EditorEN[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

EditorEN.exe
Size

7.7MB
MD5

cd4e77f04e26abd60aa0b8fc1ade971d
SHA1

44e554bd0df1f168d18d29e5d58e204d2c42b694
SHA256

6e8ef0580ea40b35ac764ba28ab04d217f14dcfc82fcad404402bb203db17646
SHA512

281fa6aa22642a6d301a8733c1c3f2eb735d24b19c07d187b1f649ffdb8059f656ad924eb159e5d955af6ec6867388ace1280b6b271d12a7c35db79b35e499cc
SSDEEP

98304:ohedRT+TOHL8Jmn1Ut5nifo7kaGOwkMtNBn7jdOr8FM8Jj46jBslxklCZ9eFzFRv:o8dRl8VZutNBn7YrNMKoCiFLCo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EditorEN.exe

Files

EditorEN.exe
.exe windows:6 windows x86 arch:x86

1b8b86ae1dd21d3218afc9b7368caa92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\（◆開発用ディレクトリ）\[▼作業用]プログラム\EditorVer1-VS2022用\Release\EditorVer12.pdb

Imports

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
ImmAssociateContext

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

ResetEvent
WaitForSingleObjectEx
WriteConsoleW
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
GetDriveTypeW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
RaiseException
OutputDebugStringW
SetEvent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SearchPathW
GetProfileIntW
GetTempPathW
SetErrorMode
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
GetStringTypeExW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFileSize
FlushFileBuffers
FindResourceExW
GetThreadLocale
lstrcpyW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
FindFirstFileW
FindNextFileW
FindClose
CreateDirectoryW
CreateFileW
SetFileTime
CloseHandle
GetCurrentDirectoryW
WideCharToMultiByte
CopyFileW
SetCurrentDirectoryW
MoveFileW
RemoveDirectoryW
GetModuleFileNameW
GetCurrentProcessId
SizeofResource
LockResource
LoadResource
FindResourceW
LeaveCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
Sleep
MultiByteToWideChar
TlsAlloc
InitializeCriticalSection
FreeResource
GlobalAlloc
ReleaseMutex
OpenProcess
WaitForSingleObject
LoadLibraryW
OpenMutexW
CreateMutexW
FreeLibrary
ReadFile
SetFilePointer
GlobalLock
GetModuleHandleW
GlobalUnlock
DeleteFileW
GetLocalTime
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
FindNextFileA
GetTickCount
GetFileAttributesA
SetFileApisToANSI
GetACP
OutputDebugStringA
SetLastError
GetModuleHandleA
GetProcAddress
GlobalFree
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
LoadLibraryExW
LoadLibraryA
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GlobalFlags
CreateEventW
SetThreadPriority
SuspendThread
ResumeThread
GlobalSize
LocalFree
MulDiv
FormatMessageW
VirtualProtect
GetVersionExW
GetCurrentThread
lstrcmpA
CompareStringA
GetTickCount64
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetDiskFreeSpaceW
GetFileAttributesW
GetFileTime
GetFullPathNameW
GetTempFileNameW
ReplaceFileW
SystemTimeToFileTime
GetUserDefaultLCID
GlobalGetAtomNameW
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
IsProcessorFeaturePresent

user32

SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
DrawIcon
FrameRect
CopyIcon
SetCursorPos
DrawFrameControl
DrawEdge
SetWindowRgn
SetClassLongW
DrawStateW
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
HideCaret
GetIconInfo
DrawIconEx
GetMenuDefaultItem
LockWindowUpdate
GetDCEx
UnionRect
CharUpperW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
TrackMouseEvent
GetSysColorBrush
CopyImage
RealChildWindowFromPoint
SetParent
IsRectEmpty
ReuseDDElParam
UnpackDDElParam
DestroyIcon
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatW
PostQuitMessage
MapDialogRect
IntersectRect
MapVirtualKeyW
GetKeyNameTextW
GetWindowThreadProcessId
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
GetDoubleClickTime
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
GetMenuStringW
TranslateMessage
GetMessageW
SetRectEmpty
SendDlgItemMessageA
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
ReleaseCapture
GetWindowRect
EnableScrollBar
IsIconic
InvalidateRect
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
ModifyMenuW
CharUpperBuffW
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetPropW
SetPropW
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
ReleaseDC
SetCapture
SetRect
SendMessageW
EnableMenuItem
GetSystemMenu
MessageBeep
EnableWindow
DrawTextW
SetCursor
LoadCursorW
DrawFocusRect
CopyRect
FillRect
GetSysColor
GetCursorPos
ScreenToClient
GetParent
LoadMenuW
GetSubMenu
ClientToScreen
DeleteMenu
GetClientRect
LoadAcceleratorsW
IsWindowVisible
GetDC
GetKeyState
SetFocus
GetSystemMetrics
GetFocus
GetAsyncKeyState
TranslateAcceleratorW
WindowFromPoint
IsChild
LoadIconW
ShowScrollBar
UpdateWindow
CloseWindow
OffsetRect
SetTimer
KillTimer
SetScrollRange
GetScrollPos
GetScrollRange
SetScrollPos
LoadImageW
IsZoomed
LoadBitmapW
RedrawWindow
GetWindowLongW
SetWindowLongW
OpenClipboard
MessageBoxW
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
GetClipboardData
UnregisterClassW
MessageBoxA
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetDesktopWindow
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
GetCapture
GetMenu
SetMenu
GetMenuItemID
GetMenuItemCount

gdi32

CreateDIBSection
GetObjectW
DeleteDC
SelectObject
CreateCompatibleDC
GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetRgnBox
GetTextColor
GetBkColor
EnumFontFamiliesExW
StretchDIBits
GetCharWidthW
CreateFontW
GetTextMetricsW
CreateCompatibleBitmap
DPtoLP
SetRectRgn
GetMapMode
CombineRgn
PatBlt
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateDCW
CopyMetaFileW
ExtTextOutW
CreateBitmap
SetTextColor
SetBkColor
Rectangle
CreatePen
GetTextExtentPoint32W
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectW
SetDIBColorTable
BitBlt
GetDIBColorTable
StretchBlt
DeleteObject

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCloseKey
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueW
GetFileSecurityW
SetFileSecurityW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW

shell32

DragAcceptFiles
DragQueryFileW
SHFileOperationW
DragFinish
SHAddToRecentDocs
ExtractIconW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteW

comctl32

ord17
ImageList_AddMasked
ImageList_DragMove
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_DragEnter

shlwapi

PathIsDirectoryW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

GetWindowTheme
DrawThemeBackground
GetThemeSysColor
IsAppThemed
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
GetThemePartSize
GetCurrentThemeName
GetThemeColor

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
CoRevokeClassObject

oleaut32

VariantChangeType
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocStringLen
VariantCopy
VarBstrFromDate
LoadTypeLi
SysFreeString
OleCreateFontIndirect
VariantClear
SysAllocString
VariantInit

oledlg

OleUIBusyW

gdiplus

GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImagePixelFormat

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

winmm

PlaySoundW

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 618KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b8b86ae1dd21d3218afc9b7368caa92

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

imm32

version

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

winmm

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 618KB - Virtual size: 618KB

.data Size: 26KB - Virtual size: 2.3MB

.rsrc Size: 3.7MB - Virtual size: 3.7MB

.reloc Size: 239KB - Virtual size: 239KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 618KB - Virtual size: 618KB

.data
Size: 26KB - Virtual size: 2.3MB

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

.reloc
Size: 239KB - Virtual size: 239KB