aBwFudPLMOx49eb[.]tmp[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

aBwFudPLMOx49eb.tmp.7z
Size

331KB
MD5

21cb5f77eb245eb2fb1d10efbbd529f5
SHA1

b9417b045152ac67e87a97bcfa26d782fc0dc558
SHA256

95c3d683c8e6219e15452618ab934640ca193d0b543464b3ae9f6cfd1c4649ca
SHA512

97223213c7b5a48bcdc66aee49df1b739f8de54f3ced19ed06a25d3bed37bc484891130e2f73cc21eb99b24fee5059f0c037599987506271344f84ff6b0e3763
SSDEEP

6144:kK8mt0VmxsOMuZDkuyY3vgp7H8xNqAhd5TEXrXxZpBQW/VbB/DGbWwL+6cJFEmIf:kK8tXuFbyKg986ARTE7XFB3FMWa+6cX8

Score

1^/10

Malware Config

Signatures

Files

aBwFudPLMOx49eb.tmp.7z
.7z

Password: infected
aBwFudPLMOx49eb.tmp
.dll windows x86

be2a53a57be90b97c83c373f6187ce99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

kernel32

CloseHandle
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
Sleep
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

__dllonexit
__mb_cur_max
_amsg_exit
_errno
_initterm
_iob
_lock
_onexit
_wfopen_s
calloc
fclose
fgetwc
fgetws
fputc
fputs
free
fwrite
iswctype
localeconv
malloc
memcmp
memcpy
qsort
realloc
setlocale
sprintf
strchr
strcmp
strlen
strncmp
_unlock
abort
atoi
towlower
ungetwc
vfprintf
wcschr
wcscpy
wcscspn
wcslen
wcsrchr
wcsstr
wcstol
wcstoul
_write

Exports

Exports

ILL_POWERSCHEMES_GUID
IPIAudioFunc
IPIFunc
IUID_ACDC_POWER_SOURCE
IUID_ACTIVE_POWERSCHEME
IUID_ADAPTIVE_POWER_BEHAVIOR_SUBGROUP
IUID_ALLOW_AWAYMODE
IUID_ALLOW_DISPLAY_REQUIRED
IUID_ALLOW_RTC_WAKE
IUID_ALLOW_STANDBY_STATES
IUID_ALLOW_SYSTEM_REQUIRED
IUID_APPLAUNCH_BUTTON
IUID_BACKGROUND_TASK_NOTIFICATION
IUID_BATTERY_DISCHARGE_ACTION_0
IUID_BATTERY_DISCHARGE_ACTION_1
IUID_BATTERY_DISCHARGE_ACTION_2
IUID_BATTERY_DISCHARGE_ACTION_3
IUID_BATTERY_DISCHARGE_FLAGS_0
IUID_BATTERY_DISCHARGE_FLAGS_1
IUID_BATTERY_DISCHARGE_FLAGS_2
IUID_BATTERY_DISCHARGE_FLAGS_3
IUID_BATTERY_DISCHARGE_LEVEL_0
IUID_BATTERY_DISCHARGE_LEVEL_1
IUID_BATTERY_DISCHARGE_LEVEL_2
IUID_BATTERY_DISCHARGE_LEVEL_3
IUID_BATTERY_PERCENTAGE_REMAINING
IUID_BATTERY_SUBGROUP
IUID_CONSOLE_DISPLAY_STATE
IUID_CRITICAL_POWER_TRANSITION
IUID_DEVICE_IDLE_POLICY
IUID_DEVICE_POWER_POLICY_VIDEO_BRIGHTNESS
IUID_DEVICE_POWER_POLICY_VIDEO_DIM_BRIGHTNESS
IUID_DEVINTERFACE_CDCHANGER
IUID_DEVINTERFACE_CDROM
IUID_DEVINTERFACE_COMPORT
IUID_DEVINTERFACE_DISK
IUID_DEVINTERFACE_FLOPPY
IUID_DEVINTERFACE_MEDIUMCHANGER
IUID_DEVINTERFACE_PARTITION
IUID_DEVINTERFACE_SERENUM_BUS_ENUMERATOR
IUID_DEVINTERFACE_STORAGEPORT
IUID_DEVINTERFACE_TAPE
IUID_DEVINTERFACE_VOLUME
IUID_DEVINTERFACE_WRITEONCEDISK
IUID_DISK_ADAPTIVE_POWERDOWN
IUID_DISK_BURST_IGNORE_THRESHOLD
IUID_DISK_COALESCING_POWERDOWN_TIMEOUT
IUID_DISK_IDLE_TIMEOUT
IUID_DISK_POWERDOWN_TIMEOUT
IUID_DISK_SUBGROUP
IUID_ENABLE_SWITCH_FORCED_SHUTDOWN
IUID_EXECUTION_REQUIRED_REQUEST_TIMEOUT
IUID_GLOBAL_USER_PRESENCE
IUID_HIBERNATE_FASTS4_POLICY
IUID_HIBERNATE_TIMEOUT
IUID_IDLE_BACKGROUND_TASK
IUID_IDLE_RESILIENCY_PERIOD
IUID_IDLE_RESILIENCY_SUBGROUP
IUID_LIDCLOSE_ACTION
IUID_LIDOPEN_POWERSTATE
IUID_LIDSWITCH_STATE_CHANGE
IUID_LOCK_CONSOLE_ON_WAKE
IUID_MAX_POWER_SAVINGS
IUID_MIN_POWER_SAVINGS
IUID_MONITOR_POWER_ON
IUID_NON_ADAPTIVE_INPUT_TIMEOUT
IUID_PCIEXPRESS_ASPM_POLICY
IUID_PCIEXPRESS_SETTINGS_SUBGROUP
IUID_POWERBUTTON_ACTION
IUID_POWERSCHEME_PERSONALITY
IUID_PROCESSOR_ALLOW_THROTTLING
IUID_PROCESSOR_CORE_PARKING_AFFINITY_HISTORY_DECREASE_FACTOR
IUID_PROCESSOR_CORE_PARKING_AFFINITY_HISTORY_THRESHOLD
IUID_PROCESSOR_CORE_PARKING_AFFINITY_WEIGHTING
IUID_PROCESSOR_CORE_PARKING_DECREASE_POLICY
IUID_PROCESSOR_CORE_PARKING_DECREASE_THRESHOLD
IUID_PROCESSOR_CORE_PARKING_DECREASE_TIME
IUID_PROCESSOR_CORE_PARKING_INCREASE_POLICY
IUID_PROCESSOR_CORE_PARKING_INCREASE_THRESHOLD
IUID_PROCESSOR_CORE_PARKING_INCREASE_TIME
IUID_PROCESSOR_CORE_PARKING_MAX_CORES
IUID_PROCESSOR_CORE_PARKING_MIN_CORES
IUID_PROCESSOR_CORE_PARKING_OVER_UTILIZATION_HISTORY_DECREASE_FACTOR
IUID_PROCESSOR_CORE_PARKING_OVER_UTILIZATION_HISTORY_THRESHOLD
IUID_PROCESSOR_CORE_PARKING_OVER_UTILIZATION_THRESHOLD
IUID_PROCESSOR_CORE_PARKING_OVER_UTILIZATION_WEIGHTING
IUID_PROCESSOR_DISTRIBUTE_UTILITY
IUID_PROCESSOR_IDLESTATE_POLICY
IUID_PROCESSOR_IDLE_ALLOW_SCALING
IUID_PROCESSOR_IDLE_DEMOTE_THRESHOLD
IUID_PROCESSOR_IDLE_DISABLE
IUID_PROCESSOR_IDLE_PROMOTE_THRESHOLD
IUID_PROCESSOR_IDLE_STATE_MAXIMUM
IUID_PROCESSOR_IDLE_TIME_CHECK
IUID_PROCESSOR_PARKING_CONCURRENCY_THRESHOLD
IUID_PROCESSOR_PARKING_CORE_OVERRIDE
IUID_PROCESSOR_PARKING_HEADROOM_THRESHOLD
IUID_PROCESSOR_PARKING_PERF_STATE
IUID_PROCESSOR_PERFSTATE_POLICY
IUID_PROCESSOR_PERF_BOOST_MODE
IUID_PROCESSOR_PERF_BOOST_POLICY
IUID_PROCESSOR_PERF_DECREASE_POLICY
IUID_PROCESSOR_PERF_DECREASE_THRESHOLD
IUID_PROCESSOR_PERF_DECREASE_TIME
IUID_PROCESSOR_PERF_HISTORY
IUID_PROCESSOR_PERF_INCREASE_POLICY
IUID_PROCESSOR_PERF_INCREASE_THRESHOLD
IUID_PROCESSOR_PERF_INCREASE_TIME
IUID_PROCESSOR_PERF_LATENCY_HINT
IUID_PROCESSOR_PERF_TIME_CHECK
IUID_PROCESSOR_SETTINGS_SUBGROUP
IUID_PROCESSOR_THROTTLE_MAXIMUM
IUID_PROCESSOR_THROTTLE_MINIMUM
IUID_PROCESSOR_THROTTLE_POLICY
IUID_SESSION_DISPLAY_STATUS
IUID_SESSION_USER_PRESENCE
IUID_SLEEPBUTTON_ACTION
IUID_SLEEP_IDLE_THRESHOLD
IUID_SLEEP_SUBGROUP
IUID_STANDBY_TIMEOUT
IUID_SYSTEM_AWAYMODE
IUID_SYSTEM_BUTTON_SUBGROUP
IUID_SYSTEM_COOLING_POLICY
IUID_TYPICAL_POWER_SAVINGS
IUID_UNATTEND_SLEEP_TIMEOUT
IUID_USERINTERFACEBUTTON_ACTION
IUID_VIDEO_ADAPTIVE_DISPLAY_BRIGHTNESS
IUID_VIDEO_ADAPTIVE_PERCENT_INCREASE
IUID_VIDEO_ADAPTIVE_POWERDOWN
IUID_VIDEO_ANNOYANCE_TIMEOUT
IUID_VIDEO_CONSOLE_LOCK_TIMEOUT
IUID_VIDEO_CURRENT_MONITOR_BRIGHTNESS
IUID_VIDEO_DIM_TIMEOUT
IUID_VIDEO_POWERDOWN_TIMEOUT
IUID_VIDEO_SUBGROUP
IID_AsyncIAdviseSink
IID_AsyncIAdviseSink2
IID_AsyncIMultiQI
IID_AsyncIUnknown
IID_IAddrExclusionControl
IID_IAddrTrackingControl
IID_IAdviseSink
IID_IAdviseSink2
IID_IAdviseSinkEx
IID_IAgileObject
IID_IApartmentShutdown
IID_IAsyncManager
IID_IAsyncRpcChannelBuffer
IID_IAuthenticate
IID_IAuthenticateEx
IID_IBindCallbackRedirect
IID_IBindCtx
IID_IBindHost
IID_IBindProtocol
IID_IBindStatusCallback
IID_IBindStatusCallbackEx
IID_IBinding
IID_IBlockingLock
IID_ICallFactory
IID_ICancelMethodCalls
IID_ICatalogFileInfo
IID_IChannelHook
IID_IClassActivator
IID_IClassFactory
IID_IClassFactory2
IID_IClientSecurity
IID_ICodeInstall
IID_IComThreadingInfo
IID_IConnectionPoint
IID_IConnectionPointContainer
IID_IContinue
IID_ICreateErrorInfo
IID_ICreateTypeInfo
IID_ICreateTypeInfo2
IID_ICreateTypeLib
IID_ICreateTypeLib2
IID_IDXGIAdapter
IID_IDXGIAdapter1
IID_IDXGIDevice
IID_IDXGIDevice1
IID_IDXGIDeviceSubObject
IID_IDXGIFactory
IID_IDXGIFactory1
IID_IDXGIKeyedMutex
IID_IDXGIObject
IID_IDXGIOutput
IID_IDXGIResource
IID_IDXGISurface
IID_IDXGISwapChain
IID_IDataAdviseHolder
IID_IDataFilter
IID_IDataObject
IID_IDirect3D9
IID_IDirect3D9Ex
IID_IDirect3DBaseTexture9
IID_IDirect3DCubeTexture9
IID_IDirect3DDevice9
IID_IDirect3DDevice9Ex
IID_IDirect3DIndexBuffer9
IID_IDirect3DPixelShader9
IID_IDirect3DQuery9
IID_IDirect3DResource9
IID_IDirect3DStateBlock9
IID_IDirect3DSurface9
IID_IDirect3DSwapChain9
IID_IDirect3DSwapChain9Ex
IID_IDirect3DTexture9
IID_IDirect3DVertexBuffer9
IID_IDirect3DVertexDeclaration9
IID_IDirect3DVertexShader9
IID_IDirect3DVolume9
IID_IDirect3DVolumeTexture9
IID_IDirectWriterLock
IID_IDispatch
IID_IDropSource
IID_IDropSourceNotify
IID_IDropTarget
IID_IDummyHICONIncluder
IID_IEncodingFilterFactory
IID_IEnumConnectionPoints
IID_IEnumConnections
IID_IEnumFORMATETC
IID_IEnumMoniker
IID_IEnumOLEVERB
IID_IEnumOleUndoUnits
IID_IEnumSTATDATA
IID_IEnumSTATPROPSETSTG
IID_IEnumSTATPROPSTG
IID_IEnumSTATSTG
IID_IEnumString
IID_IEnumUnknown
IID_IEnumVARIANT
IID_IErrorInfo
IID_IErrorLog
IID_IExternalConnection
IID_IFastRundown
IID_IFillLockBytes
IID_IFont
IID_IFontDisp
IID_IFontEventsDisp
IID_IForegroundTransfer
IID_IGetBindHandle
IID_IGlobalInterfaceTable
IID_IGlobalOptions
IID_IHttpNegotiate
IID_IHttpNegotiate2
IID_IHttpNegotiate3
IID_IHttpSecurity
IID_IInitializeSpy
IID_IInternalUnknown
IID_IInternet
IID_IInternetBindInfo
IID_IInternetBindInfoEx
IID_IInternetHostSecurityManager
IID_IInternetPriority
IID_IInternetProtocol
IID_IInternetProtocolInfo
IID_IInternetProtocolRoot
IID_IInternetProtocolSink
IID_IInternetProtocolSinkStackable
IID_IInternetSecurityManager
IID_IInternetSecurityMgrSite
IID_IInternetSession
IID_IInternetThreadSwitch
IID_IInternetZoneManager
IID_ILayoutStorage
IID_ILockBytes
IID_IMalloc
IID_IMallocSpy
IID_IMarshal
IID_IMarshal2
IID_IMarshalingStream
IID_IMessageFilter
IID_IMoniker
IID_IMonikerProp
IID_IMultiQI
IID_INoMarshal
IID_IObjectWithSite
IID_IOleAdviseHolder
IID_IOleCache
IID_IOleCache2
IID_IOleCacheControl
IID_IOleClientSite
IID_IOleContainer
IID_IOleControl
IID_IOleControlSite
IID_IOleInPlaceActiveObject
IID_IOleInPlaceFrame
IID_IOleInPlaceObject
IID_IOleInPlaceObjectWindowless
IID_IOleInPlaceSite
IID_IOleInPlaceSiteEx
IID_IOleInPlaceSiteWindowless
IID_IOleInPlaceUIWindow
IID_IOleItemContainer
IID_IOleLink
IID_IOleObject
IID_IOleParentUndoUnit
IID_IOleUndoManager
IID_IOleUndoUnit
IID_IOleWindow
IID_IOplockStorage
IID_IPSFactoryBuffer
IID_IParseDisplayName
IID_IPerPropertyBrowsing
IID_IPersist
IID_IPersistFile
IID_IPersistMemory
IID_IPersistMoniker
IID_IPersistPropertyBag
IID_IPersistPropertyBag2
IID_IPersistStorage
IID_IPersistStream
IID_IPersistStreamInit
IID_IPicture
IID_IPicture2
IID_IPictureDisp
IID_IPipeByte
IID_IPipeDouble
IID_IPipeLong
IID_IPointerInactive
IID_IPrintDialogCallback
IID_IPrintDialogServices
IID_IProcessInitControl
IID_IProcessLock
IID_IProgressNotify
IID_IPropertyBag
IID_IPropertyBag2
IID_IPropertyNotifySink
IID_IPropertyPage
IID_IPropertyPage2
IID_IPropertyPageSite
IID_IPropertySetStorage
IID_IPropertyStorage
IID_IProvideClassInfo
IID_IProvideClassInfo2
IID_IProvideMultipleClassInfo
IID_IQuickActivate
IID_IROTData
IID_IRecordInfo
IID_IReleaseMarshalBuffers
IID_IRootStorage
IID_IRpcChannelBuffer
IID_IRpcChannelBuffer2
IID_IRpcChannelBuffer3
IID_IRpcHelper
IID_IRpcOptions
IID_IRpcProxyBuffer
IID_IRpcStubBuffer
IID_IRpcSyntaxNegotiate
IID_IRunnableObject
IID_IRunningObjectTable
IID_ISequentialStream
IID_IServerSecurity
IID_ISimpleFrameSite
IID_ISoftDistExt
IID_ISpecifyPropertyPages
IID_IStdMarshalInfo
IID_IStorage
IID_IStream
IID_ISupportErrorInfo
IID_ISurrogate
IID_ISurrogateService
IID_ISynchronize
IID_ISynchronizeContainer
IID_ISynchronizeEvent
IID_ISynchronizeHandle
IID_ISynchronizeMutex
IID_IThumbnailExtractor
IID_ITimeAndNoticeControl
IID_ITypeChangeEvents
IID_ITypeComp
IID_ITypeFactory
IID_ITypeInfo
IID_ITypeInfo2
IID_ITypeLib
IID_ITypeLib2
IID_ITypeMarshal
IID_IUrlMon
IID_IViewObject
IID_IViewObject2
IID_IViewObjectEx
IID_IWaitMultiple
IID_IWinInetFileStream
IID_IWinInetHttpInfo
IID_IWinInetHttpTimeouts
IID_IWinInetInfo
IID_IWindowForBindingUI
IID_IWrappedProtocol
IFXAudioCORE_SyncOperation
IFXAudioDECODE_Close
IFXAudioDECODE_DecodeFrameAsync
IFXAudioDECODE_DecodeHeader
IFXAudioDECODE_GetAudioParam
IFXAudioDECODE_Init
IFXAudioDECODE_Query
IFXAudioDECODE_QueryIOSize
IFXAudioDECODE_Reset
IFXAudioENCODE_Close
IFXAudioENCODE_EncodeFrameAsync
IFXAudioENCODE_GetAudioParam
IFXAudioENCODE_Init
IFXAudioENCODE_Query
IFXAudioENCODE_QueryIOSize
IFXAudioENCODE_Reset
IFXAudioUSER_Load
IFXAudioUSER_ProcessFrameAsync
IFXAudioUSER_Register
IFXAudioUSER_UnLoad
IFXAudioUSER_Unregister
IFXCloneSession
IFXClose
IFXDisjoinSession
IFXDoWork
IFXGetPriority
IFXInit
IFXInitEx
IFXJoinSession
IFXQueryIMPL
IFXQueryVersion
IFXSetPriority
IFXVideoCORE_GetHandle
IFXVideoCORE_QueryPlatform
IFXVideoCORE_SetBufferAllocator
IFXVideoCORE_SetFrameAllocator
IFXVideoCORE_SetHandle
IFXVideoCORE_SyncOperation
IFXVideoDECODE_Close
IFXVideoDECODE_DecodeFrameAsync
IFXVideoDECODE_DecodeHeader
IFXVideoDECODE_GetDecodeStat
IFXVideoDECODE_GetPayload
IFXVideoDECODE_GetVideoParam
IFXVideoDECODE_Init
IFXVideoDECODE_Query
IFXVideoDECODE_QueryIOSurf
IFXVideoDECODE_Reset
IFXVideoDECODE_SetSkipMode
IFXVideoENCODE_Close
IFXVideoENCODE_EncodeFrameAsync
IFXVideoENCODE_GetEncodeStat
IFXVideoENCODE_GetVideoParam
IFXVideoENCODE_Init
IFXVideoENCODE_Query
IFXVideoENCODE_QueryIOSurf
IFXVideoENCODE_Reset
IFXVideoENC_Close
IFXVideoENC_GetVideoParam
IFXVideoENC_Init
IFXVideoENC_ProcessFrameAsync
IFXVideoENC_Query
IFXVideoENC_QueryIOSurf
IFXVideoENC_Reset
IFXVideoPAK_Close
IFXVideoPAK_GetVideoParam
IFXVideoPAK_Init
IFXVideoPAK_ProcessFrameAsync
IFXVideoPAK_Query
IFXVideoPAK_QueryIOSurf
IFXVideoPAK_Reset
IFXVideoUSER_GetPlugin
IFXVideoUSER_Load
IFXVideoUSER_LoadByPath
IFXVideoUSER_ProcessFrameAsync
IFXVideoUSER_Register
IFXVideoUSER_UnLoad
IFXVideoUSER_Unregister
IFXVideoVPP_Close
IFXVideoVPP_GetVPPStat
IFXVideoVPP_GetVideoParam
IFXVideoVPP_Init
IFXVideoVPP_Query
IFXVideoVPP_QueryIOSurf
IFXVideoVPP_Reset
IFXVideoVPP_RunFrameVPPAsync
IFXVideoVPP_RunFrameVPPAsyncEx
IO_SUBGROUP_GUID
IPM_IDLESTATES_DATA_GUID
IPM_IDLESTATE_CHANGE_GUID
IPM_IDLE_ACCOUNTING_EX_GUID
IPM_IDLE_ACCOUNTING_GUID
IPM_PERFMON_PERFSTATE_GUID
IPM_PERFSTATES_DATA_GUID
IPM_PERFSTATE_CHANGE_GUID
IPM_PERFSTATE_DOMAIN_CHANGE_GUID
IPM_THERMALCONSTRAINT_GUID
IPM_THERMAL_POLICY_CHANGE_GUID
IZ10HandleSortPKvS0_
IZN15MFX_DISP_HANDLE15LoadSelectedDLLEPKw12eMfxImplTypeiiR12mfxInitParam
IZN15MFX_DISP_HANDLE17UnLoadSelectedDLLEv
IZN15MFX_DISP_HANDLE5CloseEv
IZN15MFX_DISP_HANDLEC1E10mfxVersion
IZN15MFX_DISP_HANDLEC2E10mfxVersion
IZN15MFX_DISP_HANDLED1Ev
IZN15MFX_DISP_HANDLED2Ev
IZN3MFX10D3D9Device4InitEj
IZN3MFX10D3D9Device5CloseEv
IZN3MFX10D3D9DeviceC1Ev
IZN3MFX10D3D9DeviceC2Ev
IZN3MFX10D3D9DeviceD0Ev

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

be2a53a57be90b97c83c373f6187ce99

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 130KB - Virtual size: 129KB

.data Size: 512B - Virtual size: 148B

.rdata Size: 23KB - Virtual size: 23KB

.bss Size: - Virtual size: 3KB

.edata Size: 24KB - Virtual size: 23KB

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 5KB - Virtual size: 5KB

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 266KB - Virtual size: 266KB

/31 Size: 29KB - Virtual size: 28KB

/45 Size: 31KB - Virtual size: 30KB

/57 Size: 14KB - Virtual size: 14KB

/70 Size: 7KB - Virtual size: 7KB

/81 Size: 200KB - Virtual size: 196KB

/92 Size: 7KB - Virtual size: 7KB

.text
Size: 130KB - Virtual size: 129KB

.data
Size: 512B - Virtual size: 148B

.rdata
Size: 23KB - Virtual size: 23KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 24KB - Virtual size: 23KB

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 5KB - Virtual size: 5KB

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 266KB - Virtual size: 266KB

/31
Size: 29KB - Virtual size: 28KB

/45
Size: 31KB - Virtual size: 30KB

/57
Size: 14KB - Virtual size: 14KB

/70
Size: 7KB - Virtual size: 7KB

/81
Size: 200KB - Virtual size: 196KB

/92
Size: 7KB - Virtual size: 7KB