f2eccf25e569fa03eb9cdf8c165250223588f6a2016470e010021daf3723a5d5

Sharing

Copy URL Twitter E-mail

General

Target

f2eccf25e569fa03eb9cdf8c165250223588f6a2016470e010021daf3723a5d5
Size

5.7MB
MD5

752f1be80fbdb050ee11f5616be8422e
SHA1

fca794736449048c8bdd5b9c1dbee9216931d17d
SHA256

f2eccf25e569fa03eb9cdf8c165250223588f6a2016470e010021daf3723a5d5
SHA512

8445e722eec5e86f6eeb6484c8507e61d2c8d919b4326f61e07932c7fa7121d2844ee2bc7d25a6bd07eaf84a1fabcf5d4798dda69c8c36fe299785a60d64b901
SSDEEP

98304:r4Dn3wwDicWp07cPGBtcrCwQPKNu8mAI7IY+orIFofIJo/IeKDWFLOAkGkzdnEVa:r4DgwZW3nmAI7VFLOyomFHKnPZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2eccf25e569fa03eb9cdf8c165250223588f6a2016470e010021daf3723a5d5

Files

f2eccf25e569fa03eb9cdf8c165250223588f6a2016470e010021daf3723a5d5
.exe windows:6 windows x86 arch:x86

86999346da64d37780457251c8519969

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Code\TouchDebugTool\Release\bin\TouchTool.pdb

Imports

hid

HidD_GetProductString
HidD_SetFeature
HidD_GetFeature
HidD_FlushQueue
HidD_FreePreparsedData
HidP_GetCaps
HidD_GetPreparsedData
HidD_GetHidGuid
HidD_GetAttributes

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

kernel32

GetUserDefaultLCID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetExitCodeProcess
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
ExitProcess
GetStdHandle
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
VirtualQuery
VirtualAlloc
GetTempFileNameW
GetDriveTypeW
RtlUnwind
GetCPInfo
LCMapStringEx
QueryPerformanceFrequency
GetStringTypeW
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetProfileIntW
GetTickCount64
SearchPathW
GetSystemInfo
GetWindowsDirectoryW
SizeofResource
LockResource
LoadResource
FindResourceW
GetPrivateProfileStringW
MultiByteToWideChar
InitializeCriticalSectionEx
GetPrivateProfileIntW
Sleep
GetFileAttributesExW
WideCharToMultiByte
WritePrivateProfileStringW
SetEvent
GetStartupInfoW
CreateProcessW
ReadFile
WaitForSingleObject
CloseHandle
EnterCriticalSection
LeaveCriticalSection
ResetEvent
CreateEventW
CreateThread
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
InitializeCriticalSection
DeleteCriticalSection
CreateDirectoryW
DeleteFileW
GetLastError
GetFileAttributesW
FormatMessageW
LocalFree
SetThreadUILanguage
WaitForMultipleObjects
CopyFileW
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetTempPathW
CreateFileW
OutputDebugStringW
WriteFile
CancelIo
GetModuleFileNameW
lstrlenW
GetFileSize
IsBadReadPtr
ResumeThread
SuspendThread
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
DecodePointer
GetProcessHeap
CreateMutexW
GetModuleHandleW
SetCurrentDirectoryW
TerminateThread
RaiseException
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
SetLastError
ReleaseMutex
CreateMutexA
OpenMutexA
GlobalSize
MulDiv
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
GetProcAddress
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
OutputDebugStringA
DuplicateHandle
GetCurrentProcess
GetModuleHandleA
LoadLibraryExW
LoadLibraryA
LoadLibraryW
lstrcmpiW
GetThreadLocale
EncodePointer
GetSystemDirectoryW
FreeLibrary
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
SetThreadPriority
GetVersionExW
InitializeCriticalSectionAndSpinCount
LocalAlloc
GetCurrentThread
lstrcmpA
lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalGetAtomNameW
GetFileSizeEx
GetFileTime
SetErrorMode
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
GetCurrentDirectoryW
FindResourceExW

user32

SendDlgItemMessageW
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
SetScrollRange
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsMenu
CreateWindowExW
GetClassInfoExW
CallWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
OpenClipboard
PostMessageW
SendMessageW
GetClientRect
DispatchMessageW
RegisterWindowMessageW
EndPaint
BeginPaint
TabbedTextOutW
GrayStringW
CloseClipboard
DrawTextW
UnhookWindowsHookEx
GetSystemMetrics
SetParent
IntersectRect
ShowOwnedPopups
RealChildWindowFromPoint
TrackMouseEvent
GetKeyNameTextW
MapVirtualKeyW
DestroyMenu
GetMenuItemInfoW
SystemParametersInfoW
CopyImage
GetIconInfo
PostQuitMessage
SetWindowContextHelpId
MapDialogRect
DrawFrameControl
SetWindowRgn
GetSysColorBrush
DrawFocusRect
SetWindowTextW
GetSystemMenu
DeleteMenu
MessageBeep
GetMenuDefaultItem
GetLastActivePopup
IsDialogMessageW
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
GetMessageW
TranslateMessage
DrawStateW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
IsChild
SendDlgItemMessageA
GetDC
ReleaseDC
EnableWindow
GetMonitorInfoW
CopyRect
SetRectEmpty
EnumDisplayMonitors
IsRectEmpty
GetWindowRect
ScreenToClient
SetTimer
IsWindowVisible
KillTimer
LoadIconW
LoadImageW
OffsetRect
GetParent
ReleaseCapture
RedrawWindow
PtInRect
GetCursorPos
SetCapture
FillRect
InflateRect
SetRect
InvalidateRect
GetSysColor
SetCursor
GetClassInfoW
DefWindowProcW
RegisterClassW
DrawEdge
UpdateWindow
ChildWindowFromPoint
LoadCursorW
GetScrollPos
GetScrollRange
SetScrollPos
GetKeyState
LoadMenuW
GetSubMenu
EnableMenuItem
DestroyIcon
SetWindowLongW
GetWindowLongW
SetLayeredWindowAttributes
GetAsyncKeyState
ClientToScreen
WindowFromPoint
GetWindowDC
IsZoomed
IsWindow
LoadBitmapW
CheckMenuRadioItem
CheckMenuItem
UnregisterTouchWindow
CharUpperW
UnregisterClassW
LoadAcceleratorsW
IsIconic
DrawIcon
RegisterDeviceNotificationW
CloseWindow
TranslateAcceleratorW
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
NotifyWinEvent
CreatePopupMenu
InsertMenuW
AppendMenuW
RemoveMenu
IsWindowEnabled
SetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
WaitMessage
CharNextW
MessageBoxW
GetWindowThreadProcessId
DrawIconEx
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetDoubleClickTime
CopyIcon
ModifyMenuW
DestroyAcceleratorTable
SetClassLongW
GetUpdateRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
RegisterClipboardFormatW
CharUpperBuffW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
FrameRect
PostThreadMessageW
HideCaret
InvertRect
SubtractRect
IsCharLowerW
MapVirtualKeyExW
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
DrawTextExW

gdi32

GetObjectW
CreateRectRgnIndirect
DeleteDC
SelectObject
DeleteObject
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
StretchBlt
GetTextFaceW
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetSystemPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
GetPaletteEntries
CreatePalette
RoundRect
OffsetRgn
GetRgnBox
SetDIBColorTable
SetPixel
RealizePalette
CreateRoundRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetTextMetricsW
CreatePolygonRgn
GetTextColor
GetBkColor
CreateEllipticRgn
DPtoLP
SetRectRgn
GetMapMode
CreateFontIndirectW
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
TextOutW
MoveToEx
GetDIBColorTable
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreateBitmap
CreateDCW
CopyMetaFileW
PatBlt
CreateHatchBrush
Polygon
Ellipse
Polyline
PolyBezier
ExtCreatePen
CreateDIBSection
CreateFontW
AbortDoc
EndDoc
EndPage
StartPage
GetDeviceCaps
StartDocW
GetStockObject
Rectangle
CreatePen
ExtTextOutW
GetTextExtentPoint32W
CreateCompatibleDC

msimg32

GradientFill
AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW

shell32

DragFinish
DragQueryFileW
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
ShellExecuteW
SHBrowseForFolderW

comctl32

ImageList_ReplaceIcon
ImageList_Remove
InitCommonControlsEx
_TrackMouseEvent

shlwapi

UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
StrCpyW
PathFindFileNameW
PathFindExtensionW
PathIsDirectoryW
StrFormatKBSizeW

uxtheme

IsThemeBackgroundPartiallyTransparent
IsAppThemed
OpenThemeData
CloseThemeData
GetThemeSysColor
GetCurrentThemeName
GetThemePartSize
DrawThemeBackground
GetThemeColor
GetWindowTheme
DrawThemeParentBackground
DrawThemeText

ole32

CoRegisterMessageFilter
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
StringFromGUID2
CreateStreamOnHGlobal

oleaut32

SafeArrayDestroy
SysAllocStringLen
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocString
SysStringLen
SysAllocStringByteLen
SysFreeString
LoadTypeLi
OleCreateFontIndirect
VariantCopy
VariantChangeType
VarBstrFromDate
VariantInit

oledlg

OleUIBusyW

gdiplus

GdipDrawImagePointRectI
GdipSetPenDashStyle
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipFillRectangle
GdipFillPath
GdipCloneBitmapAreaI
GdipFree
GdipAlloc
GdipSetInterpolationMode
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromFile
GdipSetPenColor
GdipSetStringFormatLineAlign
GdipDrawLines
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateStringFormat
GdipCreatePen1
GdipDrawImageI
GdipLoadImageFromStream
GdipReleaseDC
GdipDrawEllipseI
GdipDrawImageRectRectI
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdiplusStartup
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdiplusShutdown
GdipDrawPath
GdipIsVisibleRegionPointI
GdipCreateRegionPath
GdipAddPathLine2I
GdipDeleteRegion
GdipCreatePath
GdipDeletePath
GdipFillRectangleI
GdipDrawLineI
GdipFillEllipse
GdipFillPolygonI
GdipFillClosedCurveI
GdipSetSmoothingMode
GdipDrawString
GdipMeasureString
GdipDrawRectangle
GdipCreatePen2
GdipDrawRectangleI
GdipGraphicsClear
GdipDeleteGraphics
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDeletePen
GdipCreateFromHDC
GdipDeleteFont

wch55xispdll

WCH55x_FlashProgramB
WCH55x_EnumDevices
WCH55x_IspEnd
WCH55x_SetIspOption

ws2_32

send
WSAGetLastError
recv
closesocket
select
connect
inet_addr
htons
ioctlsocket
setsockopt
socket
WSAStartup

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

HttpQueryInfoW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 513KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86999346da64d37780457251c8519969

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

hid

setupapi

api-ms-win-shcore-scaling-l1-1-1

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

wch55xispdll

ws2_32

oleacc

wininet

imm32

winmm

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 513KB - Virtual size: 512KB

.data Size: 52KB - Virtual size: 1.8MB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.reloc Size: 194KB - Virtual size: 194KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 513KB - Virtual size: 512KB

.data
Size: 52KB - Virtual size: 1.8MB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 194KB - Virtual size: 194KB