General

Malware Config

Signatures

Files

• 1ceee6d8b79af1d5562f04decd228937be2ff941abb99bafafca621cc155bd4c

  .exe windows:6 windows x86 arch:x86

  d381c5f1db34026d3d10b64c6405df0d

  
  

  Code Sign

  76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  18-03-2020 00:00

  Not After

  18-03-2045 00:00

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28-07-2020 00:00

  Not After

  28-07-2030 00:00

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  50:5d:6d:e4:58:da:51:02:d8:41:00:11

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  22-01-2024 10:33

  Not After

  22-01-2027 09:07

  Subject

  SERIALNUMBER=91440300MA5F89GP45,CN=ICWORKSHOP Technology (Shenzhen) Co.\, Ltd.,O=ICWORKSHOP Technology (Shenzhen) Co.\, Ltd.,STREET=罗湖区翠竹街道翠平社区田贝一路23号文锦广场A座一段第12层整层,L=Shenzhen,ST=Guangdong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085368656e7a68656e,1.3.6.1.4.1.311.60.2.1.2=#13094775616e67646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  cd:27:e6:f7:97:aa:07:ff:40:1c:1b:10:1e:3b:60:fe:24:db:c0:c4:3c:03:fd:ff:56:56:8e:31:9a:ab:d8:01

  Signer

  Actual PE Digest

  cd:27:e6:f7:97:aa:07:ff:40:1c:1b:10:1e:3b:60:fe:24:db:c0:c4:3c:03:fd:ff:56:56:8e:31:9a:ab:d8:01

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  E:\MainProjects\2019\DAPLINK_DEV\PowerWriter_ATCmd_GUI\Release\PowerWriter_ATCmd_GUI.pdb

  Imports

  kernel32

  GetProcessAffinityMask

  GetNumaHighestNodeNumber

  DeleteTimerQueueTimer

  ChangeTimerQueueTimer

  CreateTimerQueueTimer

  GetLogicalProcessorInformation

  GetThreadPriority

  SignalObjectAndWait

  CreateTimerQueue

  WriteConsoleW

  SetEnvironmentVariableA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetOEMCP

  IsValidCodePage

  GetTimeZoneInformation

  CreateDirectoryW

  EnumSystemLocalesW

  IsValidLocale

  GetTimeFormatW

  GetDateFormatW

  ReadConsoleW

  SetFilePointerEx

  RegisterWaitForSingleObject

  GetConsoleCP

  GetACP

  GetStdHandle

  GetFileType

  SetStdHandle

  HeapQueryInformation

  GetCommandLineW

  GetCommandLineA

  FindFirstFileExW

  VirtualQuery

  VirtualAlloc

  GetSystemInfo

  ExitProcess

  GetModuleHandleExW

  FreeLibraryAndExitThread

  ExitThread

  InterlockedFlushSList

  InterlockedPushEntrySList

  RtlUnwind

  GetCPInfo

  GetStringTypeW

  LCMapStringW

  TryEnterCriticalSection

  SwitchToThread

  OutputDebugStringW

  UnregisterWait

  GetThreadTimes

  VirtualFree

  SetThreadAffinityMask

  InterlockedPopEntrySList

  QueryDepthSList

  UnregisterWaitEx

  GetStartupInfoW

  IsDebuggerPresent

  InitializeSListHead

  WaitForSingleObjectEx

  IsProcessorFeaturePresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetUserDefaultLCID

  GetTempFileNameW

  GetProfileIntW

  GetTickCount

  SearchPathW

  ReleaseSemaphore

  FindResourceExW

  GetWindowsDirectoryW

  GetTempPathW

  SetErrorMode

  GetCurrentDirectoryW

  VirtualProtect

  GetUserDefaultUILanguage

  GetSystemDefaultUILanguage

  GetLocaleInfoW

  LocalReAlloc

  LocalAlloc

  GlobalHandle

  GlobalReAlloc

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  GlobalGetAtomNameW

  GlobalFlags

  ResumeThread

  SetThreadPriority

  SetEvent

  VerifyVersionInfoW

  VerSetConditionMask

  WritePrivateProfileStringW

  GetPrivateProfileStringW

  GetPrivateProfileIntW

  lstrcpyW

  lstrcmpA

  GetCurrentThread

  FindNextFileW

  FileTimeToSystemTime

  SystemTimeToTzSpecificLocalTime

  GetFileTime

  GetFileSizeEx

  GetFileAttributesExW

  GetFileAttributesW

  FileTimeToLocalFileTime

  GetThreadLocale

  lstrcmpiW

  GetCurrentProcess

  DuplicateHandle

  UnlockFile

  SetFilePointer

  SetEndOfFile

  LockFile

  GetVolumeInformationW

  GetFullPathNameW

  GetFileSize

  FlushFileBuffers

  FindFirstFileW

  FindClose

  GetVersionExW

  GetCurrentProcessId

  InitializeCriticalSectionAndSpinCount

  CopyFileW

  MulDiv

  GlobalSize

  CompareStringW

  GlobalFindAtomW

  GlobalAddAtomW

  lstrcmpW

  GlobalDeleteAtom

  LoadLibraryA

  LoadLibraryExW

  FreeLibrary

  GetSystemDirectoryW

  GetCurrentThreadId

  EncodePointer

  LoadLibraryW

  GetProcAddress

  GetModuleHandleW

  GetModuleHandleA

  FreeResource

  SetLastError

  OutputDebugStringA

  GetProcessHeap

  DecodePointer

  HeapAlloc

  RaiseException

  HeapReAlloc

  HeapSize

  HeapFree

  TerminateProcess

  CreateThread

  GlobalFree

  InitializeCriticalSectionEx

  GlobalAlloc

  GlobalUnlock

  GlobalLock

  Sleep

  QueryPerformanceCounter

  QueryPerformanceFrequency

  GetLocalTime

  GetSystemTimeAsFileTime

  RemoveDirectoryW

  DeleteFileW

  GetModuleFileNameW

  LocalFree

  FormatMessageW

  SetCommConfig

  SetCommTimeouts

  SetCommMask

  SizeofResource

  GetOverlappedResult

  ClearCommError

  ResetEvent

  CloseHandle

  GetCommState

  WaitCommEvent

  EscapeCommFunction

  GetLastError

  CreateEventW

  CreateFileW

  WaitForSingleObject

  PurgeComm

  WriteFile

  GetCommConfig

  ReadFile

  DeleteCriticalSection

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  WideCharToMultiByte

  MultiByteToWideChar

  FindResourceW

  LoadResource

  LockResource

  GetConsoleMode

  user32

  GetMessageW

  EnumDisplayMonitors

  SystemParametersInfoW

  LoadCursorW

  SetLayeredWindowAttributes

  DrawIconEx

  IsRectEmpty

  InflateRect

  DrawFocusRect

  GetSysColorBrush

  SetWindowRgn

  DrawFrameControl

  DrawEdge

  MapDialogRect

  SetWindowContextHelpId

  PostQuitMessage

  CharUpperW

  OffsetRect

  SetRectEmpty

  SendDlgItemMessageA

  GetCursorPos

  ClientToScreen

  GetWindowDC

  TabbedTextOutW

  GrayStringW

  DrawTextExW

  DrawTextW

  GetWindowThreadProcessId

  LoadMenuW

  InvalidateRect

  DrawStateW

  RemoveMenu

  InsertMenuW

  GetMenuState

  GetMenuStringW

  SetMenuItemInfoW

  GetMenuCheckMarkDimensions

  SetMenuItemBitmaps

  EnableMenuItem

  CheckMenuItem

  IsDialogMessageW

  SetWindowTextW

  CheckDlgButton

  SetDlgItemTextW

  MoveWindow

  ShowWindow

  GetMonitorInfoW

  MonitorFromWindow

  WinHelpW

  GetScrollInfo

  SetScrollInfo

  CallNextHookEx

  UnhookWindowsHookEx

  SetWindowsHookExW

  GetWindow

  GetLastActivePopup

  GetTopWindow

  GetClassLongW

  SetWindowLongW

  PtInRect

  LoadImageW

  IsClipboardFormatAvailable

  SetRect

  WaitMessage

  CharNextW

  EnableWindow

  LoadIconW

  EqualRect

  CopyRect

  GetSysColor

  MapWindowPoints

  CopyAcceleratorTableW

  AdjustWindowRectEx

  GetWindowTextLengthW

  GetWindowTextW

  RemovePropW

  GetPropW

  ShowOwnedPopups

  ShowScrollBar

  GetScrollRange

  SetScrollRange

  GetScrollPos

  SetCursor

  GetKeyNameTextW

  MapVirtualKeyW

  DestroyMenu

  GetMenuItemInfoW

  RealChildWindowFromPoint

  CopyImage

  GetAsyncKeyState

  IntersectRect

  TrackMouseEvent

  IsZoomed

  SetCapture

  ReleaseCapture

  SetScrollPos

  ScrollWindow

  DestroyIcon

  SetTimer

  KillTimer

  DeleteMenu

  MessageBeep

  NotifyWinEvent

  CreatePopupMenu

  TranslateMessage

  SendMessageW

  WindowFromPoint

  GetClassNameW

  GetClientRect

  FillRect

  MessageBoxW

  GetSystemMetrics

  OpenClipboard

  CloseClipboard

  EmptyClipboard

  SetClipboardData

  GetDC

  ReleaseDC

  GetWindowRect

  UnregisterClassW

  LoadBitmapW

  PostMessageW

  GetSystemMenu

  AppendMenuW

  IsIconic

  DrawIcon

  IsWindow

  DestroyWindow

  CreateDialogIndirectParamW

  EndDialog

  GetDlgItem

  GetNextDlgTabItem

  GetActiveWindow

  IsWindowEnabled

  SetActiveWindow

  GetWindowLongW

  GetDesktopWindow

  GetParent

  RegisterWindowMessageW

  DispatchMessageW

  PeekMessageW

  GetMessagePos

  GetMessageTime

  DefWindowProcW

  CallWindowProcW

  RegisterClassW

  GetClassInfoW

  GetClassInfoExW

  CreateWindowExW

  IsMenu

  IsChild

  SetWindowPos

  GetWindowPlacement

  SetWindowPlacement

  BeginDeferWindowPos

  DeferWindowPos

  EndDeferWindowPos

  IsWindowVisible

  GetDlgCtrlID

  SetFocus

  GetFocus

  GetKeyState

  GetCapture

  GetMenu

  SetMenu

  GetSubMenu

  GetMenuItemID

  GetMenuItemCount

  TrackPopupMenu

  UpdateWindow

  GetForegroundWindow

  SetForegroundWindow

  BeginPaint

  EndPaint

  InvalidateRgn

  GetNextDlgGroupItem

  SetParent

  SetCursorPos

  ValidateRect

  RedrawWindow

  GetMenuDefaultItem

  SetMenuDefaultItem

  UpdateLayeredWindow

  EnableScrollBar

  UnionRect

  MonitorFromPoint

  SetPropW

  BringWindowToTop

  LockWindowUpdate

  GetDoubleClickTime

  GetIconInfo

  CopyIcon

  ModifyMenuW

  DestroyAcceleratorTable

  SetClassLongW

  GetUpdateRect

  ToUnicodeEx

  GetKeyboardLayout

  GetKeyboardState

  LoadAcceleratorsW

  CreateAcceleratorTableW

  RegisterClipboardFormatW

  CharUpperBuffW

  TranslateAcceleratorW

  InsertMenuItemW

  UnpackDDElParam

  ReuseDDElParam

  FrameRect

  PostThreadMessageW

  HideCaret

  InvertRect

  SubtractRect

  IsCharLowerW

  MapVirtualKeyExW

  DrawMenuBar

  DefFrameProcW

  DefMDIChildProcW

  TranslateMDISysAccel

  GetComboBoxInfo

  CreateMenu

  GetWindowRgn

  DestroyCursor

  ScreenToClient

  gdi32

  CopyMetaFileW

  CreateDCW

  GetDeviceCaps

  CreateSolidBrush

  BitBlt

  CreateHatchBrush

  CreatePen

  CreateRectRgn

  Escape

  ExcludeClipRect

  GetClipBox

  GetObjectType

  GetPixel

  GetViewportExtEx

  GetWindowExtEx

  IntersectClipRect

  LineTo

  PtVisible

  RectVisible

  RestoreDC

  SaveDC

  SelectClipRgn

  ExtSelectClipRgn

  SelectPalette

  SetBkMode

  SetMapMode

  SetLayout

  GetLayout

  SetPolyFillMode

  SetROP2

  SetTextAlign

  MoveToEx

  TextOutW

  ExtTextOutW

  SetViewportExtEx

  SetViewportOrgEx

  SetWindowExtEx

  SetWindowOrgEx

  OffsetViewportOrgEx

  OffsetWindowOrgEx

  CreateBitmap

  ScaleWindowExtEx

  CombineRgn

  CreateEllipticRgn

  CreateRectRgnIndirect

  Ellipse

  GetBkColor

  GetTextColor

  GetTextExtentPoint32W

  PatBlt

  CreatePolygonRgn

  Polygon

  Polyline

  GetTextMetricsW

  CreateCompatibleBitmap

  CreateDIBitmap

  CreateFontIndirectW

  EnumFontFamiliesW

  GetTextCharsetInfo

  GetMapMode

  SetRectRgn

  DPtoLP

  CreateRoundRectRgn

  GetRgnBox

  RealizePalette

  SetPixel

  OffsetRgn

  RoundRect

  CreatePalette

  GetPaletteEntries

  EnumFontFamiliesExW

  GetNearestPaletteIndex

  GetSystemPaletteEntries

  LPtoDP

  ExtFloodFill

  SetPaletteEntries

  FillRgn

  FrameRgn

  GetBoundsRect

  PtInRegion

  GetViewportOrgEx

  GetWindowOrgEx

  SetPixelV

  GetTextFaceW

  SetTextColor

  SetBkColor

  Rectangle

  GetStockObject

  CreateDIBSection

  GetObjectW

  SetDIBColorTable

  DeleteObject

  CreateCompatibleDC

  StretchBlt

  SelectObject

  DeleteDC

  ScaleViewportExtEx

  CreatePatternBrush

  msimg32

  TransparentBlt

  AlphaBlend

  winspool.drv

  ClosePrinter

  DocumentPropertiesW

  OpenPrinterW

  advapi32

  RegSetValueExW

  RegCloseKey

  RegEnumKeyExW

  RegEnumValueW

  RegQueryValueW

  RegEnumKeyW

  RegQueryValueExW

  RegDeleteValueW

  RegDeleteKeyW

  RegCreateKeyExW

  RegOpenKeyExW

  shell32

  SHBrowseForFolderW

  SHGetPathFromIDListW

  SHGetFileInfoW

  SHGetMalloc

  SHGetSpecialFolderLocation

  ShellExecuteW

  DragFinish

  DragQueryFileW

  SHAppBarMessage

  SHGetDesktopFolder

  comctl32

  InitCommonControlsEx

  shlwapi

  PathRemoveFileSpecW

  PathIsUNCW

  PathStripToRootW

  StrFormatKBSizeW

  PathFindFileNameW

  PathFindExtensionW

  uxtheme

  GetThemePartSize

  IsAppThemed

  OpenThemeData

  CloseThemeData

  DrawThemeBackground

  GetThemeColor

  DrawThemeParentBackground

  GetThemeSysColor

  GetCurrentThemeName

  GetWindowTheme

  DrawThemeText

  IsThemeBackgroundPartiallyTransparent

  ole32

  CoRegisterMessageFilter

  CoRevokeClassObject

  IsAccelerator

  OleDestroyMenuDescriptor

  CLSIDFromString

  OleLockRunning

  RevokeDragDrop

  RegisterDragDrop

  CoLockObjectExternal

  OleGetClipboard

  OleUninitialize

  OleInitialize

  CoFreeUnusedLibraries

  DoDragDrop

  OleIsCurrentClipboard

  OleFlushClipboard

  CreateILockBytesOnHGlobal

  StgOpenStorageOnILockBytes

  StgCreateDocfileOnILockBytes

  CoGetClassObject

  CoDisconnectObject

  CoInitialize

  CLSIDFromProgID

  CoCreateGuid

  CoCreateInstance

  CoInitializeEx

  CoUninitialize

  ReleaseStgMedium

  OleDuplicateData

  CoTaskMemFree

  CoTaskMemAlloc

  CreateStreamOnHGlobal

  OleTranslateAccelerator

  OleCreateMenuDescriptor

  oleaut32

  SafeArrayDestroy

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  VariantChangeType

  VariantClear

  VariantInit

  SysAllocStringLen

  SysAllocString

  SysStringLen

  SysAllocStringByteLen

  SysFreeString

  VarBstrFromDate

  OleCreateFontIndirect

  VariantCopy

  LoadTypeLi

  oledlg

  OleUIBusyW

  gdiplus

  GdiplusStartup

  GdipCreateBitmapFromHBITMAP

  GdipCreateFromHDC

  GdipSetInterpolationMode

  GdipDrawImageRectI

  GdipCreateBitmapFromStream

  GdipDrawImageI

  GdipDeleteGraphics

  GdipGetImageGraphicsContext

  GdipDisposeImage

  GdipFree

  GdipAlloc

  GdipCloneImage

  GdipGetImagePalette

  GdipGetImagePixelFormat

  GdipGetImageHeight

  GdipGetImageWidth

  GdipGetImagePaletteSize

  GdiplusShutdown

  GdipCreateBitmapFromScan0

  GdipBitmapUnlockBits

  GdipBitmapLockBits

  setupapi

  SetupDiOpenDevRegKey

  SetupDiEnumDeviceInfo

  SetupDiGetDeviceRegistryPropertyW

  SetupDiGetClassDevsW

  SetupDiDestroyDeviceInfoList

  oleacc

  AccessibleObjectFromWindow

  LresultFromObject

  CreateStdAccessibleObject

  imm32

  ImmReleaseContext

  ImmGetOpenStatus

  ImmGetContext

  winmm

  PlaySoundW

  Sections

  .text

  Size: 2.0MB - Virtual size: 2.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 446KB - Virtual size: 445KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 36KB - Virtual size: 134KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2.2MB - Virtual size: 2.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ