4d385d6f2299de7acf74cb44f316b356c3d6f5c46df2ab7dd0db6051253d9670

Sharing

Copy URL Twitter E-mail

General

Target

4d385d6f2299de7acf74cb44f316b356c3d6f5c46df2ab7dd0db6051253d9670
Size

13.2MB
MD5

d90a4f78a21a2f6b9a0ad2509528604f
SHA1

c4dcd0edc8d4afa431e31183aae7fe6af607f006
SHA256

4d385d6f2299de7acf74cb44f316b356c3d6f5c46df2ab7dd0db6051253d9670
SHA512

49d5e71a77511cc8334125ab3690eb0293eb660c973eead20ce111dc38bcfe7e15c7362ad10342d5a1e71402293e63163641c6bf0addbfeb4b2c12df9bb9f731
SSDEEP

393216:f5EAaRnjUGp/TSEIiGgkKbKyerYo+yWPmVv/hE6xCAZxWJ:NaPIKGdrY2WPUJEC/Z0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d385d6f2299de7acf74cb44f316b356c3d6f5c46df2ab7dd0db6051253d9670

Files

4d385d6f2299de7acf74cb44f316b356c3d6f5c46df2ab7dd0db6051253d9670
.exe windows x86

c9384044de01d9c1bbacb5475acfb8fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatW
GetTimeFormatW
VirtualProtect
GetSystemInfo
VirtualQuery
GetDriveTypeW
GetModuleFileNameW
CreateMutexW
SetFileAttributesW
WriteProcessMemory
DeleteFileW
GetUserDefaultUILanguage
CreateToolhelp32Snapshot
FindNextFileW
Process32NextW
RemoveDirectoryW
SetCurrentDirectoryW
LockResource
Process32FirstW
FindClose
VirtualAllocEx
GetLastError
GetPrivateProfileIntW
WritePrivateProfileStringW
TerminateProcess
FormatMessageW
ReadProcessMemory
SizeofResource
CopyFileW
GetSystemDirectoryW
OpenProcess
CreateDirectoryExW
GetPrivateProfileStringW
WaitForSingleObject
MoveFileExW
LoadLibraryExW
CreateProcessW
LoadResource
FreeLibrary
FindResourceW
FreeResource
FindFirstFileW
GetDiskFreeSpaceExW
Sleep
GetProcAddress
GetVersionExW
GetModuleHandleW
GetCurrentProcess
GetFileInformationByHandle
GetLocalTime
FileTimeToSystemTime
GetTickCount
UnmapViewOfFile
GetFileSize
LocalFileTimeToFileTime
CloseHandle
GetCurrentDirectoryW
MultiByteToWideChar
CreateFileW
ReadFile
HeapFree
HeapAlloc
DecodePointer
EncodePointer
FindFirstFileExW
ExitThread
GetCurrentThreadId
CreateThread
FileTimeToLocalFileTime
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
ExitProcess
GetStdHandle
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapSize
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
LoadLibraryW
GetStringTypeW
HeapReAlloc
GetTimeZoneInformation
WriteConsoleW
SetStdHandle
FlushFileBuffers
IsProcessorFeaturePresent
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
lstrlenA
lstrlenW
DuplicateHandle
lstrcpynW
GetFileTime
LockFile
UnlockFile
GetFullPathNameW
GetVolumeInformationW
OutputDebugStringW
lstrcpyW
VirtualFree
VirtualAlloc
TerminateThread
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
DosDateTimeToFileTime
MulDiv
GetFileAttributesW
WideCharToMultiByte
WriteFile
SetFileTime
CreateDirectoryW
SystemTimeToFileTime
SetFilePointer

user32

SetCapture
ReleaseCapture
PostMessageW
GetClassNameW
GetWindowTextW
ActivateKeyboardLayout
GetParent
ShowWindow
IsZoomed
SetWindowRgn
GetMonitorInfoW
MonitorFromWindow
DefWindowProcW
LoadImageW
RegisterClassW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
SetPropW
GetPropW
SetForegroundWindow
UpdateWindow
MoveWindow
IntersectRect
SetWindowTextW
KillTimer
UpdateLayeredWindow
CopyRect
LoadBitmapW
FillRect
BeginPaint
SetRect
CharPrevW
MapVirtualKeyW
GetKeyNameTextW
InvalidateRgn
CreateAcceleratorTableW
SetParent
LoadCursorW
SetCursor
OffsetRect
CharUpperW
GetDesktopWindow
SetLayeredWindowAttributes
GetUpdateRect
SetFocus
GetFocus
SetTimer
DispatchMessageW
TranslateMessage
GetMessageW
PostQuitMessage
GetWindow
PtInRect
IsWindowVisible
SetWindowPos
SetWindowLongW
GetWindowLongW
GetCursorPos
ScreenToClient
CreateWindowExW
MapWindowPoints
InvalidateRect
IsRectEmpty
GetWindowTextLengthW
GetDC
ReleaseDC
FindWindowW
GetClientRect
ExitWindowsEx
IsWindow
FindWindowExW
SendMessageW
DestroyIcon
GetWindowThreadProcessId
EnableWindow
GetWindowRect
IsIconic
SystemParametersInfoW
DestroyWindow
EndPaint
GetKeyState
CharNextW
DrawTextW

gdi32

CreatePen
CreateSolidBrush
CreateDIBSection
CreateRoundRectRgn
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
CombineRgn
StretchBlt
SetBkMode
SetBkColor
GetTextMetricsW
SetWindowOrgEx
RestoreDC
BitBlt
SaveDC
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
SetDIBits
SetStretchBltMode
GetDIBits
CreateFontIndirectW
GetObjectW
DeleteObject
Rectangle
GetStockObject
SelectObject
SelectClipRgn
SetTextColor
EnumFontFamiliesExW
ExtTextOutW
MoveToEx
LineTo
RoundRect
GetCharABCWidthsW
GetTextExtentPoint32W
TextOutW
GetPixel
SetPixel
GetDIBColorTable
SetDIBColorTable
GetDeviceCaps

advapi32

RegCreateKeyExW
RegQueryValueExW
LookupPrivilegeValueW
RegDeleteValueW
AllocateAndInitializeSid
FreeSid
RegOpenKeyExW
CheckTokenMembership
AdjustTokenPrivileges
RegCloseKey
RegSetValueExW
OpenProcessToken

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHChangeNotify
ShellExecuteW
SHGetSpecialFolderPathW
SHBrowseForFolderW

ole32

OleLockRunning
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
OleUninitialize
CLSIDFromString
CLSIDFromProgID
OleInitialize

shlwapi

PathFileExistsW
PathIsSameRootW
PathIsDirectoryEmptyW

netapi32

NetWkstaGetInfo
NetApiBufferFree

winmm

timeGetTime

comctl32

ord17
_TrackMouseEvent

gdiplus

GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawImageI
GdipImageSelectActiveFrame
GdipLoadImageFromStream
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem

msimg32

TransparentBlt
AlphaBlend

Exports

Exports

??0?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@ABV01@@Z
??0?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@V?$allocator@VCStdString@DirectUICore@@@1@@Z
??0?$allocator@VCStdString@DirectUICore@@@std@@QAE@ABV01@@Z
??0?$allocator@VCStdString@DirectUICore@@@std@@QAE@XZ
??0?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@$$QAV01@@Z
??0?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@ABV01@@Z
??0?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@ABV?$allocator@VCStdString@DirectUICore@@@1@@Z
??0?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@I@Z
??0?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@IABVCStdString@DirectUICore@@@Z
??0?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@IABVCStdString@DirectUICore@@ABV?$allocator@VCStdString@DirectUICore@@@1@@Z
??0?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@XZ
??1?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@XZ
??1?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE@XZ
??4?$_Allocator_base@VCStdString@DirectUICore@@@std@@QAEAAU01@ABU01@@Z
??4?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEAAV01@ABV01@@Z
??4?$allocator@VCStdString@DirectUICore@@@std@@QAEAAV01@ABV01@@Z
??4?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEAAV01@ABV01@@Z
??A?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEAAVCStdString@DirectUICore@@I@Z
??A?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBEABVCStdString@DirectUICore@@I@Z
??_F?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXXZ
?_Assign_n@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IAEXIABVCStdString@DirectUICore@@@Z
?_Assign_rv@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEX$$QAV12@@Z
?_Buy@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IAE_NI@Z
?_Construct_n@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXIPBVCStdString@DirectUICore@@@Z
?_Destroy@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IAEXPAVCStdString@DirectUICore@@0@Z
?_Grow_to@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IBEII@Z
?_Insert_n@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IAEXV?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@IABVCStdString@DirectUICore@@@Z
?_Inside@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IBE_NPBVCStdString@DirectUICore@@@Z
?_Make_iter@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$_Vector_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@@Z
?_Orphan_range@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IBEXPAVCStdString@DirectUICore@@0@Z
?_Reserve@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IAEXI@Z
?_Tidy@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IAEXXZ
?_Ufill@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IAEPAVCStdString@DirectUICore@@PAV34@IPBV34@@Z
?_Xlen@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IBEXXZ
?_Xran@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@IBEXXZ
?address@?$allocator@VCStdString@DirectUICore@@@std@@QBEPAVCStdString@DirectUICore@@AAV34@@Z
?address@?$allocator@VCStdString@DirectUICore@@@std@@QBEPBVCStdString@DirectUICore@@ABV34@@Z
?allocate@?$allocator@VCStdString@DirectUICore@@@std@@QAEPAVCStdString@DirectUICore@@I@Z
?allocate@?$allocator@VCStdString@DirectUICore@@@std@@QAEPAVCStdString@DirectUICore@@IPBX@Z
?assign@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXIABVCStdString@DirectUICore@@@Z
?at@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEAAVCStdString@DirectUICore@@I@Z
?at@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBEABVCStdString@DirectUICore@@I@Z
?back@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEAAVCStdString@DirectUICore@@XZ
?back@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBEABVCStdString@DirectUICore@@XZ
?begin@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@XZ
?begin@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@XZ
?capacity@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBEIXZ
?cbegin@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@XZ
?cend@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@XZ
?clear@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXXZ
?construct@?$allocator@VCStdString@DirectUICore@@@std@@QAEXPAVCStdString@DirectUICore@@$$QAV34@@Z
?construct@?$allocator@VCStdString@DirectUICore@@@std@@QAEXPAVCStdString@DirectUICore@@ABV34@@Z
?crbegin@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$reverse_iterator@V?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@std@@@2@XZ
?crend@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$reverse_iterator@V?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@std@@@2@XZ
?data@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEPAVCStdString@DirectUICore@@XZ
?data@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBEPBVCStdString@DirectUICore@@XZ
?deallocate@?$allocator@VCStdString@DirectUICore@@@std@@QAEXPAVCStdString@DirectUICore@@I@Z
?destroy@?$allocator@VCStdString@DirectUICore@@@std@@QAEXPAVCStdString@DirectUICore@@@Z
?emplace_back@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEX$$QAVCStdString@DirectUICore@@@Z
?empty@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE_NXZ
?end@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@XZ
?end@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@XZ
?erase@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@0@Z
?erase@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@@Z
?front@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEAAVCStdString@DirectUICore@@XZ
?front@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBEABVCStdString@DirectUICore@@XZ
?get_allocator@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$allocator@VCStdString@DirectUICore@@@2@XZ
?insert@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@ABVCStdString@DirectUICore@@@Z
?insert@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXV?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@2@IABVCStdString@DirectUICore@@@Z
?max_size@?$allocator@VCStdString@DirectUICore@@@std@@QBEIXZ
?max_size@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBEIXZ
?pop_back@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXXZ
?push_back@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEX$$QAVCStdString@DirectUICore@@@Z
?push_back@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXABVCStdString@DirectUICore@@@Z
?rbegin@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE?AV?$reverse_iterator@V?$_Vector_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@std@@@2@XZ
?rbegin@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$reverse_iterator@V?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@std@@@2@XZ
?rend@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAE?AV?$reverse_iterator@V?$_Vector_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@std@@@2@XZ
?rend@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBE?AV?$reverse_iterator@V?$_Vector_const_iterator@V?$_Vector_val@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@@std@@@2@XZ
?reserve@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXI@Z
?resize@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXI@Z
?resize@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXIVCStdString@DirectUICore@@@Z
?shrink_to_fit@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXXZ
?size@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QBEIXZ
?swap@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEX$$QAV12@@Z
?swap@?$vector@VCStdString@DirectUICore@@V?$allocator@VCStdString@DirectUICore@@@std@@@std@@QAEXAAV12@@Z

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66.6MB - Virtual size: 66.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9384044de01d9c1bbacb5475acfb8fd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

netapi32

winmm

comctl32

gdiplus

msimg32

Exports

Exports

Sections

.text Size: 551KB - Virtual size: 550KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 14KB - Virtual size: 30KB

.rsrc Size: 66.6MB - Virtual size: 66.6MB

.reloc Size: 204KB - Virtual size: 204KB

.text
Size: 551KB - Virtual size: 550KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 14KB - Virtual size: 30KB

.rsrc
Size: 66.6MB - Virtual size: 66.6MB

.reloc
Size: 204KB - Virtual size: 204KB