General

Malware Config

Signatures

Files

• e59304353247c88b80f728d114338cbde79b56d40f93dcf1a8605d14dcbd33f9

  .exe windows x86

  c8a5f46dbd74c71ab71509a2fe5a916c

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  kernel32

  AddAtomA

  CloseHandle

  CreateThread

  DuplicateHandle

  ExitProcess

  FindAtomA

  FindResourceA

  GetAtomNameA

  GetCurrentProcess

  GetCurrentThread

  GetModuleHandleA

  GetProcAddress

  GetThreadContext

  LoadResource

  LockResource

  ResumeThread

  SetThreadPriority

  SetUnhandledExceptionFilter

  SizeofResource

  Sleep

  SuspendThread

  TerminateThread

  VirtualProtect

  VirtualQuery

  msvcrt

  _close

  _open

  _write

  __getmainargs

  __p__environ

  __p__fmode

  __set_app_type

  _assert

  _cexit

  _errno

  _iob

  _onexit

  _setmode

  abort

  atexit

  atoi

  fopen

  fread

  free

  fseek

  ftell

  malloc

  memcpy

  memset

  perror

  rewind

  signal

  strtok

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 112B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 1024B - Virtual size: 576B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 1KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 460B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ