General

Malware Config

Signatures

Files

• 101e53d25bfa7afdaa3fc2eabcba839f5afde1ab53cb585a036948ef0c1817b0

  .exe windows x86

  2fcbaf148a335c290559d5113da2bdc6

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcr90

  _invoke_watson

  _controlfp_s

  _except_handler4_common

  _crt_debugger_hook

  _decode_pointer

  _onexit

  _lock

  __dllonexit

  _unlock

  _amsg_exit

  ?terminate@@YAXXZ

  __set_app_type

  _encode_pointer

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _configthreadlocale

  _initterm_e

  _initterm

  _wcmdln

  exit

  _XcptFilter

  _exit

  _cexit

  __wgetmainargs

  __FrameUnwindFilter

  _encoded_null

  kernel32

  QueryPerformanceCounter

  LoadLibraryA

  VirtualAlloc

  GetProcAddress

  VirtualFree

  GetModuleHandleW

  OutputDebugStringW

  GetCommandLineW

  IsDebuggerPresent

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  SetUnhandledExceptionFilter

  GetStartupInfoW

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  GetModuleHandleA

  user32

  GetMessagePos

  msvcm90

  ?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z

  ?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ

  ?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z

  ?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z

  ?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z

  ?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 106KB - Virtual size: 106KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 656B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ