General

Malware Config

Signatures

Files

• WhatsApp.zip

  .zip
• WhatsApp/About/AppCompat.admx
• WhatsApp/About/AppXRuntime.admx

  .xml
• WhatsApp/About/AttachmentManager.admx
• WhatsApp/About/AuditSettings.admx

  .xml
• WhatsApp/About/AutoPlay.admx
• WhatsApp/About/Biometrics.admx
• WhatsApp/About/Bits.admx
• WhatsApp/About/CEIPEnable.admx
• WhatsApp/About/COM.admx
• WhatsApp/About/CipherSuiteOrder.admx
• WhatsApp/About/Conf.admx
• WhatsApp/About/ControlPanel.admx
• WhatsApp/About/ControlPanelDisplay.admx
• WhatsApp/About/Cpls.admx
• WhatsApp/About/CredSsp.admx
• WhatsApp/About/CredUI.admx
• WhatsApp/About/CredentialProviders.admx
• WhatsApp/About/CtrlAltDel.admx
• WhatsApp/About/DCOM.admx
• WhatsApp/About/DFS.admx
• WhatsApp/About/DWM.admx
• WhatsApp/About/Desktop.admx
• WhatsApp/About/DeviceCompat.admx
• WhatsApp/About/DeviceInstallation.admx
• WhatsApp/About/DeviceSetup.admx
• WhatsApp/About/DigitalLocker.admx
• WhatsApp/About/DiskDiagnostic.admx
• WhatsApp/About/DiskNVCache.admx
• WhatsApp/About/DiskQuota.admx
• WhatsApp/About/DistributedLinkTracking.admx
• WhatsApp/About/DnsClient.admx
• WhatsApp/About/EAIME.admx
• WhatsApp/About/EarlyLaunchAM.admx
• WhatsApp/About/EdgeUI.admx
• WhatsApp/About/EncryptFilesonMove.admx
• WhatsApp/About/ErrorReporting.admx
• WhatsApp/About/EventForwarding.admx

  .xml
• WhatsApp/About/EventLog.admx
• WhatsApp/About/EventViewer.admx
• WhatsApp/About/Explorer.admx
• WhatsApp/About/ExternalBoot.admx

  .xml
• WhatsApp/About/FileHistory.admx
• WhatsApp/About/FileRecovery.admx
• WhatsApp/About/FileRevocation.admx
• WhatsApp/About/FileServerVSSProvider.admx
• WhatsApp/About/FileSys.admx

  .xml
• WhatsApp/About/FolderRedirection.admx
• WhatsApp/About/FramePanes.admx
• WhatsApp/About/GameExplorer.admx
• WhatsApp/About/Globalization.admx
• WhatsApp/About/GroupPolicy-Server.admx
• WhatsApp/About/GroupPolicy.admx
• WhatsApp/About/GroupPolicyPreferences.admx
• WhatsApp/About/Help.admx
• WhatsApp/About/HelpAndSupport.admx
• WhatsApp/About/ICM.admx
• WhatsApp/About/IIS.admx
• WhatsApp/About/InkWatson.admx
• WhatsApp/About/Kerberos.admx
• WhatsApp/About/LanmanServer.admx
• WhatsApp/About/LeakDiagnostic.admx
• WhatsApp/About/LinkLayerTopologyDiscovery.admx
• WhatsApp/About/LocationProviderAdm.admx
• WhatsApp/About/Logon.admx
• WhatsApp/About/MMC.admx
• WhatsApp/About/MMCSnapIns2.admx
• WhatsApp/About/MMCSnapins.admx
• WhatsApp/About/MSDT.admx
• WhatsApp/About/MSI.admx
• WhatsApp/About/MediaCenter.admx
• WhatsApp/About/MobilePCMobilityCenter.admx
• WhatsApp/About/MobilePCPresentationSettings.admx
• WhatsApp/About/Msi-FileRecovery.admx
• WhatsApp/About/NAPXPQec.admx
• WhatsApp/About/NCSI.admx
• WhatsApp/About/Netlogon.admx
• WhatsApp/About/NetworkConnections.admx
• WhatsApp/About/NetworkIsolation.admx
• WhatsApp/About/NetworkProjection.admx
• WhatsApp/About/OfflineFiles.admx
• WhatsApp/About/P2P-pnrp.admx
• WhatsApp/About/ParentalControls.admx
• WhatsApp/About/PeerToPeerCaching.admx
• WhatsApp/About/PenTraining.admx
• WhatsApp/About/PerformanceDiagnostics.admx
• WhatsApp/About/PerformancePerftrack.admx
• WhatsApp/About/Power.admx
• WhatsApp/About/PowerShellExecutionPolicy.admx
• WhatsApp/About/PreviousVersions.admx
• WhatsApp/About/Printing.admx
• WhatsApp/About/Printing2.admx
• WhatsApp/About/Programs.admx
• WhatsApp/About/PswdSync.admx
• WhatsApp/About/QOS.admx
• WhatsApp/About/RPC.admx
• WhatsApp/About/RacWmiProv.admx
• WhatsApp/About/Radar.admx
• WhatsApp/About/ReAgent.admx
• WhatsApp/About/Reliability.admx
• WhatsApp/About/RemoteAssistance.admx
• WhatsApp/About/RemovableStorage.admx
• WhatsApp/About/Scripts.admx
• WhatsApp/About/Securitycenter.admx
• WhatsApp/About/Sensors.admx
• WhatsApp/About/ServerManager.admx
• WhatsApp/About/Servicing.admx
• WhatsApp/About/SettingSync.admx
• WhatsApp/About/Setup.admx
• WhatsApp/About/SharedFolders.admx
• WhatsApp/About/Sharing.admx
• WhatsApp/About/Shell-CommandPrompt-RegEditTools.admx
• WhatsApp/About/ShellWelcomeCenter.admx
• WhatsApp/About/Sidebar.admx
• WhatsApp/About/SkyDrive.admx

  .xml
• WhatsApp/About/Smartcard.admx
• WhatsApp/About/Snis.admx
• WhatsApp/About/Snmp.admx
• WhatsApp/About/SoundRec.admx
• WhatsApp/About/StartMenu.admx
• WhatsApp/About/SystemRestore.admx
• WhatsApp/About/TPM.admx
• WhatsApp/About/TabletPCInputPanel.admx
• WhatsApp/About/TabletShell.admx
• WhatsApp/About/TaskScheduler.admx
• WhatsApp/About/Taskbar.admx
• WhatsApp/About/TerminalServer-Server.admx
• WhatsApp/About/TerminalServer.admx
• WhatsApp/About/Thumbnails.admx
• WhatsApp/About/TouchInput.admx
• WhatsApp/About/UserProfiles.admx
• WhatsApp/About/VolumeEncryption.admx
• WhatsApp/About/W32Time.admx
• WhatsApp/About/WCM.admx
• WhatsApp/About/WDI.admx
• WhatsApp/About/WPN.admx
• WhatsApp/About/WinCal.admx

  .xml
• WhatsApp/About/WinInit.admx
• WhatsApp/About/WinLogon.admx
• WhatsApp/About/Windows.admx
• WhatsApp/About/WindowsAnytimeUpgrade.admx
• WhatsApp/About/WindowsBackup.admx
• WhatsApp/About/WindowsColorSystem.admx
• WhatsApp/About/WindowsConnectNow.admx
• WhatsApp/About/WindowsDefender.admx
• WhatsApp/About/WindowsExplorer.admx
• WhatsApp/About/WindowsFileProtection.admx
• WhatsApp/About/WindowsFirewall.admx
• WhatsApp/About/WindowsMail.admx
• WhatsApp/About/WindowsMediaDRM.admx
• WhatsApp/About/WindowsMediaPlayer.admx
• WhatsApp/About/WindowsMessenger.admx
• WhatsApp/About/WindowsProducts.admx
• WhatsApp/About/WindowsRemoteManagement.admx
• WhatsApp/About/WindowsRemoteShell.admx
• WhatsApp/About/WindowsServer.admx
• WhatsApp/About/WindowsUpdate.admx
• WhatsApp/About/Winsrv.admx
• WhatsApp/About/WordWheel.admx
• WhatsApp/About/WorkFolders-Client.admx
• WhatsApp/About/WorkplaceJoin.admx

  .xml
• WhatsApp/About/en-US/ActiveXInstallService.adml

  .xml
• WhatsApp/About/en-US/AddRemovePrograms.adml

  .xml
• WhatsApp/About/en-US/AppCompat.adml

  .xml
• WhatsApp/About/en-US/AppXRuntime.adml

  .xml
• WhatsApp/About/en-US/AppxPackageManager.adml

  .xml
• WhatsApp/About/en-US/AttachmentManager.adml

  .xml
• WhatsApp/About/en-US/AuditSettings.adml

  .xml
• WhatsApp/About/en-US/AutoPlay.adml

  .xml
• WhatsApp/About/en-US/Biometrics.adml

  .xml
• WhatsApp/About/en-US/Bits.adml

  .xml
• WhatsApp/About/en-US/CEIPEnable.adml

  .xml
• WhatsApp/About/en-US/COM.adml

  .xml
• WhatsApp/About/en-US/CipherSuiteOrder.adml

  .xml
• WhatsApp/About/en-US/Conf.adml

  .xml
• WhatsApp/About/en-US/ControlPanel.adml

  .xml
• WhatsApp/About/en-US/ControlPanelDisplay.adml

  .xml
• WhatsApp/About/en-US/Cpls.adml

  .xml
• WhatsApp/About/en-US/CredSsp.adml

  .xml
• WhatsApp/About/en-US/CredUI.adml

  .xml
• WhatsApp/About/en-US/CredentialProviders.adml

  .xml
• WhatsApp/About/en-US/CtrlAltDel.adml

  .xml
• WhatsApp/About/en-US/DCOM.adml

  .xml
• WhatsApp/About/en-US/DFS.adml

  .xml
• WhatsApp/About/en-US/DWM.adml

  .xml
• WhatsApp/About/en-US/Desktop.adml

  .xml
• WhatsApp/About/en-US/DeviceCompat.adml

  .xml
• WhatsApp/About/en-US/DeviceInstallation.adml

  .xml
• WhatsApp/About/en-US/DeviceSetup.adml

  .xml
• WhatsApp/About/en-US/DigitalLocker.adml

  .xml
• WhatsApp/About/en-US/DiskDiagnostic.adml

  .xml
• WhatsApp/About/en-US/DiskNVCache.adml

  .xml
• WhatsApp/About/en-US/DiskQuota.adml

  .xml
• WhatsApp/About/en-US/DistributedLinkTracking.adml

  .xml
• WhatsApp/About/en-US/DnsClient.adml

  .xml
• WhatsApp/About/en-US/EAIME.adml

  .xml
• WhatsApp/About/en-US/EarlyLaunchAM.adml
• WhatsApp/About/en-US/EdgeUI.adml

  .xml
• WhatsApp/About/en-US/EncryptFilesonMove.adml

  .xml
• WhatsApp/About/en-US/ErrorReporting.adml

  .xml
• WhatsApp/About/en-US/EventForwarding.adml

  .xml
• WhatsApp/About/en-US/EventLog.adml

  .xml
• WhatsApp/About/en-US/EventViewer.adml

  .xml
• WhatsApp/About/en-US/Explorer.adml

  .xml
• WhatsApp/About/en-US/ExternalBoot.adml

  .xml
• WhatsApp/About/en-US/FileHistory.adml

  .xml
• WhatsApp/About/en-US/FileRecovery.adml

  .xml
• WhatsApp/About/en-US/FileRevocation.adml

  .xml
• WhatsApp/About/en-US/FileServerVSSProvider.adml

  .xml
• WhatsApp/About/en-US/FileSys.adml

  .xml
• WhatsApp/About/en-US/FolderRedirection.adml

  .xml
• WhatsApp/About/en-US/FramePanes.adml

  .xml
• WhatsApp/About/en-US/GameExplorer.adml

  .xml
• WhatsApp/About/en-US/Globalization.adml

  .xml
• WhatsApp/About/en-US/GroupPolicy-Server.adml

  .xml
• WhatsApp/About/en-US/GroupPolicy.adml

  .xml
• WhatsApp/About/en-US/GroupPolicyPreferences.adml

  .xml
• WhatsApp/About/en-US/Help.adml

  .xml
• WhatsApp/About/en-US/HelpAndSupport.adml

  .xml
• WhatsApp/About/en-US/ICM.adml

  .xml
• WhatsApp/About/en-US/IIS.adml

  .xml
• WhatsApp/About/en-US/InetRes.adml

  .xml
• WhatsApp/About/en-US/InkWatson.adml

  .xml
• WhatsApp/About/en-US/KDC.adml

  .xml
• WhatsApp/About/en-US/Kerberos.adml

  .xml
• WhatsApp/About/en-US/LanmanServer.adml

  .xml
• WhatsApp/About/en-US/LeakDiagnostic.adml

  .xml
• WhatsApp/About/en-US/LinkLayerTopologyDiscovery.adml

  .xml
• WhatsApp/About/en-US/LocationProviderAdm.adml

  .xml
• WhatsApp/About/en-US/Logon.adml

  .xml
• WhatsApp/About/en-US/MMC.adml

  .xml
• WhatsApp/About/en-US/MMCSnapIns2.adml

  .xml
• WhatsApp/About/en-US/MMCSnapins.adml

  .xml
• WhatsApp/About/en-US/MSDT.adml

  .xml
• WhatsApp/About/en-US/MSI.adml

  .xml
• WhatsApp/About/en-US/MediaCenter.adml

  .xml
• WhatsApp/About/en-US/MobilePCMobilityCenter.adml

  .xml
• WhatsApp/About/en-US/MobilePCPresentationSettings.adml

  .xml
• WhatsApp/About/en-US/Msi-FileRecovery.adml

  .xml
• WhatsApp/About/en-US/NAPXPQec.adml

  .xml
• WhatsApp/About/en-US/NCSI.adml

  .xml
• WhatsApp/About/en-US/Netlogon.adml

  .xml
• WhatsApp/About/en-US/NetworkConnections.adml

  .xml
• WhatsApp/About/en-US/NetworkIsolation.adml
• WhatsApp/About/en-US/NetworkProjection.adml

  .xml
• WhatsApp/About/en-US/OfflineFiles.adml

  .xml
• WhatsApp/About/en-US/P2P-pnrp.adml

  .xml
• WhatsApp/About/en-US/ParentalControls.adml

  .xml
• WhatsApp/About/en-US/PeerToPeerCaching.adml

  .xml
• WhatsApp/About/en-US/PenTraining.adml

  .xml
• WhatsApp/About/en-US/PerformanceDiagnostics.adml

  .xml
• WhatsApp/About/en-US/PerformancePerftrack.adml

  .xml
• WhatsApp/About/en-US/Power.adml

  .xml
• WhatsApp/About/en-US/PowerShellExecutionPolicy.adml

  .xml
• WhatsApp/About/en-US/PreviousVersions.adml

  .xml
• WhatsApp/About/en-US/Printing.adml

  .xml
• WhatsApp/About/en-US/Printing2.adml

  .xml
• WhatsApp/About/en-US/Programs.adml

  .xml
• WhatsApp/About/en-US/PswdSync.adml

  .xml
• WhatsApp/About/en-US/QOS.adml

  .xml
• WhatsApp/About/en-US/RPC.adml

  .xml
• WhatsApp/About/en-US/RacWmiProv.adml

  .xml
• WhatsApp/About/en-US/Radar.adml

  .xml
• WhatsApp/About/en-US/ReAgent.adml

  .xml
• WhatsApp/About/en-US/Reliability.adml

  .xml
• WhatsApp/About/en-US/RemoteAssistance.adml

  .xml
• WhatsApp/About/en-US/RemovableStorage.adml

  .xml
• WhatsApp/About/en-US/Scripts.adml

  .xml
• WhatsApp/About/en-US/Securitycenter.adml

  .xml
• WhatsApp/About/en-US/Sensors.adml

  .xml
• WhatsApp/About/en-US/ServerManager.adml

  .xml
• WhatsApp/About/en-US/Servicing.adml

  .xml
• WhatsApp/About/en-US/SettingSync.adml

  .xml
• WhatsApp/About/en-US/Setup.adml

  .xml
• WhatsApp/About/en-US/SharedFolders.adml

  .xml
• WhatsApp/About/en-US/Sharing.adml

  .xml
• WhatsApp/About/en-US/Shell-CommandPrompt-RegEditTools.adml

  .xml
• WhatsApp/About/en-US/ShellWelcomeCenter.adml

  .xml
• WhatsApp/About/en-US/Sidebar.adml

  .xml
• WhatsApp/About/en-US/SkyDrive.adml

  .xml
• WhatsApp/About/en-US/Smartcard.adml

  .xml
• WhatsApp/About/en-US/Snis.adml

  .xml
• WhatsApp/About/en-US/Snmp.adml

  .xml
• WhatsApp/About/en-US/SoundRec.adml

  .xml
• WhatsApp/About/en-US/StartMenu.adml

  .xml
• WhatsApp/About/en-US/SystemRestore.adml

  .xml
• WhatsApp/About/en-US/TPM.adml

  .xml
• WhatsApp/About/en-US/TabletPCInputPanel.adml

  .xml
• WhatsApp/About/en-US/TabletShell.adml

  .xml
• WhatsApp/About/en-US/TaskScheduler.adml

  .xml
• WhatsApp/About/en-US/Taskbar.adml

  .xml
• WhatsApp/About/en-US/TerminalServer-Server.adml

  .xml
• WhatsApp/About/en-US/TerminalServer.adml

  .xml
• WhatsApp/About/en-US/Thumbnails.adml

  .xml
• WhatsApp/About/en-US/TouchInput.adml

  .xml
• WhatsApp/About/en-US/UserProfiles.adml

  .xml
• WhatsApp/About/en-US/VolumeEncryption.adml

  .xml
• WhatsApp/About/en-US/W32Time.adml

  .xml
• WhatsApp/About/en-US/WCM.adml

  .xml
• WhatsApp/About/en-US/WDI.adml

  .xml
• WhatsApp/About/en-US/WPN.adml

  .xml
• WhatsApp/About/en-US/WinCal.adml

  .xml
• WhatsApp/About/en-US/WinInit.adml

  .xml
• WhatsApp/About/en-US/WinLogon.adml

  .xml
• WhatsApp/About/en-US/Windows.adml

  .xml
• WhatsApp/About/en-US/WindowsAnytimeUpgrade.adml

  .xml
• WhatsApp/About/en-US/WindowsBackup.adml

  .xml
• WhatsApp/About/en-US/WindowsColorSystem.adml

  .xml
• WhatsApp/About/en-US/WindowsConnectNow.adml

  .xml
• WhatsApp/About/en-US/WindowsDefender.adml
• WhatsApp/About/en-US/WindowsExplorer.adml

  .xml
• WhatsApp/About/en-US/WindowsFileProtection.adml

  .xml
• WhatsApp/About/en-US/WindowsFirewall.adml

  .xml
• WhatsApp/About/en-US/WindowsMail.adml

  .xml
• WhatsApp/About/en-US/WindowsMediaDRM.adml

  .xml
• WhatsApp/About/en-US/WindowsMediaPlayer.adml

  .xml
• WhatsApp/About/en-US/WindowsMessenger.adml

  .xml
• WhatsApp/About/en-US/WindowsProducts.adml

  .xml
• WhatsApp/About/en-US/WindowsRemoteManagement.adml

  .xml
• WhatsApp/About/en-US/WindowsRemoteShell.adml

  .xml
• WhatsApp/About/en-US/WindowsServer.adml

  .xml
• WhatsApp/About/en-US/WindowsUpdate.adml

  .xml
• WhatsApp/About/en-US/Winsrv.adml

  .xml
• WhatsApp/About/en-US/WordWheel.adml

  .xml
• WhatsApp/About/en-US/WorkFolders-Client.adml

  .xml
• WhatsApp/About/en-US/WorkplaceJoin.adml

  .xml
• WhatsApp/About/en-US/fthsvc.adml

  .xml
• WhatsApp/About/en-US/hotspotauth.adml

  .xml
• WhatsApp/About/en-US/iSCSI.adml

  .xml
• WhatsApp/About/en-US/msched.adml

  .xml
• WhatsApp/About/en-US/nca.adml
• WhatsApp/About/en-US/pca.adml

  .xml
• WhatsApp/About/en-US/sdiageng.adml

  .xml
• WhatsApp/About/en-US/srm-fci.adml

  .xml
• WhatsApp/About/en-US/tcpip.adml

  .xml
• WhatsApp/About/en-US/wlansvc.adml

  .xml
• WhatsApp/About/en-US/wwansvc.adml

  .xml
• WhatsApp/About/fthsvc.admx
• WhatsApp/About/hotspotauth.admx
• WhatsApp/About/iSCSI.admx
• WhatsApp/About/inetres.admx

  .xml
• WhatsApp/About/kdc.admx
• WhatsApp/About/msched.admx

  .xml
• WhatsApp/About/nca.admx
• WhatsApp/About/pca.admx
• WhatsApp/About/sdiageng.admx
• WhatsApp/About/srm-fci.admx
• WhatsApp/About/tcpip.admx

  .xml
• WhatsApp/About/wlansvc.admx

  .xml
• WhatsApp/About/wwansvc.admx

  .xml
• WhatsApp/WhatsApp.exe

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 3.7MB - Virtual size: 3.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 207KB - Virtual size: 206KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ