Paint-Tool-SAI 2[.]0[.]zip

Resubmissions

11-07-2024 08:08

240711-j1h5jsxcjl 7

11-07-2024 08:04

240711-jysafaxbln 3

Sharing

Copy URL

Twitter E-mail

General

Target

Paint-Tool-SAI 2.0.zip
Size

14.6MB
MD5

d01ae8cc50038f82cbd4de7f313c5396
SHA1

d1b225a73879ab660be147719d2ec1a6e5a0d149
SHA256

fd8f8d2dffe33e9d31f059016bb18f5fc54df4bbbfab09b04227e149c99376aa
SHA512

d8d152df1a12eb17a21343672d817a3058a1ba3905c84ffa43fc68681d83fc71a4f1e3da93b41d765681dfd3fadb4ad5b6c9e7d443a4e8732fb46257af38b4b1
SSDEEP

393216:gxDNrRRwjqlLtEqhQzQdpwYMhizgNq/2ukdxEkrre:gxJrRRwj4LqGbwBhdS+re

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Paint Tool SAI 2.0 (64bit)/sai2.bak
unpack001/Paint Tool SAI 2.0 (64bit)/sai2.exe

Files

Paint-Tool-SAI 2.0.zip
.zip
Paint Tool SAI 2.0 (64bit)/blotmap/Action Lines Large.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Action Lines Medium.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Acuarela.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Blots&Noise.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Blots.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Branches.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Bubbles.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Bumpy.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Butterflies.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Circuits.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Crust.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Cuadros.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Cubes.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Dark.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Diagonal Scanlines.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Dry Brush.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Electro.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Flower.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Fun Squares.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Fuzystatic.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Glitter.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Grainy.bmp
.ps1
Paint Tool SAI 2.0 (64bit)/blotmap/Grating.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Grunge Clouds.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Horizontal.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Horsehair.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Lace.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Newsprint Large.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Newsprint Medium.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Noise.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Pastel.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Radial Action Lines.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Rayajos.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Rejills.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Scale.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Skin.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Skulls.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Small Tilted Diamonds.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Smear.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Snowflakes.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Speckle.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Spray.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Spread & Noise.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Spread.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/TV Pixels.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Tiny Diamonds.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Tiny Tilted Dots.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Tonto.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Trippy Newsprint.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Vertical Scanlines.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Vertical.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Waltz.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Water.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Wool.bmp
Paint Tool SAI 2.0 (64bit)/blotmap/Wrapis.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Arrow.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Block.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Bristle.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Chalk.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Circular.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Diamond.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Dragonfly.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Fine Flat.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Fine Hollow.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Fine Pointy.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Fine Round 1.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Fine Round 2.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Flake.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Flat 1.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Flat 2.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Flat 3.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Flat Bristle.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Flat Pen.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Flat Streak.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Hair.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Middle Flat.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Middle Round.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Pencil.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Prueba 1.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Prueba 2.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Rough Flat.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Rough Round 1.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Rough Round 2.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Rough Vertical.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Round Flat.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Round Pen.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Scuffed.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Shape Arrow.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Shape Cross Diss.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Shape Cross.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Shape Half Round.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Soft Dab.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Squeze.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Streak Diagonal.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Streak Horizontal.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Stringy L.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Stringy M.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Stringy R.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Stringy S.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Thick Streak.bmp
Paint Tool SAI 2.0 (64bit)/bristle/Uneven SR.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Acuarela.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Arpfina.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Arpillera.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Canvas.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Carpet.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Clasic Noise.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Cloth.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Cloud.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Corteza.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Dirt.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Electro.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Fabric.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Glass.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Jeans.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Lapiz.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Large Grain.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Leather.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Leaves.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Lienzo Moho.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Light Jeans.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Metal.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Noise.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Paper.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Rock.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Rugoso Dark.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Rugoso Light.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Sand Paper.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Spot.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Water.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Wave.bmp
Paint Tool SAI 2.0 (64bit)/brushtex/Wood.bmp
Paint Tool SAI 2.0 (64bit)/history.txt
Paint Tool SAI 2.0 (64bit)/license.slc
Paint Tool SAI 2.0 (64bit)/papertex/Acuarela.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Arpillera.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Canvas.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Chaos.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Chessboard.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Cloth.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Cubes.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Deck.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Dots.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Grid.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Jeans.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Knitted Cloth.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Lapiz.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Light Jeans.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Paper.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Pattern.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Stripes.bmp
Paint Tool SAI 2.0 (64bit)/papertex/TV Pixels.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Water Color 1.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Water Color 2.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Watercolor A.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Watercolor B.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Wool Cloth.bmp
Paint Tool SAI 2.0 (64bit)/papertex/Zigzag.bmp
Paint Tool SAI 2.0 (64bit)/sai2.bak
.exe windows:5 windows x64 arch:x64

daaef9f6b0c572ddfb83c945880aa4f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\MyProjects\SYSTEMAX\sai2_bak\20161224-Released (20161224の修正版)\bin64\sai2.pdb

Imports

kernel32

FindNextFileW
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetEnvironmentVariableW
SetEvent
ResetEvent
WaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
WaitForMultipleObjects
CreateEventW
CreateSemaphoreW
GlobalUnlock
GlobalLock
SwitchToThread
ReleaseSemaphore
CompareStringW
CompareFileTime
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
SystemTimeToFileTime
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
SetStdHandle
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetConsoleCP
LoadLibraryA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlPcToFileHeader
GetFileType
SetHandleCount
GetFileSizeEx
FindClose
GetStdHandle
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapCreate
HeapSetInformation
FlsAlloc
SetLastError
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
GetConsoleMode
HeapAlloc
VirtualProtect
HeapFree
RtlUnwindEx
ReadFile
SetFilePointerEx
FindFirstFileW
RemoveDirectoryW
CreateDirectoryW
MoveFileW
DeleteFileW
GetFileAttributesW
GetModuleFileNameA
SetEndOfFile
DebugBreak
VirtualFree
VirtualAlloc
GetSystemInfo
GetCPInfo
GetVersionExW
GetCurrentProcess
GlobalAlloc
GlobalFree
GlobalMemoryStatusEx
DeviceIoControl
GetModuleHandleW
LocalAlloc
RtlCaptureContext
GetCurrentThreadId
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
RaiseException
LoadLibraryW
FormatMessageW
FlushFileBuffers
GetFileSize
lstrlenA
CreateFileW
SetFilePointer
WriteFile
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcAddress
FreeLibrary
VirtualQuery
RtlLookupFunctionEntry
RtlVirtualUnwind
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetCommandLineW
GetModuleFileNameW
GetPrivateProfileStringW
LocalFree
GetTickCount
Sleep
CreateMutexW
GetLastError
CloseHandle
GetCurrentThread
SetThreadPriority
CreateFileA
GetDiskFreeSpaceExW

user32

LoadIconW
GetClassLongPtrW
SetWindowPlacement
SetCapture
EnumThreadWindows
EnumChildWindows
DrawIconEx
WaitMessage
SetActiveWindow
MonitorFromWindow
GetCapture
ChildWindowFromPointEx
WindowFromPoint
GetCursorPos
ScreenToClient
GetParent
GetWindowThreadProcessId
SetWindowPos
SetWindowLongW
GetWindowLongW
SetWindowTextW
GetWindowTextW
GetAncestor
GetFocus
IsChild
GetNextDlgTabItem
SetFocus
ScrollWindowEx
mouse_event
SetParent
GetDlgItem
SetCaretPos
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
ShowCaret
CreateCaret
DestroyCaret
HideCaret
GetMessagePos
MsgWaitForMultipleObjects
SetTimer
PostQuitMessage
DestroyWindow
GetMenuInfo
SetForegroundWindow
ReplyMessage
ShowWindow
IsIconic
SetClipboardData
CloseClipboard
OpenClipboard
DispatchMessageW
TranslateMessage
PeekMessageW
SendMessageW
EndPaint
GetAsyncKeyState
AppendMenuW
RegisterClipboardFormatW
IsWindowVisible
GetWindowPlacement
MonitorFromRect
GetMonitorInfoW
SetCursor
SetWindowRgn
ClientToScreen
CheckMenuItem
EnableMenuItem
GetMenuItemCount
GetMenuItemInfoW
GetWindow
GetTopWindow
DestroyIcon
IsZoomed
GetKeyState
SetScrollPos
SetScrollRange
SetScrollInfo
GetScrollPos
CreateMenu
DestroyMenu
InsertMenuItemW
SetMenuInfo
CreatePopupMenu
SetPropW
GetPropW
GetWindowDC
GetClientRect
FrameRect
SetLayeredWindowAttributes
KillTimer
MapWindowPoints
RedrawWindow
GetSysColor
LoadCursorW
RegisterClassExW
EnableWindow
UpdateWindow
GetMessageW
GetWindowLongPtrW
FillRect
GetDC
DrawTextW
ReleaseDC
GetSystemMetrics
CreateWindowExW
MessageBeep
AdjustWindowRectEx
GetWindowRect
SystemParametersInfoW
MoveWindow
GetSystemMenu
DeleteMenu
SetWindowLongPtrW
DefWindowProcW
PostMessageW
MessageBoxW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
BeginPaint
ReleaseCapture

gdi32

CreateCompatibleBitmap
GetCurrentObject
CreateCompatibleDC
CreateRectRgn
CreateRectRgnIndirect
ExtCreateRegion
CombineRgn
GetRegionData
GetTextMetricsW
CreateFontIndirectW
CreateDIBSection
GetGlyphOutlineW
ExtSelectClipRgn
OffsetClipRgn
SelectClipRgn
GetTextExtentPoint32W
GetTextExtentExPointW
ExtTextOutW
RectVisible
CreateDIBitmap
EnumFontFamiliesExW
SetDIBitsToDevice
CreateSolidBrush
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
SetTextColor
SetBkMode
SetBkColor
GetCharacterPlacementW
GetStockObject
SelectObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

EqualSid
RegOpenKeyExW
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
RegQueryValueExW
RegCloseKey

shell32

SHGetSpecialFolderPathW
DragQueryFileW
DragFinish
SHGetSettings
SHFileOperationW
SHGetFileInfoW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetDataFromIDListW
ord21
CommandLineToArgvW
DragAcceptFiles

ole32

DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleDuplicateData
ReleaseStgMedium
StringFromIID
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleInitialize
OleUninitialize

oleaut32

SysFreeString
SysAllocString

imm32

ImmAssociateContext
ImmReleaseContext
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmGetContext
ImmAssociateContextEx
ImmSetCompositionFontW

comctl32

ImageList_GetIcon
ImageList_GetIconSize

shlwapi

PathIsRelativeW
StrRetToBufW
PathCanonicalizeW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shared
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srclibs
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.appskin
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Paint Tool SAI 2.0 (64bit)/sai2.exe
.exe windows:5 windows x64 arch:x64

daaef9f6b0c572ddfb83c945880aa4f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\MyProjects\SYSTEMAX\sai2_bak\20161224-Released (20161224の修正版)\bin64\sai2.pdb

Imports

kernel32

FindNextFileW
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetEnvironmentVariableW
SetEvent
ResetEvent
WaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
WaitForMultipleObjects
CreateEventW
CreateSemaphoreW
GlobalUnlock
GlobalLock
SwitchToThread
ReleaseSemaphore
CompareStringW
CompareFileTime
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
SystemTimeToFileTime
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
SetStdHandle
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetConsoleCP
LoadLibraryA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlPcToFileHeader
GetFileType
SetHandleCount
GetFileSizeEx
FindClose
GetStdHandle
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapCreate
HeapSetInformation
FlsAlloc
SetLastError
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
GetConsoleMode
HeapAlloc
VirtualProtect
HeapFree
RtlUnwindEx
ReadFile
SetFilePointerEx
FindFirstFileW
RemoveDirectoryW
CreateDirectoryW
MoveFileW
DeleteFileW
GetFileAttributesW
GetModuleFileNameA
SetEndOfFile
DebugBreak
VirtualFree
VirtualAlloc
GetSystemInfo
GetCPInfo
GetVersionExW
GetCurrentProcess
GlobalAlloc
GlobalFree
GlobalMemoryStatusEx
DeviceIoControl
GetModuleHandleW
LocalAlloc
RtlCaptureContext
GetCurrentThreadId
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
RaiseException
LoadLibraryW
FormatMessageW
FlushFileBuffers
GetFileSize
lstrlenA
CreateFileW
SetFilePointer
WriteFile
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcAddress
FreeLibrary
VirtualQuery
RtlLookupFunctionEntry
RtlVirtualUnwind
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetCommandLineW
GetModuleFileNameW
GetPrivateProfileStringW
LocalFree
GetTickCount
Sleep
CreateMutexW
GetLastError
CloseHandle
GetCurrentThread
SetThreadPriority
CreateFileA
GetDiskFreeSpaceExW

user32

LoadIconW
GetClassLongPtrW
SetWindowPlacement
SetCapture
EnumThreadWindows
EnumChildWindows
DrawIconEx
WaitMessage
SetActiveWindow
MonitorFromWindow
GetCapture
ChildWindowFromPointEx
WindowFromPoint
GetCursorPos
ScreenToClient
GetParent
GetWindowThreadProcessId
SetWindowPos
SetWindowLongW
GetWindowLongW
SetWindowTextW
GetWindowTextW
GetAncestor
GetFocus
IsChild
GetNextDlgTabItem
SetFocus
ScrollWindowEx
mouse_event
SetParent
GetDlgItem
SetCaretPos
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
ShowCaret
CreateCaret
DestroyCaret
HideCaret
GetMessagePos
MsgWaitForMultipleObjects
SetTimer
PostQuitMessage
DestroyWindow
GetMenuInfo
SetForegroundWindow
ReplyMessage
ShowWindow
IsIconic
SetClipboardData
CloseClipboard
OpenClipboard
DispatchMessageW
TranslateMessage
PeekMessageW
SendMessageW
EndPaint
GetAsyncKeyState
AppendMenuW
RegisterClipboardFormatW
IsWindowVisible
GetWindowPlacement
MonitorFromRect
GetMonitorInfoW
SetCursor
SetWindowRgn
ClientToScreen
CheckMenuItem
EnableMenuItem
GetMenuItemCount
GetMenuItemInfoW
GetWindow
GetTopWindow
DestroyIcon
IsZoomed
GetKeyState
SetScrollPos
SetScrollRange
SetScrollInfo
GetScrollPos
CreateMenu
DestroyMenu
InsertMenuItemW
SetMenuInfo
CreatePopupMenu
SetPropW
GetPropW
GetWindowDC
GetClientRect
FrameRect
SetLayeredWindowAttributes
KillTimer
MapWindowPoints
RedrawWindow
GetSysColor
LoadCursorW
RegisterClassExW
EnableWindow
UpdateWindow
GetMessageW
GetWindowLongPtrW
FillRect
GetDC
DrawTextW
ReleaseDC
GetSystemMetrics
CreateWindowExW
MessageBeep
AdjustWindowRectEx
GetWindowRect
SystemParametersInfoW
MoveWindow
GetSystemMenu
DeleteMenu
SetWindowLongPtrW
DefWindowProcW
PostMessageW
MessageBoxW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
BeginPaint
ReleaseCapture

gdi32

CreateCompatibleBitmap
GetCurrentObject
CreateCompatibleDC
CreateRectRgn
CreateRectRgnIndirect
ExtCreateRegion
CombineRgn
GetRegionData
GetTextMetricsW
CreateFontIndirectW
CreateDIBSection
GetGlyphOutlineW
ExtSelectClipRgn
OffsetClipRgn
SelectClipRgn
GetTextExtentPoint32W
GetTextExtentExPointW
ExtTextOutW
RectVisible
CreateDIBitmap
EnumFontFamiliesExW
SetDIBitsToDevice
CreateSolidBrush
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
SetTextColor
SetBkMode
SetBkColor
GetCharacterPlacementW
GetStockObject
SelectObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

EqualSid
RegOpenKeyExW
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
RegQueryValueExW
RegCloseKey

shell32

SHGetSpecialFolderPathW
DragQueryFileW
DragFinish
SHGetSettings
SHFileOperationW
SHGetFileInfoW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetDataFromIDListW
ord21
CommandLineToArgvW
DragAcceptFiles

ole32

DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleDuplicateData
ReleaseStgMedium
StringFromIID
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleInitialize
OleUninitialize

oleaut32

SysFreeString
SysAllocString

imm32

ImmAssociateContext
ImmReleaseContext
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmGetContext
ImmAssociateContextEx
ImmSetCompositionFontW

comctl32

ImageList_GetIcon
ImageList_GetIconSize

shlwapi

PathIsRelativeW
StrRetToBufW
PathCanonicalizeW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shared
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srclibs
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.appskin
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Paint Tool SAI 2.0 (64bit)/sai2.ini

Resubmissions

Sharing

General

Malware Config

Signatures

Files

daaef9f6b0c572ddfb83c945880aa4f5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

imm32

comctl32

shlwapi

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.code Size: 2KB - Virtual size: 2KB

.rdata Size: 399KB - Virtual size: 398KB

.data Size: 23KB - Virtual size: 181KB

.pdata Size: 92KB - Virtual size: 92KB

.shared Size: 512B - Virtual size: 8B

.tls Size: 4KB - Virtual size: 4KB

.srclibs Size: 352KB - Virtual size: 352KB

.appskin Size: 2.1MB - Virtual size: 2.1MB

.rsrc Size: 165KB - Virtual size: 165KB

daaef9f6b0c572ddfb83c945880aa4f5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

imm32

comctl32

shlwapi

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.code Size: 2KB - Virtual size: 2KB

.rdata Size: 399KB - Virtual size: 399KB

.data Size: 23KB - Virtual size: 182KB

.pdata Size: 92KB - Virtual size: 92KB

.shared Size: 512B - Virtual size: 512B

.tls Size: 4KB - Virtual size: 4KB

.srclibs Size: 352KB - Virtual size: 352KB

.appskin Size: 2.1MB - Virtual size: 2.1MB

.rsrc Size: 286KB - Virtual size: 286KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.code
Size: 2KB - Virtual size: 2KB

.rdata
Size: 399KB - Virtual size: 398KB

.data
Size: 23KB - Virtual size: 181KB

.pdata
Size: 92KB - Virtual size: 92KB

.shared
Size: 512B - Virtual size: 8B

.tls
Size: 4KB - Virtual size: 4KB

.srclibs
Size: 352KB - Virtual size: 352KB

.appskin
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 165KB - Virtual size: 165KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.code
Size: 2KB - Virtual size: 2KB

.rdata
Size: 399KB - Virtual size: 399KB

.data
Size: 23KB - Virtual size: 182KB

.pdata
Size: 92KB - Virtual size: 92KB

.shared
Size: 512B - Virtual size: 512B

.tls
Size: 4KB - Virtual size: 4KB

.srclibs
Size: 352KB - Virtual size: 352KB

.appskin
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 286KB - Virtual size: 286KB