General

Malware Config

Signatures

Files

• be5b21387901bb069615fd1b4ed206c5.exe

  .exe windows x86

  755b26ee88bff31382938e00e4a0bfa6

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualProtect

  GetConsoleWindow

  wsnmp32

  ord106

  ord999

  ord220

  ord300

  msacm32

  acmFormatEnumW

  acmDriverRemove

  acmDriverClose

  acmDriverPriority

  resutils

  ResUtilGetResourceNameDependency

  ResUtilIsPathValid

  ResUtilGetPropertiesToParameterBlock

  ResUtilSetBinaryValue

  ResUtilResourcesEqual

  ClusWorkerTerminate

  ResUtilVerifyPropertyTable

  shlwapi

  ChrCmpIA

  ord10

  PathIsRelativeA

  SHGetValueW

  PathRemoveBlanksW

  winspool.drv

  EnumPrinterDriversA

  ord208

  StartDocDlgA

  ord206

  ord207

  SetJobW

  DeleteMonitorW

  rtm

  MgmGetFirstMfe

  RtmBlockConvertRoutesToStatic

  RtmDeleteRoute

  RtmCloseEnumerationHandle

  MgmTakeInterfaceOwnership

  RtmRegisterClient

  mpr

  WNetConnectionDialog1A

  WNetGetNetworkInformationA

  user32

  GetKeyboardLayoutNameW

  OemKeyScan

  SetClipboardData

  DrawMenuBar

  ShowWindow

  UserHandleGrantAccess

  gdi32

  GetFontUnicodeRanges

  comctl32

  ord328

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 768B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 524KB - Virtual size: 524KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 148B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ