General

Malware Config

Signatures

Files

• 0bcbc25c88e5b636deb9b0bac8a2d28aed3e7d5c668fee75089711caa2a8147a

  .exe windows x86

  c77770bfe88c8fba4fdb4d485bbe3d30

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetModuleHandleA

  user32

  ShowWindow

  advapi32

  RegOpenKeyExA

  msvcp140

  ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ

  api-ms-win-crt-time-l1-1-0

  _time64

  shell32

  SHGetDiskFreeSpaceA

  ws2_32

  WSARecv

  api-ms-win-crt-locale-l1-1-0

  _configthreadlocale

  api-ms-win-crt-utility-l1-1-0

  rand

  api-ms-win-crt-filesystem-l1-1-0

  _unlock_file

  api-ms-win-crt-heap-l1-1-0

  _set_new_mode

  api-ms-win-crt-math-l1-1-0

  __setusermatherr

  api-ms-win-crt-stdio-l1-1-0

  _get_stream_buffer_pointers

  comctl32

  DrawStatusTextW

  api-ms-win-crt-runtime-l1-1-0

  _exit

  vcruntime140

  memset

  Sections

  .edata

  Size: - Virtual size: 128KB

  IMAGE_SCN_MEM_READ

  DATA

  Size: 1KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 493KB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .CRT

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .gfids

  Size: 102KB - Virtual size: 104KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE