General

Malware Config

Signatures

Files

• 56bc0743c8eb9be62b9b0b7195fad34bba3d3428ea78794b4c3a3a358b3d32bd

  .exe windows x86

  14a8cf0f2b31aeeaa372e45e9af7c2e4

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdi32

  RemoveFontResourceA

  UnrealizeObject

  CreateRoundRectRgn

  CreateFontIndirectW

  CreateSolidBrush

  GetStockObject

  SetLayout

  SetStretchBltMode

  user32

  VkKeyScanA

  IsCharAlphaNumericW

  GetDesktopWindow

  GetFocus

  GetIconInfo

  RegisterWindowMessageA

  kernel32

  GetCurrentDirectoryW

  shlwapi

  PathIsSameRootW

  UrlGetPartA

  StrToIntA

  StrPBrkA

  PathIsPrefixA

  StrRChrIA

  PathGetArgsA

  StrChrIW

  Exports

  Exports

  ?InfoDelete@@YGXUverifyEw@CA7

  Sections

  .text

  Size: 35KB - Virtual size: 34KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .maro2

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro3

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .maro1

  Size: 1024B - Virtual size: 732B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 13KB - Virtual size: 37KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .maro6

  Size: 512B - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro5

  Size: 512B - Virtual size: 128B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro4

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ