0f33a37620ca4d601f082b2e21cf3f7435841c33b171cd5eb6b18a2838e04096

Sharing

Copy URL Twitter E-mail

General

Target

0f33a37620ca4d601f082b2e21cf3f7435841c33b171cd5eb6b18a2838e04096
Size

10.1MB
MD5

d3b6c32525ac69f2e4c9311b2ea8035a
SHA1

057dad86d840bdddc9995354fcedbd55a5c5f0eb
SHA256

0f33a37620ca4d601f082b2e21cf3f7435841c33b171cd5eb6b18a2838e04096
SHA512

7dd5f11f6a65cfcee0370e7a1ed1d908330463571afbb2d9a018199d5571f878069c42c042c817e29e1230a668eecc8ac8611e23971caad1607b115b6e6823d3
SSDEEP

196608:Z5iQ7WO/Y8czF4sTz2MIq2DIIznllXFgJguaOdnOgBcuwMyOOO5MDMe8z4L0iqe/:Z/7WOQ8g4O25ng2kYawMyBO59Y0be8Q

Score

1^/10

Malware Config

Signatures

Files

0f33a37620ca4d601f082b2e21cf3f7435841c33b171cd5eb6b18a2838e04096
.exe windows:5 windows x86 arch:x86

9e8f5eded8670cdaa2db0f94c0c68856

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:0e:e6:70:70:df:df:9e:5b:ea:df:62:8e:ea:6f:9d
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27/04/2023, 00:00

Not After

23/07/2026, 23:59

Subject

CN=sw4you GmbH,O=sw4you GmbH,L=Braunweiler,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:0e:e6:70:70:df:df:9e:5b:ea:df:62:8e:ea:6f:9d
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27/04/2023, 00:00

Not After

23/07/2026, 23:59

Subject

CN=sw4you GmbH,O=sw4you GmbH,L=Braunweiler,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:3c:36:fb:61:af:e5:b5:a8:57:72:b7:7d:33:8c:f7:43:a8:ec:88:51:d6:ae:1b:fd:2f:2f:6a:17:ac:ab:c4
Signer

Actual PE Digest

7e:3c:36:fb:61:af:e5:b5:a8:57:72:b7:7d:33:8c:f7:43:a8:ec:88:51:d6:ae:1b:fd:2f:2f:6a:17:ac:ab:c4

Digest Algorithm

sha256

PE Digest Matches

false

26:63:f4:0b:6e:91:68:0d:a8:89:c1:df:e4:bc:f0:75:e1:61:74:6c
Signer

Actual PE Digest

26:63:f4:0b:6e:91:68:0d:a8:89:c1:df:e4:bc:f0:75:e1:61:74:6c

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\hc\Hrdcpy32\Release\Hardcopy.pdb

Imports

kernel32

GetConsoleMode
ReadConsoleW
GetConsoleCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDriveTypeW
SetFilePointerEx
OutputDebugStringW
GetStringTypeW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
WriteConsoleW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
GetProcessHeap
CreateDirectoryW
MoveFileExW
GetTimeZoneInformation
DeleteFileW
IsValidCodePage
SetConsoleCtrlHandler
GetStdHandle
FatalAppExitA
CreateSemaphoreW
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
HeapReAlloc
VirtualQuery
VirtualAlloc
GetSystemInfo
ExitThread
HeapAlloc
SetCurrentDirectoryA
SetEnvironmentVariableA
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
AreFileApisANSI
GetModuleHandleExW
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
SearchPathA
GetWindowsDirectoryA
LocalUnlock
LocalLock
FindResourceExW
GetACP
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetAtomNameA
LocalReAlloc
LocalAlloc
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
DeleteFileA
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GetProfileIntA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
SystemTimeToFileTime
FileTimeToSystemTime
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
VirtualProtect
GetVersionExA
CompareStringA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
GetSystemDirectoryW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
FormatMessageA
LocalFree
GlobalSize
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
OutputDebugStringA
GetFileAttributesW
ResumeThread
SuspendThread
SetThreadPriority
SetEvent
SetErrorMode
LoadLibraryExA
InterlockedExchange
RaiseException
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
MoveFileA
CopyFileA
GetVersion
CreateFileMappingA
MapViewOfFile
GetPrivateProfileStringA
lstrcpynA
FindResourceA
ExpandEnvironmentStringsA
GetCurrentDirectoryA
CreateEventA
ResetEvent
CreateThread
OpenProcess
MultiByteToWideChar
GlobalGetAtomNameA
GetCommandLineA
lstrcmpA
Beep
WinExec
WaitForSingleObject
GetModuleFileNameA
CreateMutexA
ReleaseMutex
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
FreeLibrary
GetTickCount
MulDiv
GlobalHandle
lstrcmpiA
WideCharToMultiByte
GetComputerNameA
FindNextFileA
FindFirstFileA
FindResourceW
lstrlenA
CompareFileTime
FindClose
SizeofResource
LoadResource
Sleep
SetLastError
GetLastError
LockResource
CreateFileA
GetTempPathA
LoadLibraryA
CloseHandle
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetDateFormatW
GetProcAddress

user32

MessageBeep
LoadAcceleratorsW
LoadMenuW
GetTabbedTextExtentW
InSendMessage
PostThreadMessageA
CopyAcceleratorTableA
DrawStateA
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
TrackMouseEvent
SetClassLongA
GetMenuDefaultItem
GetNextDlgGroupItem
EnableScrollBar
HideCaret
InvertRect
WaitMessage
LoadImageW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuA
IsCharLowerA
MapVirtualKeyExA
RegisterClipboardFormatA
CharUpperBuffA
UpdateLayeredWindow
FrameRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
GetUpdateRect
SubtractRect
SendNotifyMessageA
GetComboBoxInfo
GetWindowRgn
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetWindowPlacement
GetWindowPlacement
IsChild
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetMessageTime
GetMessagePos
IsDialogMessageA
GetWindowTextLengthA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SetFocus
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetFocus
EndPaint
BeginPaint
TabbedTextOutA
GrayStringA
DrawTextExA
GetMenuStringA
UnregisterClassA
CallNextHookEx
SetWindowsHookExA
ValidateRect
UnhookWindowsHookEx
FindWindowExA
DestroyCursor
DestroyIcon
ShowWindow
GetIconInfo
LoadBitmapW
DrawTextW
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
GetDialogBaseUnits
IntersectRect
AdjustWindowRectEx
GetActiveWindow
GetClassLongA
DestroyMenu
GetMenuState
GetMenu
LoadMenuA
LockWindowUpdate
SetParent
IsRectEmpty
MapWindowPoints
GetDCEx
DeleteMenu
GetTopWindow
GetCapture
EndDeferWindowPos
DeferWindowPos
GetTabbedTextExtentA
DrawFrameControl
GetDlgItem
SetWindowLongA
CallWindowProcA
DefWindowProcA
LoadImageA
LoadIconA
RemoveMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
CheckMenuItem
CreateMenu
GetDlgCtrlID
IsZoomed
SetWindowPos
SetLayeredWindowAttributes
DestroyWindow
CreateWindowExA
DrawIconEx
LoadCursorW
LoadCursorA
LoadBitmapA
GetLastActivePopup
GetWindowThreadProcessId
GetSysColorBrush
GetSysColor
GetCursor
RedrawWindow
WindowFromDC
SetForegroundWindow
GetForegroundWindow
DrawTextA
InsertMenuA
EnableMenuItem
GetSystemMenu
KillTimer
SetTimer
GetKeyState
IsIconic
AttachThreadInput
RegisterWindowMessageA
LoadStringA
FindWindowA
GetParent
WindowFromPoint
GetAsyncKeyState
GetMenuBarInfo
EnumDisplayMonitors
MonitorFromPoint
EnumDisplaySettingsA
GetWindow
EnumWindows
EqualRect
UnionRect
ChildWindowFromPointEx
ScreenToClient
ClipCursor
ShowCursor
GetWindowTextA
PostQuitMessage
GetMessageA
SetCursorPos
GetCursorPos
CreatePopupMenu
AppendMenuA
SystemParametersInfoA
GetDesktopWindow
OffsetRect
SetCursor
ReleaseCapture
SetCapture
IsWindow
DrawEdge
SetRect
ShowScrollBar
GetScrollRange
SetScrollRange
UpdateWindow
PtInRect
PostMessageA
FillRect
DrawFocusRect
EnableWindow
GetScrollInfo
GetClassNameA
EnumChildWindows
SetRectEmpty
IsWindowVisible
GetMonitorInfoA
MonitorFromWindow
LoadIconW
GetWindowLongA
InflateRect
CopyRect
ClientToScreen
GetWindowRect
GetClientRect
IsClipboardFormatAvailable
CopyImage
NotifyWinEvent
RealChildWindowFromPoint
CharUpperA
SetWindowRgn
ShowOwnedPopups
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
SetActiveWindow
LoadAcceleratorsA
GetMenuItemInfoA
MapVirtualKeyA
GetKeyNameTextA
MapDialogRect
InvalidateRect
ReleaseDC
GetWindowDC
GetDC
DrawIcon
GetSystemMetrics
keybd_event
BringWindowToTop
SendMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
wsprintfA
MessageBoxA
EmptyClipboard
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
WinHelpA
SetScrollInfo
RemovePropA
SetPropA
GetPropA
OpenClipboard
CloseClipboard
SetClipboardData
GetScrollPos
SetScrollPos
BeginDeferWindowPos
ScrollWindow
TranslateAcceleratorA

gdi32

StretchDIBits
Polyline
GetCharWidthA
RectInRegion
GetStockObject
GetTextExtentPointA
GetTextMetricsA
CreateBitmap
StretchBlt
CreateDIBitmap
CreatePatternBrush
CopyMetaFileA
CreateDIBPatternBrushPt
Escape
ExcludeClipRect
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
SetBkMode
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
SetRectRgn
DPtoLP
GetBkColor
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
UnrealizeObject
EnumFontFamiliesA
GetTextCharsetInfo
EnumFontFamiliesExA
GetROP2
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPoint32W
GetWindowOrgEx
GetTextFaceA
Polygon
GetCurrentObject
CreatePalette
GetPaletteEntries
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
GetDIBits
SetDIBColorTable
GetRgnBox
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPixelV
OffsetRgn
GetTextExtentPoint32A
GetTextColor
GetPixel
CreateFontA
SetPixel
ExtTextOutA
PatBlt
CreateHatchBrush
CreatePolygonRgn
CreateRoundRectRgn
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
Arc
GetNearestPaletteIndex
GetNearestColor
CreateSolidBrush
CreatePen
GetObjectA
SelectPalette
SelectObject
RealizePalette
Rectangle
GetSystemPaletteEntries
GetDeviceCaps
GetClipBox
DeleteObject
DeleteDC
CreateFontIndirectA
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
TextOutA
BitBlt

msimg32

TransparentBlt
AlphaBlend

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
RegFlushKey
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
RegSetValueExA
RegDeleteValueA

shell32

SHGetDesktopFolder
DragAcceptFiles
ShellExecuteExA
Shell_NotifyIconA
DragQueryFileA
DragFinish
SHGetFileInfoA
SHBrowseForFolderA
SHGetMalloc
SHAppBarMessage
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ExtractIconA
SHAddToRecentDocs

comctl32

ord8
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetImageInfo
ImageList_Remove
ImageList_GetIcon
ImageList_AddMasked
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock

shlwapi

PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindExtensionA
StrFormatKBSizeA

ole32

CoFreeUnusedLibraries
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
CoGetClassObject
OleQueryCreateFromData
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
CoInitialize
CoUninitialize
OleQueryLinkFromData
OleSetMenuDescriptor
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleGetClipboard
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
OleGetIconOfClass
OleLockRunning
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
CreateGenericComposite
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleIsRunning
OleRun
GetRunningObjectTable
CreateItemMoniker
CreateFileMoniker
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegEnumVerbs
OleRegGetMiscStatus
CreateStreamOnHGlobal
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CoCreateGuid
PropVariantCopy
CoCreateInstance
CoInitializeEx
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
WriteFmtUserTypeStg
ReadFmtUserTypeStg
WriteClassStg
CoRegisterClassObject
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
ReadClassStg

oledlg

ord8

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdipFillPath
GdipFillEllipseI
GdipFillRectangleI
GdipDrawPath
GdipDrawEllipseI
GdipDrawRectangleI
GdipDrawLineI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetPenDashStyle
GdipSetPenBrushFill
GdipSetPenColor
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipCreateLineBrushFromRectI
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathArcI
GdipAddPathLineI
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdiplusStartup
GdipFree
GdipAlloc
GdipDrawImageI

winmm

PlaySoundA

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Exports

Exports

extern_bLogging
gbIstGK
gbIstRegistriert
ghFrameWnd
giLastLINE
gszLastCond
gszLastFILE
gszLastFUNCTION
gszLastSettings
myInvalidParameterHandler

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e8f5eded8670cdaa2db0f94c0c68856

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:0e:e6:70:70:df:df:9e:5b:ea:df:62:8e:ea:6f:9dCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:0e:e6:70:70:df:df:9e:5b:ea:df:62:8e:ea:6f:9dCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

7e:3c:36:fb:61:af:e5:b5:a8:57:72:b7:7d:33:8c:f7:43:a8:ec:88:51:d6:ae:1b:fd:2f:2f:6a:17:ac:ab:c4Signer

26:63:f4:0b:6e:91:68:0d:a8:89:c1:df:e4:bc:f0:75:e1:61:74:6cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

advapi32

shell32

comctl32

shlwapi

ole32

oledlg

gdiplus

winmm

oleacc

imm32

Exports

Exports

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 668KB - Virtual size: 668KB

.data Size: 47KB - Virtual size: 114KB

.rsrc Size: 6.6MB - Virtual size: 6.6MB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:0e:e6:70:70:df:df:9e:5b:ea:df:62:8e:ea:6f:9d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:0e:e6:70:70:df:df:9e:5b:ea:df:62:8e:ea:6f:9d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

7e:3c:36:fb:61:af:e5:b5:a8:57:72:b7:7d:33:8c:f7:43:a8:ec:88:51:d6:ae:1b:fd:2f:2f:6a:17:ac:ab:c4
Signer

26:63:f4:0b:6e:91:68:0d:a8:89:c1:df:e4:bc:f0:75:e1:61:74:6c
Signer

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 668KB - Virtual size: 668KB

.data
Size: 47KB - Virtual size: 114KB

.rsrc
Size: 6.6MB - Virtual size: 6.6MB