General

Malware Config

Signatures

Files

• da4a54c02f81063e3b9b6ac7f45ce687f8a8db2ba507e8698fa87f42bfbdd38d

  .exe windows x86

  79b7afd9aea5e0fa0386a97de41a2f71

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  kernel32

  DeleteCriticalSection

  EnterCriticalSection

  ExitProcess

  FreeLibrary

  GetCommandLineA

  GetCurrentProcess

  GetLastError

  GetModuleHandleA

  GetProcAddress

  GetProcessHeap

  GetStartupInfoA

  HeapAlloc

  HeapFree

  InitializeCriticalSection

  IsBadReadPtr

  LeaveCriticalSection

  LoadLibraryA

  LoadLibraryW

  SetUnhandledExceptionFilter

  TlsGetValue

  VirtualAlloc

  VirtualAllocEx

  VirtualFree

  VirtualProtect

  VirtualQuery

  msvcrt

  __getmainargs

  __p__environ

  __p__fmode

  __set_app_type

  _cexit

  _iob

  _onexit

  _setmode

  _winmajor

  abort

  atexit

  atoi

  calloc

  free

  fwrite

  memcpy

  signal

  vfprintf

  shell32

  CommandLineToArgvW

  Sections

  .text

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 32KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 196B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 32B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE