spopr[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

spopr.exe
Size

15.6MB
MD5

96635acc38e3549a0ba2a180d6d51e79
SHA1

6a15b50cad92bcbb533512cc756b54caa00ba54e
SHA256

cfecdd4542e1ef6a45ccafea603be0dc48610ff20377526344854fcfbc7b2356
SHA512

c87e9e49246493f98031f7bd8a24e8df1a0fe245e87ba2bbee2fbdc54176bb2310cc21d881c2b8e4af2b6098efeffe7b0debf386e94b01554b43ffd19197284e
SSDEEP

98304:cSuAzAl4/8AyLvSxwlKMBoNjBXuRedMxS0OuPOvtiUBG42OXfW9Q3lU7XzEHcFvz:cSueAwtGbToNB8VOvH2xQ1WDUc1uAUy

Score

1^/10

Malware Config

Signatures

Files

spopr.exe
.exe windows:6 windows x64 arch:x64

f8c312c3f54a55a0fcf76b0cf47d77ee

Code Sign

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

16-07-2036 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04-03-2014 00:00

Not After

03-03-2024 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1d:0a:be:28:7b:eb:3a:bf:71:bc:3d:6f:fb:df:09:f5
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01-07-2019 00:00

Not After

29-06-2022 23:59

Subject

SERIALNUMBER=147288,CN=Stellar Information Technology Private Limited,O=Stellar Information Technology Private Limited,L=Gurgaon.,ST=Haryana,C=IN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130847757267616f6e2e,1.3.6.1.4.1.311.60.2.1.2=#130748617279616e61,1.3.6.1.4.1.311.60.2.1.3=#1302494e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:81:48:e5:67:06:ac:ac:43:9f:21:48:7d:20:ce:51:6c:3f:85:ad
Signer

Actual PE Digest

0c:81:48:e5:67:06:ac:ac:43:9f:21:48:7d:20:ce:51:6c:3f:85:ad

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SPOPR V11.0.0.1\03-3-21\StellarPhoenixOutlookPstRepair\x64\Release\StellarPhoenixOutlookPstRepair.pdb

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
IsValidLocale
IsDebuggerPresent
GetTimeZoneInformation
GetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
SetStdHandle
MoveFileExW
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
RtlPcToFileHeader
RtlUnwindEx
ExitProcess
lstrlenW
GetDateFormatW
lstrcpynW
EnumSystemLocalesW
GetSystemDefaultLCID
GetTimeFormatW
GetStringTypeW
WriteConsoleW
CreateThread
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SearchPathW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
GetCurrentDirectoryW
SetErrorMode
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
VirtualProtect
GetUserDefaultLCID
GetStartupInfoW
ReplaceFileW
GetTempFileNameW
GetDiskFreeSpaceW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
GetCurrentThread
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileAttributesExW
GetFileAttributesW
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
FindFirstFileW
GetShortPathNameW
GetFullPathNameW
FlushFileBuffers
SetThreadPriority
CreateEventW
SetEvent
GlobalGetAtomNameW
LocalAlloc
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FreeResource
GetThreadLocale
lstrcmpA
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
OutputDebugStringA
SetLastError
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
ExpandEnvironmentStringsA
GetTickCount
SystemTimeToFileTime
GetLocalTime
UnmapViewOfFile
ReadFile
SetFilePointer
GetFileSize
GetFileInformationByHandle
WaitForSingleObject
GetVersionExW
CreateMutexW
GetModuleFileNameA
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
GetSystemTime
ExpandEnvironmentStringsW
LocalFree
OutputDebugStringW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetComputerNameW
FormatMessageW
GetACP
CopyFileW
TerminateProcess
GetExitCodeProcess
OpenProcess
GetCurrentProcessId
LoadLibraryW
FreeLibrary
LoadLibraryA
SetFileAttributesW
CreateDirectoryW
CompareStringW
TerminateThread
GetExitCodeThread
GetDriveTypeW
GetLogicalDrives
FileTimeToLocalFileTime
SuspendThread
lstrcatW
ResumeThread
MulDiv
lstrcpyW
GetModuleFileNameW
CloseHandle
WriteFile
GetLastError
CreateFileW
GetFileSizeEx
GetTempPathW
DeleteFileW
GetModuleHandleW
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
FindClose
FindNextFileW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LCMapStringW

user32

SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
SetWindowsHookExW
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
EqualRect
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
RegisterWindowMessageW
SendDlgItemMessageA
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
GetLastActivePopup
UnhookWindowsHookEx
MapVirtualKeyW
CopyImage
UnionRect
GetSystemMenu
SubtractRect
SendNotifyMessageW
MonitorFromRect
CreateMenu
GetKeyNameTextW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
GetFocus
SetFocus
GetDlgCtrlID
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
SetDlgItemTextW
LoadAcceleratorsW
TranslateAcceleratorW
CreatePopupMenu
DestroyMenu
InsertMenuItemW
DestroyIcon
UnpackDDElParam
ReuseDDElParam
CharNextW
CharUpperW
CopyAcceleratorTableW
InvalidateRgn
GetMenuItemInfoW
WindowFromPoint
GetDlgItem
SetWindowPos
MoveWindow
IsWindow
RemoveMenu
AppendMenuW
InsertMenuW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
GetNextDlgGroupItem
MessageBeep
ShowOwnedPopups
GetAsyncKeyState
DrawIcon
BringWindowToTop
WindowFromDC
SendMessageW
InvalidateRect
SetDlgItemTextA
EnableWindow
LoadCursorW
GetClientRect
UpdateWindow
GetParent
GetSysColorBrush
RealChildWindowFromPoint
GetDialogBaseUnits
GetWindowRect
SetActiveWindow
SetRectEmpty
SetRect
FrameRect
InflateRect
IntersectRect
IsRectEmpty
GetSysColor
SystemParametersInfoW
GetSystemMetrics
GetDC
ReleaseDC
SetCapture
RedrawWindow
PtInRect
CountClipboardFormats
GetWindowContextHelpId
SetCaretPos
GetCaretPos
ShowCaret
DestroyCaret
GetClipboardData
SetClassLongW
GetClassLongW
OffsetRect
ReleaseCapture
GetCursorPos
ScreenToClient
SetCursor
GetCapture
SetTimer
GetKeyState
KillTimer
ShowWindow
LoadStringW
FillRect
wsprintfW
PostQuitMessage
LoadBitmapW
LoadMenuW
GetSubMenu
EnableMenuItem
LoadImageW
MessageBoxW
SetWindowRgn
FindWindowW
GetWindowThreadProcessId
PostMessageW
HideCaret
DestroyCursor
GetMessagePos
CopyRect
ClientToScreen
GetDesktopWindow
IsWindowVisible
UnregisterClassW
MessageBoxA
DispatchMessageA
DispatchMessageW
TranslateMessage
GetMessageA
GetMessageW
IsWindowUnicode
PeekMessageW
MsgWaitForMultipleObjectsEx
DrawFrameControl
DrawTextW
CheckMenuItem
ShowScrollBar
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetWindowRgn
DefMDIChildProcW
DefFrameProcW
TranslateMDISysAccel
DeleteMenu
SetParent
IsClipboardFormatAvailable
GetTabbedTextExtentW
PostThreadMessageW
GetMenuDefaultItem
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongPtrW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
IsZoomed
SetCursorPos
CopyIcon
LockWindowUpdate
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
GetUpdateRect
EnumChildWindows
DrawMenuBar
TrackMouseEvent

gdi32

OffsetClipRgn
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
StartDocW
SetArcDirection
ExtCreatePen
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
GetBkColor
GetTextColor
LineTo
GetTextExtentPoint32W
CreateEllipticRgn
Ellipse
LPtoDP
GetTextMetricsW
GetCharWidthW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
CreateRoundRectRgn
EndDoc
AbortDoc
Rectangle
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
CreateRectRgnIndirect
CreateDCW
CopyMetaFileW
SetBkColor
SetTextColor
GetDeviceCaps
DeleteObject
Polygon
CreateCompatibleBitmap
CreateDIBSection
CreateRectRgn
BitBlt
CreateSolidBrush
SetBrushOrgEx
CreateCompatibleDC
GetObjectW
PatBlt
SelectObject
CreateFontIndirectW
StretchDIBits
SetBkMode
GetObjectType
CreateFontW
GetRgnBox
Polyline
SetPixelFormat
ChoosePixelFormat
GetRegionData
PolyBezier
CreatePolyPolygonRgn
CreateEllipticRgnIndirect
Arc
UnrealizeObject

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ord203
EnumPrintersW
OpenPrinterW
ClosePrinter
DocumentPropertiesW
DeviceCapabilitiesW

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
IsTextUnicode
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegEnumValueW
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegSetValueW
RegEnumKeyW
RegQueryValueW
GetFileSecurityW
SetFileSecurityW
RegCloseKey

shell32

ExtractIconExW
SHGetDataFromIDListW
DragAcceptFiles
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
ExtractIconW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAddToRecentDocs
SHGetSpecialFolderLocation
ShellExecuteExW
SHAppBarMessage
SHGetDesktopFolder
ShellExecuteW

comctl32

_TrackMouseEvent
ImageList_GetImageCount
ImageList_Remove
ImageList_ReplaceIcon
ImageList_AddMasked
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_SetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Draw
ImageList_Add

shlwapi

PathStripToRootW
PathFindExtensionW
UrlUnescapeW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindFileNameW
PathIsUNCW

uxtheme

DrawThemeText
DrawThemeBackground
DrawThemeParentBackground
OpenThemeData
GetThemeSysColor
GetWindowTheme
IsAppThemed
CloseThemeData
GetThemePartSize
GetCurrentThemeName
GetThemeColor
IsThemeBackgroundPartiallyTransparent

ole32

CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
OleLockRunning
OleSetMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitializeEx
OleRun
CLSIDFromProgID
CoDisconnectObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateItemMoniker
CreateStreamOnHGlobal
CLSIDFromString
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateGuid
CoUninitialize
CoCreateInstance
CoInitialize
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
OleDraw
OleCreate

oleaut32

VarBstrCmp
LoadTypeLi
OleCreateFontIndirect
VarBstrFromDate
VariantCopy
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
SysStringLen
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SysFreeString
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
SysAllocString
SysAllocStringLen
VariantInit
VariantClear
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeTypeEx
SafeArrayGetUBound

oledlg

OleUIObjectPropertiesW
OleUIInsertObjectW
OleUIPasteSpecialW
OleUIBusyW

gdiplus

GdipGetLineTransform
GdipSetLineTransform
GdipMultiplyLineTransform
GdipTranslateLineTransform
GdipScaleLineTransform
GdipRotateLineTransform
GdipSetPathGradientCenterColor
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterPoint
GdipGetPathGradientPointCount
GdipSetPathGradientPresetBlend
GdipSetPathGradientWrapMode
GdipGetPathGradientTransform
GdipSetPathGradientTransform
GdipMultiplyPathGradientTransform
GdipTranslatePathGradientTransform
GdipScalePathGradientTransform
GdipSetPenStartCap
GdipSetPenEndCap
GdipSetPenDashCap197819
GdipSetPenLineJoin
GdipSetPenMiterLimit
GdipSetPenDashStyle
GdipSetPenDashOffset
GdipSetPenDashArray
GdipCloneBitmapArea
GdipSetImageAttributesColorMatrix
GdipSetCompositingMode
GdipGetCompositingMode
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipSetPixelOffsetMode
GdipGetInterpolationMode
GdipSetWorldTransform
GdipResetWorldTransform
GdipMultiplyWorldTransform
GdipGetWorldTransform
GdipSetPageUnit
GdipGetDpiY
GdipDrawLine
GdipDrawArc
GdipDrawRectangle
GdipSetLinePresetBlend
GdipDrawPath
GdipGraphicsClear
GdipFillRectangle
GdipFillEllipse
GdipFillPath
GdipFillRegion
GdipDrawImageRectRect
GdipSetClipPath
GdipSetClipRegion
GdipResetClip
GdipDeleteFontFamily
GdipGetEmHeight
GdipGetCellDescent
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipDrawString
GdipMeasureString
GdipSetStringFormatFlags
GdipGetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateRegionPath
GdipDeleteRegion
GdipCreateTextureIAI
GdipSetTextureWrapMode
GdipCreateSolidFill
GdipCreateLineBrush
GdipCreatePathGradientFromPath
GdipCreatePen2
GdipDeletePen
GdipCreateBitmapFromHICON
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFont
GdipCreateStringFormat
GdipDeleteStringFormat
GdipTranslateTextureTransform
GdipSetLineWrapMode
GdipSetTextureTransform
GdipGetTextureTransform
GdipGetBrushType
GdipGetRegionHRgn
GdipCombineRegionRegion
GdipCombineRegionPath
GdipCloneRegion
GdipIsMatrixIdentity
GdipGetMatrixElements
GdipTransformMatrixPoints
GdipRotateMatrix
GdipScaleMatrix
GdipTranslateMatrix
GdipMultiplyMatrix
GdipSetMatrixElements
GdipDeleteMatrix
GdipCreateMatrix
GdipGetPathWorldBounds
GdipTransformPath
GdipAddPathPath
GdipAddPathEllipse
GdipAddPathRectangle
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine2
GdipAddPathLine
GdipClosePathFigure
GdipStartPathFigure
GdipSetPathFillMode
GdipDeletePath
GdipCreatePath
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipCloneBrush
GdipDeleteBrush
GdipAlloc
GdipFree
GdipDrawEllipse
GdipDeleteGraphics

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

InternetCloseHandle
InternetOpenW
HttpOpenRequestW
InternetConnectW
InternetGetConnectedState
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetCrackUrlW
HttpSendRequestW
InternetReadFile
InternetOpenUrlW
InternetCanonicalizeUrlW

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

comdlg32

GetFileTitleW

Sections

.text
Size: 9.3MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8c312c3f54a55a0fcf76b0cf47d77ee

Code Sign

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4aCertificate

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49Certificate

Extended Key Usages

Key Usages

1d:0a:be:28:7b:eb:3a:bf:71:bc:3d:6f:fb:df:09:f5Certificate

Extended Key Usages

Key Usages

0c:81:48:e5:67:06:ac:ac:43:9f:21:48:7d:20:ce:51:6c:3f:85:adSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

wininet

imm32

winmm

comdlg32

Sections

.text Size: 9.3MB - Virtual size: 9.3MB

.rdata Size: 3.2MB - Virtual size: 3.2MB

.data Size: 99KB - Virtual size: 147KB

.pdata Size: 402KB - Virtual size: 402KB

.rsrc Size: 2.3MB - Virtual size: 2.3MB

.reloc Size: 229KB - Virtual size: 228KB

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

1d:0a:be:28:7b:eb:3a:bf:71:bc:3d:6f:fb:df:09:f5
Certificate

0c:81:48:e5:67:06:ac:ac:43:9f:21:48:7d:20:ce:51:6c:3f:85:ad
Signer

.text
Size: 9.3MB - Virtual size: 9.3MB

.rdata
Size: 3.2MB - Virtual size: 3.2MB

.data
Size: 99KB - Virtual size: 147KB

.pdata
Size: 402KB - Virtual size: 402KB

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

.reloc
Size: 229KB - Virtual size: 228KB