General

Malware Config

Signatures

Files

• 1b24e3b0063ce3aab6272514acfbedd16512d53f3c533084991bd266f8f27b41

  .exe windows x86

  86d630187cb83377ccc8932cfef683fa

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shlwapi

  StrRChrIW

  PathIsSameRootW

  StrToIntA

  StrPBrkW

  PathGetArgsA

  PathIsPrefixA

  StrChrW

  UrlGetPartA

  kernel32

  GetCurrentDirectoryW

  gdi32

  SetStretchBltMode

  CreateRoundRectRgn

  SetLayout

  GetStockObject

  RemoveFontResourceA

  UnrealizeObject

  CreateSolidBrush

  CreateFontIndirectW

  user32

  GetIconInfo

  VkKeyScanA

  GetDesktopWindow

  GetFocus

  RegisterWindowMessageA

  IsCharAlphaNumericW

  Exports

  Exports

  ?InfoDelete@@YGXUverifyEw@CA7

  Sections

  .text

  Size: 35KB - Virtual size: 34KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .maro5

  Size: 512B - Virtual size: 128B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro2

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro3

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .maro1

  Size: 1024B - Virtual size: 579B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 14KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .maro6

  Size: 512B - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .maro4

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ