3e2fb6d2ee2093d2462960cce3fbcf6984a0724614dd0ab5e3c6af1f4cd7e55a

Sharing

Copy URL Twitter E-mail

General

Target

3e2fb6d2ee2093d2462960cce3fbcf6984a0724614dd0ab5e3c6af1f4cd7e55a
Size

6.7MB
MD5

34217202fae96c52e08ea348c93f75e4
SHA1

423b5551ff6abb7782a0ede0177a94ff3e3ea096
SHA256

3e2fb6d2ee2093d2462960cce3fbcf6984a0724614dd0ab5e3c6af1f4cd7e55a
SHA512

ad1878b08efc7f91e0b9324ddd8bdfe93249d91aea9306f88a17cb571b5cce73b9adb7cbeb8ebcc388d48a1ebc65d45e5a7055f14a101fe164f360db892fb890
SSDEEP

98304:Qoohzdt31c0nZFjxekP+v1fFMleOokftX7dCtJVVORb6vfPfV8ioQ0dROFYn:QoohzdJ13JfctFMledJAMXV8ioniFM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2fb6d2ee2093d2462960cce3fbcf6984a0724614dd0ab5e3c6af1f4cd7e55a

Files

3e2fb6d2ee2093d2462960cce3fbcf6984a0724614dd0ab5e3c6af1f4cd7e55a
.exe windows:5 windows x86 arch:x86

6c84f1848999d476897e56e4ddb2e998

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
PlaySoundA

avifil32

AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamWrite
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit

msvfw32

ICOpen
ICClose
ICSendMessage
ord2

opengl32

glColor3d
glTranslatef
glRotatef
glColor4fv
glPopName
glVertex3dv
glTexCoord2d
glAlphaFunc
wglMakeCurrent
glGetDoublev
glMultMatrixd
glOrtho
glLoadIdentity
glMatrixMode
glViewport
glNormal3dv
glColor4f
glDepthFunc
glLightfv
glFlush
glColor3ub
glLineStipple
glGetBooleanv
glPolygonMode
glClear
wglDeleteContext
glFinish
glLoadMatrixf
glIsEnabled
glInitNames
glRenderMode
glSelectBuffer
glReadPixels
glClearDepth
wglUseFontBitmapsA
wglCreateContext
glPointSize
glDrawElements
glVertexPointer
glDisableClientState
glNormalPointer
glEnableClientState
glGetFloatv
wglGetCurrentDC
glLightModelf
glClearColor
glPushName
glPolygonStipple
glScalef
glColor3f
glDeleteTextures
glNormal3d
glVertex3d
glGetIntegerv
glShadeModel
glVertex3f
glNormal3f
glPushAttrib
glScaled
glRotated
glPopAttrib
glMultMatrixf
glGenLists
glNewList
glMaterialf
glEnable
glDisable
glBlendFunc
glBegin
glNormal3fv
glTexCoord2f
glVertex3fv
glEnd
glEndList
glCallList
glGenTextures
glPixelStorei
glBindTexture
glTexParameteri
glIsList
glDeleteLists
glPushMatrix
glListBase
glTranslated
glMaterialfv
glColor3fv
glRasterPos3d
glCallLists
glPopMatrix
glLineWidth

glu32

gluCylinder
gluNewQuadric
gluSphere
gluDeleteQuadric
gluUnProject
gluQuadricNormals
gluBuild2DMipmaps
gluPerspective
gluProject
gluQuadricDrawStyle
gluPickMatrix

vcncdll

GetAnsweredPaperDirPath
?GetKeyName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
DeleteDirectoryWithR
?ReadFile@CIniFile@@QAE_NXZ
GetSRDCNToolParam
GetTrapezoidThreadInsertParam
??0CRegistry@@QAE@XZ
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
?SetKey@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?WriteString@CRegistry@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
??1CRegistry@@QAE@XZ
?GetValue2V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
WorkpieceSetting
PositionTool
EditLanguageTool
OpenLogFile
TransferSSCNCAnsweredPaper
SetCallBackReloadMachineModel
?Load@CPicture@@QAEHPAEH@Z
SetCallBackSetViewBusyOrFree
GetCurMachineModelID
?Stop@CDirectSound@@QAEXXZ
SelectLathe2ForFANUCForUTEC
SelectLathe2ForFANUC
GetCharsetName
DummyCheckVCNCDLL702
SetSystemName
CheckAnnualLicense
IsOEM
OnCncAbout
CheckUpdate
DecryptSSCNCStringReturnKey
??0CTimeEncrypt@@QAE@XZ
?SetTrialDayLimit@CTimeEncrypt@@QAEXH@Z
?IsTimeOut@CTimeEncrypt@@QAEHHPAH@Z
??1CTimeEncrypt@@UAE@XZ
GetUploadedWPDirPath
SendFtpFile
OnOpenChmHelp
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AA_N@Z
GetAppDataDirPath
GetUserPassword
?DeleteKey@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
SetCallBackupdateMachineModel3DM
?Reset@CIniFile@@QAEXXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
GetLangFileName
??0CIniFile@@QAE@XZ
??1CIniFile@@UAE@XZ
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetValueRGBA@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM@Z
?WriteFile@CIniFile@@QAEXXZ
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
?SetValueRGBA@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAM_N@Z
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
SetLanIniPath
?GetValue3V@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0QAN@Z
?GetNumValues@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?FindKey@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetValueMaterial@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCGLMaterial@@@Z
TransferLicense
?Play@CDirectSound@@QAEXKH@Z
OnTipOfDay
SetVCNCDllLanguage
SetVCNCDllUnit
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
??0CPicture@@QAE@XZ
??1CDirectSound@@UAE@XZ
EncryptSSCNCStringReturnKey
?Create@CDirectSound@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAVCWnd@@@Z
??0CDirectSound@@QAE@XZ
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z

ijl15

ord2
ord5
ord3

sssd

SetSSSDLanguage
CheckMachineRegisterNo
IsValidateTime
IsDemoSoftDog
DummyCheckDLL700
CheckSoftDog
GetHostSerial
GetMachineSerial2
GetMachineSerial
GetDongleID
CheckSoftDogPassword

ws2_32

freeaddrinfo
getaddrinfo
shutdown
select
listen
__WSAFDIsSet
getsockopt
WSACleanup
ntohl
recvfrom
sendto
WSAGetLastError
htonl
ntohs
getpeername
closesocket
htons
getsockname
inet_addr
connect
setsockopt
recv
send
WSAStartup
bind
inet_ntoa
accept
ioctlsocket
socket

openthreadswin32

??1Mutex@OpenThreads@@UAE@XZ
??0Condition@OpenThreads@@QAE@XZ
??0Mutex@OpenThreads@@QAE@XZ
?signal@Condition@OpenThreads@@UAEHXZ
?wait@Condition@OpenThreads@@UAEHPAVMutex@2@@Z
?lock@Mutex@OpenThreads@@UAEHXZ
?unlock@Mutex@OpenThreads@@UAEHXZ
??1Condition@OpenThreads@@UAE@XZ

kernel32

GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
GetTempPathA
GlobalFlags
SetErrorMode
GlobalReAlloc
GetNumberFormatA
GetProfileIntA
SearchPathA
FindResourceExW
GetWindowsDirectoryA
LocalReAlloc
GetCurrentDirectoryA
HeapQueryInformation
WritePrivateProfileStringA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
ReplaceFileA
ReadFile
SetCommTimeouts
WriteFile
SetCommState
CloseHandle
GetLastError
GetCommState
CreateFileA
FlushFileBuffers
Sleep
SetLastError
FindClose
FindNextFileW
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
MultiByteToWideChar
GetFullPathNameW
SetHandleInformation
FindFirstFileW
GetFileAttributesW
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceW
lstrlenA
lstrcpyA
WaitForSingleObject
CreateProcessA
MulDiv
LoadLibraryA
GetModuleHandleA
GetProcAddress
DeactivateActCtx
ActivateActCtx
CopyFileA
SetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByteEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ReleaseMutex
CreateMutexA
GetTickCount
TerminateThread
FreeResource
FindResourceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEvent
GetSystemDefaultUILanguage
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetFileAttributesA
CreateDirectoryA
WinExec
lstrcatA
GetUserDefaultLangID
GetModuleFileNameA
CreateEventA
OutputDebugStringA
GetCurrentThreadId
FormatMessageA
GetVersionExA
DeleteFileA
OpenFile
SetThreadPriority
ResumeThread
GlobalHandle
TerminateProcess
InitializeCriticalSection
InterlockedExchange
SetFilePointer
CreateFileW
LocalFree
LocalAlloc
ExitProcess
EncodePointer
DecodePointer
HeapAlloc
HeapFree
HeapReAlloc
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
RaiseException
GetDriveTypeW
FindFirstFileExW
RtlUnwind
GetConsoleCP
GetConsoleMode
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetSystemTimeAsFileTime
GetModuleHandleW
ReadConsoleInputA
SetConsoleMode
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SetHandleCount
GetModuleFileNameW
HeapCreate
SetStdHandle
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetCurrentDirectoryW
HeapSize
GetStringTypeW
WriteConsoleW
GetLocaleInfoW
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
GetFullPathNameA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenW
GlobalSize
GetThreadLocale
CreateActCtxW
ReleaseActCtx
lstrcmpA
SuspendThread
FindNextFileA
FindFirstFileA
GetStringTypeExA
lstrcmpiA
MoveFileA
LockFile
UnlockFile
GetFileSize
GetVolumeInformationA
GetShortPathNameA

user32

UnpackDDElParam
GetMenuItemInfoA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetKeyNameTextA
MapVirtualKeyA
ValidateRect
SetLayeredWindowAttributes
CharUpperA
DestroyCursor
GetSystemMenu
SetParent
WaitMessage
ShowOwnedPopups
LoadAcceleratorsW
SetMenuItemBitmaps
GetAsyncKeyState
RealChildWindowFromPoint
CopyAcceleratorTableA
InvalidateRgn
UnregisterClassA
DestroyAcceleratorTable
NotifyWinEvent
SetClassLongA
DrawEdge
ToAsciiEx
GetKeyboardLayout
CreateAcceleratorTableA
PostThreadMessageA
GetTabbedTextExtentW
GetDCEx
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
InvertRect
HideCaret
CopyImage
RegisterClipboardFormatA
GetUpdateRect
LoadImageW
CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
GetMenuCheckMarkDimensions
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
CharNextA
GetMenuState
GetMenuStringA
SendDlgItemMessageA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
PostQuitMessage
GetMessageA
MessageBoxA
DestroyIcon
LoadIconW
ChildWindowFromPoint
GetCapture
SetCursorPos
mouse_event
SendInput
GetIconInfo
DrawIcon
LoadIconA
CreateWindowExA
ShowWindow
SetWindowsHookExA
wsprintfA
DestroyWindow
GetCursor
ReuseDDElParam
SetWindowPos
MessageBeep
DrawMenuBar
ClipCursor
GetMenu
DestroyMenu
EnumDisplayMonitors
LoadMenuA
SetMenu
GetMonitorInfoA
GetDesktopWindow
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
InflateRect
TrackPopupMenu
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
CloseTouchInputHandle
GetTouchInputInfo
GetClassInfoA
PrintWindow
SetScrollPos
GetScrollPos
LockWindowUpdate
IsZoomed
RemoveMenu
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
DeleteMenu
CreateMenu
PeekMessageA
DispatchMessageA
TranslateMessage
BeginPaint
EndPaint
AdjustWindowRectEx
MoveWindow
MapDialogRect
DrawFrameControl
RegisterClassA
SetFocus
GetDlgCtrlID
LoadStringA
IsChild
ChildWindowFromPointEx
IsWindow
IntersectRect
IsRectEmpty
GetKeyboardState
UnhookWindowsHookEx
CallNextHookEx
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetFocus
LoadMenuW
GetSubMenu
EqualRect
GetWindow
LoadBitmapA
GetKeyState
GetClassNameA
GetActiveWindow
ClientToScreen
SetWindowRgn
SystemParametersInfoA
IsWindowVisible
UpdateWindow
DrawTextA
FrameRect
LoadBitmapW
UnionRect
SetRectEmpty
SetRect
GetDC
KillTimer
SetTimer
DrawFocusRect
FillRect
OffsetRect
PostMessageA
ModifyMenuA
CheckMenuItem
AppendMenuA
CreatePopupMenu
WindowFromPoint
CallWindowProcA
SetWindowLongA
GetWindowLongA
RedrawWindow
DefWindowProcA
RegisterWindowMessageA
DrawIconEx
ReleaseCapture
GetMessagePos
GetSystemMetrics
GetSysColor
LoadImageA
GetCursorPos
SetCursor
GetWindowTextA
LoadCursorA
LoadCursorW
EnableWindow
GetParent
SetCapture
InvalidateRect
ReleaseDC
GetWindowDC
ScreenToClient
GetClientRect
GetWindowRect
SendMessageA
PtInRect
CopyRect
DrawStateA
LoadAcceleratorsA
IsIconic
InsertMenuItemA
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DefMDIChildProcA
EnumChildWindows
DefFrameProcA
SetWindowContextHelpId

gdi32

GetNearestPaletteIndex
SetPixel
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
CreateEllipticRgn
GetRgnBox
StretchDIBits
GetViewportOrgEx
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
SetRectRgn
CreateRectRgnIndirect
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
EnumFontFamiliesExA
GetBoundsRect
ExtFloodFill
SetPixelV
GetCharWidthA
CreateFontA
PatBlt
GetTextExtentPoint32A
SelectObject
GetStockObject
GetObjectA
GetClipBox
SetMapMode
CreateCompatibleDC
StretchBlt
DeleteObject
CreateFontIndirectA
DeleteDC
SetPolyFillMode
RestoreDC
SaveDC
GetTextColor
CopyMetaFileA
SetPaletteEntries
SelectPalette
RealizePalette
GetPaletteEntries
SetDIBits
GdiFlush
SetStretchBltMode
CreateDIBSection
SetDIBColorTable
CreateHatchBrush
SetBkMode
PlgBlt
PtInRegion
CreatePolygonRgn
SwapBuffers
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDIBColorTable
LPtoDP
DPtoLP
GetMapMode
GetBkColor
CreateHalftonePalette
CreatePalette
GetDIBits
CreateFontW
GetTextExtentPointA
SetROP2
OffsetRgn
CombineRgn
Rectangle
AddFontResourceA
RemoveFontResourceA
GetTextMetricsA
RoundRect
Ellipse
Polyline
FrameRgn
FillRgn
CreateRoundRectRgn
CreateRectRgn
CreatePen
SetBkColor
SetTextColor
GetPixel
BitBlt
Polygon
CreateCompatibleBitmap
CreateBitmap
GetSystemPaletteEntries
CreateSolidBrush
CreateDCA
GetDeviceCaps

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA
GetJobA

advapi32

RegDeleteValueA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
RegSetValueExA

shell32

SHGetFileInfoA
DragQueryFileA
ExtractIconA
SHGetDesktopFolder
DragFinish
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHAppBarMessage
SHAddToRecentDocs
SHGetSpecialFolderLocation

comctl32

ImageList_GetIconSize
InitializeFlatSB
_TrackMouseEvent
FlatSB_EnableScrollBar

shlwapi

PathIsDirectoryA
PathFindExtensionA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionW

ole32

OleGetClipboard
CoRevokeClassObject
CoLockObjectExternal
CoRegisterMessageFilter
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoInitialize
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
RegisterDragDrop
RevokeDragDrop

oleaut32

VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
VariantClear
SysAllocString
SafeArrayDestroy
SysStringLen
SysAllocStringByteLen
VarBstrFromDate
VariantChangeType
VariantInit
SysAllocStringLen
OleCreateFontIndirect
SysFreeString

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipGetImageEncoders
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImageEncodersSize
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipAlloc
GdipFree
GdipBitmapUnlockBits
GdipDeleteGraphics

wsock32

WSASetLastError

lacewing

?RegisterHandlerPeerConnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
??1Client@Lacewing@@QAE@XZ
??0Client@Lacewing@@QAE@XZ
?SendServer@Client@Lacewing@@QAEXHPBDHH@Z
?ToString@Error@Lacewing@@QAEPBDXZ
?Connected@Client@Lacewing@@QAE_NXZ
?Connect@Client@Lacewing@@QAEXPBDH_N@Z
?RegisterHandlerChannelListComplete@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerChangeName@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerPeerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnect@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerConnectionDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Client@Lacewing@@QAEXP6AXAAV12@W4Type@TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@AAUPeer@312@W4Type@TransmissionMode@2@HPADHH@ZW45HandlerMode@2@@Z
?RegisterHandlerError@Client@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoin@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerJoinDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeave@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerLeaveDenied@Client@Lacewing@@QAEXP6AXAAV12@AAUChannel@12@W4Type@DenyStatus@2@@ZW44HandlerMode@2@@Z
?RegisterHandlerNameSet@Client@Lacewing@@QAEXP6AXAAV12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameChanged@Client@Lacewing@@QAEXP6AXAAV12@PBD@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerNameDenied@Client@Lacewing@@QAEXP6AXAAV12@W4Type@DenyStatus@2@@ZW43HandlerMode@2@@Z

lib3ds-2_0

lib3ds_matrix_translate
lib3ds_file_open
lib3ds_file_free
lib3ds_matrix_identity
lib3ds_file_mesh_for_node
lib3ds_matrix_copy
lib3ds_matrix_inv
lib3ds_mesh_calculate_vertex_normals
lib3ds_mesh_calculate_face_normals
lib3ds_matrix_mult

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

openal32

alcCloseDevice
alcDestroyContext
alcMakeContextCurrent
alcGetContextsDevice
alcGetCurrentContext
alGetEnumValue
alBufferData
alGetError
alcGetString
alcCreateContext
alcOpenDevice
alDeleteBuffers
alDeleteSources
alSourceStop
alSourcePause
alSourcePlay
alSourcef
alSourcei
alGenSources
alGenBuffers

hookmouse

UnInstallHookMouse
InstallHookMouse

hookkeyboard

InstallKeyBoardHook
UnInstallKeyBoardHook

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

wininet

DeleteUrlCacheEntry

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Exports

Exports

??0CLogo@@QAE@XZ
??0CSTLReader@@QAE@XZ
??1CSTLReader@@UAE@XZ
?ClearG3DPrimitiveArray@CSTLReader@@QAEXAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?Read3DMFile@CSTLReader@@QAEHPADAAUCG3DModel@@@Z
?ReadGpaFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFile@CSTLReader@@QAEHPADAAV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z
?ReadSTLFileMesh@CSTLReader@@QAEHPAD@Z
?Write3DMFile@CSTLReader@@QAEHPADABUCG3DModel@@@Z
?WriteGpaFile@CSTLReader@@QAEHPADABV?$vector@PAVGraphic3dPrimitiveArray@@V?$allocator@PAVGraphic3dPrimitiveArray@@@std@@@std@@@Z

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c84f1848999d476897e56e4ddb2e998

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

opengl32

glu32

vcncdll

ijl15

sssd

ws2_32

openthreadswin32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

wsock32

lacewing

lib3ds-2_0

version

openal32

hookmouse

hookkeyboard

oleacc

wininet

imm32

Exports

Exports

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 577KB - Virtual size: 577KB

.data Size: 46KB - Virtual size: 541KB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.reloc Size: 339KB - Virtual size: 338KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 577KB - Virtual size: 577KB

.data
Size: 46KB - Virtual size: 541KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 339KB - Virtual size: 338KB