General

Malware Config

Signatures

Files

• 48c7a0da6261e557e6cd12e81ba8b577492d477d8d21c0bbd8420dc9cb613867

  .exe windows x86

  b01a613832df9ae1f452cb28d4368f67

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  setupapi

  CM_Get_Child

  shlwapi

  PathSkipRootW

  PathCombineA

  StrToIntW

  advapi32

  ClearEventLogW

  RegDeleteKeyW

  crypt32

  CertEnumPhysicalStore

  gdi32

  GetMapMode

  GdiGetBatchLimit

  MaskBlt

  winscard

  SCardCancel

  ntdll

  memset

  kernel32

  Sleep

  ExitProcess

  GetProcessHeap

  FreeEnvironmentStringsA

  GetUserDefaultLangID

  GetSystemTime

  IsSystemResumeAutomatic

  GetBinaryTypeA

  GetWindowsDirectoryA

  lstrcmpiW

  GetEnvironmentStrings

  AllocConsole

  user32

  GetActiveWindow

  SetMessageExtraInfo

  LoadIconA

  Sections

  .text

  Size: 16KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 25KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  CODE

  Size: 348KB - Virtual size: 345KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 296KB - Virtual size: 294KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 72KB - Virtual size: 69KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ