87418dc9b176a8b8fa26220a513a6bb13566c0e06488566789ac146c262d9c2d

Sharing

Copy URL

Twitter E-mail

General

Target

87418dc9b176a8b8fa26220a513a6bb13566c0e06488566789ac146c262d9c2d
Size

11.2MB
MD5

9e262e91e8fa6506b7eaef3da0fd3399
SHA1

130ff95aa2b064bd1b3807b916996edc8fdae959
SHA256

87418dc9b176a8b8fa26220a513a6bb13566c0e06488566789ac146c262d9c2d
SHA512

6a56d29e9affc88542546f9bdead4873a42888553cc04779591874ee7f7b424c681532347e2079121fc377fb4eb701ffde3384854fd2e7d920a34d4de3b33581
SSDEEP

196608:9VVzO1kOQc8hr2XRi1DqzX/bTjpxIZYxLTcV4IODYBpL8rBSE2EcsLK0M:7QGOQ95QoBgTIZexIODYjuwf0M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87418dc9b176a8b8fa26220a513a6bb13566c0e06488566789ac146c262d9c2d

Files

87418dc9b176a8b8fa26220a513a6bb13566c0e06488566789ac146c262d9c2d
.exe windows x86

30f7f8bfbf1a16e9cd70d81bb9dff42e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

advapi32

GetAce

iphlpapi

GetIfTable

shell32

ILFree

hid

HidP_GetCaps

setupapi

SetupInstallFileA

dhcpcsvc

DhcpIsEnabled

dhcpcsvc6

Dhcpv6IsEnabled

psapi

EnumProcesses

wsock32

bind

ws2_32

gethostbyname

rtl270.bpl

@$xp$6Double

vcl270.bpl

@Vcl@Forms@Screen

dbrtl270.bpl

@Data@Db@TField@

adortl270.bpl

@Data@Win@Adodb@TADOQuery@

cxlibraryrs27.bpl

@Cxmemo@TcxMemo@

dxgdiplusrs27.bpl

@Dxgdiplusapi@Finalization$qqrv

dxcorers27.bpl

@Dxcore@Finalization$qqrv

vcldb270.bpl

@Vcl@Dbpwdlg@Finalization$qqrv

vclwinx270.bpl

@Vcl@Imagecollection@Finalization$qqrv

vclimg270.bpl

@Vcl@Imaging@Jpeg@TJPEGImage@

vclx270.bpl

@Vcl@Filectrl@Finalization$qqrv

dxskinscorers27.bpl

@Dxskinsdefaultpainters@Finalization$qqrv

frx27.bpl

@Frxclass@TfrxView@

fs27.bpl

@Fs_xml@Finalization$qqrv

fqb270.bpl

@Fqbres@Finalization$qqrv

ehlib270.bpl

@Dbgrideh@TDBGridEh@

xmlrtl270.bpl

@Xml@Xmldom@Finalization$qqrv

dxbarextitemsrs27.bpl

@Dxbarextitems@TdxBarStatic@

dxbarrs27.bpl

@Dxbar@TdxBarItem@

dxcomnrs27.bpl

@Dxcommon@Finalization$qqrv

frxdb27.bpl

@Frxdbset@TfrxDBDataset@

fsdb27.bpl

@Fs_idbrtti@Finalization$qqrv

cxtreelistrs27.bpl

@Cxtl@TcxTreeList@

dxspreadsheetcorers27.bpl

@Dxspreadsheetutils@Finalization$qqrv

cxtreelistdxbarpopupmenurs27.bpl

@Cxtldxbarbuiltinmenu@Finalization$qqrv

dxdbtrrs27.bpl

@Dxdbtree@TdxDBTreeView@

frxe27.bpl

@Gif@Finalization$qqrv

frxtee27.bpl

@Frxchart@TfrxChartObject@

fstee27.bpl

@Fs_ichartrtti@Finalization$qqrv

frxado27.bpl

@Frxadortti@Finalization$qqrv

fsado27.bpl

@Fs_iadortti@Finalization$qqrv

indysystem270.bpl

@Ididn@Finalization$qqrv

indyprotocols270.bpl

@Idhttp@TIdHTTP@

indycore270.bpl

@Idyarn@Finalization$qqrv

dxtilecontrolrs27.bpl

@Dxtilecontrol@TdxTileControl@

tee927.bpl

@Vcltee@Series@TPieSeries@

teepro927.bpl

@Vcltee@Teeedit@TChartEditor@

teeui927.bpl

@Vcltee@Teeods@Finalization$qqrv

dxdockingrs27.bpl

@Dxdockpanel@TdxDockPanel@

teedb927.bpl

@Vcltee@Dbchart@TDBChart@

teelanguage927.bpl

@Vcltee@Teetranslate@Finalization$qqrv

borlndmm

GetAllocMemCount

mwrf32

ord8

cc32c270mt

_acos

oleaut32

SysAllocStringLen

ole32

CoCreateGuid

winmm

PlaySoundW

netapi32

Netbios

mpr

WNetAddConnection3W

avicap32

capCreateCaptureWindowW

Exports

Exports

@$xp$10TDM_VCanSN
@$xp$10emBillType
@$xp$11TfChildForm
@$xp$12Tf_BillInput
@$xp$12Tf_FlawInput
@$xp$12Tf_QCPopuWin
@$xp$12Tf_TBaseForm
@$xp$13Tf_BillManage
@$xp$13Tfra_EditGrid
@$xp$14Tf_ProcessForm
@$xp$14Tfra_DateScape
@$xp$14Tfra_ListQuery
@$xp$14emDatabaseKind
@$xp$14emVariableKind
@$xp$15Tf_AssetQueryV2
@$xp$15Tf_BarSNCollect
@$xp$15Tf_BillRelInput
@$xp$15Tf_SocketServer
@$xp$15Tfra_DispDBGrid
@$xp$15emBaseFuncState
@$xp$16TVGetPCMacThread
@$xp$16TfrmTileMenuForm
@$xp$16VSTYLE_VMASKEDIT
@$xp$17TDBGridInitThread
@$xp$17TMyCopyFileThread
@$xp$17Tf_ChartDSSetForm
@$xp$17Tf_ProductSNLabel
@$xp$17Tf_SimpleBaseInfo
@$xp$17Tfra_InventoryQty
@$xp$18Data@Db@TFieldType
@$xp$18Data@Db@TFieldType
@$xp$18TVGetWebDataThread
@$xp$18Tf_GetExtInputInfo
@$xp$18Tf_TSingleBaseForm
@$xp$19Tf_DirectoryProduct
@$xp$20TAutoInputDataThread
@$xp$20TConnectExtERPThread
@$xp$20TNetConnectionThread
@$xp$20TVBaseDispInitThread
@$xp$20Tf_SpecDatasetSelect
@$xp$20VSTD_STYLE_VDATAITEM
@$xp$21Tf_LayoutSet_Location
@$xp$21VCSTD_STYLE_VDATAITEM
@$xp$22Tf_DirectoryBaseSelect
@$xp$22Tf_SimpleBaseInfoInput
@$xp$24Tf_DirectoryProductInput
@$xp$25TInitStockBillParamThread
@$xp$25VSTD_STYLE_VCOMBOBOX_DATA
@$xp$26TCalcDirectoryItemExThread
@$xp$26Tfra_AutoQueryValue_Single
@$xp$27System@%AnsiStringT$us$i0$%
@$xp$27Tf_DirectoryProduct_Picture
@$xp$32TRefrshCOMWarningDataCountThread
@$xp$36TFunctionModuleInitMenuDisplayThread
@$xp$6HWND__
@$xp$79std@%vector$22VSTRUCT_FIELDNAME_TYPE40std@%allocator$22VSTRUCT_FIELDNAME_TYPE%%
@$xp$7CKuaiDi
@$xp$8MyThread
@$xp$9TMainForm
@$xp$p20System@UnicodeString
@$xp$p27System@%AnsiStringT$us$i0$%
@$xp$p6HWND__
@$xp$p79std@%vector$22VSTRUCT_FIELDNAME_TYPE40std@%allocator$22VSTRUCT_FIELDNAME_TYPE%%
@$xp$pd
@$xp$pi
@$xp$po
@$xp$ynpqqr20System@UnicodeStringiioop79std@%vector$22VSTRUCT_FIELDNAME_TYPE40std@%allocator$22VSTRUCT_FIELDNAME_TYPE%%opop20System@UnicodeStringt1$v
@$xp$ynpqqr20System@UnicodeStringiit1t1pop20System@UnicodeString$v
@$xp$ynpqqr20System@UnicodeStringit1$v
@$xp$ynpqqr20System@UnicodeStringit1o$v
@$xp$ynpqqr20System@UnicodeStringt1$v
@$xp$ynpqqr20System@UnicodeStringt1p20System@UnicodeStringpo$v
@$xp$ynpqqr27System@%AnsiStringT$us$i0$%$v
@$xp$ynpqqr27System@%AnsiStringT$us$i0$%p27System@%AnsiStringT$us$i0$%t2$v
@$xp$ynpqqr27System@%AnsiStringT$us$i0$%p27System@%AnsiStringT$us$i0$%t2pdt4i$v
@$xp$ynpqqr27System@%AnsiStringT$us$i0$%t1$v
@$xp$ynpqqri$v
@$xp$ynpqqri20System@UnicodeStringip24Data@Win@Adodb@TADOQueryt2$v
@$xp$ynpqqri27System@%AnsiStringT$us$i0$%p27System@%AnsiStringT$us$i0$%$v
@$xp$ynpqqriii$v
@$xp$ynpqqrip24Data@Win@Adodb@TADOQuery$v
@$xp$ynpqqro20System@UnicodeStringp20System@UnicodeStringpot4$v
@$xp$ynpqqro27System@%AnsiStringT$us$i0$%$v
@$xp$ynpqqroio$v
@$xp$ynpqqrp11TVCDataItem20System@UnicodeStringt2$v
@$xp$ynpqqrp14System@TObject$v
@$xp$ynpqqrp14System@TObject20System@UnicodeString10emBillType$v
@$xp$ynpqqrp14System@TObject20System@UnicodeStringt2opop8TTVFrame$v
@$xp$ynpqqrp14System@TObjectpo$v
@$xp$ynpqqrp24Data@Win@Adodb@TADOQuery20System@UnicodeStringoopo$v
@$xp$ynpqqrp24Data@Win@Adodb@TADOQueryp11TVCDataItem20System@UnicodeStringt3p6HWND__$v
@$xp$ynpqqrp27System@%AnsiStringT$us$i0$%iio$v
@$xp$ynpqqrp36System@Win@Scktcomp@TCustomWinSocket27System@%AnsiStringT$us$i0$%i$v
@$xp$ynpqqrp36System@Win@Scktcomp@TCustomWinSocket27System@%AnsiStringT$us$i0$%iit2iit2t2t2$v
@$xp$ynpqqrp36System@Win@Scktcomp@TCustomWinSocket27System@%AnsiStringT$us$i0$%it2$v
@$xp$ynpqqrp36System@Win@Scktcomp@TCustomWinSocket27System@%AnsiStringT$us$i0$%pop27System@%AnsiStringT$us$i0$%it3$v
@$xp$ynpqqrpi20System@UnicodeStringi$v
@$xp$ynpqqrpipot2$v
@$xp$ynpqqrpo20System@UnicodeStringo$v
@$xp$ynpqqrpo20VSTD_STYLE_VDATAITEMi27System@%AnsiStringT$us$i0$%t4p27System@%AnsiStringT$us$i0$%p16TVSFormatStrings$v
@$xp$ynpqqrpop27System@%AnsiStringT$us$i0$%it1$v
@$xp$ynpqqrv$v
@@Assetquery@Finalize
@@Assetquery@Initialize
@@Autoqueryvalue_single@Finalize
@@Autoqueryvalue_single@Initialize
@@Barsncollect@Finalize
@@Barsncollect@Initialize
@@Billinput@Finalize
@@Billinput@Initialize
@@Billmanage@Finalize
@@Billmanage@Initialize
@@Billrelinput@Finalize
@@Billrelinput@Initialize
@@Childform@Finalize
@@Childform@Initialize
@@Cvfxtranslate@Finalize
@@Cvfxtranslate@Initialize
@@Datescape@Finalize
@@Datescape@Initialize
@@Deshelper@Finalize
@@Deshelper@Initialize
@@Directorybaseselect@Finalize
@@Directorybaseselect@Initialize
@@Directoryproduct@Finalize
@@Directoryproduct@Initialize
@@Directoryproduct_picture@Finalize
@@Directoryproduct_picture@Initialize
@@Directoryproductinput@Finalize
@@Directoryproductinput@Initialize
@@Dispdbgrid@Finalize
@@Dispdbgrid@Initialize
@@Editgrid@Finalize
@@Editgrid@Initialize
@@F_mainform@Finalize
@@F_mainform@Initialize
@@F_tilemenuform@Finalize
@@F_tilemenuform@Initialize
@@Flawinput@Finalize
@@Flawinput@Initialize
@@Getextinputinfo@Finalize
@@Getextinputinfo@Initialize
@@Inventoryqty@Finalize
@@Inventoryqty@Initialize
@@Layoutset_location@Finalize
@@Layoutset_location@Initialize
@@Listquery@Finalize
@@Listquery@Initialize
@@M1cardfunc@Finalize
@@M1cardfunc@Initialize
@@Mycopyfilethreadunit@Finalize
@@Mycopyfilethreadunit@Initialize
@@Mythreadunit@Finalize
@@Mythreadunit@Initialize
@@Processform@Finalize
@@Processform@Initialize
@@Productsnlabel@Finalize
@@Productsnlabel@Initialize
@@Publicfunc@Finalize
@@Publicfunc@Initialize
@@Publicfunc_2@Finalize
@@Publicfunc_2@Initialize
@@Publicmacrovar@Finalize
@@Publicmacrovar@Initialize
@@Qcpopuwin@Finalize
@@Qcpopuwin@Initialize
@@Simplebaseinfinput@Finalize
@@Simplebaseinfinput@Initialize
@@Simplebaseinfomanage@Finalize
@@Simplebaseinfomanage@Initialize
@@Socketserver@Finalize
@@Socketserver@Initialize
@@Specdatasetselect@Finalize
@@Specdatasetselect@Initialize
@@Tbaseform@Finalize
@@Tbaseform@Initialize
@@Tsinglebaseform@Finalize
@@Tsinglebaseform@Initialize
@@Tvreginifile@Finalize
@@Tvreginifile@Initialize
@@Tvsnrefdata@Finalize
@@Tvsnrefdata@Initialize
@@Tvsnunit@Finalize
@@Tvsnunit@Initialize
@@Unitckuaidi@Finalize
@@Unitckuaidi@Initialize
@@Unitcvconverter@Finalize
@@Unitcvconverter@Initialize
@@Unitnumbersystem@Finalize
@@Unitnumbersystem@Initialize
@@Unitvdes@Finalize
@@Unitvdes@Initialize
@@Variableitem@Finalize
@@Variableitem@Initialize
@@Vassembly@Finalize
@@Vassembly@Initialize
@@Vassetquery@Finalize
@@Vassetquery@Initialize
@@Vautogetwebdata@Finalize
@@Vautogetwebdata@Initialize
@@Vbarcodesn@Finalize
@@Vbarcodesn@Initialize
@@Vbasedispclass@Finalize
@@Vbasedispclass@Initialize
@@Vbilldata@Finalize
@@Vbilldata@Initialize
@@Vbilldetaillookupdirectoryitem@Finalize
@@Vbilldetaillookupdirectoryitem@Initialize
@@Vbillrelproperty@Finalize
@@Vbillrelproperty@Initialize
@@Vcalcbillsum@Finalize
@@Vcalcbillsum@Initialize
@@Vcalcrefpicture@Finalize
@@Vcalcrefpicture@Initialize
@@Vcalcscript@Finalize
@@Vcalcscript@Initialize
@@Vcalldll@Finalize
@@Vcalldll@Initialize
@@Vcallvcanskeyboard@Finalize
@@Vcallvcanskeyboard@Initialize
@@Vcansn_dm@Finalize
@@Vcansn_dm@Initialize
@@Vcatchvarsvalue@Finalize
@@Vcatchvarsvalue@Initialize
@@Vcdataitem@Finalize
@@Vcdataitem@Initialize
@@Vcdataitemlayout@Finalize
@@Vcdataitemlayout@Initialize
@@Vchartdssetform@Finalize
@@Vchartdssetform@Initialize
@@Vchartlist@Finalize
@@Vchartlist@Initialize
@@Vcomcounter@Finalize
@@Vcomcounter@Initialize
@@Vcurrentvarsandfuncs@Finalize
@@Vcurrentvarsandfuncs@Initialize
@@Vdatarelation@Finalize
@@Vdatarelation@Initialize
@@Vdbconnect@Finalize
@@Vdbconnect@Initialize
@@Vdebook@Finalize
@@Vdebook@Initialize
@@Vdirectoryproductcalcex@Finalize
@@Vdirectoryproductcalcex@Initialize
@@Vdogkeyv2@Finalize
@@Vdogkeyv2@Initialize
@@Vfallsysparams@Finalize
@@Vfallsysparams@Initialize
@@Vflagdata@Finalize
@@Vflagdata@Initialize
@@Vfmoduleparam@Finalize
@@Vfmoduleparam@Initialize
@@Vformatunicodestrings@Finalize
@@Vformatunicodestrings@Initialize
@@Vfunctionmodule@Finalize
@@Vfunctionmodule@Initialize
@@Vgetpcmaccodethread@Finalize
@@Vgetpcmaccodethread@Initialize
@@Vglobalclass@Finalize
@@Vglobalclass@Initialize
@@Vglobalvarsandfuncs@Finalize
@@Vglobalvarsandfuncs@Initialize
@@Vhttpdata@Finalize
@@Vhttpdata@Initialize
@@Viccard@Finalize
@@Viccard@Initialize
@@Vimage@Finalize
@@Vimage@Initialize
@@Vimagelist@Finalize
@@Vimagelist@Initialize
@@Vk3bill@Finalize
@@Vk3bill@Initialize
@@Vloadsysfieldandscriptconfig@Finalize
@@Vloadsysfieldandscriptconfig@Initialize
@@Vlogfile@Finalize
@@Vlogfile@Initialize
@@Vloomandnfc_io@Finalize
@@Vloomandnfc_io@Initialize
@@Vloomdata@Finalize
@@Vloomdata@Initialize
@@Vnetconnectionthread@Finalize
@@Vnetconnectionthread@Initialize
@@Vpubclass@Finalize
@@Vpubclass@Initialize
@@Vpubdatatype@Finalize
@@Vpubdatatype@Initialize
@@Vpubdatatypeself@Finalize
@@Vpubdatatypeself@Initialize
@@Vqcparameters@Finalize
@@Vqcparameters@Initialize
@@Vqueryv2data@Finalize
@@Vqueryv2data@Initialize
@@Vqueryv2datalist@Finalize
@@Vqueryv2datalist@Initialize
@@Vrefdata@Finalize
@@Vrefdata@Initialize
@@Vrefdatasource@Finalize
@@Vrefdatasource@Initialize
@@Vrelimage@Finalize
@@Vrelimage@Initialize
@@Vrelothermodulerpparam@Finalize
@@Vrelothermodulerpparam@Initialize
@@Vrfidread@Finalize
@@Vrfidread@Initialize
@@Vrpdatatype@Finalize
@@Vrpdatatype@Initialize
@@Vscomboboxfieldlist@Finalize
@@Vscomboboxfieldlist@Initialize
@@Vscomboboxfixeditem@Finalize
@@Vscomboboxfixeditem@Initialize
@@Vsdataitem@Finalize
@@Vsdataitem@Initialize
@@Vsetadoquery@Finalize
@@Vsetadoquery@Initialize
@@Vsetstyle@Finalize
@@Vsetstyle@Initialize
@@Vsformatstrings@Finalize
@@Vsformatstrings@Initialize
@@Vsmaskedit@Finalize
@@Vsmaskedit@Initialize
@@Vsms@Finalize
@@Vsms@Initialize
@@Vsnnumber@Finalize
@@Vsnnumber@Initialize
@@Vsocketcommand@Finalize
@@Vsocketcommand@Initialize
@@Vsocketpubcmd@Finalize
@@Vsocketpubcmd@Initialize
@@Vsocketreceivedata@Finalize
@@Vsocketreceivedata@Initialize
@@Vsocketserver@Finalize
@@Vsocketserver@Initialize
@@Vstate@Finalize
@@Vstate@Initialize
@@Vstockparam@Finalize
@@Vstockparam@Initialize
@@Vstockqty@Finalize
@@Vstockqty@Initialize
@@Vtilecontrols@Finalize
@@Vtilecontrols@Initialize
@@Vtrackingstate@Finalize
@@Vtrackingstate@Initialize
@@Vtscript@Finalize
@@Vtscript@Initialize
@@Vufpo@Finalize
@@Vufpo@Initialize
@@Vuserpurviewanddbconnectparam@Finalize
@@Vuserpurviewanddbconnectparam@Initialize
@@Vwtmddatafordh@Finalize
@@Vwtmddatafordh@Initialize
@TTVFrame@map_AllControlSelf
@TVCDataItems@map_SysFieldName
@TVCDataItems@set_NoFieldName
@TVCalcRefPicture@vec_PicFieldListForQueryV2
@TVSetADOQuery@map_ADODisableCount
_DM_VCanSN
_MainForm
___CPPdebugHook
__dbk_fcall_wrapper
_fChildForm
_f_AssetQueryV2
_f_ChartDSSetForm
_f_DirectoryProduct_Picture
_f_SpecDatasetSelect
_f_TSingleBaseForm
_fra_AutoQueryValue_Single
_fra_DateScape
_fra_DispDBGrid
_fra_EditGrid
_fra_InventoryQty
_fra_ListQuery
cJSON_AddArrayToObject
cJSON_AddBoolToObject
cJSON_AddFalseToObject
cJSON_AddItemReferenceToArray
cJSON_AddItemReferenceToObject
cJSON_AddItemToArray
cJSON_AddItemToObject
cJSON_AddItemToObjectCS
cJSON_AddNullToObject
cJSON_AddNumberToObject
cJSON_AddObjectToObject
cJSON_AddRawToObject
cJSON_AddStringToObject
cJSON_AddTrueToObject
cJSON_Compare
cJSON_CreateArray
cJSON_CreateArrayReference
cJSON_CreateBool
cJSON_CreateDoubleArray
cJSON_CreateFalse
cJSON_CreateFloatArray
cJSON_CreateIntArray
cJSON_CreateNull
cJSON_CreateNumber
cJSON_CreateObject
cJSON_CreateObjectReference
cJSON_CreateRaw
cJSON_CreateString
cJSON_CreateStringArray
cJSON_CreateStringReference
cJSON_CreateTrue
cJSON_Delete
cJSON_DeleteItemFromArray
cJSON_DeleteItemFromObject
cJSON_DeleteItemFromObjectCaseSensitive
cJSON_DetachItemFromArray
cJSON_DetachItemFromObject
cJSON_DetachItemFromObjectCaseSensitive
cJSON_DetachItemViaPointer
cJSON_Duplicate
cJSON_GetArrayItem
cJSON_GetArraySize
cJSON_GetErrorPtr
cJSON_GetObjectItem
cJSON_GetObjectItemCaseSensitive
cJSON_GetStringValue
cJSON_HasObjectItem
cJSON_InitHooks
cJSON_InsertItemInArray
cJSON_IsArray
cJSON_IsBool
cJSON_IsFalse
cJSON_IsInvalid
cJSON_IsNull
cJSON_IsNumber
cJSON_IsObject
cJSON_IsRaw
cJSON_IsString
cJSON_IsTrue
cJSON_Minify
cJSON_Parse
cJSON_ParseWithOpts
cJSON_Print
cJSON_PrintBuffered
cJSON_PrintPreallocated
cJSON_PrintUnformatted
cJSON_ReplaceItemInArray
cJSON_ReplaceItemInObject
cJSON_ReplaceItemInObjectCaseSensitive
cJSON_ReplaceItemViaPointer
cJSON_SetNumberHelper
cJSON_Version
cJSON_free
cJSON_malloc
dbkFCallWrapperAddr

Sections

.AKS1
Size: 7.6MB - Virtual size: 22.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AKS2
Size: 3.5MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AKS3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

30f7f8bfbf1a16e9cd70d81bb9dff42e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

iphlpapi

shell32

hid

setupapi

dhcpcsvc

dhcpcsvc6

psapi

wsock32

ws2_32

rtl270.bpl

vcl270.bpl

dbrtl270.bpl

adortl270.bpl

cxlibraryrs27.bpl

dxgdiplusrs27.bpl

dxcorers27.bpl

vcldb270.bpl

vclwinx270.bpl

vclimg270.bpl

vclx270.bpl

dxskinscorers27.bpl

frx27.bpl

fs27.bpl

fqb270.bpl

ehlib270.bpl

xmlrtl270.bpl

dxbarextitemsrs27.bpl

dxbarrs27.bpl

dxcomnrs27.bpl

frxdb27.bpl

fsdb27.bpl

cxtreelistrs27.bpl

dxspreadsheetcorers27.bpl

cxtreelistdxbarpopupmenurs27.bpl

dxdbtrrs27.bpl

frxe27.bpl

frxtee27.bpl

fstee27.bpl

frxado27.bpl

fsado27.bpl

indysystem270.bpl

indyprotocols270.bpl

indycore270.bpl

dxtilecontrolrs27.bpl

tee927.bpl

teepro927.bpl

teeui927.bpl

dxdockingrs27.bpl

teedb927.bpl

teelanguage927.bpl

borlndmm

mwrf32

cc32c270mt

oleaut32

ole32

winmm

netapi32

mpr

avicap32

Exports

Exports

Sections

.AKS1 Size: 7.6MB - Virtual size: 22.2MB

.AKS2 Size: 3.5MB - Virtual size: 5.0MB

.AKS3 Size: 1KB - Virtual size: 1KB

.rsrc Size: 157KB - Virtual size: 156KB

.AKS1
Size: 7.6MB - Virtual size: 22.2MB

.AKS2
Size: 3.5MB - Virtual size: 5.0MB

.AKS3
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 157KB - Virtual size: 156KB