2805f7bd67ebf695af2224c22329cfdb

Sharing

Copy URL Twitter E-mail

General

Target

2805f7bd67ebf695af2224c22329cfdb
Size

161KB
MD5

2805f7bd67ebf695af2224c22329cfdb
SHA1

de023a7b981d2ca896d3e6025612bdae0bb3a13e
SHA256

0559dd9078e1294ee25aae1cea80a79f590db499a6dd6b1edea742740fcddf65
SHA512

0eae6d20c31cf0f024b12fd810a932e432af45db0d3afe87d48ca7b4564d985446d6f8c63d310182c8c14530ffb03640e668a230db1c46a0d793654fa6d9d909
SSDEEP

3072:zrBWzuoDlLz/o9nBJkPomn9V4ZBV9h9Zhe:zVWzuoDNMnYPomn9Cph9Zh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2805f7bd67ebf695af2224c22329cfdb

Files

2805f7bd67ebf695af2224c22329cfdb
.exe windows:5 windows x86 arch:x86

2eba07071d78981e81f843c5d6fdbb34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

nsw2lib

wStrCmp
wGetBackCol
wGetTitle
wIsInt
wDlgAddBitmap
wPtr2S
wGetPtr
wStrCopy
wLAC2S
wMessage
wHide
wDlgAddIcon
wSetForeCol
wIsWindow
wChr
wLineCount
wGetHeight
wS2R
wS2Ptr
wShow
wDlgAddEntryField
wSetWindowPos
wLock
wDeleteAll
wI2S
wRestoreWindow
wGetClientWidth
wStrRSkip
wIsMinimized
wBeep
wSetMainWindow
wRoundR
wSetIcon
wStrLSkip
wGetClientHeight
wStrDelete
wFill
wDlgAddListBox
wUpdate
wACStrCpy
wACStrCpy2
wDlgAddVertScrollBar
wSetTitle
wTruncR
wSetPos
wAC2S
wDlgAddGroupBox
wSelection
wMemNew3
wAsk2
wGetXPos
wEnable
wSelect
wSetBackCol
wGetScreenWidth
wMemNew
wLStrCpy
wDlgAddMLE
wStrPos
wGetWidth
wStartTimer
wCaptureMouse
wIsSelected
wGetForeCol
wLStrInsert
wIsHidden
wSetPtr
wIsMousePresent
wLStrFill
wDlgAddHorzScrollBar
wAsk3
wGetYPos
wLoad
wGetPrototype
wDelete
wDlgAddCheckBox
wE2S
wWait
wDlgCheck1
wGetScreenHeight
wGetParent
wSave
wMaximizeWindow
wS2I
wLAC2S2
wIsNum
wIsDisabled
wInvalidateWindow
wIsMaximized
wAppendMenuItem
wPostEvent
wInsert
wStopTimer
wMov
wGetText
wStrLowcase
wStrLength
wMemDispose
_CCAF_GETFILENAMEPTR
wSendEvent
wSetFocus
wGetBaseID
wNbMouseButtons
wF2S
wGetQualifier
wDlgAddWinCmnCtrl
wStrUpcase
wGetSPTR
wDlgSetWindowPos
wStrSkip
wIsLocked
wCallBack
wDlgSetMLECursor
wEditOpenWindow
wDismissOrCloseWindow
wWndSetWindowPos
wDlgSetCurItem
wDlgOpenWindow
wDlgSetDevice
wSetRange
wotPrototype
wDlgAddCombBox
wDlgAddRadioButton
wSetUser
wSetCBack
wSetText
wGetUser
wSetQualifier
wWndSetDevice
wCloseWindow
wListOpenWindow
wProcess
wDlgAddStaticText
wWndOpenWindow
wDlgAddPushButton
wStrCpy
wPSStrCpy
wSetCharSet
wUnLoadDLL
UnquoteArgInPlace
CSkipSpaces
wGetMainWindow
wTerminate1
wPS2S
_CCAF_GETFILECOUNT
wCreateAccelTable
wMinimizeWindow
wLoadTemplateInDll
wInitialize2
wExecute
wGetProc
wDlgAddCombBoxEntry
wLoadDLL

nsw2misc

PARAMSTR
PARAMCOUNT

nsw2_db

wDbSearch
wDbStop
wDbInsert
wDbInit
wDbError
wDbClose
wDbDelete
wDbPrev
wDbOpen
wDbCommit
wDbCloseCursor
wDbNext
wDbRollBack
wDbErrMsg
wDbUpdate
wDbOpenCursor

nsw2prn

wPrnAddVectText
wPrnAddVectFrame
wPrnOpenWindow

nsw2help

HLPINITIALIZE@20
HLPTERMINATEALL@0
HLPDEBUG@4
HLPERROR@0
HLPOPEN@8

nsw2dstr

ord71
ord86
ord22
ord85
ord81
ord12
ord15
ord67
ord69
ord72
ord70
ord5
ord74
ord54
ord65
ord57
ord47
ord34
ord61
ord82
ord49
ord83
ord44
ord17
ord79
ord56
ord58
ord2
ord48
ord55
ord33
ord10
ord87
ord43
ord75
ord52

nsw2_sql

wSqlOpenCursor
wSqlDelete
wSqlErrMsg
wSqlCloseCursor
wSqlOpen
wSqlError
wSqlClose
wSqlInit
wSqlCreate
wSqlExec
wSqlStop

nsw2inim

IniMgrGetItemBool

nsw2wps

tWindow_nsCommand
tWindow_nsCreateCursor
tDlgWindow_nsDlgAddListBox
tWindow_nsSetMenuItemText
tWindow_nsDetachMenu
tDlgWindow_nsDlgGetMLENbLines
tWindow_nsCreateAccelTable
tDlgWindow_nsDlgGetMLETextSize
tDlgWindow_nsDlgSetCheckBox
CheckDynamicName
tWindow_nsGetTrackInfo
tWindow_nsEnableWindow
tDlgWindow_nsDlgSetListBoxItemText
tDlgWindow_nsDlgAddEntryField
tDlgWindow_nsDlgGetGroupBoxText
tDlgWindow_nsGetOrLoseFocus
tWindow_nsGetParent
tDlgWindow_nsDlgSetEntryFieldKinds
tDlgWindow_nsDlgUpdateMLE
tWindow_nsEnabled
tDlgWindow_nsGetItemFromID
tDlgWindow_nsDlgSetCheckBoxText
tDlgWindow_nsDlgDeleteMLELine
tWindow_nsSetWindowPos
tDlgWindow_nsDlgGetStaticText
tDlgWindow_nsDlgDeleteAllListBoxItems
tWindow_nsSetClipSiblings
tWindow_nsComputeShellPosition
tWindow_nsHideMenuItem
tWindow_nsProcess
tWindow_nsGetHorzScrollBarPos
DebugMode
tDlgWindow_nsDlgGetVertScrollBar
tWindow_nsEnableMenuBar
tDlgWindow_nsDlgGetPushButtonText
tWindow_nsStartTimer
tWindow_nsTerminate
tDlgWindow_nsDlgGetRadioButton
tWindow_nsSetParent
tWindow_nsGetChildWindow
tWindow_nsCaptureMouse
tWindow_nsTimeOut
tWindow_nsSetWindowTitle
tWindow_nsGetMousePos
tDlgWindow_nsDlgAddCombBox
tWindow_nsShowCursor
tDlgWindow_nsDlgAddMLE
nsSysPointer
tDlgWindow_nsDlgSetPos
tDlgWindow_nsDlgDrawListBoxItem
IniMgrGetNSColor
tWindow_nsSetRelief
tDlgWindow_nsDlgSetGroupBoxText
tDlgWindow_nsDlgSetStaticText
VirtualVGADevice
tWindow_nsShowMenuItem
ExistDir
tDlgWindow_nsDlgSetBitmapSel
tDlgWindow_nsDlgGetEntryFieldChars
tWindow_nsGetVertScrollBarPos
IniMgrGetFont
tWindow_nsCreateWindow
tWindow_nsButtonDblClk
tWindow_nsMouseMove
tWindow_nsStopTimer
tWindow_nsGetClientArea
tDlgWindow_nsDlgGetEntryField
tDlgWindow_nsGiveFocus
tWindow_nsDismiss
tDlgWindow_nsCheckControls
tDlgWindow_nsDlgSetFont
tWindow_nsEnableHorzScrollBar
tDlgWindow_nsSetFocus
tDlgWindow_nsDlgAddRadioButton
tDlgWindow_nsDlgSetFocus
tWindow_nsAddWindowFrameKinds
tWindow_nsGetHorzScrollBarRange
tDlgWindow_nsDlgSaveListBoxItems
tWindow_nsGetWindowPos
tDlgWindow_nsDlgGetPos
tDlgWindow_nsDlgSetEntryFieldFormat
tDlgWindow_nsDlgShowControl
tDlgWindow_nsGetAnchor
tDlgWindow_nsDlgControlDisabled
tWindow_nsSetMenuItemKinds
tDlgWindow_nsDlgSetMLECursor
tWindow_nsAppendMenuItem
tDlgWindow_nsButtonDown
tDlgWindow_nsDlgLoadMLELines
tDlgWindow_nsDlgSetEntryField
tWindow_nsGetVertScrollBarRange
tWindow_nsSetHorzThumbSize
tWindow_nsAddExWindowFrameKinds
nsGetScreenPS
tWindow_nsIsMenuItemVisible
tDlgWindow_nsDlgGetMLELine
tDlgWindow_nsDlgSetWindowPos
tDlgWindow_nsDlgSaveMLELines
tDlgWindow_nsSizeChanged
tDlgWindow_nsDlgGetListBoxNbItems
tDlgWindow_nsDlgSetEntryFieldChars
tWindow_nsPosChanged
tDlgWindow_nsDlgControlHidden
tWindow_nsEnableVertScrollBar
tDlgWindow_nsDlgGetMLEText
tDlgWindow_nsDlgGetRadioButtonGroupID
tDlgWindow_nsDlgGetBitmapSel
tWindow_nsIsMaximized
tDlgWindow_nsDlgAddHorzScrollBar
tDlgWindow_nsDlgSetHorzScrollBar
tWindow_nsSetHorzScrollBar
tWindow_nsIsEnabled
tDlgWindow_nsSetAnchor
nsReleaseScreenPS
tDlgWindow_nsDlgControlLocked
tWindow_nsAttachMenu
tDlgWindow_nsDlgSetRadioButton
tDlgWindow_nsDlgGetRelief
tDlgWindow_nsGetChar
nsAlertBox
cyChar
tDlgWindow_nsHideWindow
tWindow_nsInvalidateWindow
tWindow_nsCreateWindowEx
_TranslateChars
Str2Ascii
_GetCurrentCharSet
nsYield
tWindow_nsSetIcon
tDlgWindow_nsDlgGetHorzScrollBar
tWindow_nsDetachChildWindow
tDlgWindow_nsDlgUpdateListBox
tDlgWindow_nsSetBitmaps
tWindow_nsHasFocus
tWindow_nsCloseCursor
tDlgWindow_nsDlgSetRadioButtonText
tDlgWindow_nsDlgSetMLEText
tDlgWindow_nsDlgAddGroupBox
tDlgWindow_nsDlgLockControl
tWindow_nsIsMinimized
tDlgWindow_nsDlgSetPushButtonText
tDlgWindow_nsDlgGetEntryFieldFormat
tDlgWindow_nsDlgLoadListBoxItems
tDlgWindow_nsDlgDeleteListBoxItem
nsCreateBitmap1
tWindow_nsIsActive
tDlgWindow_nsHorzScrollBarEvent
tDlgWindow_nsDlgGetCheckBoxText
tWindow_nsAdjustSizeOrPos
tDlgWindow_nsDlgSetMLELine
tDlgWindow_nsDlgSetListBoxSelectItem
tDlgWindow_nsDlgGetFont
tDlgWindow_nsDlgIsListBoxItemSelected
tWindow_nsActivated
tDlgWindow_nsDlgEnableControl
tDlgWindow_nsDlgAddCheckBox
tDlgWindow_nsShowWindow
tWindow_nsGetMenuItemKinds
tDlgWindow_nsControl
tDlgWindow_nsDlgSetDevice
nsAlarm
tDlgWindow_nsDlgAddStaticText
tDlgWindow_nsCloseWindow
tDlgWindow_nsDlgGetEntryFieldKinds
tWindow_nsIsHidden
tDlgWindow_nsDlgInsertListBoxItem
tWindow_nsGetMenuItemText
tWindow_nsGetWindowTitle
tDlgWindow_nsDlgGetListBoxItemText
tDlgWindow_nsDlgGetCheckBox
tDlgWindow_nsDlgAddCombBoxEntry
tDlgWindow_nsDlgSetColors
tDlgWindow_nsDlgInsertMLELine
nsGpiGetCharWidths
tWindow_nsSetVertScrollBarPos
tWindow_nsRemoveMenuItem
tWindow_nsAttachChildWindow
tDlgWindow_nsDlgAddPushButton
tWindow_nsSetVertScrollBar
tDlgWindow_nsDlgSetVertScrollBar
tDlgWindow_nsDlgAddVertScrollBar
nsSetWndFocus
tDlgWindow_nsVertScrollBarEvent
tWindow_nsSelectMenuItem
tDlgWindow_nsDlgGetMLECursor
tDlgWindow_nsDlgAddListBox1
tDlgWindow_nsDlgHideControl
tDlgWindow_nsDlgSetRelief
tDlgWindow_nsDlgAddIcon
tDlgWindow_nsDlgGetRadioButtonText
nsSetPointer
tWindow_nsButtonUp
tWindow_nsInsertMenuItem
tDlgWindow_nsDlgCreateWindow
tWindow_nsSetHorzScrollBarPos
tDlgWindow_nsDlgAddBitmap
tWindow_nsIsWindowAttached
tWindow_nsPaintWindow
tWindow_nsSetVertThumbSize
tDlgWindow_nsDlgGetColors
tDlgWindow_nsDlgDeleteAllMLELines
ConcatDirAndNameEx
nsGetPrivateData
Float2Str
Ascii2Set
ROReset
Str2Real
tDlgWindow
SetCurrentCharSet
GetFormattedDirEx
nsTerminateMem
nsInitMem
LOADPLIBVARS
ns_SearchPaths
UpcaseStr
nsFreeMem
GetNameFromFileName
ExistFileEx
Str2Int
GETPLIBVAR
_GetHostCharSet
AddDefaultExtToFileName
GetDirFromFileName
Int2Str
GetExtFromFileName
nsGetMem
SETPLIBVAR
SkipStr
nsAllocNamedShrMem
nsReleaseWndCapture
nsGetWndFocus
nsGetWndCapture
nsSetWndCapture
tDlgWindow_nsDlgGetListBoxSelectItem
nsLockShrMem
tWindow_nsScrollWindow

nsw2xprj

ord4
ord29
ord35

nsw2ncl

SymTabState
CharSetDefault
InsertIdentifier
SearchFindIdentifier
LocalHashTab
GetArDim
NclStopExecute
GlobalHashTab
NclStartExecute
NumType
GetSegInfo
MarkMemory
NclStopCompile
NclStartCompile
SameTypes
RealizeTypeDef
ParamTypeMatch
ShortIntType
ReleaseMemory
SqlBuffer
StoredStringToConstDynStr
FindIdentifier
LongNumType
GetSegIdInfo
CreateTypeDef
CStringType
IntegerType
GetEventKind
ltb_copy
DStringType
GetSizeOfType
FindItemFromNm
LoadScreen
FindMenuFromName
CurCtrl
EventsStr
FindMenuItemFromID
NclTerminate
CloseSearch
IniFileName
CloseScreen
CreateIdentifier
IdMainWindow
NSNatIntType
LoadProjectName
NSTabTerminate
ltb_terminate
LongIntType
LoadXmlProject
Ctx
PointerType
CloseSymbolTables
OpenSearch
SetGeneratedCharSet
CloseSymbolFile
FirstForm
OpenSymbolFile
OpenSymbolTables2
NclInitialize
ControlType
AllocMemory
ltb_free
ProjectName
cLibKindsStr
MainScreen
NclCompile2
NclError
SearchPrjFile
DefineCC
AllocNode
FindIdentifier1
FirstTemplate
NSLoadBuffer

nsw2dbge

PostMsgToDbgr
GetMsgFromDbgr
TermCommDbgee
InitCommDbgee

ns1ntrt

ord3
ord98
ord94
ord233
ord32
ord90
ord197
ord38
ord54
ord26
ord34
ord56
ord43
ord103
ord206
ord75
ord210
ord41
ord107
ord42
ord102
ord37
ord57
ord55
ord68
ord274
ord91
ord76
ord86
ord83
ord20
ord123
ord21
ord209
ord113
ord101
ord92
ord35
ord95
ord232
ord236
ord65
ord450
ord12
ord14
ord78
ord11
ord100
ord351
ord196
ord350
ord2
ord136
ord198
ord30
ord27
ord241
ord80
ord61
ord69
ord4
ord45

kernel32

GetStartupInfoA
GetSystemInfo
VirtualAlloc
VirtualProtect
OutputDebugStringA
GetModuleHandleA

user32

GetCapture
ReleaseCapture
SetCapture

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_VMT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2eba07071d78981e81f843c5d6fdbb34

Headers

DLL Characteristics

File Characteristics

Imports

nsw2lib

nsw2misc

nsw2_db

nsw2prn

nsw2help

nsw2dstr

nsw2_sql

nsw2inim

nsw2wps

nsw2xprj

nsw2ncl

nsw2dbge

ns1ntrt

kernel32

user32

Sections

.text Size: 128KB - Virtual size: 127KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 1KB - Virtual size: 4KB

_VMT Size: 1KB - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 128KB - Virtual size: 127KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 1KB - Virtual size: 4KB

_VMT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 7KB