df0
.exe windows:5 windows x86 arch:x86

517659d6bf36847082d3d22052d91a3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
PlaySoundA

avifil32

AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamWrite
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit

msvfw32

ord2
ICOpen
ICClose
ICSendMessage

opengl32

glPopMatrix
glRasterPos3d
glColor3fv
glMaterialfv
glTranslated
glListBase
glPushMatrix
glDeleteLists
glIsList
glTexParameteri
glBindTexture
glPixelStorei
glGenTextures
glCallList
glEndList
glEnd
glVertex3fv
glTexCoord2f
glNormal3fv
glBegin
glBlendFunc
glDisable
glEnable
glMaterialf
glNewList
glGenLists
glMultMatrixf
glPopAttrib
glRotated
glScaled
glPushAttrib
glNormal3f
glVertex3f
glShadeModel
glGetIntegerv
glVertex3d
glNormal3d
glDeleteTextures
glColor3f
glScalef
glPolygonStipple
glPushName
glPopName
glColor3d
wglMakeCurrent
glGetDoublev
glMultMatrixd
glOrtho
glLoadIdentity
glMatrixMode
glViewport
glNormal3dv
glVertex3dv
glTexCoord2d
glAlphaFunc
glColor4fv
glColor4f
glTranslatef
glDepthFunc
glLightfv
glFlush
glColor3ub
glLineWidth
glLineStipple
glGetBooleanv
glPolygonMode
glClear
wglDeleteContext
glFinish
glLoadMatrixf
glIsEnabled
glInitNames
glRenderMode
glSelectBuffer
glReadPixels
glClearDepth
wglUseFontBitmapsA
wglCreateContext
glPointSize
glRotatef
glDrawElements
glVertexPointer
glDisableClientState
glNormalPointer
glEnableClientState
glGetFloatv
wglGetCurrentDC
glLightModelf
glClearColor
glCallLists

glu32

gluPickMatrix
gluNewQuadric
gluSphere
gluDeleteQuadric
gluUnProject
gluProject
gluPerspective
gluBuild2DMipmaps
gluQuadricDrawStyle
gluQuadricNormals
gluCylinder

vcncdll

?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
??1CRegistry@@QAE@XZ
?GetValue2V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
WorkpieceSetting
PositionTool
EditLanguageTool
OpenLogFile
TransferSSCNCAnsweredPaper
SetCallBackReloadMachineModel
SetCallBackupdateMachineModel3DM
SetCallBackSetViewBusyOrFree
GetCurMachineModelID
?Stop@CDirectSound@@QAEXXZ
SelectLathe2ForFANUCForUTEC
SelectLathe2ForFANUC
GetCharsetName
DummyCheckVCNCDLL702
SetSystemName
CheckAnnualLicense
IsOEM
OnCncAbout
CheckUpdate
DecryptSSCNCStringReturnKey
??0CTimeEncrypt@@QAE@XZ
??0CRegistry@@QAE@XZ
GetTrapezoidThreadInsertParam
GetSRDCNToolParam
?GetKeyName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?GetNumValues@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?DeleteKey@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
GetUserPassword
?Load@CPicture@@QAEHPAEH@Z
GetAnsweredPaperDirPath
?SetTrialDayLimit@CTimeEncrypt@@QAEXH@Z
?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
??1CTimeEncrypt@@UAE@XZ
GetUploadedWPDirPath
SendFtpFile
OnOpenChmHelp
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AA_N@Z
GetAppDataDirPath
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueRGBA@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM@Z
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?ReadFile@CIniFile@@QAE_NXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?WriteFile@CIniFile@@QAEXXZ
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
?SetValueRGBA@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM_N@Z
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
SetLanIniPath
??1CIniFile@@UAE@XZ
??0CIniFile@@QAE@XZ
DeleteDirectoryWithR
GetLangFileName
?GetValue3V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?Reset@CIniFile@@QAEXXZ
?FindKey@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetValueMaterial@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCGLMaterial@@@Z
TransferLicense
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
OnTipOfDay
SetVCNCDllLanguage
SetVCNCDllUnit
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
??0CPicture@@QAE@XZ
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z
?WriteString@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?SetKey@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?IsTimeOut@CTimeEncrypt@@QAEHHPAH@Z
?Play@CDirectSound@@QAEXKH@Z
??1CDirectSound@@UAE@XZ
EncryptSSCNCStringReturnKey
?Create@CDirectSound@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCWnd@@@Z
??0CDirectSound@@QAE@XZ

ijl15

ord3
ord5
ord2

sssd

SetSSSDLanguage
CheckMachineRegisterNo
GetHostSerial
GetMachineSerial2
DummyCheckDLL700
GetDongleID
CheckSoftDogPassword
IsDemoSoftDog
IsValidateTime
CheckSoftDog
GetMachineSerial

kernel32

GetFullPathNameW
SetHandleInformation
Sleep
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
GetLastError
ReadFile
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByteEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
SetCurrentDirectoryA
ReleaseMutex
WaitForSingleObject
CreateMutexA
DeleteFileA
CreateProcessA
CopyFileA
LockResource
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEvent
GetSystemDefaultUILanguage
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetFileAttributesA
GetProcAddress
LoadLibraryA
CreateDirectoryA
WinExec
lstrlenA
lstrcatA
GetUserDefaultLangID
GetModuleFileNameA
CreateEventA
OutputDebugStringA
GetCurrentThreadId
FormatMessageA
GetVersionExA
OpenFile
SetThreadPriority
ResumeThread
GetModuleHandleA
DeactivateActCtx
ActivateActCtx
TerminateProcess
InitializeCriticalSection
GetTickCount
InterlockedExchange
FreeResource
FindResourceA
GlobalHandle
SetFilePointer
CreateFileW
LocalFree
LocalAlloc
ExitProcess
lstrlenW
GlobalSize
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentProcessId
lstrcmpW
LoadLibraryW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
lstrcmpA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
MoveFileA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
FindFirstFileA
GetVolumeInformationA
MultiByteToWideChar
GetShortPathNameA
FindNextFileA
GetUserDefaultLCID
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
SuspendThread
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
GetModuleHandleW
GetLocaleInfoA
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
TlsGetValue
GlobalReAlloc
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
SetErrorMode
GetCurrentDirectoryA
GetTempPathA
GetWindowsDirectoryA
GetNumberFormatA
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
RaiseException
RtlUnwind
EncodePointer
DecodePointer
HeapFree
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
GetDriveTypeW
FindFirstFileExW
GetSystemTimeAsFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetStdHandle
HeapQueryInformation
HeapSize
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
GetStringTypeW
HeapCreate
SetHandleCount
GetTimeZoneInformation
GetConsoleCP
LCMapStringW
GetCurrentDirectoryW
GetLocaleInfoW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
SizeofResource
GetLocalTime
SystemTimeToFileTime
FindClose
FindNextFileW
SetLastError
lstrcpyA
WideCharToMultiByte
FindResourceW
GetFullPathNameA
LoadResource
TerminateThread

user32

GetMenuDefaultItem
IsClipboardFormatAvailable
InvalidateRgn
GetNextDlgGroupItem
InvertRect
HideCaret
CopyImage
GetUpdateRect
LoadImageW
RegisterClipboardFormatA
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
UpdateWindow
MessageBeep
DrawMenuBar
ClipCursor
GetMenu
DestroyMenu
EnumDisplayMonitors
LoadMenuA
SetMenu
GetMonitorInfoA
GetDesktopWindow
CreatePopupMenu
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
InflateRect
GetWindowLongA
SetWindowLongA
TrackPopupMenu
GetSysColorBrush
SystemParametersInfoA
GrayStringA
DrawTextExA
TabbedTextOutA
GetSysColor
CloseTouchInputHandle
GetTouchInputInfo
IsWindow
GetClassInfoA
PrintWindow
LoadCursorA
SetScrollPos
BeginDeferWindowPos
GetParent
LockWindowUpdate
IsZoomed
RemoveMenu
ModifyMenuA
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
CreateMenu
PeekMessageA
DispatchMessageA
TranslateMessage
CopyRect
GetWindowDC
GetSystemMetrics
ReleaseCapture
LoadCursorW
SetCapture
SetWindowRgn
SetRect
SetCursor
GetKeyState
PostMessageA
LoadBitmapA
LoadBitmapW
EmptyClipboard
SetClipboardData
CloseClipboard
GetCursorPos
OpenClipboard
GetFocus
RedrawWindow
LoadMenuW
GetSubMenu
FillRect
PtInRect
SetMenuDefaultItem
WindowFromPoint
KillTimer
SetTimer
IsWindowVisible
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
GetClientRect
GetWindowRect
DrawTextA
OffsetRect
EnableWindow
RegisterWindowMessageA
LoadImageA
SendMessageA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
CreateAcceleratorTableA
GetKeyboardLayout
ToAsciiEx
DrawEdge
SetClassLongA
NotifyWinEvent
DestroyAcceleratorTable
GetDCEx
GetTabbedTextExtentW
PostThreadMessageA
CopyAcceleratorTableA
UnregisterClassA
RealChildWindowFromPoint
CharNextA
GetAsyncKeyState
SetWindowContextHelpId
LoadAcceleratorsW
SetLayeredWindowAttributes
ShowOwnedPopups
WaitMessage
SetParent
GetSystemMenu
ValidateRect
DestroyCursor
MapVirtualKeyA
GetKeyNameTextA
EndDeferWindowPos
GetTopWindow
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
UnpackDDElParam
ReuseDDElParam
WinHelpA
IsWindowEnabled
EqualRect
GetDlgItem
LoadAcceleratorsA
SetActiveWindow
IsIconic
InsertMenuItemA
GetLastActivePopup
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DefMDIChildProcA
DefFrameProcA
GetMenuState
GetMenuStringA
PostQuitMessage
GetMessageA
MessageBoxA
DrawIcon
LoadIconA
CreateWindowExA
SetWindowsHookExA
wsprintfA
DestroyWindow
GetCursor
EnumChildWindows
SetWindowPos
BeginPaint
EndPaint
AdjustWindowRectEx
MoveWindow
MapDialogRect
DrawFrameControl
SetFocus
GetDlgCtrlID
LoadStringA
IntersectRect
IsRectEmpty
GetKeyboardState
UnhookWindowsHookEx
CallNextHookEx
GetActiveWindow
FrameRect
GetMenuItemInfoA
CharUpperA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UnionRect
SetRectEmpty
DrawFocusRect
CallWindowProcA
DrawIconEx
GetMessagePos
GetWindowTextA
DrawStateA
GetIconInfo
DestroyIcon
LoadIconW
ChildWindowFromPoint
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SendDlgItemMessageA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetClassNameA
GetWindowTextLengthA
GetCapture
ShowWindow
ChildWindowFromPointEx
IsChild
GetWindow
SetCursorPos
mouse_event
SendInput
DefWindowProcA
GetScrollPos
RegisterClassA
ClientToScreen

gdi32

CreateCompatibleBitmap
CreateRectRgn
CombineRgn
GetDIBits
AddFontResourceA
RemoveFontResourceA
BitBlt
CreateCompatibleDC
DeleteObject
GetObjectA
CreateSolidBrush
CreateFontIndirectA
GetTextMetricsA
RoundRect
SelectObject
CreateFontA
IntersectClipRect
CreatePalette
CreateHalftonePalette
GetBkColor
GetMapMode
DPtoLP
CreatePen
LPtoDP
GetPixel
BeginPath
EndPath
SetPixelV
ExtFloodFill
GetBoundsRect
EnumFontFamiliesExA
GetNearestPaletteIndex
SetPixel
GetRgnBox
CreateRoundRectRgn
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
GetTextColor
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
StretchDIBits
GetCharWidthA
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetRectRgn
CreateRectRgnIndirect
ExcludeClipRect
GetClipBox
SetMapMode
SetPolyFillMode
RestoreDC
SaveDC
GetDIBColorTable
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
GetTextExtentPoint32A
SwapBuffers
GetStockObject
GetDeviceCaps
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
Rectangle
SetROP2
DeleteDC
SetDIBColorTable
StretchBlt
CreateDIBSection
SetStretchBltMode
PatBlt
CreateBitmap
GetSystemPaletteEntries
Polygon
PathToRegion
FillRgn
InvertRgn
Ellipse
GetCurrentObject
RealizePalette
SelectPalette
CreateDCA
OffsetRgn
Polyline
SetBkColor
FrameRgn
GetTextExtentPointA
SetLayout
GetLayout
SetTextAlign
MoveToEx
CreateFontW
CreatePolygonRgn
PtInRegion
PlgBlt
SetBkMode
SetTextColor
CreateHatchBrush
GdiFlush
SetDIBits
GetPaletteEntries
SetPaletteEntries
CopyMetaFileA
LineTo

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA
GetJobA

advapi32

GetFileSecurityA
RegEnumKeyExA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
SetFileSecurityA
RegSetValueA
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueA
RegOpenKeyExA

shell32

ShellExecuteA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHAppBarMessage
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA

comctl32

_TrackMouseEvent
FlatSB_EnableScrollBar
ImageList_GetIconSize
InitializeFlatSB

shlwapi

PathIsDirectoryA
PathFindExtensionW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA

ole32

CoInitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
CoTaskMemFree
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoLockObjectExternal
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleDestroyMenuDescriptor
OleDuplicateData

oleaut32

SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysFreeString
VarUdateFromDate
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString
VariantTimeToSystemTime

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

ws2_32

WSASetLastError
__WSAFDIsSet
getsockopt
recv
send
ioctlsocket
closesocket
getsockname
listen
bind
setsockopt
socket
accept
getpeername
select
ntohs
inet_ntoa
htons
htonl
WSAStartup
WSAGetLastError
connect
sendto
recvfrom
shutdown
ntohl
WSACleanup

openthreadswin32

??1Condition@OpenThreads@@UAE@XZ
??1Mutex@OpenThreads@@UAE@XZ
??0Condition@OpenThreads@@QAE@XZ
??0Mutex@OpenThreads@@QAE@XZ
?unlock@Mutex@OpenThreads@@UAEHXZ
?signal@Condition@OpenThreads@@UAEHXZ
?wait@Condition@OpenThreads@@UAEHPAVMutex@2@@Z
?lock@Mutex@OpenThreads@@UAEHXZ

lacewing

?RegisterHandlerConnect@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnectionDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Client@Lacewing@@QAEXP6AXAAV12@W4Type@TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerError@Client@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoin@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoinDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeave@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerLeaveDenied@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@W4Type@DenyStatus@2@@ZW44HandlerMode@2@@Z
?RegisterHandlerNameSet@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameChanged@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerPeerConnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
??1Client@Lacewing@@QAE@XZ
??0Client@Lacewing@@QAE@XZ
?SendServer@Client@Lacewing@@QAEXHPBDHH@Z
?ToString@Error@Lacewing@@QAEPBDXZ
?Connected@Client@Lacewing@@QAE_NXZ
?Connect@Client@Lacewing@@QAEXPBDH_N@Z
?RegisterHandlerPeerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerChannelListComplete@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerChangeName@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@PBD@ZW4Type@HandlerMode@2@@Z

lib3ds-2_0

lib3ds_matrix_identity
lib3ds_file_free
lib3ds_file_mesh_for_node
lib3ds_matrix_copy
lib3ds_matrix_inv
lib3ds_file_open
lib3ds_matrix_mult
lib3ds_mesh_calculate_vertex_normals
lib3ds_mesh_calculate_face_normals
lib3ds_matrix_translate

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

openal32

alSourcePlay
alDeleteSources
alSourceStop
alSourcePause
alSourcef
alSourcei
alGenSources
alGenBuffers
alcCloseDevice
alcDestroyContext
alcMakeContextCurrent
alcGetContextsDevice
alcGetCurrentContext
alGetEnumValue
alBufferData
alGetError
alcGetString
alcCreateContext
alcOpenDevice
alDeleteBuffers

hookmouse

InstallHookMouse
UnInstallHookMouse

hookkeyboard

UnInstallKeyBoardHook
InstallKeyBoardHook

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

DeleteUrlCacheEntry

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Exports

Exports

??0CLogo@@QAE@XZ
??0CSTLReader@@QAE@XZ
??1CSTLReader@@UAE@XZ
?ClearG3DPrimitiveArray@CSTLReader@@QAEXAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?Read3DMFile@CSTLReader@@QAEHPADAAUCG3DModel@@@Z
?ReadGpaFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFileMesh@CSTLReader@@QAEHPAD@Z
?Write3DMFile@CSTLReader@@QAEHPADABUCG3DModel@@@Z
?WriteGpaFile@CSTLReader@@QAEHPADABV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 585KB - Virtual size: 585KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 530KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

517659d6bf36847082d3d22052d91a3b

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

opengl32

glu32

vcncdll

ijl15

sssd

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

ws2_32

openthreadswin32

lacewing

lib3ds-2_0

version

openal32

hookmouse

hookkeyboard

oleacc

wininet

imm32

Exports

Exports

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 585KB - Virtual size: 585KB

.data Size: 46KB - Virtual size: 530KB

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 341KB - Virtual size: 340KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 585KB - Virtual size: 585KB

.data
Size: 46KB - Virtual size: 530KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 341KB - Virtual size: 340KB