030c6d11e6f73cb52ac3f81cfb570bda9105d492a019de7492025313ccb5c068

Sharing

Copy URL Twitter E-mail

General

Target

030c6d11e6f73cb52ac3f81cfb570bda9105d492a019de7492025313ccb5c068
Size

154KB
MD5

9786abbf635516c0d2e8a57b3adda423
SHA1

12d2058630acc419c5b320452bae90cd7a3eef78
SHA256

030c6d11e6f73cb52ac3f81cfb570bda9105d492a019de7492025313ccb5c068
SHA512

1fb0eb33a2891fede4633a707a9d80bea00f4bcb2164e90237482f1bbe3d7afc349dc9465bc1996f4e131652e7c7f3580269eedde17bbd286d8c1e4361256d79
SSDEEP

3072:TuGJ9eZHl2BppsP2vJeujz/cKVodfnR3l6mnkGNtydjixyv9rqNANNbdoyXGvbd:i4oJPAJV/cKudPR3Xk0t6jixeZyR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
030c6d11e6f73cb52ac3f81cfb570bda9105d492a019de7492025313ccb5c068

Files

030c6d11e6f73cb52ac3f81cfb570bda9105d492a019de7492025313ccb5c068
.dll windows:6 windows x86 arch:x86

07378959ebd9b681f7b1ff968c0ab55a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\易语言正式版\lib\iDraw\superTools\plugin\eOutPutControl.pdb

Imports

kernel32

GetLocalTime
GetProcAddress
FreeLibrary
WideCharToMultiByte
ReadFile
WriteFile
OutputDebugStringA
SetFilePointer
CreateFileW
GetTempPathA
CreateFileA
GlobalAlloc
GlobalFree
CloseHandle
GlobalLock
GetFileSize
GetTempFileNameA
GlobalUnlock
DecodePointer
GetConsoleMode
GetConsoleOutputCP
LoadLibraryW
HeapReAlloc
HeapSize
SetStdHandle
SetFilePointerEx
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetLastError
FlushFileBuffers
MultiByteToWideChar
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
HeapAlloc
HeapFree
GetTimeZoneInformation
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
WriteConsoleW

user32

PostMessageW
GetPropA
GetCursorPos
GetParent
GetWindowTextLengthA
SetWindowLongA
MessageBoxA
CreateWindowExA
SendMessageA
InvalidateRect
SetPropA
AppendMenuW
IsWindowVisible
SetWindowPos
SendMessageW
TrackPopupMenu
ShowWindow
CallWindowProcA
GetWindowTextA
DestroyMenu
SetParent

shell32

SHOpenFolderAndSelectItems
ShellExecuteA
SHParseDisplayName
ord195

ole32

CreateStreamOnHGlobal

comctl32

ImageList_Read
ImageList_Destroy

supertools

ETools_RemoveGlobalFunc
ETools_Config_Read
Detours_unHookFunction
ETools_Config_Read_asBool
ord1253
ETools_GetEWindow
ETools_Config_Read_asNum
ETools_AddPluginNotify
ETools_RegistGlobalFunc
ETools_Config_Write

Exports

Exports

GetPluginInfo
InitPlugin

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07378959ebd9b681f7b1ff968c0ab55a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

ole32

comctl32

supertools

Exports

Exports

Sections

.text Size: 106KB - Virtual size: 106KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 106KB - Virtual size: 106KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB