e725234696accceac7e561114a9986b40d2e5fe5bd6df854e6053f96e5aeb2ee

Sharing

Copy URL

Twitter E-mail

General

Target

e725234696accceac7e561114a9986b40d2e5fe5bd6df854e6053f96e5aeb2ee
Size

3.5MB
MD5

2546cb3ebd2c5a2b433a07ef282e4560
SHA1

e19239c034e28efd3b7336dddb72717b1fc44a40
SHA256

e725234696accceac7e561114a9986b40d2e5fe5bd6df854e6053f96e5aeb2ee
SHA512

317ea0055a2ad5ac96b0a17f5fa9fd8463cbedd009d7da4b450ad5b7551b2173032bcfa78869350aacbc683cdcbc9be4d75a7be4fb989a46c6976b76572cd1fb
SSDEEP

98304:xqsQ3RoddUq98mqweAjfs8/GUOVaV5qTQEK3CqXlqwuLbqC5vcKQ5uPJ3l3QQiM:0DRorTqcbXEKBlqwEbdQyJ3l3Q

Score

1^/10

Malware Config

Signatures

Files

e725234696accceac7e561114a9986b40d2e5fe5bd6df854e6053f96e5aeb2ee
.exe windows:5 windows x86 arch:x86

58f6a857715e79b437dd93e1eaefd163

Code Sign

0f:29:2c:9a:db:96:3a:82:40:7f:25:3c:9c:bd:27:59
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27-07-2023 00:00

Not After

26-07-2025 23:59

Subject

SERIALNUMBER=111611-0070252,CN=EZWON INTERNET SERVICE CO.LTD,O=EZWON INTERNET SERVICE CO.LTD,L=Seongnam-si,ST=Gyeonggi-do,C=KR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130b53656f6e676e616d2d7369,1.3.6.1.4.1.311.60.2.1.2=#130b4779656f6e6767692d646f,1.3.6.1.4.1.311.60.2.1.3=#13024b52

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:e8:69:e5:5a:40:1d:7c:ce:63:80:b5:e2:0e:d4:c4:88:2e:68:60:40:1a:9d:d7:18:d0:a9:49:b7:ac:97:f5
Signer

Actual PE Digest

59:e8:69:e5:5a:40:1d:7c:ce:63:80:b5:e2:0e:d4:c4:88:2e:68:60:40:1a:9d:d7:18:d0:a9:49:b7:ac:97:f5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\admin\Desktop\newlocalserver\DeskTop\Trunk\Wedisk\Release\WeDiskUpLoad.pdb

Imports

ws2_32

socket
htons
connect
WSACleanup
WSAStartup
send
inet_addr
closesocket
WSAGetLastError
recv

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetLocaleInfoW
GetTimeZoneInformation
FatalAppExitA
GetStdHandle
GetConsoleCP
GetConsoleMode
GetDriveTypeW
CompareStringW
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
SetCurrentDirectoryW
GetCurrentDirectoryW
SetConsoleCtrlHandler
PeekNamedPipe
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
GetFileInformationByHandle
lstrlenW
MultiByteToWideChar
OutputDebugStringA
LocalFree
FormatMessageA
GetLastError
Sleep
CloseHandle
TerminateThread
WaitForSingleObject
GetTickCount
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
ResumeThread
ReleaseMutex
CreateMutexA
SuspendThread
GetVersionExA
FreeLibrary
GetProcAddress
GetStringTypeW
LCMapStringW
IsValidCodePage
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
HeapReAlloc
VirtualQuery
VirtualAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
FindFirstFileExA
GetSystemTimeAsFileTime
CreateThread
ExitThread
DecodePointer
EncodePointer
RtlUnwind
RaiseException
LocalLock
LocalUnlock
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTempPathA
GetNumberFormatA
SetErrorMode
GetDiskFreeSpaceA
GetTempFileNameA
ReplaceFileA
GetUserDefaultLCID
GetCurrentDirectoryA
LoadLibraryA
GetVersion
Process32Next
Process32First
CreateToolhelp32Snapshot
GetACP
GetOEMCP
GetPrivateProfileStringA
GetCurrentProcess
GetModuleFileNameA
GetCPInfo
GlobalFlags
GetFileTime
GetFileSizeEx
GetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SetFileAttributesA
GetFileAttributesExA
SystemTimeToFileTime
GetAtomNameA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
MoveFileA
DeleteFileA
CreateFileA
lstrcmpiA
GetStringTypeExA
FindFirstFileA
FindNextFileA
FindClose
GetPrivateProfileIntA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
CreateEventA
SetEvent
SetThreadPriority
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetThreadLocale
InterlockedIncrement
FindResourceA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
lstrlenA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
FileTimeToLocalFileTime
FileTimeToSystemTime
CopyFileA
GlobalSize
MulDiv
GetSystemInfo
ActivateActCtx
DeactivateActCtx
SetLastError
GetModuleHandleA
CreateNamedPipeA
ConnectNamedPipe
ReadFile
WriteFile
FlushFileBuffers
LocalAlloc
DisconnectNamedPipe
GetCurrentThread
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
GetWindowsDirectoryA
WritePrivateProfileStringA
CreateDirectoryA
SetFilePointer
GetSystemDirectoryA
GetDriveTypeA
WriteProfileStringA
lstrcpyA

user32

MapVirtualKeyExA
IsCharLowerA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
UnionRect
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawStateA
GetSystemMenu
SetClassLongA
DestroyAcceleratorTable
SetParent
IsZoomed
RegisterClipboardFormatA
DrawIconEx
CopyImage
GetIconInfo
NotifyWinEvent
HideCaret
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
LoadMenuA
GetMenuBarInfo
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
GetDialogBaseUnits
DestroyIcon
MessageBeep
WaitMessage
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
DeleteMenu
UnregisterClassA
SetCapture
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
RealChildWindowFromPoint
GetSysColorBrush
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
DestroyMenu
GetMenuItemInfoA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
IntersectRect
InflateRect
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
CharNextA
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
UpdateLayeredWindow
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
GetDesktopWindow
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
OffsetRect
GetNextDlgGroupItem
GetCapture
WindowFromPoint
GetWindowLongA
IsWindow
PostThreadMessageA
DrawEdge
SetRectEmpty
CopyRect
GrayStringA
DrawTextExA
TabbedTextOutA
ExitWindowsEx
GetSystemMetrics
SetCursor
ReleaseCapture
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SystemParametersInfoA
DrawAnimatedRects
ShowWindow
LoadIconW
SetForegroundWindow
EnableScrollBar
MonitorFromPoint
IsMenu
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
InSendMessage
GetTabbedTextExtentA
GetTabbedTextExtentW
GetWindowRgn
WindowFromDC
DestroyCursor
GetDCEx
SubtractRect
GetDoubleClickTime
CharUpperBuffA
LockWindowUpdate
InvalidateRect
UpdateWindow
ScreenToClient
IsIconic
SendMessageA
LoadMenuW
GetSubMenu
DrawIcon
MessageBoxA
SetWindowsHookExA
CopyIcon
GetUpdateRect
FrameRect
SendNotifyMessageA
IsClipboardFormatAvailable
SetMenuDefaultItem
RegisterWindowMessageA
CreateMenu
PostMessageA
FindWindowExA
EnumChildWindows
UnhookWindowsHookEx
GetWindowTextA
GetKeyState
GetClassInfoA
DefWindowProcA
LoadCursorA
GetCursorPos
GetParent
GetFocus
KillTimer
SetTimer
RedrawWindow
IsWindowVisible
ClientToScreen
GetWindowRect
PtInRect
FillRect
LoadBitmapA
DrawTextA
GetSysColor
DrawFocusRect
ReleaseDC
GetDC
GetClientRect
SetWindowRgn
LoadImageA
SetRect
LoadBitmapW
EnableWindow
wsprintfA
ScrollWindowEx
DrawMenuBar

gdi32

GetTextColor
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
SetArcDirection
SetColorAdjustment
GetClipRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
GetBkColor
SetRectRgn
GetMapMode
PatBlt
DPtoLP
GetRgnBox
CreateDIBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
GetCharWidthA
StretchDIBits
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateEllipticRgn
Ellipse
Polygon
SetDIBColorTable
GetDIBits
OffsetRgn
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
CopyMetaFileA
CreateDCA
GetDeviceCaps
SelectClipRgn
RoundRect
Rectangle
GetCurrentObject
PlgBlt
SetPixel
CreateFontIndirectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
Polyline
CreatePolygonRgn
CreatePen
CreateBitmap
CreateCompatibleBitmap
SetBkColor
SaveDC
SetBkMode
SetTextColor
RestoreDC
GetTextExtentPoint32A
CreateFontA
CreateRoundRectRgn
CreateSolidBrush
GetStockObject
CreateDIBSection
ExtCreateRegion
DeleteObject
DeleteDC
CreateRectRgn
CombineRgn
GetPixel
StretchBlt
BitBlt
SelectObject
CreateRectRgnIndirect
GetObjectA
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA

advapi32

RegDeleteValueA
LookupPrivilegeValueA
OpenProcessToken
GetTokenInformation
OpenThreadToken
ConvertStringSecurityDescriptorToSecurityDescriptorA
FreeSid
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
RegEnumKeyExA
GetFileSecurityA
SetFileSecurityA
RegEnumValueA
RegOpenKeyExW
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
AdjustTokenPrivileges
RegOpenKeyExA
RegSetValueA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid

shell32

SHGetMalloc
SHGetSpecialFolderPathA
SHGetFileInfoA
Shell_NotifyIconA
SHAddToRecentDocs
ExtractIconA
DragFinish
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
DragQueryFileA

comctl32

_TrackMouseEvent
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx

shlwapi

UrlUnescapeA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleIsCurrentClipboard
OleSetClipboard
CreateItemMoniker
CreateGenericComposite
CoRevokeClassObject
CoRegisterClassObject
CreateStreamOnHGlobal
CoInitializeEx
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
PropVariantCopy
CoInitialize
CoUninitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleRegEnumVerbs
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoCreateInstance
CoTaskMemFree
OleRegGetMiscStatus
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleQueryCreateFromData
OleQueryLinkFromData
OleIsRunning
GetRunningObjectTable
CoGetMalloc
CoRegisterMessageFilter
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
DoDragDrop
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
CoCreateGuid
OleGetIconOfClass
CreateOleAdviseHolder
CreateDataAdviseHolder
StgOpenStorageOnILockBytes

oleaut32

OleCreateFontIndirect
SysStringLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysAllocStringLen
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
SysStringByteLen
VariantInit
VariantChangeType
VariantCopy
VarDecFromStr
VarCyFromStr
VarBstrFromDate
SysAllocString
SysAllocStringByteLen
VariantClear
VariantTimeToSystemTime
SysFreeString

oledlg

ord8

wininet

InternetCloseHandle
InternetReadFile
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetQueryOptionA
InternetSetOptionExA
InternetSetCookieA
InternetGetCookieA
InternetQueryDataAvailable
FtpDeleteFileA
FtpRenameFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpPutFileA
FtpGetFileA
InternetErrorDlg
HttpQueryInfoA
InternetFindNextFileA
GopherFindFirstFileA
InternetGetLastResponseInfoA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
HttpEndRequestA
HttpSendRequestExA
GopherGetAttributeA
FtpOpenFileA
FtpCommandA
GopherCreateLocatorA
FtpFindFirstFileA
GopherOpenFileA
InternetOpenUrlA
InternetCanonicalizeUrlA

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58f6a857715e79b437dd93e1eaefd163

Code Sign

0f:29:2c:9a:db:96:3a:82:40:7f:25:3c:9c:bd:27:59Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

59:e8:69:e5:5a:40:1d:7c:ce:63:80:b5:e2:0e:d4:c4:88:2e:68:60:40:1a:9d:d7:18:d0:a9:49:b7:ac:97:f5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

wininet

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 516KB - Virtual size: 516KB

.data Size: 35KB - Virtual size: 64KB

.rsrc Size: 641KB - Virtual size: 640KB

.reloc Size: 184KB - Virtual size: 183KB

0f:29:2c:9a:db:96:3a:82:40:7f:25:3c:9c:bd:27:59
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

59:e8:69:e5:5a:40:1d:7c:ce:63:80:b5:e2:0e:d4:c4:88:2e:68:60:40:1a:9d:d7:18:d0:a9:49:b7:ac:97:f5
Signer

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 516KB - Virtual size: 516KB

.data
Size: 35KB - Virtual size: 64KB

.rsrc
Size: 641KB - Virtual size: 640KB

.reloc
Size: 184KB - Virtual size: 183KB