eb37221350bf08e9d38c4eabb8faa735347ace57dc89f6f149fd31c7a49cce97N

Sharing

Copy URL Twitter E-mail

General

Target

eb37221350bf08e9d38c4eabb8faa735347ace57dc89f6f149fd31c7a49cce97N
Size

5.8MB
MD5

4a815980afa5e689a26ca37bc42bf530
SHA1

c31fdde9f3829ae69fdf7f01c6c081933a119f0b
SHA256

eb37221350bf08e9d38c4eabb8faa735347ace57dc89f6f149fd31c7a49cce97
SHA512

1dc91fa5a9cd4d741498dca91dee347368623e2b2b35954d0477c72a4295298ab54036ab0855da097eb3f339d2b36671c9915ea7a8ddae165ca088f65da48e74
SSDEEP

98304:pLhtsCFiKSIvSWflcxV0o9LBeiAnAagdSKeBNQ5nAdwN9UWgNYmpxHgtvqYp8:RYwSH+cB9L5SKO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb37221350bf08e9d38c4eabb8faa735347ace57dc89f6f149fd31c7a49cce97N

Files

eb37221350bf08e9d38c4eabb8faa735347ace57dc89f6f149fd31c7a49cce97N
.exe windows:6 windows x86 arch:x86

83cbc2e5d0394bd84cb18d2a580d978d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\Dev\Development-Projects-ACDSeeUltimate10-BaseSlideshow\Common\Mini-Fotoangelo\BaseSlideshow\Static Release - Unicode D3D SS\D3DBaseSlideShow.pdb

Imports

user32

DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
SetClipboardData
CloseClipboard
OpenClipboard
SetParent
SetClassLongW
EnumDisplayMonitors
GetKeyNameTextW
MapVirtualKeyW
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetMenuDefaultItem
CreatePopupMenu
MapDialogRect
GetAsyncKeyState
SendDlgItemMessageA
RealChildWindowFromPoint
DeleteMenu
CopyImage
GetSysColorBrush
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
ShowOwnedPopups
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
IsDialogMessageW
MoveWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
GetUpdateRect
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetDesktopWindow
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
CreateDialogIndirectParamW
GetLastActivePopup
GetWindowThreadProcessId
IsWindowEnabled
PostQuitMessage
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringW
DrawTextW
CopyRect
SetRectEmpty
EqualRect
IntersectRect
IsRectEmpty
InflateRect
TrackMouseEvent
CheckMenuItem
GetSubMenu
LoadMenuW
ReleaseDC
OffsetRect
FillRect
GetDC
SetWindowRgn
SetLayeredWindowAttributes
LoadImageW
GetSysColor
PtInRect
GetCursorPos
GetWindowRect
KillTimer
GetMonitorInfoW
GetSystemMetrics
MonitorFromWindow
IsWindow
SetTimer
CheckDlgButton
CharUpperW
UpdateWindow
ShowWindow
DestroyWindow
MessageBoxW
IsDlgButtonChecked
SendDlgItemMessageW
wsprintfW
GetDlgItemTextW
SetWindowTextW
EndDialog
PostMessageW
GetWindowLongW
SetWindowLongW
InvalidateRect
DestroyIcon
LoadIconW
LoadStringW
GetDlgItem
SetDlgItemTextW
GetParent
LoadCursorW
SendMessageW
IsClipboardFormatAvailable
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetComboBoxInfo
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
CopyIcon
SetCursorPos
BringWindowToTop
GetSystemMenu
IsZoomed
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
DialogBoxIndirectParamW
UnregisterClassW
SetRect
EnableWindow
SetCursor
GetClientRect
SetWindowPos
CharNextW

d3d9

Direct3DCreate9

mscms

OpenColorProfileW
TranslateBitmapBits
DeleteColorTransform
CreateMultiProfileTransform
GetColorProfileHeader
IsColorProfileValid
CloseColorProfile

d2d1

ord1

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

kernel32

GetUserDefaultLCID
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
VerSetConditionMask
GetWindowsDirectoryW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
MoveFileW
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
GetVolumeInformationW
GetShortPathNameW
FlushFileBuffers
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
GlobalFindAtomW
GlobalAddAtomW
LCMapStringW
GetStringTypeW
GetCPInfo
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
GetThreadTimes
FreeLibraryAndExitThread
SignalObjectAndWait
SwitchToThread
CreateThread
GetThreadPriority
GetLogicalProcessorInformation
GetSystemDirectoryW
EncodePointer
GetExitCodeThread
WaitForMultipleObjects
CreateSemaphoreA
TzSpecificLocalTimeToSystemTime
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetDriveTypeW
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
SearchPathW
GetProfileIntW
GetLongPathNameW
ChangeTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
UnregisterWaitEx
RtlUnwind
VirtualQuery
ExitProcess
GetModuleHandleExW
ExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
SetStdHandle
GetFileType
GlobalDeleteAtom
GetCurrentThreadId
GetStdHandle
GetACP
SetLastError
LocalFree
GlobalSize
lstrcatA
GetTimeZoneInformation
FormatMessageW
GetPrivateProfileIntW
GetCurrentThread
FreeResource
TryEnterCriticalSection
GetModuleHandleW
lstrcmpW
GetTickCount
MulDiv
GlobalHandle
Sleep
VirtualAlloc
VirtualFree
CreateFileMappingA
OutputDebugStringA
GetModuleHandleA
LoadLibraryA
IsProcessorFeaturePresent
GetVersionExA
DeleteTimerQueueTimer
GetVersionExW
CreateTimerQueue
DeleteTimerQueueEx
CreateTimerQueueTimer
QueryPerformanceFrequency
QueryPerformanceCounter
InitializeCriticalSection
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
FindResourceExW
lstrcmpA
lstrcatW
lstrcpynW
lstrlenA
GlobalFree
ReleaseSemaphore
WaitForSingleObject
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetFileAttributesW
OutputDebugStringW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
WideCharToMultiByte
CreateSemaphoreW
lstrcpyW
MapViewOfFile
CreateFileMappingW
GetTempFileNameW
CopyFileW
GetFileSize
GetSystemInfo
UnmapViewOfFile
SetEndOfFile
SetFilePointer
ReadFile
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
lstrcpyA
CreateFileA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpiA
FreeLibrary
LoadLibraryW
DeleteFileW
CloseHandle
WriteFile
CreateFileW
MultiByteToWideChar
lstrlenW
GetTempPathW
GetModuleFileNameW
lstrcmpiW
FindResourceW
LoadResource
LockResource
SizeofResource
VerifyVersionInfoW

msimg32

TransparentBlt
AlphaBlend

advapi32

RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW

shell32

ExtractIconExW
SHGetFolderPathW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
DragQueryFileW
DragFinish
SHAppBarMessage

comctl32

ord17

shlwapi

PathAppendW
PathFindFileNameW
PathAddBackslashW
PathRemoveFileSpecW
PathFileExistsW
PathFindExtensionW
StrStrIW
StrStrIA
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText

gdiplus

GdipCreateFromHDC
GdipSetInterpolationMode
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImageRectI
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

gdi32

ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetLayout
GetLayout
SetPolyFillMode
SetROP2
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
CopyMetaFileW
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
CombineRgn
Escape
PatBlt
SetRectRgn
DPtoLP
CreatePatternBrush
GetNearestPaletteIndex
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetCharacterPlacementW
SetPixel
StretchBlt
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
Polygon
Polyline
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
CreateRectRgnIndirect
CreateRectRgn
DeleteEnhMetaFile
CreateFontW
PlayEnhMetaFile
GetCharacterPlacementA
CreateDIBSection
SetDIBColorTable
Ellipse
CreateHatchBrush
SetBkMode
SetBkColor
EnumFontFamiliesExW
SetTextColor
GetDeviceCaps
CreatePalette
GetDIBColorTable
GetPaletteEntries
SelectPalette
CreateDCW
ExtTextOutW
MoveToEx
ExtTextOutA
SetMapMode
SetTextAlign
CreateFontIndirectW
GetObjectW
GetGlyphOutlineA
GetTextMetricsA
GetObjectA
BitBlt
SetDIBitsToDevice
CreateSolidBrush
RoundRect
CreatePen
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateRoundRectRgn
DeleteDC
GetStockObject
GetTextCharsetInfo
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
CreateBitmap

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

GetFileTitleW

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoCreateGuid
CoDisconnectObject
CoInitializeEx
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CreateStreamOnHGlobal

oleaut32

VarBstrFromDate
VariantCopy
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocString

winmm

timeGetDevCaps
PlaySoundW

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83cbc2e5d0394bd84cb18d2a580d978d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

d3d9

mscms

d2d1

d3d11

dxgi

kernel32

msimg32

advapi32

shell32

comctl32

shlwapi

uxtheme

gdiplus

oleacc

imm32

gdi32

winspool.drv

comdlg32

ole32

oleaut32

winmm

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 129KB - Virtual size: 317KB

.gfids Size: 107KB - Virtual size: 107KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 37KB - Virtual size: 36KB

.rsrc Size: 147KB - Virtual size: 147KB

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 129KB - Virtual size: 317KB

.gfids
Size: 107KB - Virtual size: 107KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 37KB - Virtual size: 36KB

.rsrc
Size: 147KB - Virtual size: 147KB