General

Malware Config

Signatures

Files

• d1bbea57c5b0c7d1b08ff921a1524353c323a7692c6fdc5571979d5104255e20

  .exe windows x86

  2acb873892d2cd9012be55df8a8bf94e

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualProtect

  VirtualAlloc

  GetCurrentProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetLastError

  VirtualFree

  Sleep

  CloseHandle

  GetTickCount

  TerminateProcess

  RtlUnwind

  IsDebuggerPresent

  user32

  GetDC

  advapi32

  CryptAcquireContextW

  OpenThreadToken

  ObjectCloseAuditAlarmW

  RegGetKeySecurity

  SetEntriesInAclW

  msvfw32

  DrawDibEnd

  ws2_32

  recv

  WSAGetLastError

  Sections

  .text

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .epl37

  Size: 4KB - Virtual size: 17B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .epl32

  Size: 4KB - Virtual size: 498B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .xsg3

  Size: 4KB - Virtual size: 460B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .eps8

  Size: 4KB - Virtual size: 15B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 12KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 272KB - Virtual size: 270KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 816B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 1022B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ