General

Malware Config

Signatures

Files

• fa5751c99e2ffee4d8ce6ec338029f9849fa576e58a945828359754d4de957c0

  .exe windows x86

  120fd71ae3cb2d878ba5d267e74fe07b

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdi32

  GetTextMetricsW

  user32

  CharUpperBuffW

  IsCharLowerW

  GetForegroundWindow

  kernel32

  GetProcessHeap

  Exports

  Exports

  ?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  ?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  ?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  ?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  ?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  ?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  ?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  ?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  ?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

  Sections

  .text

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .idata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .data

  Size: 55KB - Virtual size: 133KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .itext

  Size: 1024B - Virtual size: 631B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .that

  Size: 512B - Virtual size: 60B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE