General

Malware Config

Signatures

Files

• 56568feac926caa70a8f82fb4be6ed1070fd87647ac6563948dfb636c9a25acb

  .exe windows x86

  ddccde856a5559b5b52cf9a962b85244

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  FlushViewOfFile

  InitializeCriticalSection

  GetVersion

  GetAtomNameW

  LoadLibraryExW

  GetSystemWindowsDirectoryW

  SetCommMask

  LoadResource

  MoveFileA

  CreateWaitableTimerA

  GetSystemTime

  LocalFree

  GetPriorityClass

  TryEnterCriticalSection

  Exports

  Exports

  IncrementSystemNew

  OnScreenW

  FormatHeaderNew

  ModifyListA

  RemoveDeviceOriginal

  ShowPointerOriginal

  CallAppNameW

  GetListItemOld

  PutRectEx

  FormatFolderPathExW

  ValidateRectOriginal

  GenerateFolderPath

  CallVersionEx

  ModifyStringNew

  CallPointEx

  OnScreenOld

  KillDataNew

  CrtScreenEx

  ShowValueOld

  SendMutantOriginal

  CopyFunctionNew

  FindMutantExW

  GlobalHeaderEx

  CallFullNameOriginal

  ValidateThreadEx

  IsNotRectNew

  IsValidCharOld

  SendPenA

  LoadStateExW

  CopyProjectNew

  FindMediaTypeEx

  InstallEventExW

  Sections

  .text

  Size: 136KB - Virtual size: 136KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .On59

  Size: 512B - Virtual size: 378B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .Eh0887

  Size: 512B - Virtual size: 28B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .Nus

  Size: 512B - Virtual size: 101B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .Re82

  Size: 23KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .Sty

  Size: 512B - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .Racy

  Size: 512B - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .Lax503

  Size: 1024B - Virtual size: 584B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 175B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ