General

Malware Config

Signatures

Files

• 253ea6a2f3528bc424adf1ccae8a16b55e92f4b7b7efcb0c8af21aa29e937e57

  .exe windows x86

  17bb9f2c772f03d7540bcbee8f548a3e

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shlwapi

  StrToIntW

  StrRChrA

  StrChrA

  PathStripPathW

  kernel32

  GetModuleHandleA

  Exports

  Exports

  ?ElseWhereCome@567GPAUHINSTANCE__@@U_COMMPROP@@?F

  ?ElseWhereGo@567GPAUHINSTANCE__@@U_COMMPROP@@?F

  ?SomeWhereCome@567GPAUHINSTANCE__@@U_COMMPROP@@?F

  ?SomeWhereGo@567GPAUHINSTANCE__@@U_COMMPROP@@?F

  Sections

  .text

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 512B - Virtual size: 320B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1006B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ