614a727137a887b64840b8f19eb450c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

614a727137a887b64840b8f19eb450c0N.exe
Size

412KB
MD5

614a727137a887b64840b8f19eb450c0
SHA1

25cd84e334b58d9a8e270a2750f489bb5e11f6fe
SHA256

1c667d33579363be5cd3a937189d976f7da0be08b9d138394cf9eafa0fe18fcc
SHA512

8bf23295f2fb1dd09ba02eda0d8b4386145e4a685c8e1877d8b81b398dd442c8050cf77b7cf74337c665feb078706a0433acba5991a9a0d54897a09936db0646
SSDEEP

6144:pmIXyo2XoSs5z8IHODtnNnRoz8HOMigoodVQP4q5Gg8XEn8fwttZ:cIYrs5z8dxotgl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
614a727137a887b64840b8f19eb450c0N.exe

Files

614a727137a887b64840b8f19eb450c0N.exe
.dll windows:4 windows x86 arch:x86

78ac62d151a061ce357ed57568e62884

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\WorldocScanXWS\Src_v1.1\SPImageView\Release\SPImageView.pdb

Imports

basectrl

??0XBtn@@QAE@XZ
?CreateBtnPNG@XBtn@@QAE_NKKVCPoint@@PAVCWnd@@KPAUHINSTANCE__@@KKKKK@Z
?EnableTip@XBtn@@QAEX_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??1XBtn@@UAE@XZ
?GetMessageMap@XBtn@@MBEPBUAFX_MSGMAP@@XZ
?EnableWindow@XBtn@@UAEHH@Z
?SetEnable@CImgButton@@QAEX_N@Z
?MoveButton@CImgButton@@QAEXHHHH@Z
?InitInstance@CImgButton@@QAEHPAUHINSTANCE__@@PAUHWND__@@G@Z
?LoadBtnImageID@CImgButton@@QAEXKKKK@Z
?ShowButton@CImgButton@@QAEXH@Z
?EnableTip@CImgButton@@QAEX_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetButType@CImgButton@@QAEXW4BTNTYPE@@@Z
??0CImgButton@@QAE@XZ
??1CImgButton@@UAE@XZ
??0NormalEdit@@QAE@XZ
??1NormalEdit@@UAE@XZ
??0XPng@@QAE@XZ
??1XPng@@UAE@XZ
?Show@XPng@@QAEXPAUHDC__@@HH@Z
?LoadFromResID@XPng@@QAE_NPAUHINSTANCE__@@K@Z

spglobalui

_SP_AfxMessageEx@16

spglobaldata

_SP_GetUIString@16
_SP_GetUILangID@0

ltfil13n

ord185
ord102
ord197
ord103
ord117
ord119
ord105
ord100

ltdis13n

ord121

ltkrn13n

ord125
ord151
ord197
ord117
ord120
ord145

mfc80u

ord925
ord920
ord6063
ord5229
ord5231
ord5956
ord1591
ord4716
ord3397
ord5558
ord1894
ord3331
ord5524
ord4119
ord4255
ord501
ord1271
ord4480
ord709
ord3943
ord5210
ord5829
ord347
ord2638
ord4179
ord602
ord3703
ord6271
ord1270
ord3713
ord5067
ord1476
ord5633
ord3712
ord1899
ord5148
ord4238
ord2254
ord2527
ord1393
ord283
ord2640
ord3940
ord2534
ord1608
ord6013
ord2856
ord1611
ord2708
ord5911
ord1118
ord4301
ord6721
ord2397
ord2829
ord2725
ord2531
ord5196
ord1920
ord1590
ord1925
ord1646
ord2311
ord6086
ord1647
ord1955
ord5171
ord1353
ord4961
ord3590
ord3339
ord4276
ord6275
ord4347
ord3796
ord572
ord6273
ord760
ord3204
ord1513
ord929
ord2085
ord3238
ord3756
ord6140
ord2155
ord5727
ord1545
ord2460
ord1274
ord4314
ord326
ord3157
ord1946
ord6001
ord1176
ord530
ord722
ord5982
ord5710
ord3342
ord5981
ord3677
ord566
ord757
ord3327
ord4475
ord2832
ord5562
ord5209
ord5226
ord4562
ord3824
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord1197
ord1199
ord1093
ord371
ord1908
ord1162
ord1115
ord1192
ord1168
ord1170
ord1200
ord581
ord2379
ord314
ord2381
ord2399
ord2169
ord2163
ord1156
ord280
ord2461
ord577
ord293
ord5398
ord774
ord762
ord764
ord927
ord931
ord3678
ord2384
ord2404
ord2388
ord4558
ord2394
ord2392
ord5053
ord2390
ord1079
ord2407
ord3155
ord2402
ord2386
ord2409
ord4094
ord6751
ord1087
ord1033
ord315
ord765
ord2366

msvcr80

_crt_debugger_hook
strcpy_s
_beginthread
wcstol
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal

kernel32

InterlockedExchange
LocalAlloc
LocalFree
WaitForSingleObject
GetModuleHandleW
SetEvent
GetFileSize
CreateFileW
SetThreadPriority
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WideCharToMultiByte
CloseHandle
CreateThread
CreateEventW
Sleep
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess

user32

GetWindowLongW
AppendMenuW
CreatePopupMenu
DrawTextW
CheckMenuItem
EnableScrollBar
PtInRect
ShowScrollBar
GetKeyState
UpdateWindow
InvalidateRect
ClientToScreen
GetParent
PostMessageW
LoadImageW
EnableWindow
SetRect
LoadCursorW
PeekMessageW
SendMessageW
PostThreadMessageW
GetClientRect
KillTimer
SetTimer
GetSystemMetrics
GetMessageW

gdi32

CreateFontW
DeleteObject
SetBkMode
Rectangle
CreatePen
GetObjectW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
StretchBlt

shlwapi

StrToIntW

Exports

Exports

EnableImgViewConvertPDFBtn
GetImageNeedSize
GetImageViewHandle
HideImageViewWnd
InitView
LoadImageFile
MoveView
ShowView
UnInitView

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78ac62d151a061ce357ed57568e62884

Headers

File Characteristics

PDB Paths

Imports

basectrl

spglobalui

spglobaldata

ltfil13n

ltdis13n

ltkrn13n

mfc80u

msvcr80

kernel32

user32

gdi32

shlwapi

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 324KB - Virtual size: 321KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 324KB - Virtual size: 321KB

.reloc
Size: 8KB - Virtual size: 6KB