5790c222d7c4903d3fbaeb5e99fd4cf41cced05a83647d8f5e0f33e5b9cd00f0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5790c222d7c4903d3fbaeb5e99fd4cf41cced05a83647d8f5e0f33e5b9cd00f0_NeikiAnalytics.exe
Size

432KB
MD5

416d83b2bd4a2022132407df6acfa210
SHA1

3140760fd645cecd302ec11ae540f7c05b15758e
SHA256

5790c222d7c4903d3fbaeb5e99fd4cf41cced05a83647d8f5e0f33e5b9cd00f0
SHA512

fb19c3550c9e0022c424e786f205cb27990893977cfd9002ad07bb5f0d9ebec7f2b1d13e943be8f4e4f9d8d2b86aa78efe671d4240cfe6970304de300bfb3bd2
SSDEEP

6144:B6Iqesxo0lyH2CleKp3mh5MPNdvD66/Xl+mNhEmY3XkW3qtcmi/rVVnDziC+nFCp:B5Whul3p3m05/1+2OpXkW3qt3A3z4Cp

Score

1^/10

Malware Config

Signatures

Files

5790c222d7c4903d3fbaeb5e99fd4cf41cced05a83647d8f5e0f33e5b9cd00f0_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

21bcadfa5bc0cbdd32e0c319bd8fd1bc

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c5:23:45:c2:c7:91:16:bd:f8:46:15
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

24/06/2021, 07:14

Not After

24/06/2024, 07:14

Subject

CN=上海森浦信息服务有限公司,O=上海森浦信息服务有限公司,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

02/11/2023, 10:30

Not After

04/12/2034, 10:30

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:0c:8d:1b:51:6f:3a:48:06:7a:00:0e:bd:14:24:fd:ac:f2:b6:c9:9d:31:4e:cf:9a:da:18:51:5a:4d:a3:44
Signer

Actual PE Digest

0b:0c:8d:1b:51:6f:3a:48:06:7a:00:0e:bd:14:24:fd:ac:f2:b6:c9:9d:31:4e:cf:9a:da:18:51:5a:4d:a3:44

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\QBRelease5.5.2\projects\GMktView\Release\GMktView.pdb

Imports

ssbase

?log@base@ss@@YAXABVSLogLevel@12@PBD@Z
?RandInt@Rand@base@ss@@SAHHH@Z
??0SArgument@base@ss@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?log@base@ss@@YAXABVSLogLevel@12@PBDVSArgument@12@222@Z
?log@base@ss@@YAXABVSLogLevel@12@PBDVSArgument@12@2222@Z
??0SArgument@base@ss@@QAE@_J@Z
?log@base@ss@@YAXABVSLogLevel@12@PBDVSArgument@12@22222@Z
?log@base@ss@@YAXABVSLogLevel@12@PBDVSArgument@12@222222222222@Z
?log@base@ss@@YAXABVSLogLevel@12@PBDVSArgument@12@2@Z
??0SLogLevel@base@ss@@QAE@HPBD0H0@Z
??0SArgument@base@ss@@QAE@PBD@Z
??0SArgument@base@ss@@QAE@H@Z
?log@base@ss@@YAXABVSLogLevel@12@PBDVSArgument@12@22@Z
?GetLogLevelFilter@base@ss@@YAHXZ
?Unlock@CSLock@base@ss@@QAEXXZ
?Lock@CSLock@base@ss@@QAEXXZ
?DbgError@base@ss@@YAXPAD00HPBDZZ
?field_copy@base@ss@@YAHPADHPBDH@Z
??1CSLock@base@ss@@QAE@XZ
?log@base@ss@@YAXABVSLogLevel@12@PBDVSArgument@12@@Z
??0CSLock@base@ss@@QAE@XZ

ssbondlib

?GetBond@CBondContainer@@QAEPAVCBondInfoDebug@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??0LockEx@@QAE@XZ
??1LockEx@@QAE@XZ
?GetServerTime@CBondContainer@@QAE_JXZ
?AfxGetBondContainer@@YAAAVCBondContainer@@XZ
??0CBondInfoDebug@@QAE@XZ
??1CBondInfoDebug@@QAE@XZ
?GetBondInfoByKey@CBondContainer@@QAEHPBD0PAVCBondInfoDebug@@PAH@Z
?GetRemainPeriod@CBondInfoDebug@@QBEPBD_J@Z
?GetCombBondKey@CBondInfoDebug@@QBEPBDXZ

ssbondnet

?RemoveRegistryDataWnd@CBondReceiver@@QAE_NPAUHWND__@@HPBX@Z
?AfxGetBondReceiver@@YAAAVCBondReceiver@@XZ
?AddRcvRegistryDataWnd@CBondReceiver@@QAEXPAUHWND__@@HPBXPAJ@Z

sscommon

?DefWindowProcW@CGradientMenu@@MAEJIIJ@Z
?SetTitleStyle@CWidget@@QAEXH@Z
?PreCreateWindow@CGradientMenu@@MAEHAAUtagCREATESTRUCTW@@@Z
??0CWidgetEx@@QAE@IPAVCWnd@@@Z
??1CWidgetEx@@UAE@XZ
?GetThisMessageMap@CWidgetEx@@KGPBUAFX_MSGMAP@@XZ
?OnCreate@CWidgetEx@@QAEHPAUtagCREATESTRUCTW@@@Z
?OnDestroy@CWidgetEx@@QAEXXZ
?OnSetCursor@CWidgetEx@@QAEHPAVCWnd@@II@Z
?OnMouseMove@CWidgetEx@@QAEXIVCPoint@@@Z
?OnMouseLeave@CWidgetEx@@QAEXXZ
?OnTimer@CWidgetEx@@QAEXI@Z
?GetRuntimeClass@CWidgetEx@@UBEPAUCRuntimeClass@@XZ
?DoDataExchange@CWidgetEx@@MAEXPAVCDataExchange@@@Z
?DefWindowProcW@CWidget@@MAEJIIJ@Z
?Create@CWidgetEx@@UAEHIPAVCWnd@@@Z
?OnOK@CWidget@@MAEXXZ
?OnCancel@CWidgetEx@@MAEXXZ
?ReleaseChildren@CWidget@@MAEXXZ
?OnClickConversion@CWidget@@MAEXXZ
?DrawTitle@CWidgetEx@@MAEXPAVUIRender@paint@@@Z
?SetCursorShape@CWidget@@MAEXPAUHICON__@@@Z
?SetServerTime@CWidgetEx@@UAEX_J@Z
?ChangeBkgndColor@CWidgetEx@@MAEXAAK@Z
?DoProtocolUpdate@CWidgetEx@@MAEX_N@Z
?DoProtocolAckChange@CWidgetEx@@MAEXABV?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?DoWndParentParamChange@CWidgetEx@@MAEXH@Z
?DoClose@CWidgetEx@@MAEXXZ
?DoTitleIconHit@CWidgetEx@@MAEHVCPoint@@@Z
?GetModal@ModalUtil@@SAPAUHWND__@@XZ
?ProcessModalMessage@ModalUtil@@SAHABUtagMSG@@@Z
?NotifyClickListener@ModalUtil@@SAXABUtagMSG@@@Z
?SSMessageBoxForMain@@YAHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0J@Z
?MoveWindow@CSSTitleListBox@@QAEXPBUtagRECT@@H@Z
?ShowWindow@CSSTitleListBox@@QAEXH@Z
?ClearData@CSSTitleListBox@@QAEXXZ
?AddData@CSSTitleListBox@@QAEXK@Z
?SetFirstSel@CSSTitleListBox@@QAEXXZ
?GetThisClass@CWidgetEx@@SGPAUCRuntimeClass@@XZ
??0CTitleTip@@QAE@XZ
??1CTitleTip@@UAE@XZ
?OnSize@CWidgetEx@@QAEXIHH@Z
?OnLButtonDown@CWidgetEx@@QAEXIVCPoint@@@Z
?OnLButtonUp@CWidgetEx@@QAEXIVCPoint@@@Z
?DoModal@CPopupWindow@@UAEHXZ
?ShowNewStyle@CTitleTip@@QAEXVCRect@@PB_WHPAUtagRECT@@PBUtagLOGFONTW@@KKKHH2@Z
?OnRButtonDown@CWidget@@IAEXIVCPoint@@@Z
??0CPopupWindow@@QAE@IPAVCWnd@@@Z
??1CPopupWindow@@UAE@XZ
?GetThisClass@CPopupWindow@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@CPopupWindow@@KGPBUAFX_MSGMAP@@XZ
?DoDataExchange@CPopupWindow@@MAEXPAVCDataExchange@@@Z
?OnDestroy@CPopupWindow@@IAEXXZ
?OnCreate@CPopupWindow@@IAEHPAUtagCREATESTRUCTW@@@Z
?OnInitDialog@CPopupWindow@@MAEHXZ
?SetTitleText@CPopupWindow@@UAEXPB_W@Z
?SetValue@CRadioEx@@QAEXH@Z
?OnSize@CPopupWindow@@IAEXIHH@Z
?LayoutButtons@CPopupWindow@@QAE?AVCRect@@PAVCWnd@@0000_N@Z
?GetValue@CRadioEx@@QAEHXZ
?ContinueModal@CPopupWindow@@MAEHXZ
?WindowProc@CPopupWindow@@MAEJIIJ@Z
?DrawTitle@CPopupWindow@@MAEXPAVUIRender@paint@@@Z
?EnterSizeMove@CPopupWindow@@MAEXXZ
?ExitSizeMove@CPopupWindow@@MAEXXZ
?CreateRgn@CPopupWindow@@MAEXXZ
?Create@UIShapeImage@@SA?AV?$shared_ptr@VUIShapeImage@@@std@@PBDHH@Z
?OnLButtonDblClk@CWidgetEx@@QAEXIVCPoint@@@Z
??0CRadioEx@@QAE@XZ
?Create@CRadioEx@@UAEHPAVCWnd@@I@Z
?SetString@CRadioEx@@QAEXPB_W@Z
??1CRadioEx@@UAE@XZ
??0CSSTitleListBox@@QAE@PAVCSSTitleListBoxNotify@@@Z
?CreateFixList@CSSTitleListBox@@QAEHIPAVCWnd@@Vusize@@@Z
??1CSSTitleListBox@@UAE@XZ
?GetRuntimeClass@CRadioEx@@UBEPAUCRuntimeClass@@XZ
?GetMessageMap@CRadioEx@@MBEPBUAFX_MSGMAP@@XZ
?GetRuntimeClass@CSSTitleListBox@@UBEPAUCRuntimeClass@@XZ
?GetMessageMap@CSSTitleListBox@@MBEPBUAFX_MSGMAP@@XZ
?DrawItem@CSSTitleListBox@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?MeasureItem@CSSTitleListBox@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?VKeyToItem@CSSTitleListBox@@UAEHII@Z
??3CGradientMenu@@SAXPAX@Z
??0CGradientMenu@@QAE@HHH@Z
??1CGradientMenu@@UAE@XZ
?DestroyRootMenu@CGradientMenu@@QAEXXZ
?TrackPopupMenu@CGradientMenu@@QAEHIHHPAVCWnd@@HPAVCRect@@@Z
?GetRuntimeClass@CGradientMenu@@UBEPAUCRuntimeClass@@XZ
?GetMessageMap@CGradientMenu@@MBEPBUAFX_MSGMAP@@XZ
?DestroyWindow@CGradientMenu@@UAEHXZ

ssrender

??Busize@@QBEHXZ
??0ULOGFONTImpl@@QAE@XZ
??1ULOGFONTImpl@@QAE@XZ
??IULOGFONTImpl@@QAEPAUtagLOGFONTW@@XZ
?ILoadFont@@YAHHAAVULOGFONTImpl@@@Z
??0CRect@paint@@QAE@ABUtagRECT@@@Z
??0UImagePtr@@QAE@XZ
??1UImagePtr@@QAE@XZ
??4UImagePtr@@QAEAAV0@PAVUImage@@@Z
??0UImage@@QAE@VkRid@@HH@Z
??BUImagePtr@@QBE_NXZ
?GetHeight@UImage@@QBEHXZ
?GetWidth@UImage@@QBEHXZ
?Draw@UImage@@QAEXPAVUIRender@paint@@ABVCRect@3@W4kRidStatus@@@Z
??0CRect@paint@@QAE@HHHH@Z
??0CRect@paint@@QAE@XZ
?DeflateRect@CRect@paint@@QAEXPBUtagRECT@@@Z
??0CSize@paint@@QAE@HH@Z
?SetRect@CRect@paint@@QAEXHHHH@Z
?IsRectEmpty@CRect@paint@@QBEHXZ
??0UImage@@QAE@PBD@Z
??0DynamicRender@paint@@QAE@PAUHDC__@@PAUHWND__@@PBUtagRECT@@_N3@Z
??1DynamicRender@paint@@UAE@XZ
?MaxWndHeight@@YA?AVusize@@H@Z
??0ULOGFONTImpl@@QAE@ABV0@@Z

ssresource

??1StyleName@style@ss@@QAE@XZ
?GetColor@color@ss@@YAKABVColorName@12@@Z
??0ColorName@color@ss@@QAE@H@Z
?GetStyle@style@ss@@YAABUControlStyle@12@ABVStyleName@12@@Z
??0StyleName@style@ss@@QAE@PBD@Z

ssstdlib

?GetTickCount@CSPTime@@SG?AV1@XZ

sstools

??Rmemblock@@QAEPBDXZ
?DelWinCtrlImpl@CSSTools@@SAXPAVCWnd@@@Z
?C2W@CSSTools@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?FromWideString@@YA?AVmemblock@@PB_W@Z
??1memblock@@QAE@XZ
?GetAppPath@CSSTools@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?C2W@CSSTools@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PBD@Z
?CreateMuliteDirectory@CSSTools@@SAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z

sscontrollib

?DrawMain@SSButton@@MAEXPAVUIRender@paint@@@Z
?SetFont@SSButton@@UAEXAAVULOGFONTImpl@@@Z
??0SSButton@@QAE@XZ
?SetTitle@SSButton@@UAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetIndex@SSButton@@UAEXH@Z
?SetAlign@SSButton@@QAEXW4AlignMode@1@@Z
?SetStyle@SSButton@@QAEXPBD@Z
??1SSButton@@UAE@XZ
?GetRuntimeClass@SSButton@@UBEPAUCRuntimeClass@@XZ
?GetMessageMap@SSButton@@MBEPBUAFX_MSGMAP@@XZ
?GetIndex@SSButton@@UBEHXZ
?EnableSelect@SSButton@@UAEXXZ
?EnableSwitch@SSButton@@UAEXXZ
?SetSelect@SSButton@@UAEX_N@Z
?SetTextColor@SSButton@@UAEXKKK_N@Z
?SetBorderColor@SSButton@@UAEXKKK_N@Z
?SetBkColor@SSButton@@UAEXKKK_N@Z

ssstring

?strGlobalCityTime@CSSString@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?StringTable@@3VCSSString@@A

ssuam

?AfxGetUserAccountManager@@YAAAVSSUserAccountManager@@XZ
?GetUserInfo@SSUserAccountManager@@QAEAAVCUserAccountInfo@@XZ

ssmotion

??0CardContext@ui@@QAE@XZ
?AddValue@AnimateContainer@ui@@QAE_NHN@Z
??0AnimateContainer@ui@@QAE@V?$shared_ptr@VAnimateContainerListener@ui@@@std@@_N@Z
??1AnimateContainer@ui@@QAE@XZ
?Refresh@AnimateContainer@ui@@QAEXXZ
?GetValue@AnimateContainer@ui@@QAE_NHAAN@Z
?AddValues@AnimateContainer@ui@@QAE_NABV?$vector@UKeyValue@ui@@V?$allocator@UKeyValue@ui@@@std@@@std@@@Z
?UpdateValues@AnimateContainer@ui@@QAE_NABV?$vector@UKeyValue@ui@@V?$allocator@UKeyValue@ui@@@std@@@std@@HN@Z

ssviewmanager

?PostRequestData@RemoteMessage@@SAJHPAUHWND__@@PAXPBDH_N@Z

mfc120u

ord3839
ord2262
ord6462
ord1471
ord999
ord4984
ord1688
ord1521
ord1687
ord1520
ord1684
ord2967
ord2948
ord5824
ord285
ord280
ord286
ord1518
ord265
ord8352
ord8268
ord12736
ord8206
ord5262
ord2444
ord12412
ord12413
ord14448
ord7806
ord14454
ord9279
ord4109
ord4047
ord12818
ord7825
ord1992
ord11857
ord11858
ord14326
ord12402
ord7884
ord14526
ord6251
ord14528
ord6253
ord14527
ord10166
ord10168
ord13616
ord6123
ord4280
ord13991
ord8699
ord10896
ord8921
ord8601
ord2718
ord8092
ord3260
ord3263
ord13612
ord6121
ord3122
ord3361
ord3362
ord4049
ord10353
ord11271
ord12006
ord1506
ord2347
ord2341
ord8628
ord4184
ord2484
ord3889
ord6404
ord2711
ord973
ord3831
ord2952
ord10167
ord10165
ord10169
ord5557
ord11600
ord11601
ord9020
ord11964
ord11811
ord6469
ord8846
ord12047
ord6875
ord10883
ord9137
ord3224
ord13738
ord12134
ord12132
ord1711
ord1723
ord1731
ord1727
ord1736
ord4879
ord4920
ord4887
ord4899
ord4895
ord4891
ord4928
ord4916
ord4883
ord4932
ord4905
ord4867
ord4874
ord4909
ord4459
ord9574
ord4451
ord3013
ord14449
ord7807
ord14455
ord6774
ord11592
ord13563
ord5838
ord2640
ord11999
ord3898
ord3330
ord3329
ord3223
ord12043
ord5157
ord5454
ord5664
ord9231
ord5430
ord5693
ord5160
ord5316
ord5137
ord7609
ord7610
ord7600
ord5314
ord8101
ord10136
ord9091
ord3790
ord4772
ord1042
ord296
ord1508
ord3147
ord9012
ord6252
ord3809
ord5821
ord12114
ord12122
ord4546
ord8099
ord10314
ord12799
ord5667
ord10131
ord9090
ord6758
ord2294
ord2215
ord7881
ord1467
ord992
ord7542
ord2343
ord1049
ord14094
ord7331
ord2480
ord7543
ord9349
ord12095
ord3795
ord14447
ord3806
ord1509
ord325
ord1050
ord2323
ord2204
ord2366
ord2369
ord2334
ord2368
ord485
ord2226
ord2332
ord2142
ord2258
ord2357
ord1447
ord2719
ord324
ord4843
ord266
ord12094

msvcr120

?terminate@@YAXXZ
fclose
??0bad_cast@std@@QAE@PBD@Z
_except1
_CxxThrowException
memcpy
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
fflush
setvbuf
fsetpos
fgetpos
_fseeki64
fwrite
_unlock_file
_lock_file
??0exception@std@@QAE@ABV01@@Z
memcpy_s
realloc
free
malloc
ungetc
fputc
fgetc
_purecall
_localtime64_s
atof
?what@exception@std@@UBEPBDXZ
__clean_type_info_names_internal
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
__CxxFrameHandler3
memset
_snwprintf_s
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
_mktime64
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memmove

kernel32

LeaveCriticalSection
InitializeCriticalSectionEx
DecodePointer
EnterCriticalSection
LocalAlloc
LocalFree
OutputDebugStringW
EncodePointer
IsDebuggerPresent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
Sleep
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent

user32

IntersectRect
IsRectEmpty
SendMessageW
GetParent
PostMessageW
UpdateWindow
SetCapture
IsWindowVisible
GetAsyncKeyState
ScreenToClient
SetCursor
InflateRect
CopyRect
DispatchMessageW
TranslateMessage
GetMessageW
SetRect
SetRectEmpty
CreatePopupMenu
AppendMenuW
GetCursorPos
LoadCursorW
ReleaseCapture
EnableWindow
InvalidateRect
IsWindow
SetTimer
PtInRect
OffsetRect
GetClientRect
KillTimer
EnableMenuItem

gdi32

CreateFontIndirectW

comctl32

_TrackMouseEvent

shlwapi

PathFileExistsW

msvcp120

?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Thrd_equal
_Thrd_current
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_destroy
_Cnd_destroy
_Cnd_signal
_Cnd_broadcast
_Cnd_wait
_Cnd_init
_Mtx_unlock
_Mtx_lock
_Mtx_init
_Thrd_join
?_Throw_C_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_BADOFF@std@@3_JB
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_function_call@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Future_error_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
?_Winerror_map@std@@YAPBDH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ

winmm

timeSetEvent
timeKillEvent
timeEndPeriod
timeBeginPeriod

Exports

Exports

??4RemoteMessage@@QAEAAV0@ABV0@@Z
?AddNoteData@CSSScrollWnd@@QAEXAAUtagNoteData@@@Z
?ClearNoteData@CSSScrollWnd@@QAEXXZ
?CreateIndexCurve@@YAPAVCWnd@@PAV1@@Z
?CreateMarquee@@YAPAVCWnd@@PAV1@@Z
?CreatePageGMktView@@YAPAVCWnd@@PAV1@@Z
?DestroyIndexCurve@@YAXPAUHWND__@@@Z
?DestroyMarquee@@YAXPAUHWND__@@@Z
?DestroyPageGMktView@@YAXPAUHWND__@@@Z
?GMktViewPreTranslateMessage@@YAHPAUtagMSG@@@Z
?GMktViewSetMainWnd@@YAXPAUHWND__@@@Z
?GetDataCount@CSSScrollWndBdDetail@@QAEHXZ
?GetRowHeight@CSSScrollWnd@@QBEHXZ
?GetStyle@CSSScrollWnd@@QBE?AW4NoteStyle@@XZ
?SetRowHeight@CSSScrollWnd@@QAEXH@Z
?SetStyle@CSSScrollWnd@@QAEXW4NoteStyle@@@Z
?__autoclassinit2@CSSScrollWnd@@QAEXI@Z
?__autoclassinit2@CSSScrollWndBdDetail@@QAEXI@Z

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21bcadfa5bc0cbdd32e0c319bd8fd1bc

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

61:29:15:27:00:00:00:00:00:2aCertificate

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

09:c5:23:45:c2:c7:91:16:bd:f8:46:15Certificate

Extended Key Usages

Key Usages

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

0b:0c:8d:1b:51:6f:3a:48:06:7a:00:0e:bd:14:24:fd:ac:f2:b6:c9:9d:31:4e:cf:9a:da:18:51:5a:4d:a3:44Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ssbase

ssbondlib

ssbondnet

sscommon

ssrender

ssresource

ssstdlib

sstools

sscontrollib

ssstring

ssuam

ssmotion

ssviewmanager

mfc120u

msvcr120

kernel32

user32

gdi32

comctl32

shlwapi

msvcp120

winmm

Exports

Exports

Sections

.text Size: 310KB - Virtual size: 309KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 9KB - Virtual size: 11KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 23KB - Virtual size: 22KB

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

61:29:15:27:00:00:00:00:00:2a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

09:c5:23:45:c2:c7:91:16:bd:f8:46:15
Certificate

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

0b:0c:8d:1b:51:6f:3a:48:06:7a:00:0e:bd:14:24:fd:ac:f2:b6:c9:9d:31:4e:cf:9a:da:18:51:5a:4d:a3:44
Signer

.text
Size: 310KB - Virtual size: 309KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 9KB - Virtual size: 11KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 23KB - Virtual size: 22KB