f54eec06fe8d9ebd7c5b7e98d330b4518f6f68f5b8341a384272e221d4be4b62

Sharing

Copy URL Twitter E-mail

General

Target

f54eec06fe8d9ebd7c5b7e98d330b4518f6f68f5b8341a384272e221d4be4b62
Size

244KB
MD5

916d9c5c5e521df7b70ad0fc8dfaa1c7
SHA1

7d7bd1d9e9d0ec53415210dfeecbc8f4003602f7
SHA256

f54eec06fe8d9ebd7c5b7e98d330b4518f6f68f5b8341a384272e221d4be4b62
SHA512

6d1faf178512937863f8715bb5f36458d405105c7d9530a728a10af873bf8bfb8769e8549edebf9bf28248bedf651d6f3bb7260511e12b4a3ee2a9690556b716
SSDEEP

3072:phvHCRmbC9J9VxAxHcjMUf0l4unY967osmmZmFYK3MOLK7w7vZRbAlcR5:phHCR0D9uunYMUDWmfXAl4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f54eec06fe8d9ebd7c5b7e98d330b4518f6f68f5b8341a384272e221d4be4b62

Files

f54eec06fe8d9ebd7c5b7e98d330b4518f6f68f5b8341a384272e221d4be4b62
.dll windows:6 windows x64 arch:x64

5f907b6ef1cdfd8e53e4cc641f7afd12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gdiplus

GdipFillRectangleI
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteGraphics
GdipCreateFromHDC

frs01

?Add@TextArray@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0TextArray@@QEAA@XZ
?Sort@TextArray@@QEAAX_N0W4Content@1@@Z
?Have@TextArray@@QEBA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?NumberToString@NumberTextConv@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_K_N@Z
?Trim@StringUtils@@SAXAEAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?IsEffectivelyEmpty@StringUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?FindOccurrencePair@StringUtils@@SAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00HAEAH1@Z
?SplitLine@StringUtils@@SAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AEAVTextArray@@@Z
?RemoveDuplicates@TextArray@@QEAA_N_NW4Content@1@@Z
?GetNumber64FromString@NumberTextConv@@SA_JAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetFirst@TextArray@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?RemoveAll@TextArray@@QEAAXXZ
?IsLast@TextArray@@QEBA_N_K@Z
?m_pInstance@AppLogger@@0PEAV1@EA
?AddLine@AppLogger@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?Launchemail@FourthRayUtils@@SA_NW4Target@1@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@11@Z
?Trace@DebugUtils@@SAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@Usource_location@std@@@Z
?ParsePathFromFile@DirUtils@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBV23@@Z
?ParseParentDir@DirUtils@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBV23@@Z
?NumberToString@NumberTextConv@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H_NHAEBV23@@Z
?MatchFirstChars@StringUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0_N@Z
?CopyTextToClipboard@ClipboardUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PEAVCWnd@@@Z
?ReplaceInAll@TextArray@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetFileInfoCore@FileUtils@@SAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEA_KAEAVDateTime@@@Z
?ConvertDateToText@DateTime@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBV1@_N111@Z
?CreateDirectoryA@DirUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?EnsureTrailingBackslash@DirUtils@@SAXAEAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?ReplaceBadFileChars@FileUtils@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBV23@D_N@Z
?HasSubdirectory@DirUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@K@Z
?DoesFileExist@FileUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?IsFile@FileUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N1@Z
?DoesDirExist@DirUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?IsDir@DirUtils@@SA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?ParseClipboardText@ClipboardUtils@@SA_NAEAVTextArray@@PEAVCWnd@@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??4TextArray@@QEAAAEAV0@AEBV0@@Z
?IsEmpty@TextArray@@QEBA_NXZ
?GetCount@TextArray@@QEBA_KXZ
?GetCopyAt@TextArray@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_K@Z
??1TextArray@@QEAA@XZ
?DecryptText@StringUtils@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBV?$vector@HV?$allocator@H@std@@@std@@@Z
?ParseFileNameFromPath@FileUtils@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBV23@_N@Z
??0TextArray@@QEAA@AEBV0@@Z
?ConvertBytesToString@NumberTextConv@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_K@Z
?GetFileList@FileUtils@@SAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBVTextArray@@_NAEAV4@222@Z
?ConvertTimeToText@DateTime@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBV1@_N@Z

frs12

??1ImageWrapper@@QEAA@XZ
?Get@BkgStyle@@QEBAXW4UIComponent@1@AEAPEAVShadeProps@@@Z
?GetImageSize@GraphicsUtils@@SAXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEAH1@Z
?GetInstance@BkgStyle@@SAPEAV1@XZ
?SetRotateFlip@ImageWrapper@@QEAAXW4RotateFlipType@Gdiplus@@@Z
?CalculateScaledDims@GraphicsUtils@@SAXHHHHAEAH0_N@Z
?GetHeight@ImageWrapper@@QEBAIXZ
?SetImageFile@ImageWrapper@@QEAA_NAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?DrawImage@ImageWrapper@@QEAAXAEAVGraphics@Gdiplus@@AEBVRectF@3@@Z
?GetWidth@ImageWrapper@@QEBAIXZ
??0ImageWrapper@@QEAA@XZ
??0CMemDC@@QEAA@PEAVCDC@@AEBVCRect@@@Z
??1CMemDC@@UEAA@XZ
?WindowToClipboard@GraphicsUtils@@SAXPEAVCWnd@@_N@Z
?GetImageFile@ImageWrapper@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ

frs20

??0CFRSDialog@@QEAA@PEBDPEAVCWnd@@PEAUHINSTANCE__@@@Z
??1CFRSDialog@@UEAA@XZ
?NSFlexVertShift@@3VNSFlexVerticalConstraint@@B
?DoDataExchange@CFRSDialog@@MEAAXPEAVCDataExchange@@@Z
?OnInitDialog@CFRSDialog@@MEAAHXZ
?AddH4@CDocCenterWnd@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0NSFlexHorizontalConstraint@@QEAA@II@Z
?SetTitle@CFRSDialog@@IEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?DoStoreWindowSize@CFRSDialog@@IEAAXXZ
?ShowContextSensitiveHelp@CFRSDialog@@MEAAXAEAVCDocCenterWnd@@@Z
?DisableShade@CFRSDialog@@IEAAXXZ
??0CFRSDialog@@QEAA@IPEAVCWnd@@PEAUHINSTANCE__@@@Z
?GetThisClass@CFRSDialog@@SAPEAUCRuntimeClass@@XZ
?GetFlag@AppSettings@@QEBA_NH@Z
?AddH3@CDocCenterWnd@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?AddParagraphBold@CDocCenterWnd@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?NSFlexHorzHalfRight@@3VNSFlexHorizontalConstraint@@B
?NSFlexHorzCenterShift@@3VNSFlexHorizontalConstraint@@B
?NSFlexHorzHalfLeft@@3VNSFlexHorizontalConstraint@@B
?AddH2@CDocCenterWnd@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetTitle@CFRSDialog@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?GetTitle@CFRSDialog@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetInstance@AppSettings@@SAPEAV1@XZ
?GetText@AppSettings@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?NSFlexHorzFixed@@3VNSFlexHorizontalConstraint@@B
?GetThisMessageMap@CFRSDialog@@KAPEBUAFX_MSGMAP@@XZ
?NSFlexVertFullStretch@@3VNSFlexVerticalConstraint@@B
?DrawTextA@CDocCenterWnd@@QEAAX_N@Z
?ClearText@CDocCenterWnd@@QEAAXXZ
?AddParagraph@CDocCenterWnd@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?UpdateMaximizeButton@CFRSDialog@@MEAAXXZ
?DocCenterShown@CFRSDialog@@MEAAXXZ
?DocCenterHidden@CFRSDialog@@MEAAXXZ
?SetGUID@CFRSDialog@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetShadingStyleID@CFRSDialog@@MEBAXAEAW4UIComponent@BkgStyle@@@Z
?DoModal@CFRSDialog@@UEAA_JXZ
?Create@CFRSDialog@@UEAAHPEBDPEAVCWnd@@@Z
?Create@CFRSDialog@@UEAAHIPEAVCWnd@@@Z
?GetRuntimeClass@CFRSDialog@@UEBAPEAUCRuntimeClass@@XZ
?OnLButtonDown@CFRSDialog@@IEAAXIVCPoint@@@Z
?PreTranslateMessage@CFRSDialog@@MEAAHPEAUtagMSG@@@Z
?ApplyWindowSize@CFRSDialog@@IEAAXXZ
?NSFlexHorzFullStretch@@3VNSFlexHorizontalConstraint@@B
?NSFlexHorzShift@@3VNSFlexHorizontalConstraint@@B
?NSFlexVertFixed@@3VNSFlexVerticalConstraint@@B
?AddFlexConstraint@CFRSDialog@@IEAAXIAEBVNSFlexHorizontalConstraint@@AEBVNSFlexVerticalConstraint@@@Z

frs15

??0CFRSRichEdit@@QEAA@XZ
?SetFlatLook@CFRSRichEdit@@QEAAXXZ
?ScrollToTheTop@CFRSRichEdit@@QEAAXXZ
??1CFRSRichEdit@@UEAA@XZ
?SelectNextEntry@WndUtils@@SAXAEAVCListBox@@H@Z
?SetRestrictToDir@CDirTreeCtrl@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetShowSystemDirs@CDirTreeCtrl@@QEAAX_N@Z
?ClearHighlights@CHighlightCheckListbox@@QEAAXXZ
?EnableWindow@CTransparentStatic@@QEAAXH_N@Z
??1CHighlightCheckListbox@@UEAA@XZ
?AdjustHScrollbar@WndUtils@@SAXAEAVCListBox@@@Z
?SetHighlight@CHighlightCheckListbox@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0CHighlightCheckListbox@@QEAA@XZ
?Step@CGradientProgressCtrl@@QEAAXXZ
?Position@CGradientProgressCtrl@@QEAAXH@Z
?Init@CGradientProgressCtrl@@QEAAXHAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_NKKKKW4BorderStyle@1@@Z
?Create@CGradientProgressCtrl@@QEAA_NPEAVCWnd@@AEAVCRect@@I@Z
??0CGradientProgressCtrl@@QEAA@XZ
?FitWindowToSize@WndUtils@@SAXAEAVCWnd@@HH@Z
??1CBackgroundEdit@@UEAA@XZ
?SetColors@CBackgroundEdit@@QEAAXKK@Z
??0CBackgroundEdit@@QEAA@XZ
?ToggleUnderscore@CTransparentCheckbox@@QEAAXXZ
??1CGroupStatic@@UEAA@XZ
??0CFRSEdit@@QEAA@XZ
??0CGroupStatic@@QEAA@XZ
?ToggleUnderscore@CFRSButton@@QEAAXXZ
?SetCheck@CTransparentCheckbox@@QEAAX_N@Z
?SetWindowTextA@CTransparentCheckbox@@QEAAXPEBD@Z
?EnableWindow@CTransparentCheckbox@@QEAAXH@Z
??1CFRSEdit@@UEAA@XZ
?HasChildren@CDirTreeCtrl@@QEBA_NXZ
?SetSelectedDir@CDirTreeCtrl@@QEAAPEAU_TREEITEM@@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N@Z
?MSG_DIR_TREE_SELCHANGED@CDirTreeCtrl@@2IB
??0CDirTreeCtrl@@QEAA@XZ
??0CTransparentCheckbox@@QEAA@XZ
??1CDirTreeCtrl@@UEAA@XZ
??1CTransparentCheckbox@@UEAA@XZ
??1CTransparentStatic@@UEAA@XZ
?SetWindowTextA@CTransparentStatic@@QEAAXPEBD_N@Z
?UseEllipsis@CTransparentStatic@@QEAAXW4Ellipsis@1@_N@Z
?SetContentType@CTransparentStatic@@QEAAXW4ContentType@1@_N@Z
?ToggleUnderscore@CTransparentStatic@@QEAAXXZ
?SetShadeProps@CFRSButton@@QEAAXAEBVShadeProps@@@Z
??0CFRSButton@@QEAA@XZ
??0CTransparentStatic@@QEAA@XZ
??1CFRSButton@@UEAA@XZ
??1CGradientProgressCtrl@@UEAA@XZ
?GetWindowPlacement@WndUtils@@SA?AVCRect@@PEAVCWnd@@H@Z

frs02

?Resume@TimerThread@@UEAAXXZ
?Reset@TimerThread@@QEAAXXZ
??1TimerThread@@UEAA@XZ
?SetPriority@TimerThread@@QEAAXH@Z
?Stop@TimerThread@@UEAAXK@Z
??0TimerThread@@QEAA@IQEAUHWND__@@I_N_K_J@Z
?Pause@TimerThread@@UEAAXXZ

frs13

?LoadFilteredPopupMenu@CImageMenu@@QEAAPEAV1@IPEAVCWnd@@@Z
??1CImageMenu@@UEAA@XZ
??0CImageMenu@@QEAA@XZ
?TrackPopupMenu@CImageMenu@@QEAAHIHHPEAVCWnd@@PEBUtagRECT@@@Z

frs16

??0CTimeEdit@@QEAA@XZ
??1CDateEdit@@UEAA@XZ
?WM_CLOSE_DROPDOWN_WND@CDropBaseEdit@@2IB
?SetTime@CTimeEdit@@QEAAXAEBVDateTime@@_N@Z
?Init@CDateEdit@@QEAAXAEBVDateTime@@_N@Z
?Init@CTimeEdit@@QEAAXII_N0@Z
??0CDateEdit@@QEAA@XZ
??1CTimeEdit@@UEAA@XZ

mfc140

ord13135
ord2917
ord305
ord5691
ord2899
ord12391
ord12214
ord4502
ord4503
ord8374
ord2229
ord1485
ord2332
ord473
ord1155
ord9941
ord2687
ord14113
ord3740
ord2902
ord8401
ord4070
ord3052
ord5982
ord13331
ord2696
ord8780
ord11850
ord1686
ord4760
ord4836
ord4821
ord5729
ord8862
ord6233
ord8404
ord4074
ord3091
ord8784
ord5896
ord6321
ord988
ord4993
ord6749
ord8417
ord8418
ord1055
ord3738
ord2901
ord8403
ord4072
ord3053
ord8781
ord6237
ord1109
ord5224
ord8471
ord6282
ord3073
ord8435
ord7510
ord5331
ord6698
ord13680
ord8432
ord878
ord1367
ord5136
ord2207
ord13683
ord14139
ord2684
ord2264
ord2512
ord4348
ord12952
ord2905
ord8025
ord13784
ord7519
ord13689
ord4648
ord1504
ord5656
ord300
ord301
ord1670
ord7862
ord11761
ord11037
ord3300
ord3299
ord5980
ord13327
ord3205
ord3202
ord7881
ord2695
ord14279
ord9933
ord9935
ord9934
ord9932
ord9936
ord5435
ord11365
ord11366
ord8792
ord11719
ord3710
ord11575
ord14128
ord8618
ord6703
ord10644
ord8909
ord3166
ord13438
ord11892
ord11888
ord1695
ord1717
ord1743
ord1729
ord1750
ord4765
ord4832
ord4777
ord4795
ord4789
ord4783
ord4842
ord4826
ord4771
ord4848
ord4803
ord4741
ord4756
ord4817
ord4351
ord9343
ord4343
ord2962
ord14136
ord14134
ord6607
ord11357
ord13284
ord5704
ord2627
ord11754
ord3804
ord3271
ord3270
ord3165
ord11798
ord5064
ord5347
ord5536
ord9001
ord5323
ord5566
ord5067
ord5213
ord5049
ord7430
ord7431
ord7420
ord5211
ord7890
ord9903
ord8863
ord266
ord10657
ord1671
ord3591
ord3705
ord8693
ord4715
ord310
ord4326
ord316
ord1032
ord1487
ord7620

kernel32

GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleHandleExA
InitializeCriticalSectionAndSpinCount
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW

user32

OffsetRect
GetSysColor
GetWindowRect
GetDesktopWindow
AdjustWindowRectEx
RegisterWindowMessageA
IsWindow
GetClientRect
ClientToScreen
PostMessageA
CopyRect
UpdateWindow
IsWindowVisible
EnableWindow
SendMessageA
InvalidateRect
GetFocus

gdi32

GetStockObject

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate
__std_exception_copy
__std_exception_destroy
memset
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
memmove
_CxxThrowException
memcpy

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

terminate
_cexit
_crt_atexit
_initterm
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initterm_e
_execute_onexit_table

Exports

Exports

??0CDateTimeDlg@@QEAA@PEAVCWnd@@AEBVTextArray@@VDateTime@@@Z
??0CDirSelectDlg@@QEAA@PEAVCWnd@@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_N221@Z
??0CFRSMsgDlg@@QEAA@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PEAVCWnd@@W4ShowButton@0@_N3H0@Z
??0CFileFilterDlg@@QEAA@AEBVTextArray@@PEAVCWnd@@@Z
??0CFindDlg@@QEAA@PEAVCWnd@@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@1_N@Z
??0CFullScreenDlg@@QEAA@IPEAVCWnd@@PEAUHINSTANCE__@@@Z
??0CFullScreenDlg@@QEAA@PEBDPEAVCWnd@@PEAUHINSTANCE__@@@Z
??0CMultiDirSelectDlg@@QEAA@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AEBVTextArray@@PEAVCWnd@@@Z
??0CNameDlg@@QEAA@PEAVCWnd@@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@1_N22@Z
??0CNotesDlg@@QEAA@PEAVCWnd@@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@1_N2@Z
??0CPreviewWnd@@QEAA@PEAVCWnd@@_N1@Z
??0CProgressDlg@@QEAA@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@JPEAVCWnd@@_N2@Z
??0CSelectFilesDlg@@QEAA@PEAVCWnd@@AEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBVTextArray@@_NH2K@Z
??1CDateTimeDlg@@UEAA@XZ
??1CDirSelectDlg@@UEAA@XZ
??1CFRSMsgDlg@@UEAA@XZ
??1CFileFilterDlg@@UEAA@XZ
??1CFindDlg@@UEAA@XZ
??1CFullScreenDlg@@UEAA@XZ
??1CMultiDirSelectDlg@@UEAA@XZ
??1CNameDlg@@UEAA@XZ
??1CNotesDlg@@UEAA@XZ
??1CPreviewWnd@@UEAA@XZ
??1CProgressDlg@@UEAA@XZ
??1CSelectFilesDlg@@UEAA@XZ
??_7CDateTimeDlg@@6B@
??_7CDirSelectDlg@@6B@
??_7CFRSMsgDlg@@6B@
??_7CFileFilterDlg@@6B@
??_7CFindDlg@@6B@
??_7CFullScreenDlg@@6B@
??_7CMultiDirSelectDlg@@6B@
??_7CNameDlg@@6B@
??_7CNotesDlg@@6B@
??_7CPreviewWnd@@6B@
??_7CProgressDlg@@6B@
??_7CSelectFilesDlg@@6B@
?ApplyBackgroundShading@CFileFilterDlg@@IEAAXXZ
?DoCheckAll@CSelectFilesDlg@@IEAAXH@Z
?DoDataExchange@CDateTimeDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CDirSelectDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CFRSMsgDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CFileFilterDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CFindDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CMultiDirSelectDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CNameDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CNotesDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CPreviewWnd@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CProgressDlg@@MEAAXPEAVCDataExchange@@@Z
?DoDataExchange@CSelectFilesDlg@@MEAAXPEAVCDataExchange@@@Z
?GetCaseSensitive@CFileFilterDlg@@QEBA_NXZ
?GetDateTime@CDateTimeDlg@@QEBAXAEAVDateTime@@@Z
?GetDir@CDirSelectDlg@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetDirsAdded@CDirSelectDlg@@QEBAXAEAVTextArray@@@Z
?GetFileInfo@CSelectFilesDlg@@IEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AEBV23@@Z
?GetFileSpecs@CFileFilterDlg@@QEBAAEBVTextArray@@XZ
?GetImageFile@CPreviewWnd@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetIncludeSubDir@CDirSelectDlg@@QEBA_NXZ
?GetMatchCase@CFindDlg@@QEBA_NXZ
?GetMaxDate@CFileFilterDlg@@QEBA?AVDateTime@@XZ
?GetMessageMap@CDateTimeDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CDirSelectDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CFRSMsgDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CFileFilterDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CFindDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CFullScreenDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CMultiDirSelectDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CNameDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CNotesDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CPreviewWnd@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CProgressDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMessageMap@CSelectFilesDlg@@MEBAPEBUAFX_MSGMAP@@XZ
?GetMinDate@CFileFilterDlg@@QEBA?AVDateTime@@XZ
?GetName@CNameDlg@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetNotes@CNotesDlg@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetRuntimeClass@CFullScreenDlg@@UEBAPEAUCRuntimeClass@@XZ
?GetSearchDown@CFindDlg@@QEBA_NXZ
?GetSelectedDirs@CMultiDirSelectDlg@@QEBAXAEAVTextArray@@@Z
?GetSelectedFiles@CSelectFilesDlg@@QEBAXAEAVTextArray@@@Z
?GetShowMessageAgain@CFRSMsgDlg@@QEBA_NXZ
?GetSizeMax@CFileFilterDlg@@QEBA_KXZ
?GetSizeMin@CFileFilterDlg@@QEBA_KXZ
?GetStopAtEnd@CFindDlg@@QEBA_NXZ
?GetText@CFindDlg@@QEBA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetThisClass@CFullScreenDlg@@SAPEAUCRuntimeClass@@XZ
?GetThisMessageMap@CDateTimeDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CDirSelectDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CFRSMsgDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CFileFilterDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CFindDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CFullScreenDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CMultiDirSelectDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CNameDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CNotesDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CPreviewWnd@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CProgressDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CSelectFilesDlg@@KAPEBUAFX_MSGMAP@@XZ
?GetTotalCount@CProgressDlg@@QEBAJXZ
?GetUseSizeMax@CFileFilterDlg@@QEBA_NXZ
?GetUseSizeMin@CFileFilterDlg@@QEBA_NXZ
?GetWholeWord@CFindDlg@@QEBA_NXZ
?HideButtons@CFRSMsgDlg@@IEAAX_N0@Z
?IncreaseCount@CProgressDlg@@QEAAXXZ
?IsFullscreen@CFullScreenDlg@@QEBA_NXZ
?MSG_PREVIEWWND_CLOSING@CPreviewWnd@@2IB
?MoveButtons@CFRSMsgDlg@@IEAAX_N00@Z
?MoveEditCtrl@CFRSMsgDlg@@IEAAXXZ
?OnAddButton@CDirSelectDlg@@IEAAXXZ
?OnAddButton@CMultiDirSelectDlg@@IEAAXXZ
?OnAutoDismiss@CFRSMsgDlg@@IEAA_J_K_J@Z
?OnBiggerthanCheck@CFileFilterDlg@@IEAAXXZ
?OnCancel@CSelectFilesDlg@@MEAAXXZ
?OnCancelButton@CDateTimeDlg@@IEAAXXZ
?OnCancelButton@CDirSelectDlg@@IEAAXXZ
?OnCancelButton@CFRSMsgDlg@@IEAAXXZ
?OnCancelButton@CFileFilterDlg@@IEAAXXZ
?OnCancelButton@CFindDlg@@IEAAXXZ
?OnCancelButton@CMultiDirSelectDlg@@IEAAXXZ
?OnCancelButton@CNotesDlg@@IEAAXXZ
?OnCaseCheck@CFileFilterDlg@@IEAAXXZ
?OnChangeDateEdit@CDateTimeDlg@@IEAAXXZ
?OnChangeGoToEdit@CSelectFilesDlg@@IEAAXXZ
?OnChangeNameEdit@CNameDlg@@IEAAXXZ
?OnChangeNameEdit@CNotesDlg@@IEAAXXZ
?OnChangeTextEdit@CFileFilterDlg@@IEAAXXZ
?OnChangeTextEdit@CFindDlg@@IEAAXXZ
?OnChangeTimeEdit@CDateTimeDlg@@IEAAXXZ
?OnCheckChangeFilesList@CSelectFilesDlg@@IEAAXXZ
?OnCheckChangeListbox@CFileFilterDlg@@IEAAXXZ
?OnClose@CPreviewWnd@@IEAAXXZ
?OnCopyButton@CDirSelectDlg@@IEAAXXZ
?OnDblclkList@CMultiDirSelectDlg@@IEAAXXZ
?OnDblclkTree@CDirSelectDlg@@IEAAXPEAUtagNMHDR@@PEA_J@Z
?OnDblclkTree@CMultiDirSelectDlg@@IEAAXPEAUtagNMHDR@@PEA_J@Z
?OnDirectorySelChange@CDirSelectDlg@@IEAA_J_K_J@Z
?OnDirectorySelChange@CMultiDirSelectDlg@@IEAA_J_K_J@Z
?OnDirectorySelChange@CSelectFilesDlg@@IEAA_J_K_J@Z
?OnDoubleClickFilesList@CSelectFilesDlg@@IEAAXXZ
?OnFindButton@CFindDlg@@IEAAXXZ
?OnGetMinMaxInfo@CFullScreenDlg@@IEAAXPEAUtagMINMAXINFO@@@Z
?OnGoToButton@CSelectFilesDlg@@IEAAXXZ
?OnImageTimerThread@CPreviewWnd@@IEAA_J_K_J@Z
?OnInitDialog@CDateTimeDlg@@MEAAHXZ
?OnInitDialog@CDirSelectDlg@@MEAAHXZ
?OnInitDialog@CFRSMsgDlg@@MEAAHXZ
?OnInitDialog@CFileFilterDlg@@MEAAHXZ
?OnInitDialog@CFindDlg@@MEAAHXZ
?OnInitDialog@CFullScreenDlg@@MEAAHXZ
?OnInitDialog@CMultiDirSelectDlg@@MEAAHXZ
?OnInitDialog@CNameDlg@@MEAAHXZ
?OnInitDialog@CNotesDlg@@MEAAHXZ
?OnInitDialog@CPreviewWnd@@MEAAHXZ
?OnInitDialog@CProgressDlg@@MEAAHXZ
?OnInitDialog@CSelectFilesDlg@@MEAAHXZ
?OnLButtonDown@CDateTimeDlg@@IEAAXIVCPoint@@@Z
?OnLButtonDown@CFileFilterDlg@@IEAAXIVCPoint@@@Z
?OnLButtonDown@CPreviewWnd@@IEAAXIVCPoint@@@Z
?OnMove@CDateTimeDlg@@IEAAXHH@Z
?OnMove@CFileFilterDlg@@IEAAXHH@Z
?OnNameDlgCancelButton@CNameDlg@@IEAAXXZ
?OnNameDlgOkButton@CNameDlg@@IEAAXXZ
?OnNcLButtonDown@CDateTimeDlg@@IEAAXIVCPoint@@@Z
?OnNcLButtonDown@CFileFilterDlg@@IEAAXIVCPoint@@@Z
?OnNewSearchButton@CFindDlg@@IEAAXXZ
?OnNewerthanCheck@CFileFilterDlg@@IEAAXXZ
?OnOKButton@CDateTimeDlg@@IEAAXXZ
?OnOKButton@CDirSelectDlg@@IEAAXXZ
?OnOKButton@CMultiDirSelectDlg@@IEAAXXZ
?OnOk@CSelectFilesDlg@@IEAAXXZ
?OnOkButton@CFRSMsgDlg@@IEAAXXZ
?OnOkButton@CFileFilterDlg@@IEAAXXZ
?OnOkButton@CNotesDlg@@IEAAXXZ
?OnOlderthanCheck@CFileFilterDlg@@IEAAXXZ
?OnPaint@CPreviewWnd@@IEAAXXZ
?OnPasteButton@CDirSelectDlg@@IEAAXXZ
?OnPreviewClose@CPreviewWnd@@IEAAXXZ
?OnPreviewCopy@CPreviewWnd@@IEAAXXZ
?OnRButtonDown@CPreviewWnd@@IEAAXIVCPoint@@@Z
?OnRemoveButton@CMultiDirSelectDlg@@IEAAXXZ
?OnSelchangeList@CMultiDirSelectDlg@@IEAAXXZ
?OnSelectAllButton@CSelectFilesDlg@@IEAAXXZ
?OnSelectChangeFilesList@CSelectFilesDlg@@IEAAXXZ
?OnSelectNoneButton@CSelectFilesDlg@@IEAAXXZ
?OnSmallerthanCheck@CFileFilterDlg@@IEAAXXZ
?OnSubdirectoriesCheck@CDirSelectDlg@@IEAAXXZ
?OnTechSupportButton@CFRSMsgDlg@@IEAAXXZ
?PreTranslateMessage@CDateTimeDlg@@MEAAHPEAUtagMSG@@@Z
?PreTranslateMessage@CDirSelectDlg@@MEAAHPEAUtagMSG@@@Z
?PreTranslateMessage@CFRSMsgDlg@@MEAAHPEAUtagMSG@@@Z
?PreTranslateMessage@CFileFilterDlg@@MEAAHPEAUtagMSG@@@Z
?PreTranslateMessage@CFindDlg@@MEAAHPEAUtagMSG@@@Z
?PreTranslateMessage@CMultiDirSelectDlg@@MEAAHPEAUtagMSG@@@Z
?PreTranslateMessage@CSelectFilesDlg@@MEAAHPEAUtagMSG@@@Z
?RequireVScrollbar@CFRSMsgDlg@@IEAA_NAEBVCRect@@@Z
?SetButtonIcons@CFRSMsgDlg@@IEAAX_N0@Z
?SetButtonShading@CFRSMsgDlg@@IEAAX_N00@Z
?SetButtonText@CFRSMsgDlg@@IEAAXXZ
?SetCaseSensitive@CFileFilterDlg@@QEAAX_N@Z
?SetCount@CProgressDlg@@QEAAXJ@Z
?SetFileSpecs@CFileFilterDlg@@QEAAXAEBVTextArray@@@Z
?SetImageFile@CPreviewWnd@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@_NH@Z
?SetMaxDate@CFileFilterDlg@@QEAAXAEBVDateTime@@@Z
?SetMinDate@CFileFilterDlg@@QEAAXAEBVDateTime@@@Z
?SetMsg@CProgressDlg@@QEAAXAEBV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetSizeMax@CFileFilterDlg@@QEAAX_K@Z
?SetSizeMin@CFileFilterDlg@@QEAAX_K@Z
?SetTotal@CProgressDlg@@QEAAXJ@Z
?SetUseSizeMax@CFileFilterDlg@@QEAAX_N@Z
?SetUseSizeMin@CFileFilterDlg@@QEAAX_N@Z
?ShowContextSensitiveHelp@CDateTimeDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?ShowContextSensitiveHelp@CDirSelectDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?ShowContextSensitiveHelp@CFRSMsgDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?ShowContextSensitiveHelp@CFileFilterDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?ShowContextSensitiveHelp@CFindDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?ShowContextSensitiveHelp@CMultiDirSelectDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?ShowContextSensitiveHelp@CNameDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?ShowContextSensitiveHelp@CNotesDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?ShowContextSensitiveHelp@CSelectFilesDlg@@MEAAXAEAVCDocCenterWnd@@@Z
?TerminatePhotoTimerThread@CPreviewWnd@@IEAAXXZ
?TerminateTimerThread@CFRSMsgDlg@@IEAAXXZ
?ToggleFullscreen@CFullScreenDlg@@AEAAXXZ
?UpdateButtons@CSelectFilesDlg@@IEAAXXZ
?UpdateFileListing@CSelectFilesDlg@@IEAAXXZ
?UpdateFilesSelectedStatic@CSelectFilesDlg@@IEAAXXZ
?UpdateOKButton@CSelectFilesDlg@@IEAAXXZ
?_GetBaseClass@CFullScreenDlg@@KAPEAUCRuntimeClass@@XZ
?classCFullScreenDlg@CFullScreenDlg@@2UCRuntimeClass@@B

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f907b6ef1cdfd8e53e4cc641f7afd12

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

frs01

frs12

frs20

frs15

frs02

frs13

frs16

mfc140

kernel32

user32

gdi32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 124KB

.rdata Size: 90KB - Virtual size: 90KB

.data Size: 2KB - Virtual size: 10KB

.pdata Size: 11KB - Virtual size: 11KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 124KB - Virtual size: 124KB

.rdata
Size: 90KB - Virtual size: 90KB

.data
Size: 2KB - Virtual size: 10KB

.pdata
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 5KB - Virtual size: 4KB