General

Malware Config

Signatures

Files

• Document_158_Copy_01-12.zip

  .zip
• Document_158_Copy_01-12/POV_Document_01-12.lnk

  .lnk
• Document_158_Copy_01-12/badpitdewy/amppopecun.cmd
• Document_158_Copy_01-12/badpitdewy/revealing.dat

  .dll windows x64

  3dbaf3e717e062fd9f0012e888f69f0f

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  TerminateProcess

  IsDebuggerPresent

  InitializeSListHead

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  GetSystemTimeAsFileTime

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  DisableThreadLibraryCalls

  TerminateProcess

  IsDebuggerPresent

  InitializeSListHead

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  GetSystemTimeAsFileTime

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  DisableThreadLibraryCalls

  Exports

  Exports

  hNI_OnLoad

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_abortRead

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_clearNativeReadAbortFlag

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_disposeReader

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_initJPEGImageReader

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_initReaderIDs

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImage

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImageHeader

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_resetLibraryState

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_resetReader

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_setOutColorSpace

  hava_com_sun_imageio_plugins_jpeg_JPEGImageReader_setSource

  hava_com_sun_imageio_plugins_jpeg_JPEGImageWriter_abortWrite

  hava_com_sun_imageio_plugins_jpeg_JPEGImageWriter_disposeWriter

  hava_com_sun_imageio_plugins_jpeg_JPEGImageWriter_initJPEGImageWriter

  hava_com_sun_imageio_plugins_jpeg_JPEGImageWriter_initWriterIDs

  hava_com_sun_imageio_plugins_jpeg_JPEGImageWriter_resetWriter

  hava_com_sun_imageio_plugins_jpeg_JPEGImageWriter_setDest

  hava_com_sun_imageio_plugins_jpeg_JPEGImageWriter_writeImage

  hava_com_sun_imageio_plugins_jpeg_JPEGImageWriter_writeTables

  hava_sun_awt_image_JPEGImageDecoder_initIDs

  init

  Sections

  .text

  Size: 131KB - Virtual size: 130KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 16KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ