e1e0acfb50b24456b18ac62ceca1d51b0a74c83660b456b189f6878679eeeb59

Sharing

Copy URL Twitter E-mail

General

Target

e1e0acfb50b24456b18ac62ceca1d51b0a74c83660b456b189f6878679eeeb59
Size

6.3MB
MD5

fb2dd4760de3c9288273599fcddf419c
SHA1

13301baf455867ebacabc279ee818d15266825dc
SHA256

e1e0acfb50b24456b18ac62ceca1d51b0a74c83660b456b189f6878679eeeb59
SHA512

a459388f1f598cd17de38cd434b2a8352ac148bc007b5b802e2f6b6e795d5a233de5ad91601046357844ff5fb8be9ce26ff901407d406bfbf5261e45ccc7d643
SSDEEP

98304:CPOJFEIY2Rmoec0/mpwtIgERKOJLsjqsfsNbvPc1uESV4S94W63/2CIMMMMMvFLd:rjEIgELJh94W63/2C3FLOyomFHKnP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1e0acfb50b24456b18ac62ceca1d51b0a74c83660b456b189f6878679eeeb59

Files

e1e0acfb50b24456b18ac62ceca1d51b0a74c83660b456b189f6878679eeeb59
.exe windows:6 windows x86 arch:x86

61b71816387e41bd4279a80589326bfe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

motionstudio.interop.oscilloscope

?OpenOfflineScope@@YAPAUHWND__@@PAU1@PB_W11P6GHIPAXH@Z@Z
??0DeviceBase@@QAE@XZ
?SetDriver@OscilloscopeWrapper@@QAEXPAVDriver@@@Z
?SetMutilLangDbPostfix@OscilloscopeWrapper@@QAEXPB_W@Z
?SetConnectString@OscilloscopeWrapper@@QAEXPB_W@Z
?SetApplicationDirectory@OscilloscopeWrapper@@QAEXPB_W@Z
?SetParentActive@OscilloscopeWrapper@@QAEXH@Z
?SetCursorVisible@OscilloscopeWrapper@@QAEXH@Z
?StartSample@OscilloscopeWrapper@@QAEXXZ
?StopSample@OscilloscopeWrapper@@QAEXXZ
?SetLanguage@OscilloscopeWrapper@@QAEXP6GHIPAXH@Z@Z
?SetParent@OscilloscopeWrapper@@QAEXPAUHWND__@@@Z
?Create@OscilloscopeWrapper@@QAEPAUHWND__@@PAU2@HHHHPAVDeviceBase@@@Z
?SetSize@OscilloscopeWrapper@@QAEXNN@Z
??1OscilloscopeWrapper@@QAE@XZ
??0OscilloscopeWrapper@@QAE@XZ
??0BlackboxWrapper@@QAE@XZ
?SetTriggerModeRemark@BlackboxData@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetTriggerSourceRemark@BlackboxData@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetTriggerEdgeRemark@BlackboxData@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetSize@BlackboxWrapper@@QAEXNN@Z
?Initialize@BlackboxWrapper@@QAEXXZ
?SetData@BlackboxWrapper@@QAEXAAVBlackboxData@@@Z
??1BlackboxData@@QAE@XZ
??0BlackboxData@@QAE@XZ
?SetLanguage@BlackboxWrapper@@QAEXP6GHIPAXH@Z@Z
?Create@BlackboxWrapper@@QAEPAUHWND__@@PAU2@HHHH@Z
?SetChannel@BlackboxWrapper@@QAEXAAV?$vector@VBlackboxChannel@@V?$allocator@VBlackboxChannel@@@std@@@std@@@Z
??1BlackboxWrapper@@QAE@XZ
?SetDataCoverModeRemark@BlackboxData@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z

d2d1

ord1

dwrite

DWriteCreateFactory

kernel32

TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
SetErrorMode
GetProfileIntW
SearchPathW
GetTempPathW
FindResourceExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
EnterCriticalSection
WriteConsoleW
GetPrivateProfileIntW
LocalFileTimeToFileTime
GetEnvironmentStringsW
FindFirstFileExW
GetDriveTypeW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
GetTimeZoneInformation
LCMapStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
IsValidLocale
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
ExitProcess
GetStdHandle
HeapQueryInformation
GetCommandLineW
GetCommandLineA
QueryPerformanceFrequency
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
OutputDebugStringW
GetFileSizeEx
GetFileAttributesExW
FreeEnvironmentStringsW
CompareStringA
LeaveCriticalSection
GetCurrentThread
VerifyVersionInfoW
VerSetConditionMask
lstrcpyA
GlobalReAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FileTimeToLocalFileTime
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetTempFileNameW
GetFileTime
GetFileAttributesW
GetDiskFreeSpaceW
GetThreadLocale
GetStringTypeExW
MoveFileW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
lstrcmpA
GlobalGetAtomNameW
SuspendThread
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
FormatMessageW
MulDiv
GlobalFree
GetCurrentProcess
GetModuleHandleA
GetModuleHandleW
SetLastError
LoadLibraryA
InitializeCriticalSection
lstrcatW
lstrcpyW
GetWindowsDirectoryW
lstrcmpiW
lstrlenW
GetCPInfo
GetVersionExW
GetVersion
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
SetThreadUILanguage
WinExec
WideCharToMultiByte
CreateProcessW
GetTickCount64
CopyFileW
ReleaseSRWLockShared
AcquireSRWLockShared
FreeLibrary
GetProcAddress
LoadLibraryW
GetSystemDefaultLangID
SetThreadPriority
InitializeCriticalSectionEx
WaitCommEvent
GetCommModemStatus
CreateFileW
CreateEventW
ResetEvent
SetCommMask
ResumeThread
WriteFile
GetOverlappedResult
ReadFile
PurgeComm
ClearCommError
SetupComm
BuildCommDCBW
SetCommState
GetCommState
GetModuleFileNameW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentDirectoryW
SleepEx
QueueUserAPC
GetExitCodeThread
WaitForMultipleObjects
OpenMutexW
SetEvent
CreateThread
CloseHandle
CreateMutexW
GetTickCount
TerminateThread
WaitForSingleObject
Sleep
DeleteFileW
LocalFree
FindResourceW
LoadResource
LockResource
SizeofResource
SetEnvironmentVariableW

user32

PostThreadMessageW
PostQuitMessage
EnableScrollBar
MonitorFromPoint
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
EnumDisplayMonitors
SetClassLongW
UnionRect
LockWindowUpdate
GetUpdateRect
NotifyWinEvent
GetSystemMenu
CharNextW
MapDialogRect
SetWindowContextHelpId
CharUpperW
CopyImage
GetNextDlgGroupItem
SetParent
IsZoomed
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
ReuseDDElParam
UnpackDDElParam
IntersectRect
InsertMenuItemW
DestroyMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
GetMessageW
GetWindowThreadProcessId
EndDialog
CreateDialogIndirectParamW
MapVirtualKeyW
GetKeyNameTextW
SetWindowRgn
DrawIcon
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
CallNextHookEx
SetTimer
KillTimer
EnableWindow
SendMessageW
MessageBoxExW
UnhookWindowsHookEx
WaitMessage
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
ScrollWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
GetClassInfoExW
RegisterClassW
GetMessageTime
PeekMessageW
CharUpperBuffW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
SubtractRect
EnumChildWindows
HideCaret
InvertRect
IsCharLowerW
MapVirtualKeyExW
GetComboBoxInfo
GetWindowRgn
ShowOwnedPopups
RegisterWindowMessageW
IsDialogMessageW
GetWindowTextLengthW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
GetDlgItem
UpdateLayeredWindow
SetCursorPos
RealChildWindowFromPoint
GetMenuDefaultItem
CopyAcceleratorTableW
SetWindowsHookExW
InvalidateRgn
GetWindowRect
InvalidateRect
PostMessageW
GetParent
CopyRect
GetClientRect
ScreenToClient
SetScrollPos
ReleaseCapture
ClientToScreen
SetCapture
SetWindowLongW
GetWindowLongW
SetLayeredWindowAttributes
GetDC
GetFocus
IsWindow
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
GetClipboardData
RegisterClipboardFormatW
wsprintfW
OffsetRect
LoadBitmapW
LoadIconW
MessageBoxW
GetCursorPos
PtInRect
LoadMenuW
GetSubMenu
IsWindowVisible
GetDlgCtrlID
SetRectEmpty
InflateRect
GetSysColor
IsRectEmpty
LoadImageW
GetSystemMetrics
RedrawWindow
UpdateWindow
CreatePopupMenu
CreateMenu
AppendMenuW
GetAsyncKeyState
UnregisterClassW
CreateCaret
ValidateRect
ShowCaret
EnableMenuItem
LoadCursorW
FillRect
GetCapture
SetCursor
FrameRect
DrawEdge
SetRect
GetMenuItemInfoW
DrawTextW
SystemParametersInfoW
DrawIconEx
DestroyIcon
GetDesktopWindow
ReleaseDC
GetMenuItemCount
InsertMenuW
ModifyMenuW
GetMenuState
GetMenuItemID
GetSysColorBrush
RemoveMenu
DeleteMenu
TabbedTextOutW
DrawTextExW
GrayStringW
DestroyCursor
IsMenu
GetNextDlgTabItem
WindowFromPoint
GetActiveWindow
DrawFocusRect
DrawStateW
GetIconInfo
CreateIconIndirect
MessageBeep
GetMessagePos
CopyIcon
TrackMouseEvent
GetClassInfoW
SendDlgItemMessageA
IsChild
GetMenuStringW
GetWindowDC
ShowScrollBar
EndPaint
BeginPaint
IsWindowEnabled
SetWindowTextW
SetWindowPos
GetWindow
ShowWindow
GetWindowTextW
IsClipboardFormatAvailable
DestroyWindow
GetScrollInfo
SetScrollInfo
MoveWindow
DrawFrameControl
CreateWindowExW
SetFocus
CallWindowProcW
RegisterClassExW
DispatchMessageW
TranslateMessage
GetKeyState
DefWindowProcW

gdi32

GetWindowOrgEx
ExtFloodFill
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPixelV
GetPaletteEntries
SetPaletteEntries
GetNearestPaletteIndex
LPtoDP
ExcludeClipRect
OffsetRgn
RealizePalette
GetTextCharsetInfo
EnumFontFamiliesW
Polygon
CreatePolygonRgn
SetRectRgn
GetMapMode
CreateRoundRectRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
RestoreDC
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
CreateFontW
GetTextMetricsW
GetObjectW
CreateFontIndirectW
DeleteObject
DeleteDC
SelectObject
SetDIBColorTable
CreateCompatibleDC
CreateDIBSection
GetTextExtentPoint32W
StretchBlt
GetDIBColorTable
GetDeviceCaps
CreatePen
CreateSolidBrush
BitBlt
Polyline
Rectangle
GetStockObject
CreateCompatibleBitmap
CreatePalette
GetBkMode
Ellipse
GetPixel
SetPixel
PatBlt
CreateHatchBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateBitmap
SetBkColor
SetTextColor
RoundRect
GetViewportOrgEx
SetViewportOrgEx
CreateRectRgn
SetDCBrushColor
ExtCreatePen
CreatePatternBrush
SetBkMode
GetDIBits
SetDIBits
GetTextFaceW
GetTextExtentExPointW
CombineRgn
GetRgnBox
SetTextAlign
MoveToEx
LineTo
GetBkColor
CreateRectRgnIndirect
GetTextColor
SelectClipRgn
CreateDIBitmap
GetSystemPaletteEntries
CopyMetaFileW
SelectPalette
ExtSelectClipRgn
GetClipBox
CreateDCW
CreateEllipticRgn
DPtoLP
SaveDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegDeleteKeyW
RegEnumValueW
RegGetValueW
RegCloseKey
RegQueryValueExW
RegQueryValueW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyW
SetFileSecurityW
GetFileSecurityW
RegSetValueW
RegOpenKeyExW

shell32

SHAddToRecentDocs
ExtractIconW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHAppBarMessage
SHGetFileInfoW
DragFinish
DragQueryFileW
ShellExecuteExW
SHGetSpecialFolderPathW
DragAcceptFiles
ShellExecuteW

comctl32

ImageList_AddMasked
ImageList_SetBkColor
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathRemoveExtensionW
StrCmpW
PathFindExtensionW
StrCpyW
PathFindFileNameW
PathFileExistsW
StrFormatKBSizeW

uxtheme

GetWindowTheme
DrawThemeText
IsThemeBackgroundPartiallyTransparent
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground
GetThemeSysColor
GetThemePartSize

ole32

CoRegisterMessageFilter
CoRevokeClassObject
OleLockRunning
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CreateStreamOnHGlobal
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
OleGetClipboard
CoLockObjectExternal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleFlushClipboard

oleaut32

OleCreateFontIndirect
LoadTypeLi
VarBstrFromDate
VarBstrFromCy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
VariantInit
VariantCopy
GetErrorInfo
VariantClear

oledlg

OleUIBusyW

gdiplus

GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipGetImagePaletteSize
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePalette
GdiplusStartup
GdipBitmapLockBits
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits

odbc32

ord2
ord3
ord5
ord72
ord4
ord176
ord138
ord141
ord145
ord139
ord119
ord117
ord111
ord110
ord108
ord68
ord59
ord20
ord49
ord48
ord18
ord44
ord43
ord16
ord15
ord14
ord13
ord12
ord9
ord1

crypt32

CryptUnprotectData
CryptProtectData

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 653KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61b71816387e41bd4279a80589326bfe

Headers

DLL Characteristics

File Characteristics

Imports

motionstudio.interop.oscilloscope

d2d1

dwrite

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

odbc32

crypt32

version

oleacc

imm32

winmm

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 653KB - Virtual size: 652KB

.data Size: 37KB - Virtual size: 56KB

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 263KB - Virtual size: 262KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 653KB - Virtual size: 652KB

.data
Size: 37KB - Virtual size: 56KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 263KB - Virtual size: 262KB