General

Malware Config

Signatures

Files

• b0beaa8868f18523273471589e8fa6fec3efd996622b37d7cd5c3e32a40d5ca7

  .exe windows x86

  d22aabf5da5e5427c457468e455d83a6

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdi32

  RemoveFontResourceA

  SetLayout

  SetStretchBltMode

  CreateRoundRectRgn

  CreateSolidBrush

  GetStockObject

  UnrealizeObject

  CreateFontIndirectW

  kernel32

  GetCurrentDirectoryW

  user32

  GetDesktopWindow

  GetIconInfo

  IsCharAlphaNumericW

  RegisterWindowMessageA

  VkKeyScanA

  GetFocus

  shlwapi

  PathIsSameRootW

  StrRChrIW

  PathGetArgsA

  PathIsPrefixA

  StrChrW

  UrlGetPartA

  StrToIntA

  StrPBrkW

  Exports

  Exports

  ?InfoDelete@@YGXUverifyEw@CA7

  Sections

  .text

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .maro5

  Size: 512B - Virtual size: 128B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro2

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro3

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .maro1

  Size: 1024B - Virtual size: 539B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 13KB - Virtual size: 37KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .maro6

  Size: 512B - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro4

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ