General

Malware Config

Signatures

Files

• e324d73b36f1fd31c53f6ae21457c2fd57f90be56dcd776efbe06b01fdaf3d5d

  .exe windows x86

  8191c38401d023ce48953c44d8dc9b05

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  HeapCreate

  GetModuleHandleA

  GetStartupInfoA

  msvcrt

  exit

  _acmdln

  __getmainargs

  _initterm

  __setusermatherr

  _adjust_fdiv

  __p__commode

  __p__fmode

  __set_app_type

  _except_handler3

  _controlfp

  __dllonexit

  _onexit

  _XcptFilter

  _exit

  rpcrt4

  RpcImpersonateClient

  RpcRevertToSelf

  RpcMgmtEpEltInqBegin

  RpcServerInqDefaultPrincNameA

  RpcRevertToSelfEx

  RpcStringBindingParseW

  float_array_from_ndr

  RpcStringBindingComposeW

  RpcStringBindingComposeA

  RpcRaiseException

  NdrVaryingArrayBufferSize

  data_into_ndr

  RpcBindingInqAuthInfoW

  RpcServerInqIf

  RpcMgmtEpUnregister

  short_from_ndr

  RpcStringFreeA

  RpcObjectInqType

  RpcNsBindingInqEntryNameW

  RpcServerUseAllProtseqs

  RpcSsGetThreadHandle

  UuidToStringA

  data_size_ndr

  NdrUserMarshalUnmarshall

  UuidFromStringW

  NdrXmitOrRepAsMemorySize

  RpcSsSwapClientAllocFree

  RpcServerUnregisterIf

  RpcStringBindingParseA

  RpcMgmtWaitServerListen

  NdrXmitOrRepAsFree

  RpcTestCancel

  RpcNetworkIsProtseqValidA

  tree_size_ndr

  RpcMgmtSetComTimeout

  RpcServerUseAllProtseqsIfEx

  RpcBindingToStringBindingA

  RpcAsyncGetCallStatus

  RpcBindingCopy

  RpcAsyncCancelCall

  RpcProtseqVectorFreeA

  setupapi

  SetupCommitFileQueueA

  SetupDefaultQueueCallbackA

  SetupDecompressOrCopyFileW

  SetupAddInstallSectionToDiskSpaceListW

  SetupDestroyDiskSpaceList

  SetupAddSectionToDiskSpaceListW

  SetupCopyErrorW

  SetupDefaultQueueCallbackW

  user32

  GetMessageA

  CreateWindowExA

  RegisterClassExA

  LoadIconA

  TranslateMessage

  TranslateAcceleratorA

  DispatchMessageA

  Sections

  .text

  Size: 20KB - Virtual size: 18KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 1.6MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 28KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ