General

Malware Config

Signatures

Files

• 42a80743b3a3950c0c5134d7820b8327ef32bb29f721a9f9e3204aab48b79e30

  .exe windows x86

  e78338bfa906edf91940c6e58a2401fa

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mfc42u

  ord2640

  ord2047

  ord6372

  ord3744

  ord5059

  ord1720

  ord5257

  ord2438

  ord2116

  ord5273

  ord2977

  ord3142

  ord3254

  ord4459

  ord3131

  ord3257

  ord2980

  ord3076

  ord2971

  ord3825

  ord3826

  ord3820

  ord3074

  ord4075

  ord4621

  ord4419

  ord3592

  ord324

  ord825

  ord641

  ord4229

  ord3397

  ord3605

  ord2574

  ord6051

  ord1768

  ord4396

  ord5286

  ord3365

  ord4418

  ord3635

  ord656

  ord567

  ord693

  ord2294

  ord692

  ord1764

  ord6362

  ord2405

  ord4435

  ord4214

  ord2573

  ord4395

  ord3634

  ord4667

  ord4269

  ord6371

  ord4480

  ord2546

  ord2504

  ord5727

  ord3917

  ord1089

  ord5193

  ord2388

  ord3341

  ord5296

  ord5298

  ord2717

  ord4074

  ord4692

  ord5303

  ord5285

  ord5710

  ord4616

  ord3733

  ord561

  ord815

  ord2613

  ord1131

  ord609

  ord2567

  ord4390

  ord3569

  ord1143

  ord1165

  ord823

  ord2371

  ord755

  ord470

  ord6451

  ord2634

  ord861

  ord3993

  ord4197

  ord860

  ord800

  ord540

  ord4831

  ord3793

  ord5276

  ord4347

  ord6370

  ord5157

  ord2377

  ord5237

  ord4401

  ord1767

  ord4073

  ord6048

  ord2506

  ord4704

  ord4992

  ord4847

  ord4370

  ord2016

  ord5261

  ord1569

  msvcrt

  _controlfp

  __dllonexit

  _except_handler3

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __wgetmainargs

  _wcmdln

  exit

  _XcptFilter

  _exit

  sprintf

  __CxxFrameHandler

  strcpy

  fclose

  _onexit

  fwrite

  fopen

  kernel32

  GetStartupInfoA

  HeapCreate

  FreeLibrary

  GetCurrentDirectoryA

  OpenProcess

  GetModuleHandleW

  GetStartupInfoW

  GetEnvironmentStringsW

  GetOEMCP

  GetCommandLineA

  CloseHandle

  GetStdHandle

  SetCommState

  user32

  SendDlgItemMessageW

  RegisterWindowMessageW

  MessageBeep

  CallWindowProcW

  LoadIconW

  DrawIcon

  GetClientRect

  IsIconic

  GetMessagePos

  CreatePopupMenu

  GetSystemMetrics

  DispatchMessageA

  SetWindowLongW

  SendMessageW

  EnableWindow

  HideCaret

  gdi32

  TextOutA

  SelectObject

  GetCharABCWidthsFloatW

  RealizePalette

  Sections

  .text

  Size: 28KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 244KB - Virtual size: 241KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ