General

Malware Config

Signatures

Files

• e2654feac6d2f8230af3e079a3254b27b218ba8df5f2eeee58c8a88a2a196238

  .dll windows x86

  82dcd2585191883c51de54c12fc261ee

  
  

  Code Sign

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualAllocEx

  GetLastError

  GetModuleHandleW

  user32

  LoadIconA

  CloseWindowStation

  IsCharLowerW

  IsWindowVisible

  IsCharUpperW

  DrawMenuBar

  GetDialogBaseUnits

  CharNextA

  IsCharLowerA

  GetMessageTime

  GetParent

  CreatePopupMenu

  GetKeyboardLayout

  GetFocus

  GetCapture

  GetWindowContextHelpId

  GetKeyboardType

  CountClipboardFormats

  EndMenu

  IsCharAlphaA

  GetDlgCtrlID

  GetInputState

  DestroyCursor

  GetQueueStatus

  GetClipboardData

  GetCaretBlinkTime

  DestroyMenu

  GetThreadDesktop

  CharUpperA

  GetShellWindow

  CharUpperW

  ShowCaret

  CloseClipboard

  DestroyIcon

  CopyIcon

  GetListBoxInfo

  PaintDesktop

  GetDesktopWindow

  IsCharAlphaNumericW

  IsCharAlphaW

  GetDoubleClickTime

  GetForegroundWindow

  OemKeyScan

  GetMenuContextHelpId

  VkKeyScanW

  IsClipboardFormatAvailable

  GetOpenClipboardWindow

  GetLastActivePopup

  gdi32

  GetStockObject

  GetDCBrushColor

  GetBkMode

  UpdateColors

  CreateSolidBrush

  CreateMetaFileA

  EndPage

  GetMapMode

  SaveDC

  GdiGetBatchLimit

  WidenPath

  RealizePalette

  CreateMetaFileW

  FlattenPath

  GetPixelFormat

  GetSystemPaletteUse

  GetEnhMetaFileW

  DeleteObject

  GetTextCharset

  GetEnhMetaFileBits

  BeginPath

  DeleteDC

  GetLayout

  CloseEnhMetaFile

  GetStretchBltMode

  advapi32

  RegOpenKeyA

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text6

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text5

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text4

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text3

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text2

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 573B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2.0MB - Virtual size: 2.0MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 612B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ