41da77cb11f029a493c56c34e8eeee0f1d3ee8c49e563ef55e4fcb6539e78626

Sharing

Copy URL Twitter E-mail

General

Target

41da77cb11f029a493c56c34e8eeee0f1d3ee8c49e563ef55e4fcb6539e78626
Size

447KB
MD5

a2f564f757bee9029fbeb6f2769ccf55
SHA1

5a87d07cb45c9dcd6ef9284e17316d811f7f3110
SHA256

41da77cb11f029a493c56c34e8eeee0f1d3ee8c49e563ef55e4fcb6539e78626
SHA512

72be3f076f23d8767b22a7fd22957ada5119c3080280af3927f850d3a0fccafbf3c6f6a5cd2beee9cf020fa293b15ee1a95384b1a41120a133e582e4077e8502
SSDEEP

6144:FYluNPtntV+xy4GOB5n8zThx1rV7VW40uhXZj5A:iO30aZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41da77cb11f029a493c56c34e8eeee0f1d3ee8c49e563ef55e4fcb6539e78626

Files

41da77cb11f029a493c56c34e8eeee0f1d3ee8c49e563ef55e4fcb6539e78626
.dll windows x86

b5be23c2b6e2bc99621e52cb36ca0bd0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc120u

ord1658
ord2336
ord4573
ord4754
ord12290
ord2136
ord7220
ord266
ord1506
ord2332
ord2204
ord2226
ord485
ord1508

msvcr120

__clean_type_info_names_internal
_malloc_crt
_amsg_exit
memcpy
__CppXcptFilter
?terminate@@YAXXZ
__crtTerminateProcess
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
memset
memmove
free
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
??1type_info@@UAE@XZ
_initterm
_initterm_e

kernel32

OutputDebugStringW
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
DeleteCriticalSection
DecodePointer
GetLastError
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter

msvcp120

?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

Exports

Exports

??0CProtoManager@@QAE@XZ
??1CProtoManager@@UAE@XZ
??5@YGAAVCArchive@@AAV0@AAPAVCProtoManager@@@Z
??_7CProtoManager@@6B@
?AddProto@CProtoManager@@QAEXI@Z
?ClearAll@CProtoManager@@QAEXXZ
?CopyProto@CProtoManager@@QAEXPAX@Z
?CreateObject@CProtoManager@@SGPAVCObject@@XZ
?DeleProto@CProtoManager@@QAEHI@Z
?Get3LayerProto@CProtoManager@@QAEII@Z
?Get4LayerProto@CProtoManager@@QAEII@Z
?Get5LayerProto@CProtoManager@@QAEII@Z
?GetArpProtocol@CProtoManager@@QAEPAXXZ
?GetBFDProtocol@CProtoManager@@QAEPAXXZ
?GetBFD_AuthProtocol@CProtoManager@@QAEPAXXZ
?GetBFD_Auth_SimpleProtocol@CProtoManager@@QAEPAXXZ
?GetBGPProtocol@CProtoManager@@QAEPAXXZ
?GetCount@CProtoManager@@QBEIXZ
?GetCustomProtocol@CProtoManager@@QAEPAXXZ
?GetCustomSipProtocol@CProtoManager@@QAEPAXXZ
?GetDHCPProtocol@CProtoManager@@QAEXHPAU_DHCP_HDR@@@Z
?GetDHCP_DiscoverProtocol@CProtoManager@@QAEPAXXZ
?GetEthernetProtocol@CProtoManager@@QAEPAXXZ
?GetGREProtocol@CProtoManager@@QAEPAXXZ
?GetGTPv1Protocol@CProtoManager@@QAEPAXXZ
?GetIGMPv3_QueryProtocol@CProtoManager@@QAEPAXXZ
?GetIGMPv3_ReportProtocol@CProtoManager@@QAEPAXXZ
?GetIPv4Protocol@CProtoManager@@QAEPAXXZ
?GetIPv6Protocol@CProtoManager@@QAEPAXXZ
?GetIcmpProtocol@CProtoManager@@QAEPAXXZ
?GetIgmpProtocol@CProtoManager@@QAEPAXXZ
?GetIgmpv2Protocol@CProtoManager@@QAEPAXXZ
?GetL2tpv2Protocol@CProtoManager@@QAEPAXXZ
?GetLACPProtocol@CProtoManager@@QAEPAXXZ
?GetLastProto@CProtoManager@@QAEIXZ
?GetLastProto_point@CProtoManager@@QAEPAXXZ
?GetMLDv1_ListenProtocol@CProtoManager@@QAEPAXXZ
?GetMLDv1_QueryProtocol@CProtoManager@@QAEPAXXZ
?GetMLDv2_ReportProtocol@CProtoManager@@QAEPAXXZ
?GetMplsProtocol@CProtoManager@@QAEPAXXZ
?GetOSPFv2Protocol@CProtoManager@@QAEPAXXZ
?GetOSPFv2_DataBaseProtocol@CProtoManager@@QAEPAXXZ
?GetOSPFv2_HelloProtocol@CProtoManager@@QAEPAXXZ
?GetOSPFv2_UpdateProtocol@CProtoManager@@QAEPAXXZ
?GetPIMProtocol@CProtoManager@@QAEPAXXZ
?GetPPPProtocol@CProtoManager@@QAEPAXXZ
?GetPPPoEProtocol@CProtoManager@@QAEPAXXZ
?GetProtoByteCount@CProtoManager@@QAEII@Z
?GetProtoConfig@CProtoManager@@QBEPAXI@Z
?GetProtocol_ANCP@CProtoManager@@QAEPAXXZ
?GetProtocol_DHCPV6@CProtoManager@@QAEPAXXZ
?GetProtocol_DNS@CProtoManager@@QAEPAXXZ
?GetProtocol_ETH802_1X@CProtoManager@@QAEPAXXZ
?GetProtocol_FCOE@CProtoManager@@QAEPAXXZ
?GetProtocol_FTP@CProtoManager@@QAEPAXXZ
?GetProtocol_HTTP@CProtoManager@@QAEPAXXZ
?GetProtocol_IEEE802_1AH_HDR@CProtoManager@@QAEPAXXZ
?GetProtocol_IMAP@CProtoManager@@QAEPAXXZ
?GetProtocol_IPCP@CProtoManager@@QAEPAXXZ
?GetProtocol_IPCPv6@CProtoManager@@QAEPAXXZ
?GetProtocol_IPX_HEADER@CProtoManager@@QAEPAXXZ
?GetProtocol_ISIS@CProtoManager@@QAEPAXXZ
?GetProtocol_LDAP@CProtoManager@@QAEPAXXZ
?GetProtocol_LDP@CProtoManager@@QAEPAXXZ
?GetProtocol_LLC@CProtoManager@@QAEPAXXZ
?GetProtocol_MGCP@CProtoManager@@QAEPAXXZ
?GetProtocol_MPEG2@CProtoManager@@QAEPAXXZ
?GetProtocol_MPEG4@CProtoManager@@QAEPAXXZ
?GetProtocol_OPENFLOW@CProtoManager@@QAEPAXXZ
?GetProtocol_OVSDB@CProtoManager@@QAEPAXXZ
?GetProtocol_POP3@CProtoManager@@QAEPAXXZ
?GetProtocol_PPPoEv6@CProtoManager@@QAEPAXXZ
?GetProtocol_RADIUS@CProtoManager@@QAEPAXXZ
?GetProtocol_RTCP@CProtoManager@@QAEPAXXZ
?GetProtocol_RTSP@CProtoManager@@QAEPAXXZ
?GetProtocol_SMTP@CProtoManager@@QAEPAXXZ
?GetProtocol_STP@CProtoManager@@QAEPAXXZ
?GetProtocol_TELNET@CProtoManager@@QAEPAXXZ
?GetProtocol_TLS_HEADER@CProtoManager@@QAEPAXXZ
?GetProtocol_VXLAN@CProtoManager@@QAEPAXXZ
?GetRTPProtocol@CProtoManager@@QAEPAXXZ
?GetRarpProtocol@CProtoManager@@QAEPAXXZ
?GetRipngProtocol@CProtoManager@@QAEPAXXZ
?GetRipv2Protocol@CProtoManager@@QAEPAXXZ
?GetRuntimeClass@CProtoManager@@UBEPAUCRuntimeClass@@XZ
?GetTcpProtocol@CProtoManager@@QAEPAXXZ
?GetThisClass@CProtoManager@@SGPAUCRuntimeClass@@XZ
?GetUdpProtocol@CProtoManager@@QAEPAXXZ
?GetVlanProtocol@CProtoManager@@QAEPAXXZ
?GetnextProto@CProtoManager@@QAEII@Z
?InsertProto@CProtoManager@@QAE_NII@Z
?LoadArpProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadBFDProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadBFD_AuthProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadBFD_Auth_SimpleProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadBGPProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadCustomProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadCustomSipProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadDHCP_DiscoverProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadEthernetProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadGREProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadGTPv1Protocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadIGMPv3_QueryProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadIGMPv3_ReportProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadIPv4Protocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadIPv6Protocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadIcmpProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadIgmpProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadIgmpv2Protocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadL2tpv2Protocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadLACPProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadMLDv1_ListenProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadMLDv1_QueryProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadMLDv2_ReportProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadMplsProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadOSPFv2Protocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadOSPFv2_DataBaseProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadOSPFv2_HelloProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadOSPFv2_UpdateProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadPIMProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadPPPProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadPPPoEProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_ANCP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_DHCPV6@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_DNS@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_ETH802_1X@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_FCOE@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_FTP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_HTTP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_IEEE802_1AH_HDR@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_IMAP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_IPCP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_IPCPv6@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_IPX_HEADER@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_ISIS@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_LDAP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_LDP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_LLC@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_MGCP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_MPEG2@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_MPEG4@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_OPENFLOW@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_OVSDB@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_POP3@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_PPPoEv6@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_RADIUS@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_RTCP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_RTSP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_SMTP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_STP@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_TELNET@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_TLS_HEADER@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadProtocol_VXLAN@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadRTPProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadRarpProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadRipngProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadRipv2Protocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadTcpProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadUdpProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?LoadVlanProtocol@CProtoManager@@QAEPAXAAVCArchive@@I@Z
?Serialize@CProtoManager@@UAEXAAVCArchive@@@Z
?Serialize_RADIUS_AVP_STR@CProtoManager@@QAEXAAVCArchive@@AAU_RADIUS_AVP_STR_@@@Z
?Serialize_RADIUS_AVP_UINT@CProtoManager@@QAEXAAVCArchive@@AAU_RADIUS_AVP_UINT_@@@Z
?StoreArpProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreBFDProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreBFD_AuthProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreBFD_Auth_SimpleProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreBGPProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreCustomProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreCustomSipProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreDHCP_DiscoverProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreEthernetProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreGREProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreGTPv1Protocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreIGMPv3_QueryProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreIGMPv3_ReportProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreIPv4Protocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreIPv6Protocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreIcmpProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreIgmpProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreIgmpv2Protocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreL2tpv2Protocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreLACPProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreMLDv1_ListenProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreMLDv1_QueryProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreMLDv2_ReportProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreMplsProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreOSPFv2Protocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreOSPFv2_DataBaseProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreOSPFv2_HelloProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreOSPFv2_UpdateProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StorePIMProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StorePPPProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StorePPPoEProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_ANCP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_DHCPV6@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_DNS@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_ETH802_1X@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_FCOE@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_FTP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_HTTP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_IEEE802_1AH_HDR@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_IMAP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_IPCP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_IPCPv6@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_IPX_HEADER@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_ISIS@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_LDAP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_LDP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_LLC@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_MGCP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_MPEG2@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_MPEG4@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_OPENFLOW@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_OVSDB@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_POP3@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_PPPoEv6@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_RADIUS@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_RTCP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_RTSP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_SMTP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_STP@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_TELNET@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_TLS_HEADER@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreProtocol_VXLAN@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreRTPProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreRarpProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreRipngProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreRipv2Protocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreTcpProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreUdpProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?StoreVlanProtocol@CProtoManager@@QAEXAAVCArchive@@PAX@Z
?_GetBaseClass@CProtoManager@@KGPAUCRuntimeClass@@XZ
?classCProtoManager@CProtoManager@@2UCRuntimeClass@@A

Sections

.text
Size: 415KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5be23c2b6e2bc99621e52cb36ca0bd0

Headers

DLL Characteristics

File Characteristics

Imports

mfc120u

msvcr120

kernel32

msvcp120

Exports

Exports

Sections

.text Size: 415KB - Virtual size: 415KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 415KB - Virtual size: 415KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 11KB