d1b42bb514ccfd27e91bffa2c2517aa71acb801740b1b46867b8f797172fa2bd

Sharing

Copy URL Twitter E-mail

General

Target

d1b42bb514ccfd27e91bffa2c2517aa71acb801740b1b46867b8f797172fa2bd
Size

1.1MB
MD5

b80c8708a5b9a35b3659b9bf6605e587
SHA1

950fbeb2a1fa06ee0bb6e93b5d656ccef1820d18
SHA256

d1b42bb514ccfd27e91bffa2c2517aa71acb801740b1b46867b8f797172fa2bd
SHA512

60698adc7280642ce20a88583942da844113131e4f03474e7905cf7015e56921d8c8bbdbf21a2fa4b1cc4926de2b3c46ea12b02ceb9d54072085072fe43cfbb2
SSDEEP

24576:Xbq9KLnqB3lHmT0kxATH1LrqLRHd3lohblm07wGYwx/hTLGeGBTC4P:AKLnqBo0kxUHaR9Voh5zDTLGFVCw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1b42bb514ccfd27e91bffa2c2517aa71acb801740b1b46867b8f797172fa2bd

Files

d1b42bb514ccfd27e91bffa2c2517aa71acb801740b1b46867b8f797172fa2bd
.exe windows:5 windows x86

bf89a6bb0adef9e120cbc121d35512c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsDirectoryW

kernel32

GetLastError
WaitForSingleObject
WaitForMultipleObjects
CloseHandle
CreateEventW
LoadLibraryW
GetModuleFileNameW
GetCommandLineW
OutputDebugStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
SetDllDirectoryW
MultiByteToWideChar
WideCharToMultiByte
GetFileInformationByHandle
DeviceIoControl
SetEndOfFile
SetFilePointerEx
FindClose
GetFileTime
SetFileTime
SetCurrentDirectoryW
GetCurrentDirectoryW
GetDiskFreeSpaceExW
CreateDirectoryW
CreateDirectoryExW
RemoveDirectoryW
CreateFileW
SetFileAttributesW
GetFileAttributesW
GetFileAttributesExW
DeleteFileW
FindFirstFileW
FindNextFileW
CopyFileW
MoveFileExW
GetLongPathNameW
TerminateThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThreadId
WriteFile
FlushFileBuffers
GetSystemTime
SystemTimeToFileTime
MapViewOfFile
UnmapViewOfFile
CreateSemaphoreW
CreateFileMappingW
OutputDebugStringA
GetFullPathNameW
VirtualQuery
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
InitializeCriticalSection
Sleep
SetFilePointer
GetSystemTimeAsFileTime
FileTimeToSystemTime
LoadLibraryA
GetModuleFileNameA
GetModuleHandleW
GetSystemDirectoryA
GetSystemDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryW
MoveFileW
GetFileSizeEx
CreateThread
SetEvent
ResetEvent
GetTickCount
CreateEventA
WriteConsoleW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetProcAddress
OpenProcess
FreeLibrary
HeapSize
ReleaseSemaphore
FormatMessageW
HeapReAlloc
SetConsoleCtrlHandler
GetStringTypeW
RtlCaptureStackBackTrace
QueryPerformanceCounter
QueryPerformanceFrequency
DuplicateHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
GetExitCodeThread
GetNativeSystemInfo
FindFirstFileExW
GetTempPathW
AreFileApisANSI
CreateHardLinkW
TryEnterCriticalSection
EncodePointer
DecodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
SetProcessAffinityMask
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
RaiseException
RtlUnwind
ExitThread
ResumeThread
GetModuleHandleExW
ReadFile
GetDriveTypeW
GetFullPathNameA
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCurrentDirectoryA
GetCurrentDirectoryA
GetStdHandle
ExitProcess
GetCommandLineA
GetACP
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetConsoleCP
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation

user32

ShowWindow
RegisterClassExW
DefWindowProcW
SendMessageW
CreateWindowExW
IsWindow
GetClassInfoExW

gdi32

GetStockObject

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

psapi

GetModuleFileNameExW

Exports

Exports

??0BaseTimer@base@@QAE@XZ
??0ILogger@base@@QAE@ABV01@@Z
??0ILogger@base@@QAE@XZ
??0directory_entry@filesystem@ierd_tgp@@QAE@ABV012@@Z
??0directory_entry@filesystem@ierd_tgp@@QAE@ABVpath@12@@Z
??0directory_entry@filesystem@ierd_tgp@@QAE@XZ
??0directory_iterator@filesystem@ierd_tgp@@QAE@ABV012@@Z
??0directory_iterator@filesystem@ierd_tgp@@QAE@ABVpath@12@@Z
??0directory_iterator@filesystem@ierd_tgp@@QAE@ABVpath@12@AAVerror_code@std@@@Z
??0directory_iterator@filesystem@ierd_tgp@@QAE@XZ
??0file_status@filesystem@ierd_tgp@@QAE@$$QAV012@@Z
??0file_status@filesystem@ierd_tgp@@QAE@ABV012@@Z
??0file_status@filesystem@ierd_tgp@@QAE@W4file_type@12@@Z
??0file_status@filesystem@ierd_tgp@@QAE@W4file_type@12@W4perms@12@@Z
??0file_status@filesystem@ierd_tgp@@QAE@XZ
??0iterator@path@filesystem@ierd_tgp@@QAE@$$QAV0123@@Z
??0iterator@path@filesystem@ierd_tgp@@QAE@ABV0123@@Z
??0iterator@path@filesystem@ierd_tgp@@QAE@XZ
??0path@filesystem@ierd_tgp@@QAE@$$QAV012@@Z
??0path@filesystem@ierd_tgp@@QAE@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0path@filesystem@ierd_tgp@@QAE@ABV012@@Z
??0path@filesystem@ierd_tgp@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0path@filesystem@ierd_tgp@@QAE@PA_W@Z
??0path@filesystem@ierd_tgp@@QAE@PB_W@Z
??0path@filesystem@ierd_tgp@@QAE@XZ
??0recursive_directory_iterator@filesystem@ierd_tgp@@QAE@$$QAV012@@Z
??0recursive_directory_iterator@filesystem@ierd_tgp@@QAE@ABV012@@Z
??0recursive_directory_iterator@filesystem@ierd_tgp@@QAE@ABVpath@12@@Z
??0recursive_directory_iterator@filesystem@ierd_tgp@@QAE@ABVpath@12@AAVerror_code@std@@@Z
??0recursive_directory_iterator@filesystem@ierd_tgp@@QAE@ABVpath@12@W4symlink_option@12@@Z
??0recursive_directory_iterator@filesystem@ierd_tgp@@QAE@ABVpath@12@W4symlink_option@12@AAVerror_code@std@@@Z
??0recursive_directory_iterator@filesystem@ierd_tgp@@QAE@XZ
??1BaseTimer@base@@QAE@XZ
??1ILogger@base@@UAE@XZ
??1directory_entry@filesystem@ierd_tgp@@QAE@XZ
??1directory_iterator@filesystem@ierd_tgp@@QAE@XZ
??1iterator@path@filesystem@ierd_tgp@@QAE@XZ
??1path@filesystem@ierd_tgp@@QAE@XZ
??1recursive_directory_iterator@filesystem@ierd_tgp@@QAE@XZ
??4BaseTimer@base@@QAEAAV01@ABV01@@Z
??4ILogger@base@@QAEAAV01@ABV01@@Z
??4directory_entry@filesystem@ierd_tgp@@QAEAAV012@ABV012@@Z
??4directory_iterator@filesystem@ierd_tgp@@QAEAAV012@ABV012@@Z
??4file_status@filesystem@ierd_tgp@@QAEAAV012@$$QAV012@@Z
??4file_status@filesystem@ierd_tgp@@QAEAAV012@ABV012@@Z
??4iterator@path@filesystem@ierd_tgp@@QAEAAV0123@$$QAV0123@@Z
??4iterator@path@filesystem@ierd_tgp@@QAEAAV0123@ABV0123@@Z
??4path@filesystem@ierd_tgp@@QAEAAV012@$$QAV012@@Z
??4path@filesystem@ierd_tgp@@QAEAAV012@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??4path@filesystem@ierd_tgp@@QAEAAV012@ABV012@@Z
??4path@filesystem@ierd_tgp@@QAEAAV012@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??4path@filesystem@ierd_tgp@@QAEAAV012@PA_W@Z
??4path@filesystem@ierd_tgp@@QAEAAV012@PB_W@Z
??4recursive_directory_iterator@filesystem@ierd_tgp@@QAEAAV012@$$QAV012@@Z
??4recursive_directory_iterator@filesystem@ierd_tgp@@QAEAAV012@ABV012@@Z
??8directory_entry@filesystem@ierd_tgp@@QBE_NABV012@@Z
??8directory_iterator@filesystem@ierd_tgp@@QAE_NABV012@@Z
??8file_status@filesystem@ierd_tgp@@QBE_NABV012@@Z
??8recursive_directory_iterator@filesystem@ierd_tgp@@QAE_NABV012@@Z
??9directory_entry@filesystem@ierd_tgp@@QBE_NABV012@@Z
??9directory_iterator@filesystem@ierd_tgp@@QAE_NABV012@@Z
??9file_status@filesystem@ierd_tgp@@QBE_NABV012@@Z
??9recursive_directory_iterator@filesystem@ierd_tgp@@QAE_NABV012@@Z
??Bdirectory_entry@filesystem@ierd_tgp@@QBEABVpath@12@XZ
??Cdirectory_iterator@filesystem@ierd_tgp@@QBEPBVdirectory_entry@12@XZ
??Citerator@path@filesystem@ierd_tgp@@QBEPBV123@XZ
??Crecursive_directory_iterator@filesystem@ierd_tgp@@QBEPBVdirectory_entry@12@XZ
??Ddirectory_iterator@filesystem@ierd_tgp@@QBEABVdirectory_entry@12@XZ
??Diterator@path@filesystem@ierd_tgp@@QBEABV123@XZ
??Drecursive_directory_iterator@filesystem@ierd_tgp@@QBEABVdirectory_entry@12@XZ
??Edirectory_iterator@filesystem@ierd_tgp@@QAEAAV012@XZ
??Eiterator@path@filesystem@ierd_tgp@@QAEAAV0123@XZ
??Erecursive_directory_iterator@filesystem@ierd_tgp@@QAEAAV012@XZ
??Fiterator@path@filesystem@ierd_tgp@@QAEAAV0123@XZ
??Ypath@filesystem@ierd_tgp@@QAEAAV012@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??Ypath@filesystem@ierd_tgp@@QAEAAV012@ABV012@@Z
??Ypath@filesystem@ierd_tgp@@QAEAAV012@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??Ypath@filesystem@ierd_tgp@@QAEAAV012@PA_W@Z
??Ypath@filesystem@ierd_tgp@@QAEAAV012@PB_W@Z
??Ypath@filesystem@ierd_tgp@@QAEAAV012@_W@Z
??_0path@filesystem@ierd_tgp@@QAEAAV012@ABV012@@Z
??_0path@filesystem@ierd_tgp@@QAEAAV012@PB_W@Z
??_7ILogger@base@@6B@
?CreateUserLogger@base@@YAPAVILogger@1@XZ
?DeleteExpiredFiles@common@ierd_tgp@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00I_K@Z
?EndsWith@common@ierd_tgp@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N@Z
?EndsWith@common@ierd_tgp@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0_N@Z
?GenerateRandomData@common@ierd_tgp@@YA_NPAEI@Z
?GetFileBuffer@common@ierd_tgp@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?GetFileLength@common@ierd_tgp@@YA_KABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetFolderSize@common@ierd_tgp@@YA_KABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetInterval@BaseTimer@base@@QAEIXZ
?GetStatus@BaseTimer@base@@QAE?AW4TimerStatus@2@XZ
?MainThreadTaskUpdate@common@ierd_tgp@@YAXXZ
?ParseTime@common@ierd_tgp@@YA_JABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?PostMainThreadTask@common@ierd_tgp@@YAXV?$function@$$A6AXXZ@std@@V?$shared_ptr@X@4@@Z
?PostMainThreadTaskv2@common@ierd_tgp@@YA_NV?$function@$$A6AXXZ@std@@V?$shared_ptr@X@4@@Z
?PushAsyncTask@common@ierd_tgp@@YAXV?$function@$$A6AXXZ@std@@K@Z
?PushUniqueThreadAsyncTask@common@ierd_tgp@@YAIV?$function@$$A6AXXZ@std@@IK@Z
?ReleaseUserLogger@base@@YAXPAVILogger@1@@Z
?SetInterval@BaseTimer@base@@QAEXI@Z
?StartInterval@BaseTimer@base@@QAE_NIV?$function@$$A6AXXZ@std@@I@Z
?StartTimeout@BaseTimer@base@@QAE_NIV?$function@$$A6AXXZ@std@@@Z
?StartTimerTaskOnce@base@@YA_NIV?$function@$$A6AXXZ@std@@@Z
?StartWith@common@ierd_tgp@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N@Z
?StartWith@common@ierd_tgp@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0_N@Z
?Stop@BaseTimer@base@@QAEX_N@Z
?StopAndJoinAsyncTaskMgr@common@ierd_tgp@@YAXXZ
?absolute@filesystem@ierd_tgp@@YA?AVpath@12@ABV312@0@Z
?append_separator_if_needed@path@filesystem@ierd_tgp@@AAEIXZ
?assign@directory_entry@filesystem@ierd_tgp@@QAEXABVpath@23@Vfile_status@23@1@Z
?begin@path@filesystem@ierd_tgp@@QBE?AViterator@123@XZ
?c_str@path@filesystem@ierd_tgp@@QBEPB_WXZ
?canonical@filesystem@ierd_tgp@@YA?AVpath@12@ABV312@0@Z
?canonical@filesystem@ierd_tgp@@YA?AVpath@12@ABV312@0AAVerror_code@std@@@Z
?canonical@filesystem@ierd_tgp@@YA?AVpath@12@ABV312@AAVerror_code@std@@@Z
?clear@path@filesystem@ierd_tgp@@QAEXXZ
?colon@path@filesystem@ierd_tgp@@2_WB
?compare@path@filesystem@ierd_tgp@@QBEHABV123@@Z
?compare@path@filesystem@ierd_tgp@@QBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?compare@path@filesystem@ierd_tgp@@QBEHPB_W@Z
?copy@filesystem@ierd_tgp@@YAXABVpath@12@0@Z
?copy@filesystem@ierd_tgp@@YAXABVpath@12@0AAVerror_code@std@@@Z
?copy_directory@filesystem@ierd_tgp@@YAXABVpath@12@0@Z
?copy_directory@filesystem@ierd_tgp@@YAXABVpath@12@0AAVerror_code@std@@@Z
?copy_file@filesystem@ierd_tgp@@YAXABVpath@12@0@Z
?copy_file@filesystem@ierd_tgp@@YAXABVpath@12@0AAVerror_code@std@@@Z
?copy_file@filesystem@ierd_tgp@@YAXABVpath@12@0W4copy_option@12@@Z
?copy_file@filesystem@ierd_tgp@@YAXABVpath@12@0W4copy_option@12@AAVerror_code@std@@@Z
?create_directories@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?create_directories@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?create_directory@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?create_directory@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?current_path@filesystem@ierd_tgp@@YA?AVpath@12@AAVerror_code@std@@@Z
?current_path@filesystem@ierd_tgp@@YA?AVpath@12@XZ
?current_path@filesystem@ierd_tgp@@YAXABVpath@12@@Z
?current_path@filesystem@ierd_tgp@@YAXABVpath@12@AAVerror_code@std@@@Z
?depth@recursive_directory_iterator@filesystem@ierd_tgp@@QBEHXZ
?dir_itr_close@detail@filesystem@ierd_tgp@@YAXAAPAX@Z
?directory_iterator_construct@detail@filesystem@ierd_tgp@@YAXAAVdirectory_iterator@23@ABVpath@23@PAVerror_code@std@@@Z
?directory_iterator_increment@detail@filesystem@ierd_tgp@@YAXAAVdirectory_iterator@23@PAVerror_code@std@@@Z
?disable_recursion_pending@recursive_directory_iterator@filesystem@ierd_tgp@@QAEX_N@Z
?dot@path@filesystem@ierd_tgp@@2_WB
?empty@path@filesystem@ierd_tgp@@QBE_NXZ
?end@path@filesystem@ierd_tgp@@QBE?AViterator@123@XZ
?equal@directory_iterator@filesystem@ierd_tgp@@QBE_NABV123@@Z
?equal@iterator@path@filesystem@ierd_tgp@@QBE_NABV1234@@Z
?equal@recursive_directory_iterator@filesystem@ierd_tgp@@ABE_NABV123@@Z
?equivalent@filesystem@ierd_tgp@@YA_NABVpath@12@0@Z
?equivalent@filesystem@ierd_tgp@@YA_NABVpath@12@0AAVerror_code@std@@@Z
?exists@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?exists@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?extension@path@filesystem@ierd_tgp@@QBE?AV123@XZ
?file_size@filesystem@ierd_tgp@@YA_KABVpath@12@@Z
?file_size@filesystem@ierd_tgp@@YA_KABVpath@12@AAVerror_code@std@@@Z
?filename@path@filesystem@ierd_tgp@@QBE?AV123@XZ
?filename_is_dot@path@filesystem@ierd_tgp@@QBE_NXZ
?filename_is_dot_dot@path@filesystem@ierd_tgp@@QBE_NXZ
?genric_string@path@filesystem@ierd_tgp@@QBE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?genric_wstring@path@filesystem@ierd_tgp@@QBE?BV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?get_log_instance@base@@YAPAVILogger@1@XZ
?has_extension@path@filesystem@ierd_tgp@@QBE_NXZ
?has_filename@path@filesystem@ierd_tgp@@QBE_NXZ
?has_parent_path@path@filesystem@ierd_tgp@@QBE_NXZ
?has_root_directory@path@filesystem@ierd_tgp@@QBE_NXZ
?has_root_name@path@filesystem@ierd_tgp@@QBE_NXZ
?has_root_path@path@filesystem@ierd_tgp@@QBE_NXZ
?has_stem@path@filesystem@ierd_tgp@@QBE_NXZ
?increment@recursive_directory_iterator@filesystem@ierd_tgp@@AAEXXZ
?increment@recursive_directory_iterator@filesystem@ierd_tgp@@QAEAAV123@AAVerror_code@std@@@Z
?initial_path@filesystem@ierd_tgp@@YA?AVpath@12@AAVerror_code@std@@@Z
?initial_path@filesystem@ierd_tgp@@YA?AVpath@12@XZ
?is_absolute@path@filesystem@ierd_tgp@@QBE_NXZ
?is_directory@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?is_directory@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?is_empty@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?is_empty@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?is_other@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?is_other@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?is_regular_file@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?is_regular_file@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?is_relative@path@filesystem@ierd_tgp@@QBE_NXZ
?is_symlink@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?is_symlink@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?last_write_time@filesystem@ierd_tgp@@YAXABVpath@12@_J@Z
?last_write_time@filesystem@ierd_tgp@@YAXABVpath@12@_JAAVerror_code@std@@@Z
?last_write_time@filesystem@ierd_tgp@@YA_JABVpath@12@@Z
?last_write_time@filesystem@ierd_tgp@@YA_JABVpath@12@AAVerror_code@std@@@Z
?level@recursive_directory_iterator@filesystem@ierd_tgp@@QBEHXZ
?m_get_status@directory_entry@filesystem@ierd_tgp@@ABE?AVfile_status@23@PAVerror_code@std@@@Z
?m_get_symlink_status@directory_entry@filesystem@ierd_tgp@@ABE?AVfile_status@23@PAVerror_code@std@@@Z
?native@path@filesystem@ierd_tgp@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?no_push@recursive_directory_iterator@filesystem@ierd_tgp@@QAEX_N@Z
?no_push_pending@recursive_directory_iterator@filesystem@ierd_tgp@@QBE_NXZ
?parent_path@path@filesystem@ierd_tgp@@QBE?AV123@XZ
?parent_path_end@path@filesystem@ierd_tgp@@ABEIXZ
?path@directory_entry@filesystem@ierd_tgp@@QBE?BV023@XZ
?path_iterator_decrement@iterator@path@filesystem@ierd_tgp@@AAEXAAV1234@@Z
?path_iterator_increment@iterator@path@filesystem@ierd_tgp@@AAEXAAV1234@@Z
?permissions@file_status@filesystem@ierd_tgp@@QAEXW4perms@23@@Z
?permissions@file_status@filesystem@ierd_tgp@@QBE?AW4perms@23@XZ
?pop@recursive_directory_iterator@filesystem@ierd_tgp@@QAEXXZ
?preferred_separator@path@filesystem@ierd_tgp@@2_WB
?recursion_pending@recursive_directory_iterator@filesystem@ierd_tgp@@QBE_NXZ
?relative_path@path@filesystem@ierd_tgp@@QBE?AV123@XZ
?remove@filesystem@ierd_tgp@@YA_NABVpath@12@@Z
?remove@filesystem@ierd_tgp@@YA_NABVpath@12@AAVerror_code@std@@@Z
?remove_all@filesystem@ierd_tgp@@YA_KABVpath@12@@Z
?remove_all@filesystem@ierd_tgp@@YA_KABVpath@12@AAVerror_code@std@@@Z
?remove_filename@path@filesystem@ierd_tgp@@QAEAAV123@XZ
?remove_trailing_separator@path@filesystem@ierd_tgp@@QAEAAV123@XZ
?rename@filesystem@ierd_tgp@@YAXABVpath@12@0@Z
?rename@filesystem@ierd_tgp@@YAXABVpath@12@0AAVerror_code@std@@@Z
?replace_extension@path@filesystem@ierd_tgp@@QAEAAV123@ABV123@@Z
?replace_filename@directory_entry@filesystem@ierd_tgp@@QAEXABVpath@23@Vfile_status@23@1@Z
?root_directory@path@filesystem@ierd_tgp@@QBE?AV123@XZ
?root_name@path@filesystem@ierd_tgp@@QBE?AV123@XZ
?root_path@path@filesystem@ierd_tgp@@QBE?AV123@XZ
?separator@path@filesystem@ierd_tgp@@2_WB
?size@path@filesystem@ierd_tgp@@QBEIXZ
?status@directory_entry@filesystem@ierd_tgp@@QBE?AVfile_status@23@AAVerror_code@std@@@Z
?status@directory_entry@filesystem@ierd_tgp@@QBE?AVfile_status@23@XZ
?status@filesystem@ierd_tgp@@YA?AVfile_status@12@ABVpath@12@@Z
?status@filesystem@ierd_tgp@@YA?AVfile_status@12@ABVpath@12@AAVerror_code@std@@@Z
?status@recursive_directory_iterator@filesystem@ierd_tgp@@QBE?AVfile_status@23@XZ
?stem@path@filesystem@ierd_tgp@@QBE?AV123@XZ
?string8@path@filesystem@ierd_tgp@@QBE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?string@path@filesystem@ierd_tgp@@QBE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?swap@path@filesystem@ierd_tgp@@QAEXAAV123@@Z
?symlink_status@directory_entry@filesystem@ierd_tgp@@QBE?AVfile_status@23@AAVerror_code@std@@@Z
?symlink_status@directory_entry@filesystem@ierd_tgp@@QBE?AVfile_status@23@XZ
?symlink_status@filesystem@ierd_tgp@@YA?AVfile_status@12@ABVpath@12@@Z
?symlink_status@filesystem@ierd_tgp@@YA?AVfile_status@12@ABVpath@12@AAVerror_code@std@@@Z
?type@file_status@filesystem@ierd_tgp@@QAEXW4file_type@23@@Z
?type@file_status@filesystem@ierd_tgp@@QBE?AW4file_type@23@XZ
?wstring@path@filesystem@ierd_tgp@@QBE?BV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

Sections

.text
Size: 787KB - Virtual size: 787KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bf89a6bb0adef9e120cbc121d35512c2

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

psapi

Exports

Exports

Sections

.text Size: 787KB - Virtual size: 787KB

.rdata Size: 195KB - Virtual size: 194KB

.data Size: 15KB - Virtual size: 31KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 116KB - Virtual size: 120KB

.text
Size: 787KB - Virtual size: 787KB

.rdata
Size: 195KB - Virtual size: 194KB

.data
Size: 15KB - Virtual size: 31KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 116KB - Virtual size: 120KB