visualboyadvance-m[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

visualboyadvance-m.exe
Size

34.0MB
MD5

b19dada6710ffd45ab9fb915a4b4be72
SHA1

e88bb2f01697694b727173ca3a34bbc5da7ebb7b
SHA256

aa975efd06911c6dc6642e953f298e5e093eebf2b2606793f18e6b3b320b0e34
SHA512

380e093388184d8e4952ff4dcddffc59424701fd518c5998770aa495ef47f2f83eb64aeebdf47029b75b0a8099335ed0d3d4dea6b1a0794d2be72a9cee50afcd
SSDEEP

393216:4qO2jwLcL/7PmDBIZ9qC2CmvqIyfJCzxV6r2DGUV3F/u32RV7b8FO/thzQAfgK:K2jO0N+XV2A7Qo/tVfgK

Score

1^/10

Malware Config

Signatures

Files

visualboyadvance-m.exe
.exe windows x64

5462fc80dc5b9ce0a6249c7e92f8e903

Code Sign

8c:ed:d8:2c:b7:80:3d:0b:56:5c:74:63:14:f7:57:33
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

18/09/2019, 00:00

Not After

17/09/2022, 23:59

Subject

CN=Rafael Kitover,O=Rafael Kitover,POSTALCODE=94127,STREET=945 Darien Way,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

01/02/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c3:37:b4:fd:26:cd:bf:2c:ae:cd:f3:2a:7e:9d:c7:3d:6c:1e:cb:39
Signer

Actual PE Digest

c3:37:b4:fd:26:cd:bf:2c:ae:cd:f3:2a:7e:9d:c7:3d:6c:1e:cb:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

ImageList_EndDrag
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_ReplaceIcon
ImageList_Copy
ord16
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_Remove
ImageList_Replace
ImageList_SetBkColor
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ImageList_DragLeave
ord17

oleacc

LresultFromObject
CreateStdAccessibleObject

rpcrt4

UuidToStringW
RpcStringFreeW

shlwapi

AssocQueryStringW
SHAutoComplete

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wsock32

gethostname
__WSAFDIsSet
accept
bind
closesocket
connect
getsockname
WSAAsyncSelect
WSACleanup
WSAStartup
inet_ntoa
WSAGetLastError
gethostbyaddr
ntohs
ntohl
inet_addr
ioctlsocket
htons
htonl
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
getsockopt

opengl32

glTexParameteri
wglGetProcAddress
glLoadIdentity
glViewport
glClear
glVertex3i
glNewList
glBindTexture
glGenTextures
glMatrixMode
glEnable
glEnd
glCallList
wglShareLists
wglMakeCurrent
wglDeleteContext
wglCreateContext
glOrtho
glPixelStorei
glDeleteLists
glDisable
glTexImage2D
glClearColor
glBegin
glDeleteTextures
glTexCoord2f
glGenLists
glEndList

setupapi

CM_Get_Parent
CM_Get_Device_IDA
CM_Locate_DevNodeA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces

dsound

ord3

ws2_32

getaddrinfo
freeaddrinfo
getnameinfo
getpeername

imm32

ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetIMEFileNameA
ImmGetContext

secur32

DeleteSecurityContext
InitializeSecurityContextA
FreeCredentialsHandle
ApplyControlToken
QueryContextAttributesA
FreeContextBuffer
EncryptMessage
AcquireCredentialsHandleA
DecryptMessage

bcrypt

BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider

mfplat

MFCreateAlignedMemoryBuffer
MFCreateSample
MFCreateMediaType
MFStartup
MFShutdown

kernel32

WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
LoadLibraryW
GlobalSize
GlobalHandle
SetCurrentDirectoryW
SetErrorMode
OutputDebugStringW
RaiseException
TryEnterCriticalSection
ReleaseSemaphore
ReleaseMutex
CreateMutexW
Sleep
CreateSemaphoreW
GetCurrentProcess
GetCurrentThread
SetThreadPriority
TerminateThread
GetExitCodeThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemInfo
GetProcessAffinityMask
CreateFileW
GetFileAttributesW
GetFileType
CopyFileW
MultiByteToWideChar
WideCharToMultiByte
GetSystemTimeAsFileTime
GetACP
GetLocaleInfoW
GetThreadLocale
FormatMessageW
FindClose
FindFirstFileW
GetFileSize
DeleteCriticalSection
GetLongPathNameW
GetTempFileNameW
GetTempPathW
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableW
IsDebuggerPresent
GetCurrentProcessId
TerminateProcess
GlobalMemoryStatusEx
GetVersionExW
GetNativeSystemInfo
GetModuleFileNameW
IsValidCodePage
GetCPInfo
GetModuleHandleW
ReadFile
WriteFile
SetHandleInformation
CreatePipe
SetNamedPipeHandleState
PeekNamedPipe
WaitForMultipleObjects
GetExitCodeProcess
FreeConsole
CreateProcessW
ExpandEnvironmentStringsW
GetDriveTypeW
GetLogicalDriveStringsW
FindNextFileW
RtlCaptureContext
IsBadReadPtr
IsBadStringPtrA
SetThreadLocale
GetUserDefaultUILanguage
CreateFileA
GetFileSizeEx
SetFilePointer
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateMutexA
VirtualFree
OpenSemaphoreA
ResetEvent
CreateSemaphoreA
GetTickCount
SetFilePointerEx
SetThreadExecutionState
CreateDirectoryW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
GetEnvironmentVariableA
SetEnvironmentVariableA
DeviceIoControl
GetOverlappedResult
CancelIo
LoadLibraryExW
CompareStringA
GetModuleHandleExW
GetSystemPowerStatus
GetLocaleInfoA
CreateEventA
GetModuleHandleA
EnumResourceLanguagesA
EnumSystemLocalesA
DebugBreak
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceBeginInitialize
InitOnceComplete
InitializeSRWLock
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
MoveFileExA
MoveFileExW
CancelIoEx
GetConsoleMode
SetConsoleTextAttribute
GetSystemDirectoryW
LoadLibraryExA
GetProcessHeap
CloseHandle
SetEvent
CreateEventW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
VerifyVersionInfoW
VerSetConditionMask
AttachConsole
GetCommandLineA
GetCurrentThreadId
GetStdHandle
FindFirstFileExW
HeapQueryInformation
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
SetEnvironmentVariableW
SetEndOfFile
GetCurrentDirectoryW
HeapReAlloc
WriteConsoleA
ExitProcess
SetLastError
GetLastError
LocalFree
GetCommandLineW
MulDiv
LoadLibraryA
GetProcAddress
CreateThread
RtlPcToFileHeader
GetStringTypeW
TryAcquireSRWLockExclusive
SwitchToThread
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
InitializeSListHead
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
RtlUnwindEx
InterlockedPushEntrySList
RtlUnwind
ExitThread
FreeLibraryAndExitThread
GetFullPathNameW
RemoveDirectoryW
DeleteFileW
SetStdHandle
GetTimeZoneInformation
GetFileAttributesExW
FlushFileBuffers
ReadConsoleW
GetConsoleOutputCP
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetConsoleCtrlHandler
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileTime

user32

GetClipboardSequenceNumber
SetClipboardData
GetClipboardData
GetKeyboardLayout
GetKeyboardState
ToUnicode
EnumDisplayDevicesW
CopyImage
AttachThreadInput
SetActiveWindow
SetPropW
RemovePropW
IntersectRect
CreateIconFromResource
MonitorFromRect
DialogBoxIndirectParamW
SystemParametersInfoA
GetRawInputDeviceList
GetSubMenu
CheckMenuItem
GetMenuState
DrawFrameControl
DrawEdge
GetClassNameW
SetRect
MessageBeep
GetWindowTextW
GetDoubleClickTime
keybd_event
IsMenu
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
GetCaretBlinkTime
CreateCaret
DestroyCursor
FindWindowExW
LoadImageW
LoadIconW
LoadBitmapW
GetIconInfo
CreateIconIndirect
GetPropW
DestroyIcon
TranslateAcceleratorW
DestroyAcceleratorTable
CreateAcceleratorTableW
DrawIconEx
DrawFocusRect
DrawTextW
EnumChildWindows
MsgWaitForMultipleObjects
EndDialog
SetWindowRgn
LoadCursorW
GetProcessDefaultLayout
MessageBoxW
GetDlgItem
CreateDialogParamW
SystemParametersInfoW
GetScrollInfo
SetScrollInfo
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
SetParent
GetParent
GetWindowLongW
PtInRect
InflateRect
FillRect
GetRawInputDeviceInfoA
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
ReleaseDC
GetDC
UpdateWindow
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemCount
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
VkKeyScanW
GetKeyState
GetFocus
GetActiveWindow
SetFocus
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
AnimateWindow
IsWindow
CallWindowProcW
PostQuitMessage
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
DispatchMessageW
TranslateMessage
GetWindowRect
PostMessageW
RegisterWindowMessageW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
SetWindowTextW
SetForegroundWindow
EnableMenuItem
GetSystemMenu
DrawMenuBar
GetDialogBaseUnits
CreateDialogIndirectParamW
IsZoomed
BringWindowToTop
IsIconic
GetWindowPlacement
CreateWindowExA
RegisterClassExA
UnregisterClassA
RegisterWindowMessageA
GetRawInputData
ClipCursor
GetClipCursor
GetUpdateRect
GetForegroundWindow
GetMenu
GetClassInfoExW
GetMessageExtraInfo
TrackMouseEvent
RegisterClassExW
UnregisterDeviceNotification
RegisterDeviceNotificationW
MessageBoxA
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
NotifyWinEvent
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeW
KillTimer
SetTimer
WaitForInputIdle
GetWindowThreadProcessId
IsClipboardFormatAvailable
EmptyClipboard
SetWindowPos
MoveWindow
FlashWindowEx
SetLayeredWindowAttributes
ShowWindow
CreateWindowExW
RegisterClassW
DestroyWindow
UnregisterClassW
DefWindowProcW
PeekMessageW
SetMenu
SendMessageW
GetSystemMetrics
MapVirtualKeyW
GetAsyncKeyState
CloseClipboard
OpenClipboard
wsprintfW
GetClassInfoW
RegisterRawInputDevices
ShowCursor
AdjustWindowRectEx
GetClipboardFormatNameW
RegisterClipboardFormatW
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromWindow
MonitorFromPoint
EnumDisplaySettingsW
ChangeDisplaySettingsExW
ChildWindowFromPoint
GetComboBoxInfo
OffsetRect
CopyRect
GetDesktopWindow
UnionRect
EndPaint
BeginPaint
GetWindowDC
ValidateRect
PostThreadMessageW
GetMessageW
IsRectEmpty
SetRectEmpty
ValidateRgn
InsertMenuItemW
SetMenuInfo
RemoveMenu
ModifyMenuW
AppendMenuW
InsertMenuW
DestroyMenu
CreatePopupMenu
CreateMenu
CheckMenuRadioItem
GetSysColorBrush
DrawStateW
SetMenuItemInfoW
GetSysColor
GetMenuItemID
GetWindowTextLengthW

gdi32

GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
MaskBlt
Pie
PolyPolygon
Rectangle
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPixel
SetPolyFillMode
StretchBlt
StretchDIBits
SetROP2
SetStretchBltMode
GetWorldTransform
SetWorldTransform
ModifyWorldTransform
GetObjectW
ExtTextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
GetObjectType
SetWindowExtEx
SetBkMode
CreateBitmap
CreateBitmapIndirect
GetBkColor
LineTo
MoveToEx
GetTextExtentPoint32W
CreatePen
ExtCreatePen
CombineRgn
EqualRgn
GetRgnBox
PtInRegion
RectInRegion
CreatePalette
GetNearestPaletteIndex
GetClipBox
CreateHatchBrush
CreatePatternBrush
CreateRectRgnIndirect
GetCharABCWidthsW
GetTextExtentExPointW
CreateICW
CreateDIBitmap
GetDIBits
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
SetAbortProc
CreateDCW
StartDocW
EndDoc
StartPage
SetViewportExtEx
GetGraphicsMode
EndPage
GetSystemPaletteEntries
SetViewportOrgEx
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
EnumFontFamiliesExW
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
CreateSolidBrush
OffsetRgn
GetRegionData
ExtCreateRegion
GetOutlineTextMetricsW
DeleteObject
CreateFontIndirectW
GdiFlush
SetBrushOrgEx
GetTextMetricsW
UnrealizeObject
SwapBuffers
GetICMProfileW
GetDeviceGammaRamp
SetDeviceGammaRamp
GetTextExtentPoint32A
ExtFloodFill
Ellipse
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
Arc
GetPaletteEntries
SelectPalette
SelectObject
RealizePalette
GetDeviceCaps
ExcludeClipRect
SetTextColor
SetWindowOrgEx
CreateRectRgn

winspool.drv

OpenPrinterW
GetPrinterW
DocumentPropertiesW
ClosePrinter

shell32

CommandLineToArgvW
DragQueryPoint
DragQueryFileW
DragFinish
DragAcceptFiles
ExtractIconW
ExtractIconExW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFolderPathW
ord6
SHGetFileInfoW
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc

ole32

ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleInitialize
DoDragDrop
CoLockObjectExternal
OleFlushClipboard
OleIsCurrentClipboard
CoUninitialize
CLSIDFromString
StringFromGUID2
CoCreateInstance
CoInitializeEx
PropVariantClear
RegisterDragDrop
RevokeDragDrop
OleSetClipboard
OleGetClipboard

oleaut32

SysAllocString
SystemTimeToVariantTime
SafeArrayCreate
SafeArrayUnlock
SafeArrayDestroy
SafeArrayGetVartype
VarBstrFromCy
SafeArrayLock
VariantInit
SysFreeString
SysStringLen

comdlg32

PageSetupDlgW
PrintDlgW
ChooseColorW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
ChooseFontW

advapi32

RegDeleteKeyW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
GetUserNameW
RegCloseKey
RegCreateKeyExW

uxtheme

IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeParentBackground
SetWindowTheme
GetThemePartSize
GetThemeColor
GetThemeBackgroundContentRect
GetThemeInt
GetThemeMargins
GetThemeSysColor
GetThemeSysFont
IsThemeActive
IsAppThemed
GetThemeFont
IsThemePartDefined
GetThemeBackgroundExtent
OpenThemeData
GetCurrentThemeName
CloseThemeData

msimg32

AlphaBlend
GradientFill

winmm

timeBeginPeriod
waveOutGetDevCapsW
waveOutReset
waveInGetDevCapsW
timeEndPeriod
waveOutGetErrorTextW
waveOutUnprepareHeader
waveOutWrite
waveOutClose
waveOutPrepareHeader
waveOutGetNumDevs
waveInGetNumDevs
waveInReset
waveInStart
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
waveInOpen
waveOutOpen

Exports

Exports

_libiconv_version
_nl_expand_alias
_nl_msg_cat_cntr
iconv_canonicalize
libiconv
libiconv_close
libiconv_open
libiconv_open_into
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
libintl_dcgettext
libintl_fprintf
libintl_gettext
libintl_printf
libintl_set_relocation_prefix
libintl_snprintf
libintl_sprintf
libintl_vfprintf
libintl_vprintf
libintl_vsnprintf
libintl_vsprintf

Sections

.text
Size: 21.9MB - Virtual size: 21.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.1MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 588KB - Virtual size: 14.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5462fc80dc5b9ce0a6249c7e92f8e903

Code Sign

8c:ed:d8:2c:b7:80:3d:0b:56:5c:74:63:14:f7:57:33Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2dCertificate

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

c3:37:b4:fd:26:cd:bf:2c:ae:cd:f3:2a:7e:9d:c7:3d:6c:1e:cb:39Signer

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

oleacc

rpcrt4

shlwapi

version

wsock32

opengl32

setupapi

dsound

ws2_32

imm32

secur32

bcrypt

mfplat

kernel32

user32

gdi32

winspool.drv

shell32

ole32

oleaut32

comdlg32

advapi32

uxtheme

msimg32

winmm

Exports

Exports

Sections

.text Size: 21.9MB - Virtual size: 21.9MB

.rdata Size: 8.1MB - Virtual size: 8.1MB

.data Size: 588KB - Virtual size: 14.1MB

.pdata Size: 645KB - Virtual size: 644KB

_RDATA Size: 69KB - Virtual size: 68KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 245KB - Virtual size: 244KB

8c:ed:d8:2c:b7:80:3d:0b:56:5c:74:63:14:f7:57:33
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

c3:37:b4:fd:26:cd:bf:2c:ae:cd:f3:2a:7e:9d:c7:3d:6c:1e:cb:39
Signer

.text
Size: 21.9MB - Virtual size: 21.9MB

.rdata
Size: 8.1MB - Virtual size: 8.1MB

.data
Size: 588KB - Virtual size: 14.1MB

.pdata
Size: 645KB - Virtual size: 644KB

_RDATA
Size: 69KB - Virtual size: 68KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 245KB - Virtual size: 244KB