5d8984d1a1e7c6a84b5782aa12be04f41de97255e8a14791b2cfcc4d9ecfd61e

Sharing

Copy URL Twitter E-mail

General

Target

5d8984d1a1e7c6a84b5782aa12be04f41de97255e8a14791b2cfcc4d9ecfd61e
Size

5.9MB
MD5

0d185cf8ac16ae46c6a6f9b639a280b6
SHA1

a70d7690ac5ea864cab360602dcb76d55b3e3386
SHA256

5d8984d1a1e7c6a84b5782aa12be04f41de97255e8a14791b2cfcc4d9ecfd61e
SHA512

f9c35165940a539607ab12d5ddb26fd05c5384094240656a432b8970b54224ad49a9cd77cedbb300f629b2e01cfb4cbfcf3e490f7da3390d222fb1e0fc46190f
SSDEEP

98304:OYfrU4QYX7KnfHoQeo87A8YniE5QHxuCg0EmjYsfLOorC:G4hX74HlexAfQRuCg0EmjYgr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d8984d1a1e7c6a84b5782aa12be04f41de97255e8a14791b2cfcc4d9ecfd61e

Files

5d8984d1a1e7c6a84b5782aa12be04f41de97255e8a14791b2cfcc4d9ecfd61e
.dll windows:5 windows x86

fca2489df24ff46a43d9121e626a8523

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
FlushFileBuffers
CloseHandle
FreeResource
SetFilePointer
WritePrivateProfileStringA
GetCurrentDirectoryA
SetEndOfFile
HeapSize
WriteConsoleW
GetFullPathNameW
GetCurrentDirectoryW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetConsoleCP
HeapReAlloc
GetACP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
SetStdHandle
SetFilePointerEx
GetFileAttributesExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LockResource
SetConsoleCtrlHandler
FindFirstFileA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetTimeZoneInformation
InterlockedFlushSList
RaiseException
RtlUnwind
GetVersionExW
DeleteFileW
CreateFileW
VerifyVersionInfoW
EnumResourceTypesA
PeekNamedPipe
CompareFileTime
MoveFileExW
GetSystemDirectoryW
SleepEx
VirtualFree
VirtualAlloc
FlushInstructionCache
SetThreadContext
GetThreadContext
SuspendThread
MapViewOfFileEx
CreateFileMappingW
LoadLibraryExW
VirtualQuery
VirtualProtect
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
FindNextFileW
FindFirstFileW
LoadLibraryW
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
GetFileType
ExitProcess
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
FindNextFileA
FindClose
InterlockedExchange
LocalAlloc
LocalFree
CreateEventA
GetStdHandle
GetConsoleTitleA
AllocConsole
GetSystemTime
SystemTimeToFileTime
GetTempFileNameA
GetTempPathA
GetCurrentProcessId
ExpandEnvironmentStringsA
GetCurrentThread
SetEnvironmentVariableA
GetEnvironmentVariableA
GetModuleHandleA
GetCurrentThreadId
FreeConsole
FormatMessageA
WaitForMultipleObjects
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
CreateProcessA
GetWindowsDirectoryA
CopyFileA
GlobalDeleteAtom
GlobalAddAtomA
GetPrivateProfileIntA
GetPrivateProfileStringA
QueryPerformanceCounter
QueryPerformanceFrequency
ResumeThread
EnterCriticalSection
WaitForSingleObject
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
CreateFileMappingA
GetTickCount
GetFileSize
MoveFileA
DeleteFileA
SetConsoleTextAttribute
SetConsoleScreenBufferSize
SetConsoleTitleA
EnumResourceNamesA
EnumResourceLanguagesA
GetLastError
FindResourceExA
LoadResource
SizeofResource
FindResourceA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
InitializeCriticalSection
CreateDirectoryA
SetEvent
InterlockedDecrement
InterlockedIncrement
SwitchToThread
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
GetStringTypeW
FormatMessageW
LoadLibraryExA
LoadLibraryA
GetFullPathNameA
ReadFile
GetVersionExA
MulDiv
GetFileAttributesA
SetLastError
lstrcpyA
VerSetConditionMask
GetModuleFileNameA
GetCurrentProcess
LeaveCriticalSection
Sleep
TryEnterCriticalSection
DeleteCriticalSection
GetDriveTypeW

user32

GetWindowLongA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
wsprintfA
GetWindowDC
GetDC
ReleaseDC
OffsetRect
GetSystemMetrics
GetSysColor
DestroyWindow
GetDlgItem
DialogBoxParamA
GetActiveWindow
IsZoomed
FillRect
GetWindowTextA
CopyRect
SetWindowLongA
GetWindow
SendMessageA
GetSystemMenu
SetWindowPos
SystemParametersInfoA
InvalidateRect
UpdateWindow
GetClientRect
ScreenToClient
SetCursor
LoadCursorA
EndDialog
BeginPaint
SystemParametersInfoW
IsRectEmpty
SetRectEmpty
SetRect
GetDesktopWindow
MapWindowPoints
GetMessagePos
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
GetClassNameA
FindWindowExA
GetWindowRect
GetPropA
IsWindow
DrawTextA
EndPaint
LockWindowUpdate
keybd_event
SendMessageW
GetCaretPos
GetGUIThreadInfo
RemoveMenu
GetSubMenu
GetMenuStringA
GetClassLongA
GetWindowTextLengthA
InsertMenuItemA
InsertMenuA
LoadMenuA
DialogBoxIndirectParamA
DrawTextExA
GetClassNameW
WindowFromDC
TabbedTextOutA
EnableScrollBar
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollInfo
SetScrollInfo
GetScrollPos
SetScrollPos
ScrollWindow
CopyImage
LoadImageA
CreateMDIWindowA
GetMessageExtraInfo
mouse_event
ClientToScreen
SetMenuItemInfoA
GetMenuItemInfoA
UnhookWindowsHookEx
SetWindowsHookExA
GetKeyState
GetWindowThreadProcessId
CallNextHookEx
LoadStringA
SetFocus
LoadBitmapA
MessageBoxA
DispatchMessageA
TranslateMessage
PeekMessageA
SetWindowTextA
EnableMenuItem
FindWindowA
UpdateLayeredWindow
BringWindowToTop
SetForegroundWindow
UnregisterClassA
RegisterClassExA
DestroyCursor
GetCapture
SetCapture
PtInRect
IntersectRect
GetAsyncKeyState
TrackPopupMenu
SetMenuItemBitmaps
DrawIconEx
DestroyMenu
TrackPopupMenuEx
GetMenuItemCount
CreatePopupMenu
CheckMenuItem
AppendMenuA
CreateMenu
GetCursorPos
GetFocus
IsWindowVisible
RemovePropA
SetPropA
DrawFocusRect
InflateRect
DrawTextW
IsWindowEnabled
CallWindowProcA
ReleaseCapture
TrackMouseEvent
PostMessageA
SetTimer
DefWindowProcA
KillTimer
CreateWindowExA
EnumChildWindows
GetParent
CreateDialogParamA
ShowWindow
MoveWindow
SetWindowRgn

gdi32

InvertRgn
Polyline
Polygon
PatBlt
SetTextAlign
ExcludeClipRect
SetDIBitsToDevice
GetDIBits
GetCurrentObject
GetPixel
GetTextColor
GetBkColor
ExtTextOutW
ExtTextOutA
SetDIBColorTable
GetTextMetricsA
CreateFontA
GetTextExtentPointA
TextOutA
StretchBlt
SetStretchBltMode
CreateDIBSection
GetClipBox
LineTo
MoveToEx
CreatePen
DeleteDC
BitBlt
RestoreDC
SaveDC
GetTextExtentPoint32A
CreateFontIndirectA
SelectClipRgn
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
GetObjectA
GetStockObject
SetBkColor
SetTextColor
SetBkMode
FrameRgn
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
DeleteObject
GdiFlush
ExtCreateRegion
GetClipRgn
GetGraphicsMode
IntersectClipRect
ExtSelectClipRgn
SetGraphicsMode
GetWorldTransform
SetWorldTransform
StretchDIBits
GetObjectW
GetTextMetricsW
SetMapMode
GetGlyphIndicesW
GetFontUnicodeRanges
GetOutlineTextMetricsW
GetGlyphOutlineW
GetFontData
GetCharWidth32W
CreateFontIndirectW
ModifyWorldTransform

comdlg32

ChooseColorA
GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueExA
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
RegSetValueA
RegCreateKeyA
RegQueryValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegEnumKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegFlushKey
RegCreateKeyExA
CryptSetHashParam
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptDestroyKey
RegEnumKeyExA

shell32

SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

psapi

EnumProcessModules
GetModuleFileNameExA

msimg32

AlphaBlend

crypt32

CertEnumCertificatesInStore
CertFindCertificateInStore
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFreeCertificateContext
CertOpenStore
CertCloseStore
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertOpenSystemStoreW

comctl32

_TrackMouseEvent
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
InitCommonControlsEx

gdiplus

GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreatePath
GdipDeletePath
GdipAddPathLineI
GdipAddPathArcI
GdipCreatePathGradientFromPath
GdipSetPenLineCap197819
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientFocusScales
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawLine
GdipDrawPath
GdipSetPathGradientCenterColor
GdipFillPath
GdipDrawString
GdipSaveGraphics
GdipRestoreGraphics
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFromLogfontA
GdipCreateFont
GdipDeleteFont
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteBrush
GdipCloneBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ws2_32

gethostname
sendto
recvfrom
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
select
__WSAFDIsSet
htonl
WSAIoctl
htons
getpeername
ntohl
socket
setsockopt
listen
connect
closesocket
bind
ioctlsocket
getsockname
getsockopt
ntohs
WSAStartup
WSACleanup
WSAGetLastError
getaddrinfo
freeaddrinfo
getnameinfo
recv
send
WSASetLastError
accept
shutdown

wldap32

ord301
ord219
ord133
ord147
ord79
ord142
ord167
ord127
ord27
ord26
ord117
ord41
ord208
ord216
ord14
ord46
ord145

Exports

Exports

DoNothing
Install
Install2
InstallCmd
InstallInfo
MsgBox
UnInstall
cairo_append_path
cairo_arc
cairo_arc_negative
cairo_clip
cairo_clip_extents
cairo_clip_preserve
cairo_close_path
cairo_copy_clip_rectangle_list
cairo_copy_page
cairo_copy_path
cairo_copy_path_flat
cairo_create
cairo_curve_to
cairo_debug_reset_static_data
cairo_destroy
cairo_device_acquire
cairo_device_destroy
cairo_device_finish
cairo_device_flush
cairo_device_get_reference_count
cairo_device_get_type
cairo_device_get_user_data
cairo_device_reference
cairo_device_release
cairo_device_set_user_data
cairo_device_status
cairo_device_to_user
cairo_device_to_user_distance
cairo_fill
cairo_fill_extents
cairo_fill_preserve
cairo_font_extents
cairo_font_face_destroy
cairo_font_face_get_reference_count
cairo_font_face_get_type
cairo_font_face_get_user_data
cairo_font_face_reference
cairo_font_face_set_user_data
cairo_font_face_status
cairo_font_options_copy
cairo_font_options_create
cairo_font_options_destroy
cairo_font_options_equal
cairo_font_options_get_antialias
cairo_font_options_get_hint_metrics
cairo_font_options_get_hint_style
cairo_font_options_get_subpixel_order
cairo_font_options_get_variations
cairo_font_options_hash
cairo_font_options_merge
cairo_font_options_set_antialias
cairo_font_options_set_hint_metrics
cairo_font_options_set_hint_style
cairo_font_options_set_subpixel_order
cairo_font_options_set_variations
cairo_font_options_status
cairo_format_stride_for_width
cairo_ft_font_face_create_for_ft_face
cairo_ft_font_face_get_synthesize
cairo_ft_font_face_set_synthesize
cairo_ft_font_face_unset_synthesize
cairo_ft_scaled_font_lock_face
cairo_ft_scaled_font_unlock_face
cairo_get_antialias
cairo_get_current_point
cairo_get_dash
cairo_get_dash_count
cairo_get_fill_rule
cairo_get_font_face
cairo_get_font_matrix
cairo_get_font_options
cairo_get_group_target
cairo_get_line_cap
cairo_get_line_join
cairo_get_line_width
cairo_get_matrix
cairo_get_miter_limit
cairo_get_operator
cairo_get_reference_count
cairo_get_scaled_font
cairo_get_source
cairo_get_target
cairo_get_tolerance
cairo_get_user_data
cairo_glyph_allocate
cairo_glyph_extents
cairo_glyph_free
cairo_glyph_path
cairo_has_current_point
cairo_identity_matrix
cairo_image_surface_create
cairo_image_surface_create_for_data
cairo_image_surface_create_from_png
cairo_image_surface_create_from_png_stream
cairo_image_surface_get_data
cairo_image_surface_get_format
cairo_image_surface_get_height
cairo_image_surface_get_stride
cairo_image_surface_get_width
cairo_in_clip
cairo_in_fill
cairo_in_stroke
cairo_line_to
cairo_mask
cairo_mask_surface
cairo_matrix_init
cairo_matrix_init_identity
cairo_matrix_init_rotate
cairo_matrix_init_scale
cairo_matrix_init_translate
cairo_matrix_invert
cairo_matrix_multiply
cairo_matrix_rotate
cairo_matrix_scale
cairo_matrix_transform_distance
cairo_matrix_transform_point
cairo_matrix_translate
cairo_mesh_pattern_begin_patch
cairo_mesh_pattern_curve_to
cairo_mesh_pattern_end_patch
cairo_mesh_pattern_get_control_point
cairo_mesh_pattern_get_corner_color_rgba
cairo_mesh_pattern_get_patch_count
cairo_mesh_pattern_get_path
cairo_mesh_pattern_line_to
cairo_mesh_pattern_move_to
cairo_mesh_pattern_set_control_point
cairo_mesh_pattern_set_corner_color_rgb
cairo_mesh_pattern_set_corner_color_rgba
cairo_move_to
cairo_new_path
cairo_new_sub_path
cairo_paint
cairo_paint_with_alpha
cairo_path_destroy
cairo_path_extents
cairo_pattern_add_color_stop_rgb
cairo_pattern_add_color_stop_rgba
cairo_pattern_create_for_surface
cairo_pattern_create_linear
cairo_pattern_create_mesh
cairo_pattern_create_radial
cairo_pattern_create_raster_source
cairo_pattern_create_rgb
cairo_pattern_create_rgba
cairo_pattern_destroy
cairo_pattern_get_color_stop_count
cairo_pattern_get_color_stop_rgba
cairo_pattern_get_extend
cairo_pattern_get_filter
cairo_pattern_get_linear_points
cairo_pattern_get_matrix
cairo_pattern_get_radial_circles
cairo_pattern_get_reference_count
cairo_pattern_get_rgba
cairo_pattern_get_surface
cairo_pattern_get_type
cairo_pattern_get_user_data
cairo_pattern_reference
cairo_pattern_set_extend
cairo_pattern_set_filter
cairo_pattern_set_matrix
cairo_pattern_set_user_data
cairo_pattern_status
cairo_pop_group
cairo_pop_group_to_source
cairo_push_group
cairo_push_group_with_content
cairo_raster_source_pattern_get_acquire
cairo_raster_source_pattern_get_callback_data
cairo_raster_source_pattern_get_copy
cairo_raster_source_pattern_get_finish
cairo_raster_source_pattern_get_snapshot
cairo_raster_source_pattern_set_acquire
cairo_raster_source_pattern_set_callback_data
cairo_raster_source_pattern_set_copy
cairo_raster_source_pattern_set_finish
cairo_raster_source_pattern_set_snapshot
cairo_recording_surface_create
cairo_recording_surface_get_extents
cairo_recording_surface_ink_extents
cairo_rectangle
cairo_rectangle_list_destroy
cairo_reference
cairo_region_contains_point
cairo_region_contains_rectangle
cairo_region_copy
cairo_region_create
cairo_region_create_rectangle
cairo_region_create_rectangles
cairo_region_destroy
cairo_region_equal
cairo_region_get_extents
cairo_region_get_rectangle
cairo_region_intersect
cairo_region_intersect_rectangle
cairo_region_is_empty
cairo_region_num_rectangles
cairo_region_reference
cairo_region_status
cairo_region_subtract
cairo_region_subtract_rectangle
cairo_region_translate
cairo_region_union
cairo_region_union_rectangle
cairo_region_xor
cairo_region_xor_rectangle
cairo_rel_curve_to
cairo_rel_line_to
cairo_rel_move_to
cairo_reset_clip
cairo_restore
cairo_rotate
cairo_save
cairo_scale
cairo_scaled_font_create
cairo_scaled_font_destroy
cairo_scaled_font_extents
cairo_scaled_font_get_ctm
cairo_scaled_font_get_font_face
cairo_scaled_font_get_font_matrix
cairo_scaled_font_get_font_options
cairo_scaled_font_get_reference_count
cairo_scaled_font_get_scale_matrix
cairo_scaled_font_get_type
cairo_scaled_font_get_user_data
cairo_scaled_font_glyph_extents
cairo_scaled_font_reference
cairo_scaled_font_set_user_data
cairo_scaled_font_status
cairo_scaled_font_text_extents
cairo_scaled_font_text_to_glyphs
cairo_select_font_face
cairo_set_antialias
cairo_set_dash
cairo_set_fill_rule
cairo_set_font_face
cairo_set_font_matrix
cairo_set_font_options
cairo_set_font_size
cairo_set_line_cap
cairo_set_line_join
cairo_set_line_width
cairo_set_matrix
cairo_set_miter_limit
cairo_set_operator
cairo_set_scaled_font
cairo_set_source
cairo_set_source_rgb
cairo_set_source_rgba
cairo_set_source_surface
cairo_set_tolerance
cairo_set_user_data
cairo_show_glyphs
cairo_show_page
cairo_show_text
cairo_show_text_glyphs
cairo_status
cairo_status_to_string
cairo_stroke
cairo_stroke_extents
cairo_stroke_preserve
cairo_surface_copy_page
cairo_surface_create_similar
cairo_surface_create_similar_image
cairo_surface_destroy
cairo_surface_finish
cairo_surface_flush
cairo_surface_get_content
cairo_surface_get_device
cairo_surface_get_device_offset
cairo_surface_get_device_scale
cairo_surface_get_fallback_resolution
cairo_surface_get_font_options
cairo_surface_get_mime_data
cairo_surface_get_reference_count
cairo_surface_get_type
cairo_surface_get_user_data
cairo_surface_has_show_text_glyphs
cairo_surface_map_to_image
cairo_surface_mark_dirty
cairo_surface_mark_dirty_rectangle
cairo_surface_reference
cairo_surface_set_device_offset
cairo_surface_set_device_scale
cairo_surface_set_fallback_resolution
cairo_surface_set_mime_data
cairo_surface_set_user_data
cairo_surface_show_page
cairo_surface_status
cairo_surface_supports_mime_type
cairo_surface_unmap_image
cairo_surface_write_to_png
cairo_surface_write_to_png_stream
cairo_tag_begin
cairo_tag_end
cairo_text_cluster_allocate
cairo_text_cluster_free
cairo_text_extents
cairo_text_path
cairo_toy_font_face_create
cairo_toy_font_face_get_family
cairo_toy_font_face_get_slant
cairo_toy_font_face_get_weight
cairo_transform
cairo_translate
cairo_user_font_face_create
cairo_user_font_face_get_init_func
cairo_user_font_face_get_render_glyph_func
cairo_user_font_face_get_text_to_glyphs_func
cairo_user_font_face_get_unicode_to_glyph_func
cairo_user_font_face_set_init_func
cairo_user_font_face_set_render_glyph_func
cairo_user_font_face_set_text_to_glyphs_func
cairo_user_font_face_set_unicode_to_glyph_func
cairo_user_to_device
cairo_user_to_device_distance
cairo_win32_font_face_create_for_hfont
cairo_win32_font_face_create_for_logfontw
cairo_win32_font_face_create_for_logfontw_hfont
cairo_win32_scaled_font_done_font
cairo_win32_scaled_font_get_device_to_logical
cairo_win32_scaled_font_get_logical_to_device
cairo_win32_scaled_font_get_metrics_factor
cairo_win32_scaled_font_select_font
cairo_win32_surface_create
cairo_win32_surface_create_with_ddb
cairo_win32_surface_create_with_dib
cairo_win32_surface_create_with_format
cairo_win32_surface_get_dc
cairo_win32_surface_get_image

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 957KB - Virtual size: 956KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fca2489df24ff46a43d9121e626a8523

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

psapi

msimg32

crypt32

comctl32

gdiplus

version

ws2_32

wldap32

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 957KB - Virtual size: 956KB

.data Size: 19KB - Virtual size: 185KB

.detourc Size: 4KB - Virtual size: 4KB

.detourd Size: 512B - Virtual size: 12B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 134KB - Virtual size: 133KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 957KB - Virtual size: 956KB

.data
Size: 19KB - Virtual size: 185KB

.detourc
Size: 4KB - Virtual size: 4KB

.detourd
Size: 512B - Virtual size: 12B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 134KB - Virtual size: 133KB