General

Malware Config

Signatures

Files

• botva.dll.zip

  .zip

  Password: infected

• 450b9b0ba25bf068afbc2b23d252585a19e282939bf38326384ea9112dfd0105

  .dll windows x86

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Exports

  Exports

  BtnCreate

  BtnGetChecked

  BtnGetEnabled

  BtnGetPosition

  BtnGetText

  BtnGetVisibility

  BtnRefresh

  BtnSetChecked

  BtnSetCursor

  BtnSetEnabled

  BtnSetEvent

  BtnSetFont

  BtnSetFontColor

  BtnSetPosition

  BtnSetText

  BtnSetTextAlignment

  BtnSetVisibility

  CreateBitmapRgn

  CreateFormFromImage

  GetMinimizeAnimation

  GetSysCursorHandle

  ImgApplyChanges

  ImgGetPosition

  ImgGetTransparent

  ImgGetVisibility

  ImgGetVisiblePart

  ImgLoad

  ImgRelease

  ImgSetPosition

  ImgSetTransparent

  ImgSetVisibility

  ImgSetVisiblePart

  SetMinimizeAnimation

  gdipShutdown

  Sections

  CODE

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  DATA

  Size: 512B - Virtual size: 272B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  BSS

  Size: - Virtual size: 1KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 1024B - Virtual size: 907B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ