c:\sandbox\Sketchpad-build_CVS\Build\Scripts\Sketchpad_CVS\Sketchpad\Windows\build\output\GSP_ReleaseKCPT3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
几何画板5.0中文注册版.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
几何画板5.0中文注册版.exe
Resource
win10v2004-20231222-en
General
-
Target
几何画板5.0中文注册版.exe
-
Size
4.1MB
-
MD5
44535f0d45f0fa559c741b8d6948dc9a
-
SHA1
736921560aa221f3c5ab13db78dfbad34703eff2
-
SHA256
f3faafa61dfb804b15a66a7f0cfdf8a550bf76eb8f81e6c7cb87b93c1be9ed67
-
SHA512
dab0b639247362b35343a71fc9a08c366969249da52950632dd4fb43f77adf1e03f923b5df2f635b7c8bbee03f4c5700c18b9129b6abe9d67a09a0a5ba2d37a9
-
SSDEEP
49152:J10hVEZfBeYVdW65ze+DIUEp5q0OtNE32Hn0DuuRHCdlVoVNqo6:P9fMYVk6FDENO03q0DuuRHYVoVr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 几何画板5.0中文注册版.exe
Files
-
几何画板5.0中文注册版.exe.exe windows:4 windows x86 arch:x86
922fff1e7e3ce22f6041991d55068e5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB Paths
Imports
gdiplus
GdipCreateMatrix
GdipGetImagePixelFormat
GdipGraphicsClear
GdipAddPathPolygon
GdipCreateRegionPath
GdipDrawImageRectRectI
GdipSetClipRegion
GdipGetImageHeight
GdipSaveImageToStream
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRect
GdipGetImageEncoders
GdipCreateBitmapFromFile
GdipCreateMetafileFromEmf
GdipMultiplyWorldTransform
GdipInvertMatrix
GdipDrawImageRectI
GdipGetMetafileHeaderFromMetafile
GdipBitmapSetPixel
GdipCreateBitmapFromStream
GdipCreateImageAttributes
GdipSetMatrixElements
GdipSetPenEndCap
GdipAddPathBezier
GdipSetPenMiterLimit
GdipCloneBrush
GdipCreatePen1
GdipCreateSolidFill
GdipFillRectangle
GdipDeleteBrush
GdipFree
GdipAlloc
GdipDeletePen
GdipSetSmoothingMode
GdipDeleteGraphics
GdipSetPenDashCap197819
GdiplusShutdown
GdipSetPageUnit
GdipSetPenDashArray
GdipCreateFromHDC
GdiplusStartup
GdipSetPenDashStyle
GdipReleaseDC
GdipCreatePath
GdipDisposeImage
GdipFillPolygon
GdipAddPathLine
GdipDrawEllipse
GdipDrawPolygon
GdipAddPathArc
GdipSetPathGradientCenterColor
GdipGetClip
GdipGetPathWorldBounds
GdipSetPenStartCap
GdipSetPenLineJoin
GdipGetPathGradientPointCount
GdipCreatePathGradientFromPath
GdipSetPathGradientSurroundColorsWithCount
GdipCreateRegion
GdipTransformPath
GdipDrawImageI
GdipSetPathGradientFocusScales
GdipTranslateMatrix
GdipSetPenWidth
GdipSetSolidFillColor
GdipSetPenColor
GdipGetPenFillType
GdipGetPenColor
GdipGetPenWidth
GdipGetPenDashStyle
GdipSetCompositingMode
GdipCreateHatchBrush
GdipSetClipRectI
GdipCreateHBITMAPFromBitmap
GdipBitmapGetPixel
GdipDrawRectangle
GdipDrawPath
GdipDrawLines
GdipClosePathFigure
GdipLoadImageFromStreamICM
GdipDeletePath
GdipStartPathFigure
GdipCloneImage
GdipSetRenderingOrigin
GdipDrawPie
GdipAddPathLine2
GdipDrawLine
GdipFillEllipse
GdipLoadImageFromStream
GdipDrawArc
GdipFillPie
GdipFillPath
GdipGetImageGraphicsContext
GdipGetHemfFromMetafile
GdipRecordMetafile
GdipBitmapLockBits
GdipGetDC
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipRecordMetafileFileName
GdipGetImageVerticalResolution
GdipSetClipRect
GdipSetInterpolationMode
GdipDeleteMatrix
GdipGetImageEncodersSize
GdipSetPixelOffsetMode
GdipGetImageWidth
GdipGetImageBounds
GdipDisposeImageAttributes
GdipCreateBitmapFromFileICM
GdipDeleteRegion
GdipGetImageHorizontalResolution
GdipCreateBitmapFromStreamICM
GdipTranslateWorldTransform
GdipRestoreGraphics
GdipScaleWorldTransform
GdipSaveGraphics
winmm
waveOutUnprepareHeader
waveOutReset
waveOutWrite
waveOutClose
waveOutOpen
waveOutPrepareHeader
kernel32
GetPrivateProfileIntW
GlobalAddAtomW
WritePrivateProfileStringW
CloseHandle
CreateFileW
GetFileAttributesW
GetFileInformationByHandle
CopyFileW
GetSystemInfo
GetCPInfo
FreeResource
FindFirstFileW
GetModuleHandleW
LoadLibraryW
SetLastError
GlobalDeleteAtom
GetProcAddress
lstrcmpiW
EnterCriticalSection
LeaveCriticalSection
GetCPInfoExW
DeleteCriticalSection
GetTempFileNameW
SetFileTime
GetFileTime
DeleteFileW
SetFileAttributesW
QueryPerformanceCounter
QueryPerformanceFrequency
FindClose
FindNextFileW
FreeLibrary
InitializeCriticalSection
GetVersionExA
LoadLibraryA
CompareStringW
GlobalFindAtomW
GetCurrentThreadId
GetModuleHandleA
LocalFree
FormatMessageW
VirtualProtect
InterlockedDecrement
GlobalFlags
GlobalGetAtomNameW
GetCurrentProcessId
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
lstrlenA
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventW
InterlockedIncrement
MoveFileW
GetStringTypeExW
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
SearchPathW
GetProfileIntW
GetTempPathW
GetDiskFreeSpaceW
LocalAlloc
TlsGetValue
GetVersionExW
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetAtomNameW
FileTimeToSystemTime
SystemTimeToFileTime
FindResourceExW
FileTimeToLocalFileTime
SetErrorMode
LocalFileTimeToFileTime
CreateEventA
InterlockedExchangeAdd
GetProcessAffinityMask
OpenProcess
GetThreadPriority
ReleaseSemaphore
CreateSemaphoreA
ResetEvent
SetThreadContext
GetThreadContext
WaitForMultipleObjects
RaiseException
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
HeapReAlloc
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
TerminateProcess
IsDebuggerPresent
HeapSize
ExitThread
CreateThread
VirtualAlloc
VirtualQuery
GetTimeZoneInformation
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
SetConsoleCtrlHandler
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
CreateFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalHandle
GetCurrentDirectoryW
FindResourceW
LockResource
SizeofResource
LoadResource
MultiByteToWideChar
GetShortPathNameW
GlobalSize
GetLastError
GlobalFree
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalAlloc
DebugBreak
Sleep
GetVersion
MulDiv
GetTickCount
GetACP
lstrcmpW
WideCharToMultiByte
lstrcpynW
GetWindowsDirectoryW
GetModuleFileNameW
AttachConsole
lstrlenW
GetPrivateProfileStringW
user32
DrawTextA
FrameRect
GetSysColorBrush
GetClassLongW
RemoveMenu
DestroyAcceleratorTable
DrawMenuBar
CopyAcceleratorTableW
CreateAcceleratorTableW
GetMenuStringW
DeleteMenu
SetRectEmpty
LoadStringA
GetDlgItem
SetWindowTextW
GetDialogBaseUnits
UnregisterClassA
SetPropW
RemovePropW
GetWindowPlacement
SystemParametersInfoA
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
AdjustWindowRectEx
GetClassInfoW
GetMenuItemID
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
ScrollWindow
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetWindowTextLengthW
GetPropW
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
CheckDlgButton
CheckRadioButton
GetDlgItemInt
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
IsDialogMessageW
MoveWindow
ShowWindow
IsWindowEnabled
ScrollWindowEx
GetMenuState
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetKeyNameTextW
MapVirtualKeyW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
TabbedTextOutW
DrawTextExW
SetFocus
GetWindowDC
BeginPaint
EndPaint
MapDialogRect
DefFrameProcW
DefMDIChildProcW
BringWindowToTop
TranslateMDISysAccel
TranslateAcceleratorW
RedrawWindow
SetMenu
LoadAcceleratorsW
GetWindowThreadProcessId
ReuseDDElParam
UnpackDDElParam
ValidateRect
TranslateMessage
ShowOwnedPopups
SetWindowContextHelpId
InSendMessage
WindowFromDC
SetParent
IsRectEmpty
CharUpperW
GetDCEx
LockWindowUpdate
DestroyIcon
DestroyCursor
DrawIcon
SetWindowRgn
PostThreadMessageW
GetSystemMenu
WaitMessage
ClipCursor
IsZoomed
CharNextW
InvalidateRgn
GetNextDlgGroupItem
SendNotifyMessageW
GetTabbedTextExtentA
SetCapture
LoadBitmapW
AppendMenuW
ReleaseCapture
FillRect
KillTimer
UpdateWindow
WindowFromPoint
SetCursor
GetCursorPos
SetTimer
LoadCursorW
CreatePopupMenu
PostMessageW
CallNextHookEx
UnhookWindowsHookEx
GetDesktopWindow
MessageBoxA
GetDC
ReleaseDC
OffsetRect
GetParent
GetWindowRect
GetClientRect
CallWindowProcW
SendMessageW
EnableMenuItem
GetSubMenu
ChangeClipboardChain
CheckMenuItem
GetMenuItemInfoW
GetMenu
InsertMenuW
SetClipboardViewer
CreateMenu
LoadImageW
ScrollDC
SystemParametersInfoW
GetClassInfoExW
GetForegroundWindow
RegisterClassExW
GetFocus
EqualRect
UnionRect
DrawTextW
ShowScrollBar
GetWindowTextW
DispatchMessageW
GetMessageW
InflateRect
DrawFrameControl
GetWindowLongW
GetDlgCtrlID
IsWindow
GetCapture
SetWindowsHookExW
GetClassNameW
SetWindowPos
GetDlgItemTextW
GetActiveWindow
SetCursorPos
PeekMessageW
GetAncestor
GetWindow
IntersectRect
PostQuitMessage
ClientToScreen
LoadMenuW
IsChild
GetUpdateRect
SetActiveWindow
MapWindowPoints
FindWindowW
MessageBoxW
IsIconic
IsWindowVisible
GetLastActivePopup
UnregisterClassW
LoadIconW
SetForegroundWindow
DrawFocusRect
TrackPopupMenu
GetAsyncKeyState
SetRect
CopyRect
wsprintfW
GetMenuItemCount
SetMenuItemInfoW
LoadStringW
InsertMenuItemW
CreateWindowExW
DestroyWindow
RegisterClassW
DefWindowProcW
TrackPopupMenuEx
DestroyMenu
PtInRect
GetSysColor
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
CloseClipboard
OpenClipboard
GetClipboardData
RegisterClipboardFormatW
GetSystemMetrics
ScreenToClient
InvalidateRect
GrayStringW
GetKeyState
SetWindowLongW
MessageBeep
EnableWindow
UpdateLayeredWindow
gdi32
Escape
ExtTextOutW
RectVisible
PtVisible
StartDocW
GetPixel
SelectClipPath
CreateRectRgn
GetClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
OffsetClipRgn
ExcludeClipRect
ModifyWorldTransform
SetWorldTransform
SetPolyFillMode
CreateBitmap
GetClipBox
GetDCOrgEx
ChoosePixelFormat
SetPixelFormat
GetEnhMetaFileHeader
SetEnhMetaFileBits
GdiComment
TextOutW
OffsetViewportOrgEx
GetTextExtentPoint32W
GetCurrentObject
GetTextFaceW
TextOutA
ScaleWindowExtEx
GetObjectType
LineTo
GetTextExtentExPointW
MoveToEx
GetTextExtentExPointA
Arc
SetBkColor
GetWindowExtEx
SetMapMode
SetViewportOrgEx
CreateCompatibleBitmap
GetViewportExtEx
GetMapMode
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetStretchBltMode
PlayEnhMetaFile
SetGraphicsMode
SetBkMode
DeleteEnhMetaFile
CreateCompatibleDC
StretchBlt
GetBkColor
ScaleViewportExtEx
MaskBlt
OffsetWindowOrgEx
EnumFontFamiliesExW
GetTextMetricsW
SetTextColor
Rectangle
RestoreDC
Ellipse
SaveDC
SetROP2
SelectClipRgn
CreateSolidBrush
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
GetTextExtentPoint32A
SetRectRgn
UnrealizeObject
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
GetTextAlign
GetRgnBox
GetTextColor
SetBrushOrgEx
CreateEllipticRgn
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
CreateFontW
GetCharWidthW
CombineRgn
DPtoLP
PatBlt
CreateRectRgnIndirect
CreateFontIndirectW
Polygon
CreatePen
Polyline
CreateDCW
SetViewportExtEx
StretchDIBits
SetWindowExtEx
CloseMetaFile
DeleteDC
SetWindowOrgEx
BitBlt
CreateMetaFileW
DeleteMetaFile
SelectObject
IntersectClipRect
DeleteObject
GetDeviceCaps
GetDIBits
SelectPalette
GetObjectW
RealizePalette
GetStockObject
CopyMetaFileW
comdlg32
ChooseColorW
GetFileTitleW
winspool.drv
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetJobW
OpenPrinterW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegSetValueW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
GetFileSecurityW
RegCreateKeyW
RegCloseKey
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
ShellExecuteW
DragQueryFileW
DragFinish
SHGetFileInfoW
ExtractIconW
SHGetFolderPathW
comctl32
ord14
ord13
shlwapi
PathFindExtensionW
PathCreateFromUrlW
UrlIsW
StrCmpLogicalW
PathMatchSpecW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
oledlg
OleUIBusyW
ole32
DoDragDrop
OleSetMenuDescriptor
OleQueryLinkFromData
OleQueryCreateFromData
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleLockRunning
OleSave
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoGetClassObject
StringFromGUID2
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
CreateGenericComposite
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateDataAdviseHolder
CreateOleAdviseHolder
CoGetMalloc
OleIsRunning
OleRun
CreateItemMoniker
CoLockObjectExternal
GetRunningObjectTable
StgIsStorageFile
StgOpenStorage
CreateFileMoniker
StgCreateDocfile
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
CoRevokeClassObject
CoRegisterClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoCreateInstance
CoCreateFreeThreadedMarshaler
GetHGlobalFromStream
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
OleDestroyMenuDescriptor
oleaut32
VarDateFromStr
SafeArrayAccessData
SysAllocString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
LoadTypeLi
OleCreateFontIndirect
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
SafeArrayUnaccessData
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
uxtheme
IsThemeActive
OpenThemeData
CloseThemeData
DrawThemeBackground
DrawThemeIcon
GetThemeSysFont
wininet
InternetCloseHandle
InternetCanonicalizeUrlW
InternetOpenUrlW
InternetReadFile
InternetSetOptionW
UnlockUrlCacheEntryStream
ReadUrlCacheEntryStream
RetrieveUrlCacheEntryStreamW
HttpQueryInfoW
InternetOpenW
usp10
ScriptStringFree
ScriptFreeCache
ScriptStringOut
ScriptGetFontProperties
ScriptStringAnalyse
ScriptString_pSize
ScriptGetCMap
opengl32
glVertex2f
glClear
glClearColor
glEnd
glBegin
glColor4f
glBlendFunc
glColor4ub
glEnable
glHint
glMatrixMode
glViewport
wglCreateContext
glFlush
wglGetCurrentContext
wglDeleteContext
glLoadIdentity
wglMakeCurrent
glReadPixels
glGetString
wglGetProcAddress
wglGetCurrentDC
glu32
gluOrtho2D
ws2_32
WSASetLastError
WSAGetLastError
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 416KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ