WiiUDownloader[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

WiiUDownloader.exe
Size

1.5MB
MD5

4242980942e20f552d8ff60b1a235dc3
SHA1

6f26bd74cd3ca7fd80aa9098f94eb3b1248f3b25
SHA256

e797153b6a9f43b66927de13d569999afb24a9c1256ec0c0e964069e82528e3d
SHA512

d78009e089b64a4bc979771557d8298a57aa1917f39f912720abf7516ebbd5f9262a9751ece3258097d508bb13ca26ffc088901983506dbd7a94e0218f25a702
SSDEEP

12288:DN5b4rqyfBgK7RgNAQlllllwY+twMiYbBf2XFQ5EhOlIeXQTebCpOCq6gx+QD3XV:rbQq8gNQiY/5ECZbCpqZ5XUCOcZP9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WiiUDownloader.exe

Files

WiiUDownloader.exe
.exe windows x64

7f0f6a1a99e0ea217ad18cf8083b77b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

libcurl-4

curl_easy_cleanup
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_setopt
curl_easy_strerror
curl_global_cleanup
curl_global_init
curl_share_cleanup
curl_share_init
curl_share_setopt

libgcc_s_seh-1

_Unwind_Resume
__emutls_get_address

libgio-2.0-0

g_static_resource_fini
g_static_resource_get_resource
g_static_resource_init

libgiomm-2.4-1

_ZN3Gio11Application17send_notificationERKN4Glib6RefPtrINS_12NotificationEEE
_ZN3Gio12Notification6createERKN4Glib7ustringE
_ZN3Gio12Notification8set_bodyERKN4Glib7ustringE

libglib-2.0-0

g_log

libglibmm-2.4-1

_ZN4Glib10ObjectBaseC2EPKc
_ZN4Glib10ObjectBaseD2Ev
_ZN4Glib15ConstructParamsC1ERKNS_5ClassEPKcz
_ZN4Glib15ConstructParamsD1Ev
_ZN4Glib16ValueBase_String10value_typeEv
_ZN4Glib17SignalProxyNormal13connect_impl_EbON4sigc9slot_baseEb
_ZN4Glib17SignalProxyNormalD2Ev
_ZN4Glib18PropertyProxy_Base13set_property_ERKNS_9ValueBaseE
_ZN4Glib5ValueINS_7ustringEE3setERKS1_
_ZN4Glib5ValueIbE10value_typeEv
_ZN4Glib5ValueIbE3setEb
_ZN4Glib5ValueIiE10value_typeEv
_ZN4Glib5ValueIiE3setEi
_ZN4Glib7ustring12FormatStreamC1Ev
_ZN4Glib7ustring12FormatStreamD1Ev
_ZN4Glib7ustringC1EPKc
_ZN4Glib7ustringD1Ev
_ZN4Glib9ValueBase4initEy
_ZN4Glib9ValueBaseC2Ev
_ZN4Glib9ValueBaseD2Ev
_ZN4GliblsERSt13basic_ostreamIwSt11char_traitsIwEERKNS_7ustringE
_ZNK4Glib16ValueBase_String11get_cstringEv
_ZNK4Glib5ValueIbE3getEv
_ZNK4Glib5ValueIiE3getEv
_ZNK4Glib7ustring12FormatStream9to_stringEv
_ZNK4Glib7ustring5c_strEv
_ZNK4Glib7ustring9lowercaseEv

libgobject-2.0-0

g_signal_connect_data

libgtk-3-0

gtk_box_new
gtk_box_pack_end
gtk_box_pack_start
gtk_button_new
gtk_button_set_label
gtk_container_add
gtk_container_set_border_width
gtk_events_pending
gtk_init_abi_check
gtk_label_new
gtk_label_set_label
gtk_main_iteration
gtk_progress_bar_new
gtk_progress_bar_set_fraction
gtk_progress_bar_set_show_text
gtk_progress_bar_set_text
gtk_widget_destroy
gtk_widget_show_all
gtk_window_iconify
gtk_window_new
gtk_window_set_default_size
gtk_window_set_modal
gtk_window_set_title

libgtkmm-3.0-1

_ZN3Gtk10CellLayoutC2Ev
_ZN3Gtk10CellLayoutD2Ev
_ZN3Gtk11Application10add_windowERNS_6WindowE
_ZN3Gtk11Application3runERNS_6WindowE
_ZN3Gtk11Application6createERiRPPcRKN4Glib7ustringEN3Gio16ApplicationFlagsE
_ZN3Gtk11CheckButton13get_base_typeEv
_ZN3Gtk11SearchEntry13get_base_typeEv
_ZN3Gtk12ToggleButton10set_activeEb
_ZN3Gtk12ToggleButton13get_base_typeEv
_ZN3Gtk12ToggleButton14signal_toggledEv
_ZN3Gtk12TreeIterBaseC2ERKS0_
_ZN3Gtk12TreeSortable15set_sort_columnEiNS_8SortTypeE
_ZN3Gtk13ImageMenuItem13get_base_typeEv
_ZN3Gtk13MessageDialogC1ERKN4Glib7ustringEbNS_11MessageTypeENS_11ButtonsTypeEb
_ZN3Gtk13MessageDialogD1Ev
_ZN3Gtk13TreeSelection12get_selectedEv
_ZN3Gtk13TreeSelection14signal_changedEv
_ZN3Gtk13TreeSelection8set_modeENS_13SelectionModeE
_ZN3Gtk14TreeViewColumn10pack_startERNS_12CellRendererEb
_ZN3Gtk14TreeViewColumn11class_init_Ev
_ZN3Gtk14TreeViewColumn12set_rendererERNS_12CellRendererERKNS_19TreeModelColumnBaseE
_ZN3Gtk14TreeViewColumn13add_attributeERNS_12CellRendererERKN4Glib7ustringERKNS_19TreeModelColumnBaseE
_ZN3Gtk14TreeViewColumn15set_sort_columnERKNS_19TreeModelColumnBaseE
_ZN3Gtk15TreeModelFilter16set_visible_funcERKN4sigc4slotIbRKNS_8TreeIterENS1_3nilES6_S6_S6_S6_S6_EE
_ZN3Gtk15TreeModelFilter6createERKN4Glib6RefPtrINS_9TreeModelEEE
_ZN3Gtk16CellRendererText17property_editableEv
_ZN3Gtk16CellRendererTextC1Ev
_ZN3Gtk18CellRendererToggleC1Ev
_ZN3Gtk19TreeModelColumnBaseC2Ey
_ZN3Gtk21TreeModelColumnRecord3addERNS_19TreeModelColumnBaseE
_ZN3Gtk21TreeModelColumnRecordC2Ev
_ZN3Gtk21TreeModelColumnRecordD2Ev
_ZN3Gtk5Entry13get_base_typeEv
_ZN3Gtk5Entry8set_textERKN4Glib7ustringE
_ZN3Gtk6Button13get_base_typeEv
_ZN3Gtk6Button14signal_pressedEv
_ZN3Gtk6Button9set_labelERKN4Glib7ustringE
_ZN3Gtk6Dialog13get_base_typeEv
_ZN3Gtk6Dialog3runEv
_ZN3Gtk6Object10set_manageEv
_ZN3Gtk6ObjectC2ERKN4Glib15ConstructParamsE
_ZN3Gtk6ObjectD2Ev
_ZN3Gtk6Widget11signal_hideEv
_ZN3Gtk6Widget13set_sensitiveEb
_ZN3Gtk6Widget25signal_button_press_eventEv
_ZN3Gtk6Widget4hideEv
_ZN3Gtk6Widget4showEv
_ZN3Gtk6Window13get_base_typeEv
_ZN3Gtk6Window15get_applicationEv
_ZN3Gtk6Window17set_transient_forERS0_
_ZN3Gtk6Window9set_modalEb
_ZN3Gtk6Window9set_titleERKN4Glib7ustringE
_ZN3Gtk7Builder18get_widget_checkedERKN4Glib7ustringEy
_ZN3Gtk7Builder20create_from_resourceERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN3Gtk8Editable14signal_changedEv
_ZN3Gtk8MenuItem15signal_activateEv
_ZN3Gtk8TreePathD1Ev
_ZN3Gtk8TreeView10get_columnEi
_ZN3Gtk8TreeView13append_columnERKN4Glib7ustringERNS_12CellRendererE
_ZN3Gtk8TreeView13append_columnERNS_14TreeViewColumnE
_ZN3Gtk8TreeView13get_base_typeEv
_ZN3Gtk8TreeView13get_selectionEv
_ZN3Gtk8TreeView17set_search_columnEi
_ZN3Gtk8TreeView20signal_row_activatedEv
_ZN3Gtk8TreeView21set_search_equal_funcERKN4sigc4slotIbRKN4Glib6RefPtrINS_9TreeModelEEEiRKNS3_7ustringERKNS_8TreeIterENS1_3nilESF_SF_EE
_ZN3Gtk8TreeView9get_modelEv
_ZN3Gtk8TreeView9set_modelERKN4Glib6RefPtrINS_9TreeModelEEE
_ZN3Gtk9ListStore6appendEv
_ZN3Gtk9ListStore6createERKNS_21TreeModelColumnRecordE
_ZN3Gtk9SearchBar13get_base_typeEv
_ZN3Gtk9TreeModel8get_iterERKNS_8TreePathE
_ZNK3Gtk12ToggleButton10get_activeEv
_ZNK3Gtk13TreeSelection17get_selected_rowsEv
_ZNK3Gtk5Entry8get_textEv
_ZNK3Gtk7TreeRow14get_value_implEiRN4Glib9ValueBaseE
_ZNK3Gtk7TreeRow14set_value_implEiRKN4Glib9ValueBaseE
_ZNK3Gtk7TreeRowcvbEv
_ZNK3Gtk8TreeItercvbEv
_ZTTN3Gtk14TreeViewColumnE
_ZTVN3Gtk14TreeViewColumnE

kernel32

AllocConsole
AttachConsole
CreateDirectoryW
DeleteCriticalSection
EnterCriticalSection
FreeConsole
GetCurrentDirectoryW
GetLastError
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler

libmbedcrypto

mbedtls_aes_crypt_cbc
mbedtls_aes_init
mbedtls_aes_setkey_dec
mbedtls_aes_setkey_enc
mbedtls_md5
mbedtls_md_finish
mbedtls_md_free
mbedtls_md_info_from_type
mbedtls_md_init
mbedtls_md_setup
mbedtls_md_starts
mbedtls_md_update
mbedtls_pkcs5_pbkdf2_hmac
mbedtls_sha1

api-ms-win-crt-convert-l1-1-0

mbrtowc
strtoull
wcrtomb

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_splitpath_s
_mkdir
_unlock_file
_wrename
_wstat64
remove
rename

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc
realloc

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memchr
memcmp
memcpy
memmove
strchr
strrchr

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_assert
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_errno
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_invalid_parameter_handler
_wassert
abort
exit
signal
strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
_fseeki64
_ftelli64
_wfopen_s
_wfreopen_s
fclose
fflush
fopen
fputc
fread
fseek
ftell
fwrite

api-ms-win-crt-string-l1-1-0

_strdup
memset
strcmp
strcpy
strlen
strncat
strncmp
strncpy
wcslen

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_localtime64
_mktime64
_time64
_tzset
_utime64
strftime

api-ms-win-crt-utility-l1-1-0

rand

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize

libwinpthread-1

pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_once

shell32

SHCreateItemFromParsingName
ShellExecuteExW

libsigc-2.0-0

_ZN4sigc10connection10disconnectEv
_ZN4sigc10connectionC1ERNS_9slot_baseE
_ZN4sigc10connectionC1Ev
_ZN4sigc10connectionD1Ev
_ZN4sigc10connectionaSERKS0_
_ZN4sigc9slot_baseC2EPNS_8internal8slot_repE
_ZN4sigc9slot_baseD2Ev
_ZN4sigc9trackableC2Ev
_ZN4sigc9trackableD2Ev

libstdc++-6

_ZNKRSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEE3strEv
_ZNKSt10filesystem7__cxx1118directory_iteratordeEv
_ZNKSt10filesystem7__cxx114path5_List13_Impl_deleterclEPNS2_5_ImplE
_ZNKSt12__basic_fileIcE7is_openEv
_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNKSt7codecvtIwc9_MbstatetE10do_unshiftERS0_PcS3_RS3_
_ZNKSt7codecvtIwc9_MbstatetE11do_encodingEv
_ZNKSt7codecvtIwc9_MbstatetE13do_max_lengthEv
_ZNKSt7codecvtIwc9_MbstatetE16do_always_noconvEv
_ZNKSt7codecvtIwc9_MbstatetE5do_inERS0_PKcS4_RS4_PwS6_RS6_
_ZNKSt7codecvtIwc9_MbstatetE6do_outERS0_PKwS4_RS4_PcS6_RS6_
_ZNKSt7codecvtIwc9_MbstatetE9do_lengthERS0_PKcS4_y
_ZNKSt9type_infoeqERKS_
_ZNSi10_M_extractIdEERSiRT_
_ZNSo3putEc
_ZNSo5flushEv
_ZNSo9_M_insertImEERSoT_
_ZNSolsEPSt15basic_streambufIcSt11char_traitsIcEE
_ZNSt10filesystem6removeERKNS_7__cxx114pathE
_ZNSt10filesystem6statusERKNS_7__cxx114pathE
_ZNSt10filesystem7__cxx1116filesystem_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt10error_code
_ZNSt10filesystem7__cxx1116filesystem_errorD1Ev
_ZNSt10filesystem7__cxx1118directory_iteratorC1ERKNS0_4pathENS_17directory_optionsEPSt10error_code
_ZNSt10filesystem7__cxx1118directory_iteratorppEv
_ZNSt10filesystem7__cxx114path14_M_split_cmptsEv
_ZNSt10filesystem7__cxx114path5_ListC1Ev
_ZNSt11logic_errorC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNSt11logic_errorC2ERKS_
_ZNSt12__basic_fileIcED1Ev
_ZNSt12future_errorD1Ev
_ZNSt13__future_base12_Result_baseC2Ev
_ZNSt13__future_base12_Result_baseD2Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv
_ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev
_ZNSt13basic_fstreamIcSt11char_traitsIcEED1Ev
_ZNSt15__exception_ptr13exception_ptr10_M_releaseEv
_ZNSt15__exception_ptr13exception_ptr9_M_addrefEv
_ZNSt15__exception_ptr13exception_ptrC1EPv
_ZNSt18condition_variable10notify_allEv
_ZNSt18condition_variable4waitERSt11unique_lockISt5mutexE
_ZNSt18condition_variableC1Ev
_ZNSt18condition_variableD1Ev
_ZNSt3_V216generic_categoryEv
_ZNSt6localeC1Ev
_ZNSt6localeD1Ev
_ZNSt6thread15_M_start_threadESt10unique_ptrINS_6_StateESt14default_deleteIS1_EEPFvvE
_ZNSt6thread4joinEv
_ZNSt6thread6_StateD2Ev
_ZNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEE7_M_syncEPcyy
_ZNSt7__cxx1119basic_istringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEC1Ev
_ZNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt7codecvtIwc9_MbstatetEC2Ey
_ZNSt7codecvtIwc9_MbstatetED2Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZNSt9exceptionD2Ev
_ZSt15future_categoryv
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_x
_ZSt16__throw_bad_castv
_ZSt17__throw_bad_allocv
_ZSt17current_exceptionv
_ZSt17rethrow_exceptionNSt15__exception_ptr13exception_ptrE
_ZSt18_Rb_tree_decrementPKSt18_Rb_tree_node_base
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_future_errori
_ZSt20__throw_length_errorPKc
_ZSt20__throw_system_errori
_ZSt25__throw_bad_function_callv
_ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_
_ZSt28__throw_bad_array_new_lengthv
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZSt4cerr
_ZSt4cout
_ZSt9terminatev
_ZTTNSt7__cxx1119basic_istringstreamIcSt11char_traitsIcESaIcEEE
_ZTTNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE
_ZTTSt13basic_fstreamIcSt11char_traitsIcEE
_ZTTSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZTVNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEEE
_ZTVNSt7__cxx1119basic_istringstreamIcSt11char_traitsIcESaIcEEE
_ZTVNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE
_ZTVSt12future_error
_ZTVSt13basic_filebufIcSt11char_traitsIcEE
_ZTVSt13basic_fstreamIcSt11char_traitsIcEE
_ZTVSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_allocate_exception
__cxa_begin_catch
__cxa_end_catch
__cxa_free_exception
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_init_primary_exception
__cxa_rethrow
__cxa_throw
__dynamic_cast
__emutls_v._ZSt11__once_call
__emutls_v._ZSt15__once_callable
__gxx_personality_seh0
__once_proxy

Exports

Exports

wiiudownloader_get_resource

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f0f6a1a99e0ea217ad18cf8083b77b7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

libcurl-4

libgcc_s_seh-1

libgio-2.0-0

libgiomm-2.4-1

libglib-2.0-0

libglibmm-2.4-1

libgobject-2.0-0

libgtk-3-0

libgtkmm-3.0-1

kernel32

libmbedcrypto

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

ole32

libwinpthread-1

shell32

libsigc-2.0-0

libstdc++-6

Exports

Exports

Sections

.text Size: 328KB - Virtual size: 328KB

.data Size: 512B - Virtual size: 432B

.rdata Size: 258KB - Virtual size: 257KB

.pdata Size: 11KB - Virtual size: 10KB

.xdata Size: 20KB - Virtual size: 20KB

.bss Size: - Virtual size: 5KB

.edata Size: 512B - Virtual size: 97B

.idata Size: 23KB - Virtual size: 22KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 8KB

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 187KB - Virtual size: 186KB

/31 Size: 13KB - Virtual size: 13KB

/45 Size: 26KB - Virtual size: 26KB

/57 Size: 8KB - Virtual size: 8KB

/70 Size: 1024B - Virtual size: 926B

/81 Size: 9KB - Virtual size: 9KB

/97 Size: 29KB - Virtual size: 29KB

/113 Size: 1KB - Virtual size: 1KB

.text
Size: 328KB - Virtual size: 328KB

.data
Size: 512B - Virtual size: 432B

.rdata
Size: 258KB - Virtual size: 257KB

.pdata
Size: 11KB - Virtual size: 10KB

.xdata
Size: 20KB - Virtual size: 20KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 512B - Virtual size: 97B

.idata
Size: 23KB - Virtual size: 22KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 8KB

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 187KB - Virtual size: 186KB

/31
Size: 13KB - Virtual size: 13KB

/45
Size: 26KB - Virtual size: 26KB

/57
Size: 8KB - Virtual size: 8KB

/70
Size: 1024B - Virtual size: 926B

/81
Size: 9KB - Virtual size: 9KB

/97
Size: 29KB - Virtual size: 29KB

/113
Size: 1KB - Virtual size: 1KB