b0ab5c4a62e76fde97774166a64d6341fd1dd3869a15782c0d828c56ec8ccc72

Sharing

Copy URL

Twitter E-mail

General

Target

b0ab5c4a62e76fde97774166a64d6341fd1dd3869a15782c0d828c56ec8ccc72
Size

14.5MB
MD5

790dff761093d7250744ec852c73ae14
SHA1

93e529c3a7126296e43893bdc1c11cf6da3d4f73
SHA256

b0ab5c4a62e76fde97774166a64d6341fd1dd3869a15782c0d828c56ec8ccc72
SHA512

adad8d1d6ec777336878ddc99990277591d6030c0f204845fa972f2cadcb437c72639c283cca235bbca06dc6ba7756884474ea997e73dc5dc2fa78ca38bb4b60
SSDEEP

393216:g8OycPlot0xIOUFPE5vSYIRhhd+yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy7:g8+ehdxpo

Score

1^/10

Malware Config

Signatures

Files

b0ab5c4a62e76fde97774166a64d6341fd1dd3869a15782c0d828c56ec8ccc72
.exe windows:6 windows x86 arch:x86

0351ec9aa8a0c9a0bf89e0081163ee0e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16/08/2023, 00:00

Not After

16/08/2026, 23:59

Subject

SERIALNUMBER=31333532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:41

Not After

15/04/2021, 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fa:9c:19:a9:f4:39:a7:aa:c6:bf:8d:46:c8:f8:b4:cd:6a:ca:1e
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

13/07/2023, 00:00

Not After

15/07/2026, 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17/07/2020, 00:00

Not After

17/07/2030, 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

15/07/2020, 00:00

Not After

15/07/2045, 00:00

Subject

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:fe
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

12/07/2023, 00:00

Not After

16/07/2026, 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16/07/2020, 00:00

Not After

16/07/2030, 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:6c:9b:20:7a:f8:16:07:fe:7c:af:22:e2:01:85:53:c9:3e:47:51:fd:7c:3f:3a:f8:5d:93:71:4b:90:e7:ca
Signer

Actual PE Digest

20:6c:9b:20:7a:f8:16:07:fe:7c:af:22:e2:01:85:53:c9:3e:47:51:fd:7c:3f:3a:f8:5d:93:71:4b:90:e7:ca

Digest Algorithm

sha256

PE Digest Matches

false

20:6c:9b:20:7a:f8:16:07:fe:7c:af:22:e2:01:85:53:c9:3e:47:51:fd:7c:3f:3a:f8:5d:93:71:4b:90:e7:ca
Signer

Actual PE Digest

20:6c:9b:20:7a:f8:16:07:fe:7c:af:22:e2:01:85:53:c9:3e:47:51:fd:7c:3f:3a:f8:5d:93:71:4b:90:e7:ca

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ESETOnlineScanner.pdb

Imports

sciter-x

SciterSetCallback
SciterGetParentElement
SciterUpdateElement
SciterCallScriptingMethod
ValueFromString
ValueElementsCount
ValueNthElementValue
ValueNthElementValueSet
ValueGetValueOfKey
SciterSetStyleAttribute
SciterSetCapture
SciterGetMinHeight
SciterSetElementHtml
SciterSetElementText
SciterCreateElement
SciterInsertElement
SciterDeleteElement
SciterHidePopup
SciterShowPopupAt
ValueInt64Data
ValueIsolate
ValueInt64DataSet
SciterResetURLData
ValueClear
SciterReleaseCapture
SciterLoadHtml
SciterSetMediaVars
SciterSetMediaType
SciterProcND
SciterControlGetType
SciterCallScriptingFunction
SciterPostEvent
SciterSelectParent
SciterSelectElements
SciterFindElement
SciterGetFocusElement
SciterWindowAttachEventHandler
ValueSetValueToKey
ValueToString
ValueBinaryDataSet
ValueFloatDataSet
ValueIntDataSet
ValueFloatData
SciterEval
SciterDataReady
SciterSetTimer
SciterSetElementState
SciterGetElementState
SciterGetElementHwnd
SciterGetElementLocation
SciterRefreshElementArea
SciterGetStyleAttribute
SciterSetAttributeByName
SciterGetAttributeByName
Sciter_UnuseElement
Sciter_UseElement
ValueIntData
SciterGetRootElement
ValueStringData
ValueStringDataSet
ValueCopy
GraphinAPI
ValueInit

kernel32

GetACP
IsValidCodePage
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
ExitProcess
VirtualAlloc
RtlUnwind
GetCPInfo
CompareStringEx
LCMapStringEx
GetStringTypeW
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetUserDefaultLCID
SearchPathW
GetProfileIntW
GetFileAttributesExW
DuplicateHandle
UnlockFile
LockFile
GetVolumeInformationW
GetFullPathNameW
lstrcmpiW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GlobalGetAtomNameW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
SetThreadPriority
WritePrivateProfileStringW
CompareStringA
lstrcmpW
GlobalDeleteAtom
GetVersionExW
OutputDebugStringA
lstrcmpA
GlobalSize
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
HeapFree
HeapSize
GetLastError
HeapReAlloc
HeapAlloc
DeleteCriticalSection
GetProcessHeap
SetLastError
InitializeCriticalSection
GetTickCount
GetModuleHandleA
GetModuleHandleW
GetCurrentThread
GetCurrentProcess
GetCurrentProcessId
FileTimeToSystemTime
Sleep
FindFirstFileExW
FindNextFileW
FindClose
RemoveDirectoryW
CreateDirectoryW
ReadFile
WriteFile
SetEndOfFile
SetFilePointer
GetFileSize
DeleteFileW
MoveFileW
CopyFileW
GetTempPathW
GetTempFileNameW
FlushFileBuffers
GetFileTime
GetFileAttributesW
GetFileInformationByHandle
WriteConsoleW
GetDiskFreeSpaceW
GetSystemInfo
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
LoadLibraryExA
VirtualQuery
VirtualProtect
SwitchToThread
ResetEvent
GetEnvironmentVariableW
RaiseException
CreateMutexW
SetSearchPathMode
GetSystemDirectoryW
GetUserDefaultLangID
SuspendThread
GetLocaleInfoA
WaitForSingleObject
SetEvent
DeleteFileA
GetTempFileNameA
GetTempPathA
GlobalFree
GetDateFormatA
GlobalUnlock
GlobalLock
GlobalAlloc
SetCurrentDirectoryW
FormatMessageW
GetTimeFormatA
GetLocalTime
GetNumberFormatW
GetTimeFormatW
GetDateFormatW
SystemTimeToTzSpecificLocalTime
lstrcpyW
lstrcpynW
MulDiv
LoadLibraryA
FindNextFileA
TerminateThread
SystemTimeToFileTime
OpenProcess
VerifyVersionInfoW
VerSetConditionMask
LoadLibraryExW
GetModuleFileNameW
GetTimeZoneInformation
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
FindResourceExW
GetLocaleInfoW
ExpandEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
LockResource
LoadResource
SizeofResource
FindResourceW
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentDirectoryW
LocalFree
SetErrorMode
FindFirstFileA
MoveFileExW
FindFirstFileW
GetSystemTime
FreeLibrary
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection

user32

EqualRect
GetWindowThreadProcessId
GetClassNameW
IsWindowVisible
GetDesktopWindow
SetRect
GetForegroundWindow
InvertRect
HideCaret
DrawIcon
DestroyCursor
TranslateMessage
PeekMessageW
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
GetNextDlgGroupItem
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
CharUpperBuffW
GetWindowDC
RegisterClipboardFormatW
SubtractRect
CopyAcceleratorTableW
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
MapDialogRect
SendDlgItemMessageA
GetUpdateRect
SetClassLongW
DestroyAcceleratorTable
ModifyMenuW
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuItemInfoW
CopyIcon
GetDoubleClickTime
SystemParametersInfoW
DestroyMenu
LockWindowUpdate
CreatePopupMenu
UnionRect
SetCursorPos
WindowFromPoint
GetSystemMenu
ReleaseCapture
SetCapture
MonitorFromPoint
EnumDisplayMonitors
SetRectEmpty
CharUpperW
MessageBeep
IsClipboardFormatAvailable
DeleteMenu
CopyImage
LoadMenuW
RealChildWindowFromPoint
WinHelpW
GetScrollInfo
SetScrollInfo
GetSystemMetrics
GetTopWindow
GetClassLongW
RemovePropW
ShowScrollBar
GetScrollRange
GetWindowRect
DestroyIcon
GetIconInfo
ReleaseDC
GetDC
LoadBitmapW
EndPaint
BeginPaint
SetScrollRange
GetScrollPos
GetWindowRgn
MoveWindow
InvalidateRect
BringWindowToTop
RedrawWindow
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetParent
LoadImageW
EndDialog
CreateDialogIndirectParamW
GetDlgItem
UpdateWindow
IsZoomed
IsIconic
SetWindowPlacement
GetWindowPlacement
KillTimer
SetTimer
IsWindowEnabled
SetWindowTextW
SetForegroundWindow
SetActiveWindow
MapWindowPoints
SetWindowContextHelpId
GetWindowContextHelpId
RegisterClassExW
LoadCursorW
LoadIconW
LoadAcceleratorsW
PostQuitMessage
RegisterWindowMessageW
LoadStringW
FrameRect
GetAsyncKeyState
DrawFocusRect
AdjustWindowRectEx
SetFocus
GetWindow
IsDialogMessageW
WaitMessage
GetDlgCtrlID
ScreenToClient
GetWindowTextW
GetWindowTextLengthW
GetKeyState
GetCursorPos
GetWindowLongW
MonitorFromWindow
SendMessageW
GetParent
IsWindow
CopyRect
SetWindowPos
SetPropW
SetWindowLongW
SetProcessDefaultLayout
GetProcessDefaultLayout
GetClassInfoW
ShowWindow
GetClientRect
GetPropW
PtInRect
NotifyWinEvent
IntersectRect
EnableWindow
DrawTextW
GetSysColor
GetSysColorBrush
FillRect
InflateRect
DrawFrameControl
EnableScrollBar
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
DrawTextExW
GrayStringW
TabbedTextOutW
ClientToScreen
MessageBoxW
GetLastActivePopup
UnhookWindowsHookEx
CheckDlgButton
GetFocus
GetKeyNameTextW
MapVirtualKeyW
DrawEdge
DrawStateW
SetWindowRgn
OffsetRect
IsRectEmpty
DrawIconEx
GetNextDlgTabItem
GetActiveWindow
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
ValidateRect
SetWindowsHookExW
CallNextHookEx
ShowOwnedPopups
SetCursor
GetMessagePos
GetMessageTime
CallWindowProcW
GetClassInfoExW
IsMenu
IsChild
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetCapture
GetMenu
SetMenu
TrackPopupMenu
ScrollWindow
SetScrollPos

ws2_32

inet_ntoa
ntohs
getservbyport
gethostbyaddr
setsockopt
closesocket
ioctlsocket
connect
select
htonl
send
WSASetLastError
recv
socket
getsockopt
getservbyname
htons
WSAGetLastError
__WSAFDIsSet
inet_addr
gethostbyname

gdi32

SetPixelV
CreateRectRgnIndirect
PatBlt
CreateEllipticRgn
CreatePolygonRgn
Polyline
SetRectRgn
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
CreateRoundRectRgn
GetRgnBox
OffsetRgn
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
GetTextFaceW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetDIBColorTable
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
CopyMetaFileW
CreateHatchBrush
CreatePatternBrush
Escape
ExcludeClipRect
GetObjectType
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
TextOutW
StretchBlt
PtInRegion
CreateBrushIndirect
RoundRect
SetDCBrushColor
GetDCPenColor
LineTo
MoveToEx
SetDCPenColor
SetBkMode
SetTextColor
SetTextAlign
Polygon
GetStockObject
CreateBitmap
GetTextColor
GetWindowOrgEx
GetClipBox
IntersectClipRect
GetClipRgn
RemoveFontMemResourceEx
AddFontMemResourceEx
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPoint32W
GetBkColor
CombineRgn
CreateRectRgn
Ellipse
Rectangle
CreateSolidBrush
CreatePen
SelectClipRgn
ExtTextOutW
SetBkColor
GetPixel
GetDeviceCaps
CreateDCW
SetBitmapBits
GetBitmapBits
CreateDIBSection
GetCurrentObject
DeleteDC
DeleteObject
SetDIBits
GetDIBits
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectW

advapi32

RegDeleteKeyW
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenCurrentUser
RegEnumKeyExW
RegEnumValueW
RegDeleteValueW
RegQueryInfoKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegEnumKeyExA
OpenSCManagerW
QueryServiceStatus
RegGetValueA
RegOpenKeyW
GetUserNameW
RegSetKeyValueW
RegEnumKeyW
RegQueryValueW

shell32

DragFinish
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetDesktopFolder
DragQueryFileW
SHAppBarMessage
ExtractIconExW
ShellExecuteW

ole32

CoResumeClassObjects
CoRegisterClassObject
CoRevokeClassObject
CoAddRefServerProcess
CoReleaseServerProcess
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoDisconnectObject
CreateStreamOnHGlobal
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator

oleaut32

SysAllocString
SysAllocStringByteLen
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
VarBstrFromDate
SysStringLen
VariantCopy
VariantChangeType
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi

shlwapi

StrStrIW
StrFormatKBSizeW
PathIsDirectoryW

msimg32

TransparentBlt

comctl32

ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_ReplaceIcon
InitCommonControlsEx

uxtheme

GetThemeSysColor
GetThemeColor
GetCurrentThemeName
IsAppThemed
DrawThemeParentBackground
GetWindowTheme
IsThemeBackgroundPartiallyTransparent

gdiplus

GdipAlloc
GdipDrawImageRectI
GdipCreateFromHDC
GdipDrawImageI
GdipBitmapUnlockBits
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToStream
GdipDrawImageRectRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipSetImageAttributesWrapMode
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDisposeImage
GdipFree

esdkw

esdk_global_setup_set_data_dir
esdk_global_setup_set_license_dir
esdk_global_setup_create
esdk_scan_packet_result_get_logs
esdk_proxy_set_address
esdk_module_info_get_build
esdk_module_info_get_name
esdk_update_setup_delete
esdk_deinit
esdk_update_setup_set_server
esdk_update_setup_set_callbacks
esdk_global_setup_set_quarantine_dir
esdk_license_info_is_expired
esdk_modules_evaluate_versions
esdk_get_last_error
esdk_quarantine_entry_get_id
esdk_quarantine_entry_get_object_name
esdk_quarantine_entry_get_last_add_time
esdk_scan_packet_result_get_av_status
esdk_scan_packet_result_get_statistic_total
esdk_scan_packet_result_get_statistic_infected
esdk_scan_packet_result_get_statistic_cleaned
esdk_scan_packet_result_delete
esdk_global_setup_set_license_change_callback
esdk_global_setup_set_proxy_server_callback
esdk_global_setup_delete
esdk_modules_reload
esdk_global_setup_set_modules_dir
esdk_update_setup_create
esdk_quarantine_entry_get_object_size
esdk_quarantine_entry_get_reason
esdk_quarantine_evaluate_list
esdk_quarantine_restore
esdk_quarantine_delete
esdk_setup_packet_create
esdk_setup_packet_set_boot_sectors
esdk_setup_packet_set_log_all_files
esdk_setup_packet_compile
esdk_setup_packet_delete
esdk_scan_packet_create
esdk_scan_packet_set_disks
esdk_scan_packet_set_memory
esdk_setup_packet_set_archives
esdk_setup_packet_set_rtp
esdk_setup_packet_set_sfx
esdk_setup_packet_set_app_unsafe
esdk_setup_packet_set_app_unwanted
esdk_setup_packet_set_app_suspicious
esdk_scan_log_entry_get_object_name
esdk_scan_log_entry_get_virus_name
esdk_scan_log_entry_get_action
esdk_scan_log_entry_get_information
esdk_scan_log_entry_get_severity
esdk_scan_execute
esdk_stream_create
esdk_stream_set_file
esdk_scan_packet_set_stream
esdk_update_execute
esdk_stream_delete
esdk_proxy_set_authentication
esdk_init

wsock32

WSACleanup
WSAStartup

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768KB - Virtual size: 767KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0351ec9aa8a0c9a0bf89e0081163ee0e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5eCertificate

Extended Key Usages

Key Usages

61:1c:b2:8a:00:00:00:00:00:26Certificate

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

06:fa:9c:19:a9:f4:39:a7:aa:c6:bf:8d:46:c8:f8:b4:cd:6a:ca:1eCertificate

Extended Key Usages

Key Usages

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8Certificate

Extended Key Usages

Key Usages

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34Certificate

Key Usages

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:feCertificate

Extended Key Usages

Key Usages

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38Certificate

Extended Key Usages

Key Usages

20:6c:9b:20:7a:f8:16:07:fe:7c:af:22:e2:01:85:53:c9:3e:47:51:fd:7c:3f:3a:f8:5d:93:71:4b:90:e7:caSigner

20:6c:9b:20:7a:f8:16:07:fe:7c:af:22:e2:01:85:53:c9:3e:47:51:fd:7c:3f:3a:f8:5d:93:71:4b:90:e7:caSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

sciter-x

kernel32

user32

ws2_32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

msimg32

comctl32

uxtheme

gdiplus

esdkw

wsock32

oleacc

imm32

winmm

winspool.drv

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 768KB - Virtual size: 767KB

.data Size: 45KB - Virtual size: 73KB

.didat Size: 512B - Virtual size: 40B

.rsrc Size: 10.6MB - Virtual size: 10.6MB

.reloc Size: 204KB - Virtual size: 204KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5e
Certificate

61:1c:b2:8a:00:00:00:00:00:26
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

06:fa:9c:19:a9:f4:39:a7:aa:c6:bf:8d:46:c8:f8:b4:cd:6a:ca:1e
Certificate

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34
Certificate

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:fe
Certificate

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

20:6c:9b:20:7a:f8:16:07:fe:7c:af:22:e2:01:85:53:c9:3e:47:51:fd:7c:3f:3a:f8:5d:93:71:4b:90:e7:ca
Signer

20:6c:9b:20:7a:f8:16:07:fe:7c:af:22:e2:01:85:53:c9:3e:47:51:fd:7c:3f:3a:f8:5d:93:71:4b:90:e7:ca
Signer

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 768KB - Virtual size: 767KB

.data
Size: 45KB - Virtual size: 73KB

.didat
Size: 512B - Virtual size: 40B

.rsrc
Size: 10.6MB - Virtual size: 10.6MB

.reloc
Size: 204KB - Virtual size: 204KB