3e988ac76b0ed4f871086e62c982bf10_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e988ac76b0ed4f871086e62c982bf10_JaffaCakes118
Size

2.1MB
MD5

3e988ac76b0ed4f871086e62c982bf10
SHA1

1729916e01b072305f9fe6e81f51dee8c03dfd48
SHA256

4e65f07424c4f200145b0a0aaf9e204dd53f82008a447616d9f1517e4ed771f6
SHA512

9426157b6dbff4d1fb78f6db7333ecfe4a3691247359c39359e4ca5254b3458888d4c25c5cbd704300d85fee1953bd68efc19e88084742a5fd9d45e6a6d2820c
SSDEEP

49152:D6sGseUvvISFW48iCXVrCNMVmOO591b0LNRTkoRk:DUUvvRF8i1591b0G

Score

1^/10

Malware Config

Signatures

Files

3e988ac76b0ed4f871086e62c982bf10_JaffaCakes118
.dll windows:5 windows x86 arch:x86

970a36c39cfe73ae4bf7e27a6f54cbc4

Code Sign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:b9:95:9f:53:58:52:5f:84:65:6b:20:1d:67:cc:af
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:79:16:4f:42:57:0d:7a:07:0b:5e:c7:60:39:7c:47
Certificate

Issuer

CN=WoSign Time Stamping Services CA G2,O=WoSign CA Limited,C=CN

Not Before

15/08/2017, 07:55

Not After

15/08/2028, 07:55

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

51:ec:ef:d7:72:99:ba:1a:dd:28:02:43:1e:86:e2:0e
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/04/2015, 00:58

Not After

08/04/2025, 00:58

Subject

CN=WoSign Time Stamping Services CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2039, 01:00

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:53:1e:f0:0a:29:4f:08:d6:29:97:1e:24:47:75:6b:10:13:6b:0e:52:75:01:77:93:7f:c7:ce:54:fa:6b:c0
Signer

Actual PE Digest

7e:53:1e:f0:0a:29:4f:08:d6:29:97:1e:24:47:75:6b:10:13:6b:0e:52:75:01:77:93:7f:c7:ce:54:fa:6b:c0

Digest Algorithm

sha256

PE Digest Matches

true

0f:8f:ef:85:af:04:f5:c7:a6:38:ca:57:c4:04:30:e5:8b:b4:6b:fa
Signer

Actual PE Digest

0f:8f:ef:85:af:04:f5:c7:a6:38:ca:57:c4:04:30:e5:8b:b4:6b:fa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\ProjectBuild\Branches\3.5\Rhino\Safe\Bin\Win32\release\pdb\LSPFixUI.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

SetFilePointer
GetFileSize
GetCurrentProcess
LocalFileTimeToFileTime
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
DosDateTimeToFileTime
FileTimeToDosDateTime
FindNextFileW
FindClose
GetShortPathNameW
GetFileAttributesExW
GetLongPathNameW
CreateFileW
FindFirstFileW
GetCurrentThreadId
GlobalFree
GlobalAlloc
OpenProcess
GetProcessHeap
HeapFree
HeapAlloc
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
FreeLibrary
ReleaseMutex
CreateMutexW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
MultiByteToWideChar
GetACP
WideCharToMultiByte
OpenEventW
CreateEventW
OutputDebugStringW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
DeviceIoControl
GlobalMemoryStatusEx
SetLastError
InterlockedExchange
GetTickCount
GetVolumeInformationW
GetDiskFreeSpaceW
GetFileTime
SetEndOfFile
GetWindowsDirectoryW
RemoveDirectoryW
ResetEvent
SetEvent
OpenFileMappingW
CreateFileMappingW
Sleep
UnmapViewOfFile
MapViewOfFile
LocalFree
GetExitCodeProcess
CreateProcessW
GetCurrentProcessId
SearchPathW
ExpandEnvironmentStringsW
InterlockedExchangeAdd
ResumeThread
WaitForSingleObject
lstrcmpiW
GetSystemInfo
LockResource
GetVersionExW
LoadResource
SetCurrentDirectoryW
MoveFileW
GetCurrentDirectoryW
GetTempPathW
GetFileAttributesW
CopyFileW
GetSystemDirectoryW
SetFileTime
CreateDirectoryW
MoveFileExW
GetTempFileNameW
WaitForMultipleObjects
GetProcAddress
GetModuleHandleW
GetUserDefaultLangID
QueryDosDeviceW
lstrlenW
GetLogicalDriveStringsW
GetEnvironmentVariableW
CloseHandle
OpenMutexW
DeleteCriticalSection
DecodePointer
GetLastError
RaiseException
InitializeCriticalSectionAndSpinCount
GetFullPathNameW
DeleteFileW
ReadFile
SetFileAttributesW
GetDriveTypeW
FindResourceW
WriteFile

user32

UnregisterClassW
IsWindow
GetActiveWindow
OffsetRect
DefWindowProcW
SetForegroundWindow
GetWindowLongW
ShowWindow
IsWindowVisible
SendMessageW
PostQuitMessage
LoadIconW
PostMessageW

ole32

OleUninitialize
OleInitialize

oleaut32

SysFreeString

msvcp120

?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?setf@ios_base@std@@QAEHH@Z
?setf@ios_base@std@@QAEHHH@Z
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0id@locale@std@@QAE@I@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?rdstate@ios_base@std@@QBEHXZ

msvcr120

__RTDynamicCast
_CxxThrowException
memcpy
modf
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
abort
strpbrk
_dtest
sprintf_s
memmove_s
memset
_recalloc
memmove
_purecall
??3@YAXPAX@Z
_hypot
??2@YAPAXI@Z
free
??_V@YAXPAX@Z
_wcsnicmp
malloc
realloc
memcpy_s
wcschr
towlower
wcsstr
_vsnwprintf
towupper
_beginthreadex
_wtoi
_errno
strstr
strchr
memchr
tolower
toupper
_stricmp
_splitpath_s
rand
srand
_except1
_time64
_mktime64
_localtime64
?terminate@@YAXXZ
sprintf
wcstoul
_vswprintf_c_l
calloc
isalnum
sscanf
swscanf_s
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CxxFrameHandler3
_except_handler4_common
__clean_type_info_names_internal

2345miniui

?OnMouseReleased@RCMiniUIView@RC@@UAE_NIABUtagPOINT@@_N@Z
?GetParent@RCMiniUIView@RC@@QBEPAV12@XZ
?SetInnerText@RCMiniUIIconBtn@RC@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?SetInnerText@RCMiniUIIconBtn@RC@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetSkin@RCMiniUIImageBtn@RC@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Load@RCMiniUIImageBtn@RC@@UAE_NABVRCXmlNode@2@@Z
?GetState@RCMiniUIButton@RC@@QBE?AW4ButtonState@12@XZ
?SetState@RCMiniUIButton@RC@@QAEXW4ButtonState@12@@Z
?Layout@RCMiniUIButton@RC@@UAEXXZ
?OnMousePressed@RCMiniUIButton@RC@@UAE_NIABUtagPOINT@@_N@Z
?OnMouseEntered@RCMiniUIButton@RC@@UAE_NABUtagPOINT@@@Z
?OnMouseExited@RCMiniUIButton@RC@@UAE_NABUtagPOINT@@@Z
?HitTest@RCMiniUIButton@RC@@UBE_NABUtagPOINT@@@Z
?OnFocus@RCMiniUIButton@RC@@UAEXW4RCMiniUIFocusChangeReason@2@@Z
?OnBlur@RCMiniUIButton@RC@@UAEXXZ
?SetEnabled@RCMiniUIButton@RC@@UAEX_N@Z
?GetDrawFontAttr@RCMiniUIButton@RC@@UAE?AVRCMiniUIStringAttribute@2@XZ
?GetDrawBgColor@RCMiniUIButton@RC@@UAEKXZ
?GetDrawTexColor@RCMiniUIButton@RC@@UAEKXZ
??0RCMiniUiImgChkBox@RC@@QAE@XZ
??1RCMiniUiImgChkBox@RC@@UAE@XZ
?Paint@RCMiniUiImgChkBox@RC@@MAEXPAVRCMiniUICanvas@2@@Z
?OnMouseReleased@RCMiniUiImgChkBox@RC@@MAE_NIABUtagPOINT@@_N@Z
?OnKeyPressed@RCMiniUiImgChkBox@RC@@MAE_NIII@Z
?CalcSize@RCMiniUiImgChkBox@RC@@MAE?AUtagSIZE@@XZ
?SetAttribute@RCMiniUiImgChkBox@RC@@MAEJPBD0H@Z
?HexStringToColor@RCMiniUIObject@RC@@SAKPBD@Z
?DrawArc@RCMiniUICanvas@RC@@QAE_NABUtagRECT@@KEHHH@Z
?ConvertStringToUInt32@RCMiniUIUtils@RC@@SAIPBD@Z
?AnimationEnded@RCMiniUIAnimationDelegate@RC@@UAEXPBVRCMiniUIAnimation@2@@Z
??1RCMiniUIRepeatAnimation@RC@@UAE@XZ
?GetLocalBounds@RCMiniUIView@RC@@QBE?AUtagRECT@@XZ
?GetID@RCMiniUIView@RC@@QBEHXZ
?GetAnimationId@RCMiniUIAnimation@RC@@QBEIXZ
??0RCMiniUIRepeatAnimation@RC@@QAE@II@Z
?Step@RCMiniUIRepeatAnimation@RC@@UAEX_J@Z
?AnimationStarted@RCMiniUIAnimationDelegate@RC@@UAEXPBVRCMiniUIAnimation@2@@Z
??0RCMiniUIAnimationDelegate@RC@@QAE@XZ
??1RCMiniUIAnimationDelegate@RC@@UAE@XZ
?GetObjectClass@RCMiniUITextView@RC@@UAEPBDXZ
?IsClass@RCMiniUITextView@RC@@UAE_NPBD@Z
?GetObjectClass@RCMiniUIImageView@RC@@UAEPBDXZ
?IsClass@RCMiniUIImageView@RC@@UAE_NPBD@Z
??_7RCMiniUIAnimationDelegate@RC@@6B@
??0RCMiniUIView@RC@@QAE@XZ
??1RCMiniUIView@RC@@UAE@XZ
?MoveWindow@RCMiniUIView@RC@@QAEXHH_N@Z
?SetBounds@RCMiniUIView@RC@@QAEXABUtagRECT@@@Z
?GetNeedLayout@RCMiniUIView@RC@@QAE_NXZ
?SetStyle@RCMiniUIView@RC@@QAEXABVRCMiniUIStyle@2@@Z
?GetStyle@RCMiniUIView@RC@@QAEAAVRCMiniUIStyle@2@XZ
?SetID@RCMiniUIView@RC@@QAEXH@Z
?SetFocus@RCMiniUIView@RC@@UAEXXZ
?GetChildViewAt@RCMiniUIView@RC@@QBEPAV12@I@Z
?GetChildViewCount@RCMiniUIView@RC@@QBEIXZ
?Load@RCMiniUIView@RC@@UAE_NABVRCXmlNode@2@@Z
?ReadXmlAttribute@RCMiniUIView@RC@@UAEXABVRCXmlNode@2@@Z
?LoadChilds@RCMiniUIView@RC@@UAE_NABVRCXmlNode@2@@Z
?OnLoadFinished@RCMiniUIView@RC@@UAEXXZ
?Layout@RCMiniUIView@RC@@UAEXXZ
?LayoutChild@RCMiniUIView@RC@@UAEXXZ
?HitTest@RCMiniUIView@RC@@UBE_NABUtagPOINT@@@Z
?ResetState@RCMiniUIView@RC@@UAEXXZ
?SetVisible@RCMiniUIView@RC@@UAEX_N@Z
?IsVisible@RCMiniUIView@RC@@UBE_NXZ
?SetEnabled@RCMiniUIView@RC@@UAEX_N@Z
?IsEnabled@RCMiniUIView@RC@@UBE_NXZ
?SetSkin@RCMiniUIView@RC@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetLightFrame@RCMiniUIView@RC@@UAEX_N@Z
?HasLightFrame@RCMiniUIView@RC@@UBE_NXZ
?SetDottedLine@RCMiniUIView@RC@@UAEX_N@Z
?HasDottedLine@RCMiniUIView@RC@@UBE_NXZ
?OnChildViewIDChanged@RCMiniUIView@RC@@UAEXPAV12@H@Z
?GetViewForPoint@RCMiniUIView@RC@@UAEPAV12@ABUtagPOINT@@@Z
?NotifyEnterExitChild@RCMiniUIView@RC@@UAE_NPAV12@0@Z
?CalcSize@RCMiniUIView@RC@@UAE?AUtagSIZE@@XZ
?SetAttribute@RCMiniUIView@RC@@UAEJPBD0H@Z
?OnMousePressed@RCMiniUIView@RC@@UAE_NIABUtagPOINT@@_N@Z
?OnMouseDragged@RCMiniUIView@RC@@UAE_NIABUtagPOINT@@@Z
?OnMouseMoved@RCMiniUIView@RC@@UAE_NIABUtagPOINT@@@Z
?OnMouseWheel@RCMiniUIView@RC@@UAE_NIABUtagPOINT@@H@Z
?OnMouseEntered@RCMiniUIView@RC@@UAE_NABUtagPOINT@@@Z
?OnMouseExited@RCMiniUIView@RC@@UAE_NABUtagPOINT@@@Z
?OnKeyPressed@RCMiniUIView@RC@@UAE_NIII@Z
?OnKeyReleased@RCMiniUIView@RC@@UAE_NIII@Z
?OnCharInput@RCMiniUIView@RC@@UAE_NI@Z
?OnFocus@RCMiniUIView@RC@@UAEXW4RCMiniUIFocusChangeReason@2@@Z
?OnBlur@RCMiniUIView@RC@@UAEXXZ
?GetCursorForPoint@RCMiniUIView@RC@@UAEPAUHICON__@@IABUtagPOINT@@@Z
?OnMiniUITimer@RCMiniUIView@RC@@UAEXE@Z
?SchedulePaint@RCMiniUIView@RC@@UAEXXZ
?SchedulePaint@RCMiniUIView@RC@@UAEXABUtagRECT@@_N@Z
?Paint@RCMiniUIView@RC@@UAEXPAVRCMiniUICanvas@2@@Z
?PaintChildren@RCMiniUIView@RC@@UAEXPAVRCMiniUICanvas@2@AAV?$vector@PAVRCMiniUIView@RC@@V?$allocator@PAVRCMiniUIView@RC@@@std@@@std@@@Z
?SetTooltipText@RCMiniUIView@RC@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetTooltipText@RCMiniUIView@RC@@UBE?BV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?SetTooltipMaxWidth@RCMiniUIView@RC@@UAEXH@Z
?GetTooltipMaxWidth@RCMiniUIView@RC@@UAEHXZ
?MayItBePaintStart@RCMiniUIView@RC@@UAE_NXZ
?IsPaintChildrenTrivial@RCMiniUIView@RC@@UAE_NXZ
?SetMiniUITimer@RCMiniUIView@RC@@UAEIEI@Z
?KillMiniUITimer@RCMiniUIView@RC@@UAEXE@Z
?IsClass@RCMiniUIObject@RC@@UAE_NPBD@Z
?GetObjectClass@RCMiniUIObject@RC@@UAEPBDXZ
??0RCMiniUITextView@RC@@QAE@XZ
??1RCMiniUITextView@RC@@UAE@XZ
?GetInnerText@RCMiniUITextView@RC@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?SetInnerText@RCMiniUITextView@RC@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?OnMouseMoveInDialog@RCMiniUIDialogView@RC@@UAEXABVCPoint@WTL@@I@Z
?GetToolTip@RCMiniUIDialogView@RC@@UAEAAV?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@XZ
?GetRootView@RCMiniUIDialogView@RC@@UAEPAVRCMiniUIView@2@XZ
?WindowDefKeyPressed@RCMiniUIDialog@RC@@EAE_NIII@Z
?GetHWND@RCMiniUIDialog@RC@@UAEPAUHWND__@@XZ
?ReflectNotifications@?$CWindowImplRoot@VRCMiniAtlWindow@@@ATL@@QAEJIIJAAH@Z
?OnFinalMessage@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UAEXPAUHWND__@@@Z
?GetDialogProc@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UAEP6GHPAUHWND__@@IIJ@ZXZ
?EndDialog@?$CDialogImpl@VRCMiniUIDialog@RC@@VRCMiniAtlWindow@@@ATL@@QAEHH@Z
?ProcessWindowMessage@RCMiniUIDialog@RC@@UAEHPAUHWND__@@IIJAAJK@Z
?OnDialogSkinChanged@RCMiniUIDialogView@RC@@UAEXXZ
?OnAnimateHideEnded@RCMiniUIDialogView@RC@@UAEXXZ
?OnAnimateShowEnded@RCMiniUIDialogView@RC@@UAEXXZ
?OnMouseLeaveDialog@RCMiniUIDialogView@RC@@UAEXXZ
?OnMouseEnterDialog@RCMiniUIDialogView@RC@@UAEXXZ
?OnDropFiles@RCMiniUIDialogView@RC@@UAEXABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?OnFirstLayouted@RCMiniUIDialogView@RC@@UAEXXZ
?BeforeWindowDestroy@RCMiniUIDialogView@RC@@UAEXXZ
?OnEnter@RCMiniUIDialogView@RC@@UAEXXZ
?OnEsc@RCMiniUIDialogView@RC@@UAEXXZ
?SetItemVisible@RCMiniUIDialogView@RC@@QAE_NI_N@Z
?SetItemAttribute@RCMiniUIDialogView@RC@@QAE_NIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetViewByID@RCMiniUIDialogView@RC@@QBEPAVRCMiniUIView@2@H@Z
?CreateViewByString@RCMiniUIObjectFactory@RC@@SAPAVRCMiniUIView@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CompareValues@RCMiniUITableModel@RC@@UAEHHHH@Z
?SetObserver@RCMiniUITableModel@RC@@UAEXPAVRCMiniUIListCtrl@2@@Z
??1RCMiniUITableModel@RC@@UAE@XZ
??0RCMiniUITableModel@RC@@QAE@XZ
?Clear@RCMiniUIListCtrl@RC@@QAEXXZ
?AppendItem@RCMiniUIListCtrl@RC@@QAEHPAVRCMiniUITableItemPanel@2@H@Z
?SetModel@RCMiniUIListCtrl@RC@@QAEXPAVRCMiniUITableModel@2@@Z
?GetViewByID@RCMiniUIView@RC@@QBEPAV12@H@Z
?Stop@RCMiniUITransformView@RC@@QAEXXZ
?Play@RCMiniUITransformView@RC@@QAE_NXZ
?PostMessageW@RCMiniAtlWindow@@QAEHIIJ@Z
?SetIcon@RCMiniAtlWindow@@QAEPAUHICON__@@PAU2@H@Z
?SendMessageW@RCMiniAtlWindow@@QAEJIIJ@Z
?SetText@RCMiniUIRichText@RC@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AddChildView@RCMiniUIView@RC@@QAEXPAV12@@Z
?SetWindowPos@RCMiniAtlWindow@@QAEHPAUHWND__@@HHHHI@Z
?OnDialogTimer@RCMiniUIDialogView@RC@@UAE_NIPAX@Z
?KillWindowTimer@RCMiniUIWindow@RC@@QAEXI@Z
?SetWindowTimer@RCMiniUIWindow@RC@@QAEXII@Z
?DoModal@RCMiniUIDialog@RC@@QAEHPAUHWND__@@J@Z
??1RCMiniUIDialog@RC@@UAE@XZ
??0RCMiniUIDialog@RC@@QAE@I@Z
?SetRenderFactory@RCMiniUIAppModule@RC@@QAE_NPAVRCMiniUIRenderFactory@2@@Z
?Term@RCMiniUIAppModule@RC@@QAEXXZ
?Init@RCMiniUIAppModule@RC@@QAEXPAUHINSTANCE__@@@Z
?Instance@RCMiniUIAppModule@RC@@SAAAV12@XZ
?GetGolobalStringPool@RCMiniUIResourceManager@RC@@SAPAVRCMiniUIStringPoolInterface@2@XZ
?GetGolobalFontPool@RCMiniUIResourceManager@RC@@SAPAVRCMiniUIFontPoolInterface@2@XZ
?GetGlobalSkinPool@RCMiniUIManner@RC@@SAPAVRCMiniUISkinPoolInterface@2@XZ
?GetGlobalStylePool@RCMiniUIManner@RC@@SAPAVRCMiniUIStylePoolInterface@2@XZ
?InitGifRuntimeObject@RCMiniUIObjectFactory@RC@@SAXXZ
?CreateBitmap@RCMiniUIRenderFactorySkia@RC@@UAEPAVRCMiniUIBitmap@2@XZ
?CreateCanvas@RCMiniUIRenderFactorySkia@RC@@UAEPAVRCMiniUICanvas@2@HH_N@Z
?Initialize@RCMiniUIRenderFactorySkia@RC@@UAE_NXZ
??1RCMiniUIRenderFactorySkia@RC@@UAE@XZ
??0RCMiniUIRenderFactorySkia@RC@@QAE@XZ
?SetAttribute@RCMiniUIImageView@RC@@UAEJPBD0H@Z
?CalcSize@RCMiniUIImageView@RC@@UAE?AUtagSIZE@@XZ
?Paint@RCMiniUIImageView@RC@@UAEXPAVRCMiniUICanvas@2@@Z
?SetSkin@RCMiniUIImageView@RC@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1RCMiniUIImageView@RC@@UAE@XZ
??0RCMiniUIImageView@RC@@QAE@XZ
??0TMiniUIObjClassInit@RC@@QAE@PAURCMiniUIRuntimeClass@1@@Z
??1RCMiniUIRuntimeClass@RC@@QAE@XZ
??0RCMiniUIRuntimeClass@RC@@QAE@PBDP6APAVRCMiniUIObject@1@XZPAU01@@Z
?OnAnimationTimer@RCMiniUIAnimationContainer@RC@@QAEXI@Z
??1RCMiniUIAnimationContainer@RC@@UAE@XZ
??0RCMiniUIAnimationContainer@RC@@QAE@PAVRCMiniUIView@1@@Z
??1RCMiniUIStyle@RC@@UAE@XZ
??4RCMiniUIStyle@RC@@QAEAAV01@ABV01@@Z
??0RCMiniUIStyle@RC@@QAE@XZ
?AnimateToState@RCMiniUIAnimation@RC@@UAEXN@Z
?Step@RCMiniUIAnimation@RC@@UAEX_J@Z
?Stop@RCMiniUIAnimation@RC@@UAEXXZ
?Start@RCMiniUIAnimation@RC@@UAEXXZ
?GetCurrentValue@RCMiniUIAnimation@RC@@UBENXZ
?CurrentValueBetween@RCMiniUIAnimation@RC@@QBEHHH@Z
?IsAnimating@RCMiniUIAnimation@RC@@QBE_NXZ
?SetAnimationContainer@RCMiniUIAnimation@RC@@QAEXPAVRCMiniUIAnimationContainer@2@@Z
?SetDelegate@RCMiniUIAnimation@RC@@QAEXPAVRCMiniUIAnimationDelegate@2@@Z
?SetAnimationType@RCMiniUIAnimation@RC@@QAEXI@Z
?SetDuration@RCMiniUIAnimation@RC@@QAEXI@Z
??1RCMiniUIAnimation@RC@@UAE@XZ
??0RCMiniUIAnimation@RC@@QAE@II@Z
?ConvertStringToInt32@RCMiniUIUtils@RC@@SAHPBD@Z
?ParseString2Rect@RCMiniUIUtils@RC@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAUtagRECT@@@Z
?Paint@RCMiniUITextView@RC@@MAEXPAVRCMiniUICanvas@2@@Z
?CalcSize@RCMiniUITextView@RC@@MAE?AUtagSIZE@@XZ
?GetTooltipMaxWidth@RCMiniUITextView@RC@@UAEHXZ
?Layout@RCMiniUITextView@RC@@UAEXXZ
?SetTooltipMaxWidth@RCMiniUITextView@RC@@UAEXH@Z
?GetTooltipText@RCMiniUITextView@RC@@UBE?BV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?SetTooltipText@RCMiniUITextView@RC@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetAttribute@RCMiniUITextView@RC@@UAEJPBD0H@Z
?Load@RCMiniUITextView@RC@@UAE_NABVRCXmlNode@2@@Z
?GetDrawTexColor@RCMiniUITextView@RC@@UAEKXZ
?GetInnerTextSize@RCMiniUITextView@RC@@UAE?AUtagSIZE@@XZ
?SetInnerText@RCMiniUITextView@RC@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z

comctl32

InitCommonControlsEx

Exports

Exports

RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

970a36c39cfe73ae4bf7e27a6f54cbc4

Code Sign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:dfCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

47:b9:95:9f:53:58:52:5f:84:65:6b:20:1d:67:cc:afCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

6d:79:16:4f:42:57:0d:7a:07:0b:5e:c7:60:39:7c:47Certificate

Extended Key Usages

Key Usages

51:ec:ef:d7:72:99:ba:1a:dd:28:02:43:1e:86:e2:0eCertificate

Extended Key Usages

Key Usages

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91Certificate

Key Usages

7e:53:1e:f0:0a:29:4f:08:d6:29:97:1e:24:47:75:6b:10:13:6b:0e:52:75:01:77:93:7f:c7:ce:54:fa:6b:c0Signer

0f:8f:ef:85:af:04:f5:c7:a6:38:ca:57:c4:04:30:e5:8b:b4:6b:faSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

kernel32

user32

ole32

oleaut32

msvcp120

msvcr120

2345miniui

comctl32

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 235KB - Virtual size: 235KB

.data Size: 90KB - Virtual size: 92KB

.rsrc Size: 231KB - Virtual size: 230KB

.reloc Size: 127KB - Virtual size: 127KB

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

47:b9:95:9f:53:58:52:5f:84:65:6b:20:1d:67:cc:af
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

6d:79:16:4f:42:57:0d:7a:07:0b:5e:c7:60:39:7c:47
Certificate

51:ec:ef:d7:72:99:ba:1a:dd:28:02:43:1e:86:e2:0e
Certificate

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

7e:53:1e:f0:0a:29:4f:08:d6:29:97:1e:24:47:75:6b:10:13:6b:0e:52:75:01:77:93:7f:c7:ce:54:fa:6b:c0
Signer

0f:8f:ef:85:af:04:f5:c7:a6:38:ca:57:c4:04:30:e5:8b:b4:6b:fa
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 235KB - Virtual size: 235KB

.data
Size: 90KB - Virtual size: 92KB

.rsrc
Size: 231KB - Virtual size: 230KB

.reloc
Size: 127KB - Virtual size: 127KB