a4426384145a75112325b0d397a898ab

Sharing

Copy URL Twitter E-mail

General

Target

a4426384145a75112325b0d397a898ab
Size

808KB
MD5

a4426384145a75112325b0d397a898ab
SHA1

c86fda379168299c2e960223b9c976639b7482c6
SHA256

a7ba3f2c9997ee0def45adbb85c800451ea348c76dfda0e2b3b248ef096a6811
SHA512

930c0f88d7077461f99cf57fb86bba5a466378c90cdef32d11338420fc792927fd78626f2a3a6bafff008671c9a35b4f4672c3f655d2102eedd1f60b69ac3c5a
SSDEEP

24576:W6JLpq/w/5zrbZsFM3ZwS85+jA/HwbVq2/9Ii2O:MSXUwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4426384145a75112325b0d397a898ab

Files

a4426384145a75112325b0d397a898ab
.dll windows:4 windows x86 arch:x86

7e04d4ed3e36efb596261ed357f6c6c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

u32comm

u32IsEscPressed
c32SetDLLErrInfo

u32base

buf32GetWHU
buf32Lock
buf32Line
buf32Unlock

kernel32

lstrcpyA
LoadLibraryA
lstrlenA
GetProcAddress
GlobalAlloc
HeapSize
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
HeapReAlloc
GlobalFree

user32

CopyRect
IntersectRect
IsRectEmpty
InflateRect
GetKeyState
PtInRect
GetCapture
MessageBeep
ReleaseCapture
CharNextExA
SetRect
OffsetRect
GetAsyncKeyState
UnionRect
SetRectEmpty

gdi32

TranslateCharsetInfo
ExcludeClipRect
GetCharABCWidthsFloatA
GetCharABCWidthsA
SetPixel
PolyBezierTo
CreateRectRgnIndirect
CombineRgn
SelectClipRgn
GetGlyphOutlineA
GetKerningPairsA
GetOutlineTextMetricsA
CreateDCA
CreateFontIndirectA
DeleteDC
GetTextMetricsA
SetROP2
MoveToEx
LineTo
CreatePen
SelectObject
GetStockObject
Rectangle
DeleteObject

msvcrt

_CIpow
memmove
floor
__CxxFrameHandler
_HUGE
_purecall
sscanf
strtok
ceil
ldexp
__dllonexit
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
_onexit
malloc
realloc
_msize
free
vsprintf
_ftol
??3@YAXPAX@Z
??2@YAPAXI@Z
_CIacos
strchr
modf
calloc
qsort
_CIasin
_CIfmod

msvcirt

_mtlock
??1ios@@UAE@XZ
??1ifstream@@UAE@XZ
??0ifstream@@QAE@PBDHH@Z
?openprot@filebuf@@2HB
_mtunlock
??_Difstream@@QAEXXZ
?close@ifstream@@QAEXXZ
??5istream@@QAEAAV0@AAG@Z
??5istream@@QAEAAV0@AAN@Z
?get@istream@@IAEAAV1@PADHH@Z

Exports

Exports

?BackupDuplicate@@YAHHPAX@Z
?BackupSelectMove@@YAHHPAX@Z
?BackupSelected@@YAHHPAX@Z
?UlPathDoTrimmedRibbon@@YAXH@Z
?UlPathIsTrimmedRibbonEnabled@@YAHXZ
AddRotation
DbToFix
FixToDb
IsSameSubpath
IsSameWrapInfo
Matrix3X3
ORMatrix
PtfxAdd
RotatePoint3D
ShadingGammaToMap
UlPath3DWireFrame
UlPathABufRender
UlPathAddBiBezierEnvelope
UlPathAddBiBezierEnvelopeV
UlPathAddBiLinearEnvelope
UlPathAddBiLinearEnvelopeV
UlPathAddPathGroup
UlPathAddPoint
UlPathAddPrimitive
UlPathAddWrapPath
UlPathAdjMetallicIllum
UlPathAdjPhongIllum
UlPathAlign
UlPathAllPathSelected
UlPathAppendEmptySubpath
UlPathArrowHeadVMap
UlPathAssignActivePath
UlPathAssignOutlineInfo
UlPathAssignSelectedPath
UlPathAssignSelectedPathBlindly
UlPathBackupAction
UlPathBiCubic
UlPathBiCubicV
UlPathBiLinear
UlPathBufAlloc
UlPathBufDuplicate
UlPathBufFree
UlPathBufGetWHU
UlPathBufLineRead
UlPathBufLock1
UlPathBufSize
UlPathBufUnlock1
UlPathBumpIt
UlPathCanReuseLastFreehandDataPoints
UlPathCancelPrimitive
UlPathChainPaths
UlPathChainUlPath
UlPathCleanSelectStatusClipboard
UlPathComposePureBezierSubpath
UlPathConvertSelectedSegment
UlPathCoordStruct
UlPathCopySelectStatus
UlPathCreate
UlPathCreateApproximateBezier
UlPathCreateBezierFromPointDBs
UlPathCreateFromCircle
UlPathCreateFromPoints
UlPathCreateFrom_Begin
UlPathCreateFrom_End
UlPathCreateRichEditText
UlPathCreateRichEditText2
UlPathCreateText
UlPathCreateZBuffer
UlPathCreateZBufferFrom3DTransform
UlPathCropDB
UlPathCutWithLine
UlPathCutWithLineX
UlPathCutWithPath
UlPathDeComposeSubpath
UlPathDeSelectAll
UlPathDelete
UlPathDeleteCoord
UlPathDeleteCoordStruct
UlPathDeleteLink
UlPathDeleteLinkLastSegment
UlPathDeleteNodeFromList
UlPathDeletePtr
UlPathDeletePtrSingle
UlPathDeselectPts
UlPathDisjoin
UlPathDisjoinAll
UlPathDomainRangeBiCubic
UlPathDomainRangeBiCubicV
UlPathDomainRangeBilinear
UlPathDomainRangeWrap
UlPathDraw
UlPathDrawActiveNode
UlPathDrawFreehandBezier
UlPathDrawInactiveNode
UlPathDrawLastFreehandDataPoints
UlPathDrawNodes
UlPathDrawNodesOnUnselectedSegments
UlPathDrawNodesTurnOn
UlPathDrawSegment
UlPathDrawSelected
UlPathDrawSelectedSegments
UlPathDrawSmallNode
UlPathDrawSmoothBezier
UlPathDrawSubpathsWithGDIXOR
UlPathDuplicate
UlPathDuplicatePtr
UlPathDuplicatePtrSingle
UlPathExchangeSubpathInTable
UlPathExtractSingleSubPath
UlPathFind
UlPathFindGroupName
UlPathFindGroups
UlPathFlatten
UlPathGet3DMiniMaxRect
UlPathGetAllMiniMaxRect
UlPathGetArrowWidthHeight
UlPathGetBezierPointDBs
UlPathGetBiBezierEnvelope
UlPathGetBiBezierEnvelopeV
UlPathGetBiLinearEnvelope
UlPathGetCS
UlPathGetCoord
UlPathGetDoubleMiniMaxRect
UlPathGetDoubleRectNoMargin
UlPathGetDoubleShapeRectNoMargin
UlPathGetEnvelopeWrapType
UlPathGetFreehandAccuracy
UlPathGetHighlightMask
UlPathGetLength
UlPathGetLength2
UlPathGetLengthPercentageByPoint
UlPathGetLineArrowBody
UlPathGetMargin
UlPathGetMatHandle
UlPathGetMaxDataPnts
UlPathGetMiniMaxRect
UlPathGetNearestPointFromPoint
UlPathGetOutlineInfo
UlPathGetPointByLengthPercentage
UlPathGetPointPosition
UlPathGetPointsNumber
UlPathGetPolySide
UlPathGetPrimitive
UlPathGetPrimitiveMaxDist
UlPathGetRSRHandle
UlPathGetRealRect
UlPathGetRect
UlPathGetRectangleRoundness
UlPathGetSegmentType
UlPathGetSelPtListCount
UlPathGetSelState
UlPathGetSelectedGroupsNumber
UlPathGetSelectedRect
UlPathGetSelectedSegmentType
UlPathGetSmoothBezierSmoothness
UlPathGetSubPathWithSelectedSegment
UlPathGetSubpathsFlagNumber
UlPathGetSubpathsNumber
UlPathGetURAction
UlPathGetUnselectedRect
UlPathGlyphToBuf
UlPathHasBoolPath
UlPathHasPolyPath
UlPathHasSelectedBoolPath
UlPathHasSelectedPoint
UlPathHasSelectedSegment
UlPathHide
UlPathHideSegment
UlPathHideSelected
UlPathHideSelectedSegments
UlPathHitAct
UlPathImport
UlPathInfo
UlPathInit
UlPathInvertSubpaths
UlPathIsAllPathsSelected
UlPathIsBoolOperand
UlPathIsBoolResult
UlPathIsKeepPrimitive
UlPathIsOnlyPrimitive
UlPathIsSelected
UlPathIsSimplestSubpath
UlPathIsSingleOpenPath
UlPathIsWrapBaseline
UlPathJoin
UlPathJoinAll
UlPathMakeACopyOfBaseline
UlPathMat
UlPathMouseProcDraw
UlPathMovePaths
UlPathMovePathsByPtfx
UlPathNew
UlPathNewCoordStruct
UlPathOffset
UlPathOffsetExact
UlPathOutputSubpathInfo
UlPathPaintMem
UlPathPaintMem1
UlPathPickSegment
UlPathPolyAdd
UlPathPolyGet
UlPathPolyGetSides
UlPathPolyGetStyle
UlPathPolySetStyle
UlPathPolygonDrawWithGDIXOR
UlPathPrimitive
UlPathPtInRect
UlPathPtOn
UlPathPtWndToImage
UlPathPurge
UlPathPushBackNewS
UlPathR2VToUlPath
UlPathRectClip
UlPathRectClipPt
UlPathRectWndToImage
UlPathRedo
UlPathReflectIt
UlPathRenderArrowHead
UlPathResizeSlantRotate
UlPathRotateAboutCenter
UlPathSameUR
UlPathScaleCentered
UlPathScrollDB
UlPathSelectWrapBaseline
UlPathSelectedPointsCanBeDelete
UlPathSelectedSegmentCanBeConverted
UlPathSelectedSegmentCanBeConvertedToCurve
UlPathSelectedSegmentCanBeConvertedToLine
UlPathSelectedToView
UlPathSelectedToView3
UlPathSeparateBaselineFromTable
UlPathSeparateSelectedPathFromTable
UlPathSetFreehandAccuracy
UlPathSetMetallicEffect
UlPathSetOutlineInfo
UlPathSetPathFlags
UlPathSetPolyStyle
UlPathSetRectangleRoundness
UlPathSetSmoothBezierSmoothness
UlPathSetUndoLimit
UlPathShadeMetallic
UlPathShadeMultiMetallic
UlPathShadeMultiPhong
UlPathShadePhong
UlPathSingleSelectPath
UlPathSize
UlPathSplitText
UlPathSplitTextDelREandPTArray
UlPathStretch
UlPathSubdivide
UlPathTblCutWithLine
UlPathTblCutWithLineX
UlPathTblCutWithPath
UlPathTblDelete
UlPathTblDeletelpDB
UlPathTblIsValid
UlPathTblRepaintNodes
UlPathTo3D
UlPathToBuf
UlPathToPartialBuf
UlPathToSubBuf
UlPathToSubBufPartial
UlPathTransparentMask
UlPathURFree
UlPathUlPathGetURInfo
UlPathUnFlatten
UlPathUndo
UlPathUnpickSegment
UlPathUpdateLastFreehandDataPoints
UlPathUpdateLastFreehandPath
UlPathVMap
UlPathVMapPartial
UlPathWrap
UlPathWrapAndUpdate
UlPathWrapGetTruncatePosX
UlProject2DTO3D
UlpathChangeLightNormal
UlpathPasteSelectStatus
VThitaGetMatrix
ubCanBoolCmd
ubConvertSelectedSegment
ubCopyBoolMgr
ubCount
ubCreateBoolMgr
ubDeleteDCEList
ubDeleteUlPathTbl
ubDestroyBoolMgr
ubDrawResult
ubDrawSelectedResult
ubDuplicateUlPathTbl
ubEraseResult
ubEraseSelectedResult
ubExportResultUlPathList
ubExportResultUlPathTbl
ubFlatten
ubGetBoolCmd
ubGetSelectedRect
ubHitOnly
ubRefreshLazy
ubReplaceOperandLazy
ubRunBoolCmd
ubSelectOperands
ubSetEvenOdd
ubSetPolySideUlPathList
ubSetPolySideUlPathTbl
ubUnFlatten

Sections

.text
Size: 660KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e04d4ed3e36efb596261ed357f6c6c6

Headers

File Characteristics

Imports

u32comm

u32base

kernel32

user32

gdi32

msvcrt

msvcirt

Exports

Exports

Sections

.text Size: 660KB - Virtual size: 657KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 171KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 660KB - Virtual size: 657KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 171KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 24KB - Virtual size: 23KB