e9da8890b6ee02623e9f900aba9d6c40_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

e9da8890b6ee02623e9f900aba9d6c40_NeikiAnalytics.exe
Size

3.6MB
MD5

e9da8890b6ee02623e9f900aba9d6c40
SHA1

2ba4a8f4a3bc362159b380b59e44816b219ecaaa
SHA256

8321bd1dd82b4200024bba4fd17e82a04a6b05722efa0860d642132a7c43ad7a
SHA512

099d70d4539be096c83f3902018d4a5603a0a468c1053fc6702d94c6b9a456f7fd3dec3ef5768089dc2628134d4902711d21fb08133a9366cdac67a747db5de4
SSDEEP

49152:ZYqfbYAWXD9+nZplaiQQnK5nqNQSNibNxoRdPgXU7i4d7UPmzJtVX8IYj7I40Zpa:29+XnLQfNayE7F7LbgZ

Score

1^/10

Malware Config

Signatures

Files

e9da8890b6ee02623e9f900aba9d6c40_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

af922f7600ffab2f00a86597bb5e55b1

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:f8:a1:a2:27:0d:39:0b:54:5a:dd:f1:2b:cf:92:19
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

03/11/2023, 00:00

Not After

04/11/2025, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Photoshop\, Bridge,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:c8:0c:fe:ff:76:4d:3d:01:16:64:ce:0c:77:35:3c:9a:c3:06:81:3b:3c:49:94:bf:df:b8:72:bb:f1:d7:d0
Signer

Actual PE Digest

6f:c8:0c:fe:ff:76:4d:3d:01:16:64:ce:0c:77:35:3c:9a:c3:06:81:3b:3c:49:94:bf:df:b8:72:bb:f1:d7:d0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\js\ci\gitws-0\src\dist\msvs_win32\Release\x64\build\uxtech\owl\owl\AdobeOwl.pdb

Imports

kernel32

InitOnceBeginInitialize
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlLookupFunctionEntry
RtlVirtualUnwind
LCMapStringEx
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RaiseException
WideCharToMultiByte
LocalFree
GetTickCount
FormatMessageW
GetLocaleInfoEx
lstrcpyW
lstrlenW
InitOnceComplete
CompareStringW
GetTickCount64
SetLastError
GetUserDefaultLocaleName
GetCurrentThread
RtlCaptureContext
GetCurrentProcessId
GetModuleHandleW
GetProcAddress
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
SizeofResource
LoadResource
FindResourceW
DisableThreadLibraryCalls
VerifyVersionInfoW
VerSetConditionMask
GetCurrentThreadId
LCMapStringW
MultiByteToWideChar
DecodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetCurrentProcess
GetLastError
Sleep
UnhandledExceptionFilter

user32

WindowFromDC
GetClientRect
SetFocus
EnableWindow
IsWindowVisible
IsZoomed
SetWindowTextW
IsIconic
GetWindow
SetWindowPos
SystemParametersInfoW
GetWindowLongPtrW
SetParent
UnhookWindowsHookEx
GetCapture
SetCapture
ReleaseCapture
GetActiveWindow
UpdateWindow
SetLayeredWindowAttributes
ChildWindowFromPointEx
SetWindowLongPtrW
SetWindowsHookExW
CallNextHookEx
UpdateLayeredWindow
BeginPaint
GetAsyncKeyState
EnumWindows
GetSystemMenu
EndPaint
TrackMouseEvent
ShowWindow
GetSystemMetrics
GetAncestor
SendMessageW
UnregisterClassW
GetMenuStringW
CheckMenuItem
AppendMenuW
CreatePopupMenu
DestroyMenu
GetMessageExtraInfo
GetKeyState
IsWindow
EnumDisplayMonitors
GetMonitorInfoW
InvalidateRect
DestroyWindow
CreateWindowExW
RegisterWindowMessageW
SetActiveWindow
GetFocus
PtInRect
GetWindowRect
OffsetRect
EnableMenuItem
ScreenToClient
ClientToScreen
SetMenuItemInfoW
MapVirtualKeyExW
GetKeyboardLayout
GetPhysicalCursorPos
GetClassNameA
GetMessageTime
EnumDisplayDevicesW
EnumDisplaySettingsW
UnionRect
MonitorFromPoint
GetMenuItemCount
RemovePropA
SetPropA
GetPropA
GetClassInfoExW
GetDCEx
GetSystemMetricsForDpi
SetClassLongPtrW
CopyRect
MonitorFromWindow
GetClassLongPtrW
GetSysColorBrush
GetSysColor
TrackPopupMenuEx
LockWindowUpdate
MessageBeep
WindowFromPoint
BringWindowToTop
AttachThreadInput
SetForegroundWindow
GetForegroundWindow
FillRect
GetWindowLongW
GetWindowInfo
EqualRect
InflateRect
AdjustWindowRectExForDpi
MonitorFromRect
InvalidateRgn
ValidateRect
GetUpdateRgn
SetWindowRgn
GetWindowRgn
IntersectRect
GetWindowThreadProcessId
GetParent
GetDesktopWindow
RegisterClassExW
DefWindowProcW
EndMenu
GetCursorPos
GetDoubleClickTime
ReleaseDC
KillTimer
SetTimer
MapWindowPoints
RedrawWindow
PostMessageW
LoadImageW
DestroyCursor
SetMenu
GetMenuInfo
CreateMenu
GetMenuItemInfoW
SetCursor
IsWindowEnabled
NotifyWinEvent
LoadCursorW
GetDC
CallWindowProcW

gdi32

BitBlt
RectVisible
CreateRectRgnIndirect
OffsetRgn
CombineRgn
GetRgnBox
CreateRoundRectRgn
CreateRectRgn
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
GetObjectW
EqualRgn
CreateSolidBrush
PtInRegion
GetStockObject
CreateFontIndirectW
RectInRegion
GetTextExtentPoint32W
GetTextMetricsW
GetClipBox
CreateCompatibleBitmap
GetRegionData
GetDeviceCaps
GetCurrentObject
SetWindowOrgEx
GetWindowOrgEx
SetViewportOrgEx
GetViewportOrgEx
ExtCreateRegion
DeleteObject

advapi32

RegQueryValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW

shell32

ord190
ord155
SHAppBarMessage
SHOpenFolderAndSelectItems

ole32

CoTaskMemAlloc
CoCreateInstance
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
RevokeDragDrop
RegisterDragDrop

oleaut32

CreateErrorInfo
SetErrorInfo
GetErrorInfo
SysFreeString
VariantCopy
VariantChangeType
VariantClear
VariantInit
SysAllocString

dwmapi

DwmDefWindowProc
DwmSetWindowAttribute
DwmExtendFrameIntoClientArea
DwmGetWindowAttribute

oleacc

AccessibleObjectFromWindow
GetRoleTextW
LresultFromObject

comctl32

InitCommonControlsEx

gdiplus

GdipGetFamily
GdipGetTextRenderingHint
GdipGetEmHeight
GdipReleaseDC
GdipGetPenDashCount
GdipCreateFontFamilyFromName
GdipSaveGraphics
GdipGetPenStartCap
GdipGetPenMiterLimit
GdipGetPenLineJoin
GdipGetPathLastPoint
GdipCreateMatrix2
GdipAddPathBezier
GdipDisposeImageAttributes
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipGetDC
GdipSetMatrixElements
GdipSetSmoothingMode
GdipFlush
GdipSetWorldTransform
GdipGetWorldTransform
GdipSetClipPath
GdipCreateLineBrush
GdipSetPenMiterLimit
GdipCreateFont
GdipSetLinePresetBlend
GdipGetCellDescent
GdipSetPenLineCap197819
GdipIsInfiniteRegion
GdipGetFontStyle
GdipCreateRegion
GdipGetPenWidth
GdipMultiplyWorldTransform
GdipSetPenWidth
GdipSetPixelOffsetMode
GdipFillRectangle
GdipAddPathEllipse
GdipGetPenDashArray
GdipSetClipRectI
GdipClosePathFigure
GdipGetLogFontW
GdipGetSmoothingMode
GdipCreateImageAttributes
GdipGetGenericFontFamilySansSerif
GdipGetVisibleClipBoundsI
GdipSetTextContrast
GdipSetPenLineJoin
GdipAddPathRectangle
GdipGetMatrixElements
GdipGetClip
GdipCloneStringFormat
GdipGetCellAscent
GdipStringFormatGetGenericTypographic
GdipGetTextContrast
GdipRestoreGraphics
GdipMeasureString
GdipGetPathGradientPointCount
GdipStringFormatGetGenericDefault
GdipGetCompositingQuality
GdipSetCompositingMode
GdipDeleteFont
GdipGetFontSize
GdipDrawImageI
GdipSetImageAttributesColorMatrix
GdipSetStringFormatAlign
GdipGetFamilyName
GdipSetPathGradientSurroundColorsWithCount
GdipSetStringFormatFlags
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSetPenDashArray
GdipSetPenDashStyle
GdipDrawRectangleI
GdipDrawImageRectI
GdipTranslateWorldTransform
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdiplusShutdown
GdipDrawImageRect
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipCreateRegionHrgn
GdipDeleteRegion
GdipDrawImageRectRect
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipDrawPath
GdipDeletePen
GdipCreatePen1
GdipSetClipRegion
GdipFillPath
GdipCloneBrush
GdipDeleteBrush
GdipGetRegionHRgn
GdipCreateSolidFill
GdipDeletePath
GdipAddPathRectangles
GdipCreatePath
GdipFree
GdipAlloc
GdipGetRegionScans
GdipGetRegionScansCount
GdipDeleteMatrix
GdipCreateMatrix
GdipWindingModeOutline
GdipAddPathLine
GdipAddPathArc
GdipStartPathFigure
GdipDrawString
GdipGetStringFormatTrimming
GdipSetStringFormatHotkeyPrefix
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipCreateStringFormat
GdipSetTextRenderingHint
GdipScaleWorldTransform
GdipGraphicsClear
GdipSetClipHrgn
GdipDrawImage
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipSetCompositingQuality
GdipDeleteFontFamily
GdipGetInterpolationMode
GdipSetPathFillMode
GdipCreateBitmapFromHICON

msimg32

AlphaBlend

wtsapi32

WTSRegisterSessionNotification

msvcp140

??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setf@ios_base@std@@QEAAHHH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
?_Throw_C_error@std@@YAXH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?good@ios_base@std@@QEBA_NXZ
?uncaught_exception@std@@YA_NXZ
_Mtx_unlock
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xbad_alloc@std@@YAXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_Getdays@_Locinfo@std@@QEBAPEBDXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Getmonths@_Locinfo@std@@QEBAPEBDXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
_Mtx_lock

shlwapi

PathFileExistsW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall
__std_exception_destroy
__std_exception_copy
__std_type_info_compare
wcschr
__RTtypeid
_CxxThrowException
__std_terminate
memmove
memcmp
memset
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
memcpy
memchr
__RTDynamicCast

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo
_errno
_initialize_onexit_table
_initialize_narrow_environment
_set_new_handler
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
abort
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free
_callnewh
_recalloc

api-ms-win-crt-string-l1-1-0

isxdigit
wcsncpy_s
isprint
strcmp
wcscpy_s
wcsncat_s
isdigit
ispunct
wcsncpy
isspace
strncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-math-l1-1-0

fmod
floorf
pow
ceilf
floor
ceil
powf
sinf
sqrt
sqrtf
atan2f
atan2
logf

Exports

Exports

DllMain
OWLActivationContextGetActiveDocument
OWLAdjustUIVisibility
OWLApplicationBarKindChangeIsSuppressed
OWLApplicationBarKindGetIsSuppressed
OWLApplicationContainerApplyDocumentLayoutCommand
OWLApplicationContainerCallDefaultProc
OWLApplicationContainerChangeApplicationMenu
OWLApplicationContainerChangeHostViewPreferredSize
OWLApplicationContainerChangeIcon
OWLApplicationContainerChangeIconList
OWLApplicationContainerChangePreferredBounds
OWLApplicationContainerChangePreferredGlobalBounds
OWLApplicationContainerChangeWorkspaceMenu
OWLApplicationContainerChangeWorkspaceMenuSelection
OWLApplicationContainerExitApplicationMenuTracking
OWLApplicationContainerGetApplicationMenu
OWLApplicationContainerGetBounds
OWLApplicationContainerGetDocumentDock
OWLApplicationContainerGetGlobalBounds
OWLApplicationContainerGetHostView
OWLApplicationContainerGetHostViewBounds
OWLApplicationContainerGetHostViewPreferredSize
OWLApplicationContainerGetIcon
OWLApplicationContainerGetIconList
OWLApplicationContainerGetPartForGlobalPoint
OWLApplicationContainerGetPreferredBounds
OWLApplicationContainerGetPreferredGlobalBounds
OWLApplicationContainerGetWorkspaceMenu
OWLApplicationContainerGetWorkspaceMenuSelection
OWLApplicationContainerIsApplicationMenuActive
OWLApplicationContainerRefreshApplicationMenu
OWLApplicationContainerRefreshWorkspaceMenu
OWLCancelTracking
OWLCastToControlBarControl
OWLCastToControlRef
OWLCastToDocumentControl
OWLCastToPaletteControl
OWLCastToToolbarControl
OWLChangeApplicationBarIsDisabled
OWLChangeIconicPanelsDisabled
OWLChangeLastGlobalTargetDisplay
OWLChangeLastTargetDisplay
OWLChangeLockDocumentFocus
OWLChangeLogLevel
OWLChangeNewDocumentMenuDisabled
OWLChangeScreenMode
OWLChangeUIInteractionMode
OWLChangeUIScale
OWLChangeUseSingleDocumentViewMode
OWLCloseDrawer
OWLControlBarChangeGlobalOrigin
OWLControlBarChangeOrigin
OWLControlBarChangeSizes
OWLControlBarChangeSuppressResizeGripper
OWLControlBarCreate
OWLControlBarGetGlobalOrigin
OWLControlBarGetMaximumSize
OWLControlBarGetMinimumSize
OWLControlBarGetOrigin
OWLControlBarGetPreferredSize
OWLControlBarGetResizeGripper
OWLControlBarGetSize
OWLControlBarGetSuppressResizeGripper
OWLControlBarKindChangeIsSuppressed
OWLControlBarKindGetIsSuppressed
OWLControlBarPaneCreate
OWLDebugGetLayoutCount
OWLDebugPrintWidget
OWLDebugPrintWidgetInfo
OWLDestroyAllPalettePanes
OWLDictionaryCreate
OWLDictionaryGetValue
OWLDictionaryGetValueByPointer
OWLDictionaryPutReleasableValue
OWLDictionaryPutValue
OWLDictionaryRelease
OWLDictionaryRetain
OWLDockChangeMode
OWLDockChangePreferredGlobalOrigin
OWLDockChangePreferredOrigin
OWLDockCreate
OWLDockGetAnchor
OWLDockGetBounds
OWLDockGetContent
OWLDockGetGlobalBounds
OWLDockGetMode
OWLDockGetPreferredGlobalOrigin
OWLDockGetPreferredOrigin
OWLDockSuspendResumeReveal
OWLDocumentActivate
OWLDocumentChangeFilePath
OWLDocumentChangeHeightRange
OWLDocumentChangeIconList
OWLDocumentChangeIconMultiList
OWLDocumentChangeIsModified
OWLDocumentChangeLabel
OWLDocumentChangePreferredConstrainedSize
OWLDocumentChangePreferredGlobalWindowBounds
OWLDocumentChangePreferredUnconstrainedSize
OWLDocumentChangePreferredWindowBounds
OWLDocumentChangeRevealMenuItemEnableMode
OWLDocumentChangeRevealMenuItemLabel
OWLDocumentChangeSuspendMRUUpdates
OWLDocumentChangeWidthRange
OWLDocumentCopyLabel
OWLDocumentCopyRevealMenuItemLabel
OWLDocumentCreate
OWLDocumentFocusIsLocked
OWLDocumentGetActivationContext
OWLDocumentGetBounds
OWLDocumentGetFloatingWindowMargin
OWLDocumentGetGlobalPosition
OWLDocumentGetHeightRange
OWLDocumentGetMRUList
OWLDocumentGetMRUListSize
OWLDocumentGetPreferredConstrainedSize
OWLDocumentGetPreferredUnconstrainedSize
OWLDocumentGetRevealMenuItemEnableMode
OWLDocumentGetStatusbar
OWLDocumentGetWidthRange
OWLDocumentIsActive
OWLDocumentIsFullScreenTarget
OWLDocumentIsModified
OWLDocumentMRUUpdatesSuspended
OWLDocumentSetAdditionalContextMenuItems
OWLDocumentSetCursorForTrackResize
OWLDocumentTrackGlobalResize
OWLDocumentTrackResize
OWLDocumentWindowArrange
OWLExecuteTest
OWLGetApplicationBarIsDisabled
OWLGetApplicationContainer
OWLGetBuildBranch
OWLGetBuildDate
OWLGetBuildToolInformation
OWLGetBuildVersion
OWLGetDocumentArea
OWLGetGlobalDocumentArea
OWLGetIconicPanelsDisabled
OWLGetInitializationState
OWLGetKeyboardFocus
OWLGetLastGlobalTargetDisplay
OWLGetLastTargetDisplay
OWLGetLogLevel
OWLGetMessageFilterCode
OWLGetNewDocumentMenuDisabled
OWLGetNullKeyboardFocus
OWLGetNumberOfInstantiatedWidgets
OWLGetScaleFactorForGlobalBounds
OWLGetScreenMode
OWLGetTargetActivationContext
OWLGetUIInteractionMode
OWLGetUIScale
OWLGetUseSingleDocumentViewMode
OWLGetVersion
OWLGetWindowGroup
OWLGetWorkspaceTarget
OWLHostEventAddEventsToHandler
OWLHostEventCallNextHandler
OWLHostEventInstallHandler
OWLHostEventRemoveEventsFromHandler
OWLHostEventRemoveHandler
OWLHostEventSend
OWLHostEventTargetCreate
OWLHostEventTargetRelease
OWLHostEventTargetRetain
OWLIdentifyGlobalArea
OWLInitialize
OWLIsApplicationContainer
OWLIsApplicationContainerControlBar
OWLIsControlBar
OWLIsControlBarPane
OWLIsDock
OWLIsDocument
OWLIsOWLWindow
OWLIsPalette
OWLIsTabGroup
OWLIsTabPane
OWLIsToolbar
OWLIsTrackingMouse
OWLIsTrackingPopupMenu
OWLIsWelcomeScreen
OWLIsWidget
OWLIsWorkspace
OWLKeyboardFocusIsNull
OWLPaletteChangeCurrentState
OWLPaletteChangeIcon
OWLPaletteChangeIconList
OWLPaletteChangeIsMinimized
OWLPaletteChangeLabel
OWLPaletteChangeMaximumSize
OWLPaletteChangeMenu
OWLPaletteChangeMinimumSize
OWLPaletteChangePreferredSizes
OWLPaletteChangeSizes
OWLPaletteChangeStateCount
OWLPaletteChangeSuppressResizeGripper
OWLPaletteChangeSuppressUserClose
OWLPaletteChangeVerticalStepSize
OWLPaletteCopyLabel
OWLPaletteCreate
OWLPaletteGetConstrainedPreferredSize
OWLPaletteGetCurrentState
OWLPaletteGetGlobalIconBounds
OWLPaletteGetIcon
OWLPaletteGetIconList
OWLPaletteGetIsMinimized
OWLPaletteGetMaximumSize
OWLPaletteGetMenu
OWLPaletteGetMinimumSize
OWLPaletteGetResizeGripper
OWLPaletteGetSize
OWLPaletteGetStateCount
OWLPaletteGetSuppressResizeGripper
OWLPaletteGetSuppressUserClose
OWLPaletteGetUnconstrainedPreferredSize
OWLPaletteGetVerticalStepSize
OWLPaletteHide
OWLPaletteIdentify
OWLPaletteMaximize
OWLPaletteShow
OWLPaletteShowInDrawer
OWLRegisterSnapTargetWindow
OWLResetDisplayCache
OWLSetKeyboardFocus
OWLTabGroupChangeHideTabwellWithSingleTabItem
OWLTabGroupChangeSelectedTabItem
OWLTabGroupCreate
OWLTabGroupGetGlobalPartBounds
OWLTabGroupGetGlobalVisiblePartBounds
OWLTabGroupGetHideTabwellWithSingleTabItem
OWLTabGroupGetIsDrawerOpen
OWLTabGroupGetSelectedTabItem
OWLTabGroupGetTabItemAtLocation
OWLTabGroupKindChangeSuppressionInfo
OWLTabGroupKindGetSuppressionInfo
OWLTabGroupSelectNextOpenTabItem
OWLTabPaneChangeLayoutMode
OWLTabPaneChangeMode
OWLTabPaneChangePreferredIconicLength
OWLTabPaneCreate
OWLTabPaneGetBounds
OWLTabPaneGetLayoutMode
OWLTabPaneGetMode
OWLTabPaneGetPreferredIconicLength
OWLTerminate
OWLTestIsAvailable
OWLThemeAddBoolean
OWLThemeAddBrush
OWLThemeAddBrushDefinition
OWLThemeAddColorDefinition
OWLThemeAddFloat
OWLThemeAddFont
OWLThemeAddInterpolator
OWLThemeAddPen
OWLThemeAddPenDefinition
OWLThemeAddSize
OWLThemeAddString
OWLThemeChangeBoolean
OWLThemeChangeBrush
OWLThemeChangeBrushDefinition
OWLThemeChangeColorDefinition
OWLThemeChangeFloat
OWLThemeChangeFont
OWLThemeChangeInterpolator
OWLThemeChangeIsBrightnessAware
OWLThemeChangePen
OWLThemeChangePenDefinition
OWLThemeChangeSize
OWLThemeChangeSourceUIBrightness
OWLThemeChangeString
OWLThemeChangeUIBrightness
OWLThemeChangeUIHueAdjustment
OWLThemeChangeUILightnessAdjustment
OWLThemeChangeUISaturationAdjustment
OWLThemeGetAdjustedColor
OWLThemeGetBoolean
OWLThemeGetBrightnessAdjustedColor
OWLThemeGetBrightnessStops
OWLThemeGetBrush
OWLThemeGetBrushDefinition
OWLThemeGetColorDefinition
OWLThemeGetFloat
OWLThemeGetFont
OWLThemeGetInterpolator
OWLThemeGetIsBrightnessAware
OWLThemeGetKeys
OWLThemeGetPen
OWLThemeGetPenDefinition
OWLThemeGetSize
OWLThemeGetSourceUIBrightness
OWLThemeGetString
OWLThemeGetUIBrightness
OWLThemeGetUIHueAdjustment
OWLThemeGetUILightnessAdjustment
OWLThemeGetUISaturationAdjustment
OWLThemeHasBoolean
OWLThemeHasBrush
OWLThemeHasBrushDefinition
OWLThemeHasColorDefinition
OWLThemeHasFloat
OWLThemeHasFont
OWLThemeHasInterpolator
OWLThemeHasPen
OWLThemeHasPenDefinition
OWLThemeHasSize
OWLThemeHasString
OWLThemeInstallSpectrumTheme
OWLToolbarChangeIcon
OWLToolbarChangeIconList
OWLToolbarChangeMenu
OWLToolbarChangeSizeVariant
OWLToolbarChangeVariantSize
OWLToolbarCreate
OWLToolbarGetBounds
OWLToolbarGetIcon
OWLToolbarGetIconList
OWLToolbarGetMenu
OWLToolbarGetSizeVariant
OWLToolbarGetVariantSize
OWLToolbarKindChangeIsSuppressed
OWLToolbarKindGetIsSuppressed
OWLToolbarRemoveSizeVariant
OWLUIChangeIsActive
OWLUIGetIsActive
OWLUIVisibilityReset
OWLUnregisterSnapTargetWindow
OWLWINThemeChangeBrushColorSource
OWLWINThemeChangePenColorSource
OWLWINThemeGetBrushColorSource
OWLWINThemeGetPenColorSource
OWLWidgetBringToFront
OWLWidgetCalculateNestedVisualMargin
OWLWidgetCanClose
OWLWidgetChangeIsClosed
OWLWidgetChangeIsNativeFullscreen
OWLWidgetChangeUsesGPU
OWLWidgetCreateFocusSpecifier
OWLWidgetDestroy
OWLWidgetGetChildCount
OWLWidgetGetEffectiveVisibility
OWLWidgetGetGlobalBounds
OWLWidgetGetHostEventTarget
OWLWidgetGetIsClosed
OWLWidgetGetIsNativeFullscreen
OWLWidgetGetKind
OWLWidgetGetLatentVisibility
OWLWidgetGetLayoutContextKind
OWLWidgetGetMetrics
OWLWidgetGetNthChild
OWLWidgetGetOSWindowContainer
OWLWidgetGetOccludedWidgets
OWLWidgetGetOwnerWindowIsOffScreen
OWLWidgetGetParent
OWLWidgetGetScaleFactor
OWLWidgetGetUsesGPU
OWLWidgetIterateDescendants
OWLWidgetMenuCallbackAction
OWLWidgetMove
OWLWidgetShow
OWLWin32ApplicationContainerCreate
OWLWin32ApplicationContainerCreateGlobal
OWLWindowAddToGroup
OWLWindowBringToFront
OWLWindowGetGroup
OWLWindowGetHostEventTarget
OWLWindowRemoveFromGroup
OWLWorkspaceBookmarkAssignFromBuffer
OWLWorkspaceBookmarkCreate
OWLWorkspaceBookmarkDestroy
OWLWorkspaceBookmarkGetBuffer
OWLWorkspaceBookmarkRestore
OWLWorkspaceBookmarkSnapshot
OWLWorkspaceChangeIsEnabledPaletteLock
OWLWorkspaceChangeLocaleTextDirection
OWLWorkspaceEnsureTargetDocument
OWLWorkspaceGetIsEnabledPaletteLock
OWLWorkspaceGetLocaleTextDirection
OWLWorkspaceGetWelcomeScreen
OWLWorkspaceHasNativeFullScreenWindows
OWLWorkspaceInvalidateUI
OWLWorkspaceIsLayoutSuspended
OWLWorkspaceIsPerformingLayout
OWLWorkspaceLayoutIsValid
OWLWorkspacePerformChildLayout
OWLWorkspacePerformLayout
OWLWorkspacePerformLayoutWithOptions
OWLWorkspaceResetWin32GraphicsDriver
OWLWorkspaceSuspendResumeLayout
OWLWorkspaceWelcomeScreenChangeHideUIWhenVisible
OWLWorkspaceWelcomeScreenChangeIsEnabled
OWLWorkspaceWelcomeScreenChangeMayAutoShow
OWLWorkspaceWelcomeScreenChangeMode
OWLWorkspaceWelcomeScreenGetHideUIWhenVisible
OWLWorkspaceWelcomeScreenGetIsAvailable
OWLWorkspaceWelcomeScreenGetIsEnabled
OWLWorkspaceWelcomeScreenGetIsVisible
OWLWorkspaceWelcomeScreenGetMayAutoShow
OWLWorkspaceWelcomeScreenGetMode

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 704KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af922f7600ffab2f00a86597bb5e55b1

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:f8:a1:a2:27:0d:39:0b:54:5a:dd:f1:2b:cf:92:19Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

6f:c8:0c:fe:ff:76:4d:3d:01:16:64:ce:0c:77:35:3c:9a:c3:06:81:3b:3c:49:94:bf:df:b8:72:bb:f1:d7:d0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

dwmapi

oleacc

comctl32

gdiplus

msimg32

wtsapi32

msvcp140

shlwapi

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 704KB - Virtual size: 704KB

.data Size: 91KB - Virtual size: 140KB

.pdata Size: 152KB - Virtual size: 151KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 33KB - Virtual size: 32KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:f8:a1:a2:27:0d:39:0b:54:5a:dd:f1:2b:cf:92:19
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

6f:c8:0c:fe:ff:76:4d:3d:01:16:64:ce:0c:77:35:3c:9a:c3:06:81:3b:3c:49:94:bf:df:b8:72:bb:f1:d7:d0
Signer

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 704KB - Virtual size: 704KB

.data
Size: 91KB - Virtual size: 140KB

.pdata
Size: 152KB - Virtual size: 151KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 33KB - Virtual size: 32KB