General

Malware Config

Signatures

Files

• 956117586181a15056ff4420076301c3.exe

  .exe windows x64

  3c7f9d6b46b921283c22216c6864fbfa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  kernel32

  CreateSemaphoreW

  DeleteCriticalSection

  EnterCriticalSection

  GetLastError

  GetProcessHeap

  GetStartupInfoW

  GetTempFileNameW

  GetTempPathW

  HeapAlloc

  InitializeCriticalSection

  IsDBCSLeadByteEx

  LeaveCriticalSection

  MultiByteToWideChar

  ReleaseSemaphore

  SetLastError

  SetUnhandledExceptionFilter

  Sleep

  TlsAlloc

  TlsFree

  TlsGetValue

  TlsSetValue

  VirtualProtect

  VirtualQuery

  WaitForSingleObject

  msvcrt

  __C_specific_handler

  ___lc_codepage_func

  ___mb_cur_max_func

  __iob_func

  __set_app_type

  __setusermatherr

  __wgetmainargs

  __winitenv

  _amsg_exit

  _assert

  _cexit

  _commode

  _errno

  _fmode

  _initterm

  _onexit

  _stricmp

  _wcmdln

  _wcsicmp

  abort

  calloc

  exit

  fprintf

  fputwc

  free

  fwprintf

  fwrite

  localeconv

  malloc

  memcpy

  memset

  realloc

  signal

  strcmp

  strerror

  strlen

  strncmp

  vfprintf

  wcscat

  wcscmp

  wcscpy

  wcslen

  wcsstr

  shell32

  SHGetFolderPathW

  Sections

  .text

  Size: 42KB - Virtual size: 42KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 3.0MB - Virtual size: 3.0MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .pdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .xdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 3KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 348KB - Virtual size: 347KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 156B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ