C:\Program Files (x86)\e\lib\ExuiKrnln\ExuiKrnln_X32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3a6bdac4f32e8d24158e550c3dcab766e0b105916a2e47aed20aee20dbfd7ec4.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3a6bdac4f32e8d24158e550c3dcab766e0b105916a2e47aed20aee20dbfd7ec4.dll
Resource
win10v2004-20240508-en
General
-
Target
3a6bdac4f32e8d24158e550c3dcab766e0b105916a2e47aed20aee20dbfd7ec4
-
Size
1.6MB
-
MD5
4dbbd7a5338af18d8b15e948a2b540f7
-
SHA1
be049f302f7c89abc81ad4ac9a415992bca4aa7f
-
SHA256
3a6bdac4f32e8d24158e550c3dcab766e0b105916a2e47aed20aee20dbfd7ec4
-
SHA512
5529063377ddcdca7ffb7975e5f70a0855f9bf800dc1f8667e36b0ce86f59800602e2cf8e0db7e1b485415cdd2549d1815d293d7ff51184cf41f30794e1e259b
-
SSDEEP
24576:cvh2ggAeJxDa1PbaNahWwKMZ6hL72HUI88csv:ZyGxDa1jYgWwj0L72+85
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a6bdac4f32e8d24158e550c3dcab766e0b105916a2e47aed20aee20dbfd7ec4
Files
-
3a6bdac4f32e8d24158e550c3dcab766e0b105916a2e47aed20aee20dbfd7ec4.dll windows:5 windows x86 arch:x86
0972a2c2e9655d169235b45b93aba48d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalLock
GlobalUnlock
Sleep
CreateThread
GetStdHandle
WriteConsoleA
SetErrorMode
lstrlenA
MultiByteToWideChar
FreeConsole
AddVectoredExceptionHandler
WideCharToMultiByte
FormatMessageA
AllocConsole
SetConsoleTitleW
ChangeTimerQueueTimer
ReadFile
FreeLibrary
DecodePointer
WriteConsoleW
SetEndOfFile
HeapSize
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
GlobalFree
LoadLibraryW
GetConsoleMode
SetFilePointerEx
LCMapStringW
CompareStringW
GetStringTypeW
GetTimeZoneInformation
GetFileType
GetACP
HeapAlloc
HeapFree
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
QueryPerformanceFrequency
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
SetLastError
GetLastError
InterlockedFlushSList
RaiseException
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GlobalAlloc
GlobalSize
InterlockedIncrement
CloseHandle
CreateFileW
InterlockedDecrement
WriteFile
GetTempPathW
GetModuleHandleW
FindResourceW
LoadResource
LockResource
FreeResource
GetVersionExW
SizeofResource
DeleteTimerQueueTimer
GetCurrentThreadId
CreateTimerQueueTimer
MulDiv
HeapReAlloc
GetProcAddress
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ReadConsoleW
lstrlenW
user32
GetSysColor
SetPropW
GetAsyncKeyState
IsWindow
SendMessageW
SetCursor
ReleaseDC
ClientToScreen
PostMessageW
SetWindowRgn
GetWindowTextLengthW
SetWindowTextW
RegisterClassExW
IsWindowEnabled
MoveWindow
GetDialogBaseUnits
IsZoomed
IsIconic
GetWindowTextW
MonitorFromPoint
CreateIconFromResourceEx
DestroyIcon
EnumChildWindows
GetMessageW
MonitorFromWindow
EndDialog
GetClassInfoW
GetMonitorInfoW
DialogBoxIndirectParamW
DefWindowProcW
CreateWindowExW
PeekMessageW
RegisterClassW
GetForegroundWindow
LoadIconW
FindWindowW
SetForegroundWindow
GetCursorPos
GetWindowLongW
ShowWindowAsync
CallWindowProcW
GetPropW
GetWindowRect
GetFocus
DestroyWindow
IsWindowVisible
SetWindowPos
FillRect
CallNextHookEx
ShowWindow
SetClassLongW
GetCapture
DispatchMessageW
RedrawWindow
TrackMouseEvent
MessageBoxA
SetFocus
TranslateMessage
LoadCursorW
SetParent
SetCapture
SetWindowsHookExW
SetClassLongA
SetWindowLongW
GetClassLongW
UpdateLayeredWindow
IsWindowUnicode
GetParent
ReleaseCapture
BeginPaint
EndPaint
EnableWindow
GetDC
ScreenToClient
gdi32
GetObjectA
RemoveFontResourceW
AddFontResourceW
SetRectRgn
BitBlt
GetDeviceCaps
RectInRegion
CreateSolidBrush
FillRgn
GetRgnBox
StretchBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
CreateRoundRectRgn
CreateRectRgn
DeleteDC
SelectClipRgn
DeleteObject
CombineRgn
shell32
Shell_NotifyIconW
DragAcceptFiles
ole32
CoCreateInstance
CoUninitialize
CLSIDFromString
CreateStreamOnHGlobal
PropVariantClear
CoInitializeEx
d2d1
ord1
ord2
dwrite
DWriteCreateFactory
Exports
Exports
AddPathEllipse_PathEx
AddPathMultipleRoundRect_PathEx
AddPathPie_PathEx
AddPathRectangle_PathEx
AddPathRoundRect_PathEx
AddPathTriangle_PathEx
BeginDraw_CanvasEx
BindFunction_WebBrowserEx
BreakCell_AdvancedFormEx
CallFeedBackEvent_WindowEx
CallInternalFunction_Ex
Clear_CanvasEx
Clear_DrawPanelEx
CloseDragDrop_WindowBoxEx
CloseTipBoxEx
Close_DownlistEx
Close_DownlistEx_ComboboxEx
Close_MenuEx
ClouseItemInputEx
ClouseLiteInputEx
ColorPickExBox_Ex
ControInvokeCallback
ControlAddRedrawRect
ControlCreate
ControlDeleteElem
ControlDestroy
ControlEnumerateChild
ControlGetBindControl
ControlGetBindWin
ControlGetCallback
ControlGetCaptureControl
ControlGetChildCount
ControlGetCurrentPage
ControlGetCursor
ControlGetCursorId
ControlGetDc
ControlGetDisabled
ControlGetElemAttribute_Button
ControlGetElemAttribute_Colour
ControlGetElemAttribute_ComboButton
ControlGetElemAttribute_Custom
ControlGetElemAttribute_EditText
ControlGetElemAttribute_Imsge
ControlGetElemAttribute_Line
ControlGetElemAttribute_Progressbar
ControlGetElemAttribute_Select
ControlGetElemAttribute_Sliderbar
ControlGetElemAttribute_Text
ControlGetElemCount
ControlGetElemData_Button
ControlGetElemData_Colour
ControlGetElemData_ComboButton
ControlGetElemData_Custom
ControlGetElemData_EditText
ControlGetElemData_Imsge
ControlGetElemData_Line
ControlGetElemData_Progressbar
ControlGetElemData_Select
ControlGetElemData_Sliderbar
ControlGetElemData_Text
ControlGetFocusControl
ControlGetFocusWeight
ControlGetGraphics
ControlGetHBITMAP
ControlGetHeight
ControlGetHotControl
ControlGetLastcontrol
ControlGetLayoutConfig
ControlGetLeft
ControlGetLeftPressControl
ControlGetLockUpdateCount
ControlGetMaxFocusWeightControl
ControlGetNestingLevel
ControlGetNextFocusControl
ControlGetNextcontrol
ControlGetPage
ControlGetParentControl
ControlGetPenetrate
ControlGetRect
ControlGetRightPressControl
ControlGetTop
ControlGetTransparency
ControlGetTrueDisabled
ControlGetTrueVisual
ControlGetUnderlyElemCount
ControlGetVisual
ControlGetWidth
ControlGetWinDc
ControlGetWinGraphics
ControlGetWinHBITMAP
ControlGetWinLayered
ControlGetWinLockUpdateCount
ControlGetWinRefreshCallBack
ControlGetWinScale
ControlGetWindow
ControlGetWindowLeft
ControlGetWindowTop
ControlGetcontrolType
ControlGetlevel
ControlGetlevelcontrol
ControlGetsign
ControlHaveChild
ControlInsertElem
ControlIsCreate
ControlLockUpdate
ControlLockWinUpdate
ControlRedraw
ControlRefreshWin
ControlResetElem
ControlRunElemCmd
ControlSendChildMessage
ControlSendMessage
ControlSetCallback
ControlSetCaptureControl
ControlSetCurrentPage
ControlSetCursor
ControlSetCursorId
ControlSetDisabled
ControlSetElemAttribute_Button
ControlSetElemAttribute_Colour
ControlSetElemAttribute_ComboButton
ControlSetElemAttribute_Custom
ControlSetElemAttribute_EditText
ControlSetElemAttribute_Imsge
ControlSetElemAttribute_Line
ControlSetElemAttribute_Progressbar
ControlSetElemAttribute_Select
ControlSetElemAttribute_Sliderbar
ControlSetElemAttribute_Text
ControlSetElemData_Button
ControlSetElemData_Colour
ControlSetElemData_ComboButton
ControlSetElemData_Custom
ControlSetElemData_EditText
ControlSetElemData_Imsge
ControlSetElemData_Line
ControlSetElemData_Progressbar
ControlSetElemData_Select
ControlSetElemData_Sliderbar
ControlSetElemData_Text
ControlSetFocusControl
ControlSetFocusWeight
ControlSetHeight
ControlSetLayoutConfig
ControlSetLeft
ControlSetPage
ControlSetParentControl
ControlSetPenetrate
ControlSetRect
ControlSetTop
ControlSetTransparency
ControlSetUnderlyElemCount
ControlSetVisual
ControlSetWidth
ControlSetWinLayered
ControlSetWinRefreshCallBack
ControlSetWinScale
ControlSetcontrolType
ControlSetlevel
ControlSetsign
ControlSubmitTask
ControlUnlockUpdate
ControlUnlockWinUpdate
ControlUpdateCache
Creat_CanvasEx
CreateBinEx
CreateControl_AdvancedFormEx
CreateControl_AnimationbuttonEx
CreateControl_BarChartEx
CreateControl_ButtonEx
CreateControl_CalendarBoxEx
CreateControl_CandleChartEx
CreateControl_ChoiceboxEx
CreateControl_ColorPickEx
CreateControl_ComboboxEx
CreateControl_CurveChartEx
CreateControl_DrawPanelEx
CreateControl_EditboxEx
CreateControl_ExtendEx
CreateControl_FilterEx
CreateControl_IcoListboxEx
CreateControl_ImagebuttonEx
CreateControl_LabelEx
CreateControl_ListboxEx
CreateControl_MinutesboxEx
CreateControl_MultifunctionButtonEx
CreateControl_PictureBoxEx
CreateControl_PieChartEx
CreateControl_ProgressbarEx
CreateControl_RadiobuttonEx
CreateControl_RichEditEx
CreateControl_ScrollLayoutBoxEx
CreateControl_ScrollbarEx
CreateControl_SelectthefolderEx
CreateControl_SlideButtonEx
CreateControl_SliderbarEx
CreateControl_SuperListboxEx
CreateControl_SuperbuttonEx
CreateControl_ToolbarEx
CreateControl_TreeListEx
CreateControl_WebBrowserEx
CreateControl_WindowEx
CreateFromStruct_AdvancedFormEx
CreateFromStruct_AnimationbuttonEx
CreateFromStruct_BarChartEx
CreateFromStruct_ButtonEx
CreateFromStruct_CalendarBoxEx
CreateFromStruct_CandleChartEx
CreateFromStruct_ChoiceboxEx
CreateFromStruct_ColorPickEx
CreateFromStruct_ComboboxEx
CreateFromStruct_CurveChartEx
CreateFromStruct_DrawPanelEx
CreateFromStruct_EditboxEx
CreateFromStruct_ExtendEx
CreateFromStruct_FilterEx
CreateFromStruct_IcoListboxEx
CreateFromStruct_ImagebuttonEx
CreateFromStruct_LabelEx
CreateFromStruct_ListboxEx
CreateFromStruct_MinutesboxEx
CreateFromStruct_MultifunctionButtonEx
CreateFromStruct_PictureBoxEx
CreateFromStruct_PieChartEx
CreateFromStruct_ProgressbarEx
CreateFromStruct_RadiobuttonEx
CreateFromStruct_RichEditEx
CreateFromStruct_ScrollLayoutBoxEx
CreateFromStruct_ScrollbarEx
CreateFromStruct_SelectthefolderEx
CreateFromStruct_SlideButtonEx
CreateFromStruct_SliderbarEx
CreateFromStruct_SuperListboxEx
CreateFromStruct_SuperbuttonEx
CreateFromStruct_ToolbarEx
CreateFromStruct_TreeListEx
CreateFromStruct_WebBrowserEx
CreateFromStruct_WindowBoxEx
CreateFromStruct_WindowEx
CreateSlowMotionTaskEx
CreateTimerEx
Create_BrushEx
Create_DownlistEx
Create_MenuEx
Create_PathEx
Create_PenEx
Create_StringFormatEx
Create_StructEx
Create_WindowBoxEx
DeleteAttr_StructEx
DeleteBinEx
DeleteButton_ToolbarEx
DeleteButton_WindowEx
DeleteColumn_AdvancedFormEx
DeleteColumn_SuperListboxEx
DeleteItem_AdvancedFormEx
DeleteItem_DownlistEx
DeleteItem_DownlistEx_ComboboxEx
DeleteItem_IcoListboxEx
DeleteItem_ListboxEx
DeleteItem_MenuEx
DeleteItem_SuperListboxEx
DeleteItem_TreeListEx
DeleteMember_StructEx
DeleteTab_SelectthefolderEx
DeleteText_ComboboxEx
DeleteText_EditboxEx
DeleteText_RichEditEx
DeleteTimerEx
Delete_BrushEx
Delete_PathEx
Delete_PenEx
DestroyImageEx
DestroySlowMotionTaskEx
Destroy_CanvasEx
Destroy_DownlistEx
Destroy_MenuEx
Destroy_StructEx
Destroy_WindowBoxEx
Dispose_StringFormatEx
DrawArc_CanvasEx
DrawArc_DrawPanelEx
DrawCanvas_CanvasEx
DrawCurve_CanvasEx
DrawCurve_DrawPanelEx
DrawEllipse_CanvasEx
DrawEllipse_DrawPanelEx
DrawGraphicsLine_CanvasEx
DrawGraphicsRectRgn_CanvasEx
DrawGraphicsShadowImageEx_CanvasEx
DrawGraphicsShadowRectRgn_CanvasEx
DrawGraphicsShadowTitleRectRgn_CanvasEx
DrawGraphicsShadowTriangle_CanvasEx
DrawGraphicsTitleRectRgn_CanvasEx
DrawGraphicsTriangle_CanvasEx
DrawIcoAndTitle_CanvasEx
DrawImageLocal_CanvasEx
DrawImageMiddle_CanvasEx
DrawImageNineRect_CanvasEx
DrawImageRectAlign_CanvasEx
DrawImageRectRect_CanvasEx
DrawImageScaling_CanvasEx
DrawImageTile_CanvasEx
DrawImageZoom_CanvasEx
DrawImage_DrawPanelEx
DrawLineEx_CanvasEx
DrawLine_CanvasEx
DrawLine_DrawPanelEx
DrawLines_CanvasEx
DrawPath_CanvasEx
DrawPie_CanvasEx
DrawPie_DrawPanelEx
DrawPolygon_CanvasEx
DrawPolygon_DrawPanelEx
DrawRectRgn_CanvasEx
DrawRect_DrawPanelEx
DrawRectangleEx_CanvasEx
DrawRectangle_CanvasEx
DrawRichString_CanvasEx
DrawString_CanvasEx
DrawString_DrawPanelEx
ElemOnDeleteColumn_SL
ElemOnDeleteItem_L
ElemOnDeleteItem_SL
ElemOnDrawPro_A
ElemOnDrawPro_L
ElemOnDrawPro_SL
ElemOnHitPro_A
ElemOnHitPro_L
ElemOnHitPro_SL
ElemOnHotPro_A
ElemOnHotPro_L
ElemOnHotPro_SL
ElemOnInsertColumn_SL
ElemOnInsertItem_L
ElemOnInsertItem_SL
ElemOnLDC_A
ElemOnLDC_L
ElemOnLDC_SL
ElemOnLDownPro_A
ElemOnLDownPro_L
ElemOnLDown_SL
ElemOnLUp_A
ElemOnLUp_L
ElemOnLUp_SL
ElemOnRDC_A
ElemOnRDC_L
ElemOnRDC_SL
ElemOnRDown_A
ElemOnRDown_L
ElemOnRDown_SL
ElemOnRUp_A
ElemOnRUp_L
ElemOnRUp_SL
EnableDragDrop_WindowBoxEx
EndDraw_CanvasEx
EnterEdit_AdvancedFormEx
EnterEdit_SuperListboxEx
ExceptionCaptureEx
ExitEdit_AdvancedFormEx
ExitEdit_SuperListboxEx
ExuiRendeEngineShut
ExuiRendeEngineStart
FileSelectionbox_Ex
FillCurve_CanvasEx
FillEllipse_CanvasEx
FillPath_CanvasEx
FillPie_CanvasEx
FillPolygon_CanvasEx
FillRectRgn_CanvasEx
FillRectangleEx_CanvasEx
FillRectangle_CanvasEx
GetAlwaysTop_WindowBoxEx
GetAncestorItem_AdvancedFormEx
GetAncestorItem_TreeListEx
GetAttrBin_StructEx
GetAttrBool_StructEx
GetAttrCount_StructEx
GetAttrDouble_StructEx
GetAttrFloat_StructEx
GetAttrInt_StructEx
GetAttrLongInt_StructEx
GetAttrName_StructEx
GetAttrStruct_StructEx
GetAttrText_StructEx
GetAttrType_StructEx
GetAttribute_AdvancedFormEx
GetAttribute_AnimationbuttonEx
GetAttribute_BarChartEx
GetAttribute_ButtonEx
GetAttribute_CalendarBoxEx
GetAttribute_CandleChartEx
GetAttribute_ChoiceboxEx
GetAttribute_ColorPickEx
GetAttribute_ComboboxEx
GetAttribute_CurveChartEx
GetAttribute_DownlistEx
GetAttribute_DrawPanelEx
GetAttribute_EditboxEx
GetAttribute_ExtendEx
GetAttribute_FilterEx
GetAttribute_IcoListboxEx
GetAttribute_ImagebuttonEx
GetAttribute_LabelEx
GetAttribute_ListboxEx
GetAttribute_MenuEx
GetAttribute_MinutesboxEx
GetAttribute_MultifunctionButtonEx
GetAttribute_PictureBoxEx
GetAttribute_PieChartEx
GetAttribute_ProgressbarEx
GetAttribute_RadiobuttonEx
GetAttribute_RichEditEx
GetAttribute_ScrollLayoutBoxEx
GetAttribute_ScrollbarEx
GetAttribute_SelectthefolderEx
GetAttribute_SlideButtonEx
GetAttribute_SliderbarEx
GetAttribute_SuperListboxEx
GetAttribute_SuperbuttonEx
GetAttribute_ToolbarEx
GetAttribute_TreeListEx
GetAttribute_WebBrowserEx
GetAttribute_WindowEx
GetBInExCache
GetBinExDataPointer
GetBinExDatalength
GetBitmap_CanvasEx
GetButtonAlign_ToolbarEx
GetButtonCount_ToolbarEx
GetButtonCount_WindowEx
GetButtonData_ToolbarEx
GetButtonData_WindowEx
GetButtonDisabled_ToolbarEx
GetButtonDisabled_WindowEx
GetButtonFontColor_ToolbarEx
GetButtonFont_ToolbarEx
GetButtonIco_ToolbarEx
GetButtonSelected_ToolbarEx
GetButtonSelected_WindowEx
GetButtonSize_ToolbarEx
GetButtonSkin_ToolbarEx
GetButtonTitle_ToolbarEx
GetButtonType_ToolbarEx
GetButtonType_WindowEx
GetButtonVisual_WindowEx
GetButtonskin_WindowEx
GetColor2_BrushEx
GetColor_BrushEx
GetColor_PenEx
GetColumnAttribute_AdvancedFormEx
GetColumnAttribute_SuperListboxEx
GetColumnCount_AdvancedFormEx
GetColumnCount_SuperListboxEx
GetConfigTimerEx
GetCookie_WebBrowserEx
GetDisabled_WindowBoxEx
GetEscClose_WindowBoxEx
GetExStyle_WindowBoxEx
GetFatherItem_AdvancedFormEx
GetFatherItem_TreeListEx
GetFocus_WindowBoxEx
GetFrameCount_ImageEx
GetFrameIntervalTime_ImageEx
GetGraphAttr_BarChartEx
GetGraphAttr_CurveChartEx
GetGraphAttr_PieChartEx
GetGraphCount_BarChartEx
GetGraphCount_CurveChartEx
GetGraphCount_PieChartEx
GetGraphValue_BarChartEx
GetGraphValue_CandleChartEx
GetGraphValue_CurveChartEx
GetGraphValue_PieChartEx
GetGraphicsData_DrawPanelEx
GetHeight_WindowBoxEx
GetIco_WindowBoxEx
GetImageAttributeEx
GetImageData
GetInsertCursor_ComboboxEx
GetInsertCursor_EditboxEx
GetInsertCursor_RichEditEx
GetItemAlign_AdvancedFormEx
GetItemCount_AdvancedFormEx
GetItemCount_DownlistEx
GetItemCount_DownlistEx_ComboboxEx
GetItemCount_IcoListboxEx
GetItemCount_ListboxEx
GetItemCount_MenuEx
GetItemCount_SuperListboxEx
GetItemCount_TreeListEx
GetItemData_AdvancedFormEx
GetItemData_DownlistEx
GetItemData_DownlistEx_ComboboxEx
GetItemData_IcoListboxEx
GetItemData_ListboxEx
GetItemData_MenuEx
GetItemData_SuperListboxEx
GetItemData_TreeListEx
GetItemDisabledFontColor_MenuEx
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ