General

Malware Config

Signatures

Files

• 6be9c04059303edf631a974d0ed971deb8b9301f36f369ab52a3ab6db3fa2b35

  .dll windows x86

  a0bd0cbc6c3c1f3095dd9342b630fcb9

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  InterlockedExchange

  GetACP

  GetLocaleInfoA

  GetThreadLocale

  GetVersionExW

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  GetCurrentThreadId

  lstrlenW

  lstrcpyW

  GetLastError

  DisableThreadLibraryCalls

  GetVersionExA

  InterlockedIncrement

  InterlockedDecrement

  FreeLibrary

  MultiByteToWideChar

  SizeofResource

  LoadResource

  FindResourceW

  LoadLibraryExW

  lstrcmpiW

  lstrcpynW

  CloseHandle

  ReadFile

  GetFileSize

  CreateFileW

  GetModuleHandleW

  GetModuleFileNameW

  WideCharToMultiByte

  WaitForSingleObject

  GlobalAlloc

  FindResourceA

  MulDiv

  lstrcatW

  FlushInstructionCache

  GetCurrentProcess

  GlobalUnlock

  GlobalLock

  lstrcmpW

  SetLastError

  GlobalFree

  GlobalHandle

  LockResource

  lstrcmpA

  GetModuleHandleA

  GetTickCount

  LocalAlloc

  VirtualQuery

  HeapFree

  GetProcessHeap

  InterlockedCompareExchange

  HeapAlloc

  GetProcAddress

  LoadLibraryA

  IsProcessorFeaturePresent

  VirtualFree

  VirtualAlloc

  ExitProcess

  HeapSize

  DebugBreak

  HeapReAlloc

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  lstrcatA

  lstrcpyA

  lstrlenA

  GetModuleFileNameA

  RtlUnwind

  shlwapi

  PathFindExtensionW

  Exports

  Exports

  AtlAdvise

  AtlAxAttachControl

  AtlAxCreateControl

  AtlAxCreateControlEx

  AtlAxCreateControlLic

  AtlAxCreateControlLicEx

  AtlAxCreateDialogA

  AtlAxCreateDialogW

  AtlAxDialogBoxA

  AtlAxDialogBoxW

  AtlAxGetControl

  AtlAxGetHost

  AtlAxWinInit

  AtlCallTermFunc

  AtlComModuleGetClassObject

  AtlComModuleRegisterClassObjects

  AtlComModuleRegisterServer

  AtlComModuleRevokeClassObjects

  AtlComModuleUnregisterServer

  AtlComPtrAssign

  AtlComQIPtrAssign

  AtlCreateRegistrar

  AtlCreateTargetDC

  AtlDevModeW2A

  AtlFreeMarshalStream

  AtlGetObjectSourceInterface

  AtlGetVersion

  AtlHiMetricToPixel

  AtlIPersistPropertyBag_Load

  AtlIPersistPropertyBag_Save

  AtlIPersistStreamInit_Load

  AtlIPersistStreamInit_Save

  AtlInternalQueryInterface

  AtlLoadTypeLib

  AtlMarshalPtrInProc

  AtlModuleAddTermFunc

  AtlPixelToHiMetric

  AtlRegisterClassCategoriesHelper

  AtlRegisterTypeLib

  AtlSetErrorInfo

  AtlUnRegisterTypeLib

  AtlUnadvise

  AtlUnmarshalPtr

  AtlUpdateRegistryFromResourceD

  AtlWaitWithMessageLoop

  AtlWinModuleAddCreateWndData

  AtlWinModuleExtractCreateWndData

  AtlWinModuleInit

  AtlWinModuleRegisterClassExA

  AtlWinModuleRegisterClassExW

  AtlWinModuleRegisterWndClassInfoA

  AtlWinModuleRegisterWndClassInfoW

  AtlWinModuleTerm

  Sections

  .text

  Size: 51KB - Virtual size: 51KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rmnet

  Size: 56KB - Virtual size: 60KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE