General

Malware Config

Signatures

Files

• b3da47207fbc6087f87f5d09aea32be664e399b0328bc05e520cb4ef567fb994

  .gz
• sample

  .dll windows x64

  0d66055af8f302ea72151d631b3071ab

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  GetCurrentProcess

  lstrlenA

  GlobalMemoryStatus

  CloseThreadpoolTimer

  SetThreadpoolTimer

  GetLastError

  CreateThreadpoolTimer

  SetLastError

  VirtualProtect

  IsBadReadPtr

  VirtualAlloc

  VirtualFree

  LoadLibraryA

  GetProcAddress

  FreeLibrary

  HeapFree

  GetProcessHeap

  HeapAlloc

  GetNativeSystemInfo

  EnumSystemLocalesA

  GetLocaleInfoA

  GetUserDefaultLCID

  CloseHandle

  CreateFileW

  HeapSize

  HeapReAlloc

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  DecodePointer

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  EncodePointer

  TerminateProcess

  RtlUnwindEx

  EnterCriticalSection

  LeaveCriticalSection

  HeapSetInformation

  GetVersion

  HeapCreate

  HeapDestroy

  GetModuleHandleW

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameW

  FlsGetValue

  FlsFree

  GetCurrentThread

  FlsAlloc

  Sleep

  SetHandleCount

  InitializeCriticalSectionAndSpinCount

  GetFileType

  GetStartupInfoW

  DeleteCriticalSection

  GetModuleFileNameA

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  FatalAppExitA

  SetConsoleCtrlHandler

  LoadLibraryW

  GetLocaleInfoW

  SetStdHandle

  WriteConsoleW

  MultiByteToWideChar

  LCMapStringW

  GetStringTypeW

  FlushFileBuffers

  IsValidLocale

  user32

  EndDialog

  SetDlgItemTextA

  FindWindowA

  psapi

  GetProcessMemoryInfo

  Exports

  Exports

  ab5684debbc6544567bcedaa4578566

  cb5d347895edeb54

  ec65acd67deb65bed

  Sections

  .text

  Size: 75KB - Virtual size: 74KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 17KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 262KB - Virtual size: 270KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .edata

  Size: 512B - Virtual size: 143B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  INIT

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 176B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ