General

Malware Config

Signatures

Files

• Google.jpeg.exe

  .exe windows x86

  63a806c199e422807de783c1c09b5907

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mfc140

  ord8360

  ord12049

  ord7657

  ord3186

  ord558

  ord7144

  ord5228

  ord5528

  ord5739

  ord9305

  ord5504

  ord5231

  ord5390

  ord5210

  ord7687

  ord7688

  ord7677

  ord5388

  ord8182

  ord7619

  ord8173

  ord1472

  ord12032

  ord3830

  ord12163

  ord9213

  ord13628

  ord5911

  ord12067

  ord3933

  ord1000

  ord6836

  ord1389

  ord890

  ord9166

  ord7461

  ord9192

  ord12116

  ord462

  ord6507

  ord3844

  ord5894

  ord12182

  ord8180

  ord12194

  ord12162

  ord8429

  ord7618

  ord1468

  ord8347

  ord12190

  ord10383

  ord12869

  ord12806

  ord4580

  ord7961

  ord4450

  ord8285

  ord5336

  ord2484

  ord12484

  ord12485

  ord14509

  ord7886

  ord14507

  ord9353

  ord4143

  ord4082

  ord12888

  ord7905

  ord2027

  ord11927

  ord9170

  ord14380

  ord12474

  ord7964

  ord14581

  ord6322

  ord14583

  ord6324

  ord14582

  ord6323

  ord13189

  ord13830

  ord993

  ord6831

  ord14149

  ord12074

  ord6193

  ord13677

  ord2758

  ord9167

  ord1109

  ord8997

  ord10963

  ord11343

  ord10421

  ord4084

  ord3396

  ord3395

  ord3932

  ord4807

  ord1111

  ord3420

  ord6463

  ord2298

  ord1784

  ord5742

  ord10202

  ord3874

  ord6540

  ord1661

  ord316

  ord1044

  ord1456

  ord8435

  ord982

  ord9258

  ord5931

  ord4011

  ord4374

  ord1783

  ord7480

  ord9196

  ord3827

  ord13633

  ord13635

  ord5019

  ord3837

  ord11744

  ord9173

  ord11750

  ord12125

  ord9308

  ord8361

  ord12051

  ord7772

  ord3271

  ord561

  ord7147

  ord1444

  ord13556

  ord968

  ord4372

  ord11741

  ord5348

  ord3835

  ord4578

  ord9194

  ord12024

  ord11442

  ord10353

  ord11321

  ord12111

  ord3258

  ord3363

  ord3364

  ord2680

  ord11663

  ord13475

  ord6848

  ord14508

  ord7887

  ord14510

  ord3050

  ord4485

  ord9647

  ord5769

  ord4493

  ord4972

  ord4911

  ord4896

  ord4958

  ord5003

  ord4926

  ord4981

  ord4997

  ord4938

  ord4944

  ord4950

  ord4932

  ord4987

  ord4920

  ord1772

  ord1751

  ord1765

  ord1739

  ord1717

  ord12201

  ord12205

  ord13798

  ord3259

  ord10950

  ord6947

  ord8922

  ord14502

  ord11881

  ord9096

  ord11672

  ord11671

  ord3159

  ord12123

  ord5631

  ord10240

  ord10236

  ord10238

  ord10239

  ord10237

  ord14699

  ord2759

  ord10207

  ord11743

  ord5932

  ord11748

  ord3826

  ord9260

  ord7477

  ord2344

  ord966

  ord1441

  ord3169

  ord5017

  ord5018

  ord6105

  ord12403

  ord5910

  ord13625

  ord13634

  ord5915

  ord13632

  ord5914

  ord3295

  ord3298

  ord2555

  ord4486

  ord11377

  ord8789

  ord9307

  ord13681

  ord6195

  ord1149

  ord2241

  ord8172

  ord1507

  ord11928

  ord1509

  ord2407

  kernel32

  InitializeCriticalSectionEx

  GetLastError

  DeleteCriticalSection

  FreeResource

  ExitProcess

  OutputDebugStringW

  GetModuleHandleW

  GetProcAddress

  CloseHandle

  CreateEventW

  TerminateProcess

  GetCurrentProcess

  InitializeSListHead

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCurrentProcessId

  QueryPerformanceCounter

  IsProcessorFeaturePresent

  GetStartupInfoW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  IsDebuggerPresent

  user32

  LoadCursorA

  UpdateWindow

  LoadAcceleratorsA

  EnableWindow

  SetLayeredWindowAttributes

  GetWindowLongA

  SetWindowLongA

  SendMessageA

  LoadMenuA

  vcruntime140

  __CxxFrameHandler3

  __vcrt_InitializeCriticalSectionEx

  _except_handler4_common

  memset

  api-ms-win-crt-heap-l1-1-0

  _set_new_mode

  free

  api-ms-win-crt-runtime-l1-1-0

  _controlfp_s

  terminate

  _configure_narrow_argv

  _register_thread_local_exe_atexit_callback

  _initialize_narrow_environment

  _exit

  exit

  _initterm_e

  _initterm

  _get_narrow_winmain_command_line

  _c_exit

  _set_app_type

  _seh_filter_exe

  _cexit

  _crt_atexit

  _register_onexit_function

  _initialize_onexit_table

  api-ms-win-crt-math-l1-1-0

  __setusermatherr

  api-ms-win-crt-stdio-l1-1-0

  __p__commode

  _set_fmode

  api-ms-win-crt-locale-l1-1-0

  _configthreadlocale

  _setmbcp

  Sections

  .text

  Size: 188KB - Virtual size: 188KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .gfids

  Size: 512B - Virtual size: 56B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: 512B - Virtual size: 9B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 73KB - Virtual size: 73KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ