d9ede2045ac6f4693afa6f98d1e451991e9eb56fc83cf17a686409fde4fc8012

Sharing

Copy URL Twitter E-mail

General

Target

d9ede2045ac6f4693afa6f98d1e451991e9eb56fc83cf17a686409fde4fc8012
Size

13.5MB
MD5

e4576084614fa4faef9a3421a594cc10
SHA1

cd129867edebeb00868831328e60c61af8547c36
SHA256

d9ede2045ac6f4693afa6f98d1e451991e9eb56fc83cf17a686409fde4fc8012
SHA512

76c1dda58d17aebe088b0d7c90ed1b11b994125e73d6b5cad16c0ecaa8b6412ec4f2eaeb68479f4a6e6946fd2ed501ecdaa0592cede9b8dbd0733ccdc824fb45
SSDEEP

98304:Ul+416fgu8gvBUstWuExV3QTtJoFNfCfQFDtG:UlFYUV3QpJoDfCIdM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9ede2045ac6f4693afa6f98d1e451991e9eb56fc83cf17a686409fde4fc8012

Files

d9ede2045ac6f4693afa6f98d1e451991e9eb56fc83cf17a686409fde4fc8012
.exe windows:6 windows x64 arch:x64

fb2bf3520724955aed9f77cb1e5ff121

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

VerQueryValueW

crypt32

CertFreeCertificateChainEngine
CertGetCertificateChain
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertCreateCertificateChainEngine
CertFreeCertificateChain
CryptDecodeObjectEx
CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CryptStringToBinaryA
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
PFXImportCertStore
CertAddCertificateContextToStore

wldap32

ord143
ord217
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord46
ord60
ord211

normaliz

IdnToAscii

kernel32

WriteFile
MultiByteToWideChar
FormatMessageW
GetModuleHandleExW
QueryPerformanceCounter
GetSystemTimeAsFileTime
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
FindFirstFileW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
LoadLibraryA
MoveFileExW
GetFileAttributesExW
SetFileAttributesW
CreateFileW
GetTickCount
LocalFree
GetFileSizeEx
GetFileTime
ReadFile
SetFilePointerEx
GetSystemTime
SystemTimeToFileTime
InitializeCriticalSection
WaitForSingleObject
CreateThread
GetFullPathNameA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
PeekNamedPipe
WaitForMultipleObjects
SleepEx
CreateFileA
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
GetStartupInfoW
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
InitializeSListHead
RtlPcToFileHeader
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
InitializeSRWLock
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
RtlCaptureStackBackTrace
GetStringTypeW
SetFileInformationByHandle
GetTempPathW
FlsAlloc
GetCurrentThreadId
FlsSetValue
FlsFree
InitOnceExecuteOnce
SleepConditionVariableCS
GetEnvironmentVariableW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetTickCount64
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetLocaleInfoEx
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
DeleteCriticalSection
GetStdHandle
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
TryEnterCriticalSection
SetThreadPriority
TerminateThread
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
CreateIoCompletionPort
GetQueuedCompletionStatus
CreateToolhelp32Snapshot
GetUserDefaultUILanguage
GetLocaleInfoA
GetModuleFileNameW
OpenProcess
TerminateProcess
GetCurrentProcessId
CloseHandle
LoadLibraryW
SetDefaultDllDirectories
AddDllDirectory
GetProcAddress
FreeLibrary
GetLastError
VerifyVersionInfoW
VerSetConditionMask
PostQueuedCompletionStatus
MulDiv
EnterCriticalSection
RtlVirtualUnwind
SetLastError
FormatMessageA
ExitProcess
GetFullPathNameW
FindNextFileW
GlobalSize
SetCurrentDirectoryW
GetCurrentDirectoryW
GlobalFree
GetFileSize
Process32FirstW
FindFirstFileExW
SetFilePointer
FindClose
Sleep
WideCharToMultiByte
GlobalLock
GlobalUnlock
SetFileTime
RtlUnwindEx
GlobalAlloc
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleHandleW
GetModuleFileNameA
OutputDebugStringW
OutputDebugStringA
GetFileAttributesW
DeleteFileW
CreateDirectoryW
CreateDirectoryA
Process32NextW
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetFileType
HeapSize
HeapValidate
TlsFree
TlsSetValue
TlsGetValue
CreateEventExW
TlsAlloc
GetSystemInfo
WriteConsoleW
SetConsoleCtrlHandler
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetConsoleOutputCP
GetCurrentThread
HeapReAlloc
HeapQueryInformation
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
FlsGetValue
EnumSystemLocalesW
FlushFileBuffers
GetExitCodeProcess
CreateProcessW
GetTimeZoneInformation
SetStdHandle
SetEndOfFile
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW

user32

MsgWaitForMultipleObjectsEx
GetQueueStatus
CallMsgFilterW
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW
WaitMessage
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetPropW
SetWindowTextW
SetCapture
GetClientRect
GetWindowRect
GetCursorPos
ScreenToClient
IntersectRect
IsRectEmpty
PtInRect
GetWindowLongW
SetWindowLongW
SetTimer
SetWindowLongPtrW
ShowWindow
LoadCursorW
IsWindowVisible
ReleaseCapture
MonitorFromWindow
GetMonitorInfoW
GetWindowPlacement
IsZoomed
SetForegroundWindow
SetWindowRgn
OffsetRect
MonitorFromPoint
MonitorFromRect
CharNextW
SetCursor
UnionRect
MapWindowPoints
GetParent
GetClipboardData
IsClipboardFormatAvailable
GetAsyncKeyState
ClientToScreen
GetSysColor
InflateRect
EnableWindow
KillTimer
CallWindowProcW
RegisterClassW
GetClassInfoExW
GetWindowLongPtrW
IsWindow
wsprintfW
GetDesktopWindow
FindWindowW
DrawTextW
UpdateLayeredWindow
MoveWindow
SetWindowPos
IsIconic
SetFocus
GetFocus
GetWindow
GetKeyState
GetSystemMetrics
GetDC
ReleaseDC
GetUserObjectInformationW
GetProcessWindowStation
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
MessageBoxW
PostQuitMessage
SendMessageW
MessageBoxA
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
LoadImageW
SetPropW

advapi32

CryptAcquireContextW
RegCreateKeyW
RegQueryValueExW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
RegOpenKeyExW
CryptSignHashW
CryptEnumProvidersW
GetSecurityInfo
CryptAcquireContextA
CryptGetHashParam
CryptHashData
CryptImportKey
CryptEncrypt
RegCloseKey

shell32

ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance

shlwapi

PathFileExistsW
PathIsRelativeW
PathFindFileNameW

winmm

timeKillEvent
timeSetEvent
timeGetTime

comctl32

ord17
_TrackMouseEvent

gdiplus

GdipGetPenDashCap197819
GdipGetPenEndCap
GdipGetPenStartCap
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipGetPenWidth
GdipSetPenWidth
GdipClonePen
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipGetFontCollectionFamilyCount
GdipNewInstalledFontCollection
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFont
GdipAddPathCurveI
GdipCreateFontFromDC
GdipDeleteFontFamily
GdipSetClipRegion
GdipFillPath
GdipFillEllipseI
GdipFillRectangle
GdipDrawPath
GdipDrawEllipseI
GdipDrawRectangleI
GdipDrawBezierI
GdipDrawLineI
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipBitmapApplyEffect
GdipSetPathGradientWrapMode
GdipSetPathGradientPresetBlend
GdipDeleteRegion
GdipCreateRegionPath
GdipAddPathArcI
GdipAddPathLineI
GdipAddPathString
GdipAddPathArc
GdipAddPathLine
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdipSetEffectParameters
GdipDeleteEffect
GdipCreateEffect
GdipAddPathRectangleI
GdipSetPenLineJoin
GdipDrawArc
GdipSetSmoothingMode
GdipImageRotateFlip
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipDeletePen
GdipCreatePen2
GdipCreatePen1
GdipSetLineBlend
GdipCreateLineBrushFromRect
GdipAddPathEllipseI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetImagePaletteSize
GdipGetImagePalette
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImagePixelFormat
GdipAddPathPieI
GdipAddPathPolygonI
GdipDrawImageRectRect
GdipDrawImage
GdipGetWorldTransform
GdipSetWorldTransform
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipRotateMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipTransformPath
GdipGetPathWorldBoundsI
GdipIsVisiblePathPointI
GdipIsOutlineVisiblePathPointI
GdipGetPenLineJoin
GdipSetPenColor
GdipGetPenDashStyle
GdipSetPenDashStyle
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipScaleMatrix
GdipClonePath
GdipResetPath
GdipGetPathFillMode
GdipSetPathFillMode
GdipStartPathFigure
GdipAddPathLine2I
GdipDrawImageRect
GdipAddPathBezierI
GdipCreateFontFromLogfontA
GdipCreatePathGradientFromPath

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
ImmSetCompositionWindow
ImmSetOpenStatus

msimg32

AlphaBlend

uiautomationcore

UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaClientsAreListening
UiaReturnRawElementProvider
UiaHostProviderFromHwnd

bcrypt

BCryptDeriveKeyPBKDF2
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptDestroyKey
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptGenRandom

ws2_32

getaddrinfo
WSAAddressToStringA
WSAGetLastError
WSAStartup
socket
shutdown
setsockopt
send
gethostname
recv
listen
htons
getsockopt
ioctlsocket
connect
closesocket
bind
accept
getpeername
sendto
recvfrom
htonl
__WSAFDIsSet
WSAIoctl
WSAWaitForMultipleEvents
WSASetEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
getnameinfo
freeaddrinfo
getservbyname
inet_ntoa
WSACleanup
gethostbyname
ntohs
getsockname
select
WSASetLastError

gdi32

BitBlt
CreateFontIndirectW
DeleteObject
GetStockObject
SelectObject
GetTextMetricsW
GetObjectW
CreateRoundRectRgn
GetDeviceCaps
CreateDCW
DeleteDC
GetDIBits
AddFontResourceExW
RemoveFontResourceExW
AddFontMemResourceEx
RemoveFontMemResourceEx
GetObjectA
SetTextColor
CreateDIBSection
CreateCompatibleDC
SetStretchBltMode
StretchBlt
SetBkMode
SaveDC
RestoreDC
GetWindowOrgEx
GetTextExtentPoint32W
CreateRectRgnIndirect
ExtSelectClipRgn
GetObjectType
SetWindowOrgEx

oleaut32

SafeArrayGetElemsize
SafeArrayDestroy
SysAllocString
SafeArrayPutElement
SafeArrayCreateVector
SafeArrayGetElement

Exports

Exports

afc_client_free
afc_client_new
afc_client_new_from_house_arrest_client
afc_client_new_with_service_client
afc_client_start_service
afc_dictionary_free
afc_file_close
afc_file_lock
afc_file_open
afc_file_read
afc_file_seek
afc_file_tell
afc_file_truncate
afc_file_write
afc_get_device_info
afc_get_device_info_key
afc_get_file_info
afc_make_directory
afc_make_link
afc_read_directory
afc_remove_path
afc_remove_path_and_contents
afc_rename_path
afc_set_file_time
afc_truncate
debug_info_real
debugserver_client_free
debugserver_client_new
debugserver_client_receive
debugserver_client_receive_response
debugserver_client_receive_with_timeout
debugserver_client_send
debugserver_client_send_command
debugserver_client_set_ack_mode
debugserver_client_set_argv
debugserver_client_set_environment_hex_encoded
debugserver_client_start_service
debugserver_command_free
debugserver_command_new
debugserver_decode_string
debugserver_encode_string
house_arrest_client_free
house_arrest_client_new
house_arrest_client_start_service
house_arrest_get_result
house_arrest_send_command
house_arrest_send_request
idevice_connect
idevice_connection_disable_bypass_ssl
idevice_connection_disable_ssl
idevice_connection_enable_ssl
idevice_connection_get_fd
idevice_connection_receive
idevice_connection_receive_timeout
idevice_connection_send
idevice_device_list_extended_free
idevice_device_list_free
idevice_disconnect
idevice_event_subscribe
idevice_event_unsubscribe
idevice_free
idevice_get_device_list
idevice_get_device_list_extended
idevice_get_handle
idevice_get_socket_type
idevice_get_tcp_endpoint
idevice_get_udid
idevice_new
idevice_new_with_options
idevice_set_debug_callback
idevice_set_debug_level
idevice_set_socket_type
idevice_set_tcp_endpoint
instproxy_archive
instproxy_browse
instproxy_browse_with_callback
instproxy_check_capabilities_match
instproxy_client_free
instproxy_client_get_path_for_bundle_identifier
instproxy_client_new
instproxy_client_options_add
instproxy_client_options_free
instproxy_client_options_new
instproxy_client_options_set_return_attributes
instproxy_client_start_service
instproxy_command_get_name
instproxy_install
instproxy_lookup
instproxy_lookup_archives
instproxy_remove_archive
instproxy_restore
instproxy_status_get_current_list
instproxy_status_get_error
instproxy_status_get_name
instproxy_status_get_percent_complete
instproxy_uninstall
instproxy_upgrade
lockdownd_activate
lockdownd_client_free
lockdownd_client_new
lockdownd_client_new_with_handshake
lockdownd_client_set_label
lockdownd_data_classes_free
lockdownd_deactivate
lockdownd_enter_recovery
lockdownd_get_device_name
lockdownd_get_device_udid
lockdownd_get_sync_data_classes
lockdownd_get_value
lockdownd_goodbye
lockdownd_pair
lockdownd_pair_with_options
lockdownd_query_type
lockdownd_receive
lockdownd_remove_value
lockdownd_send
lockdownd_service_descriptor_free
lockdownd_set_value
lockdownd_start_service
lockdownd_start_service_with_escrow_bag
lockdownd_start_session
lockdownd_stop_session
lockdownd_strerror
lockdownd_unpair
lockdownd_validate_pair
np_client_free
np_client_new
np_client_start_service
np_observe_notification
np_observe_notifications
np_post_notification
np_set_notify_callback
plist_access_path
plist_access_pathv
plist_array_append_item
plist_array_get_item
plist_array_get_item_index
plist_array_get_size
plist_array_insert_item
plist_array_item_remove
plist_array_new_iter
plist_array_next_item
plist_array_remove_item
plist_array_set_item
plist_bool_val_is_true
plist_compare_node_value
plist_copy
plist_data_val_compare
plist_data_val_compare_with_size
plist_data_val_contains
plist_date_val_compare
plist_dict_get_item
plist_dict_get_item_key
plist_dict_get_size
plist_dict_insert_item
plist_dict_item_get_key
plist_dict_merge
plist_dict_new_iter
plist_dict_next_item
plist_dict_remove_item
plist_dict_set_item
plist_free
plist_from_bin
plist_from_memory
plist_from_xml
plist_get_bool_val
plist_get_data_ptr
plist_get_data_val
plist_get_date_val
plist_get_key_val
plist_get_node_type
plist_get_parent
plist_get_real_val
plist_get_string_ptr
plist_get_string_val
plist_get_uid_val
plist_get_uint_val
plist_is_binary
plist_key_val_compare
plist_key_val_compare_with_size
plist_key_val_contains
plist_new_array
plist_new_bool
plist_new_data
plist_new_date
plist_new_dict
plist_new_real
plist_new_string
plist_new_uid
plist_new_uint
plist_real_val_compare
plist_set_bool_val
plist_set_data_val
plist_set_date_val
plist_set_key_val
plist_set_real_val
plist_set_string_val
plist_set_uid_val
plist_set_uint_val
plist_string_val_compare
plist_string_val_compare_with_size
plist_string_val_contains
plist_to_bin
plist_to_bin_free
plist_to_xml
plist_to_xml_free
plist_uid_val_compare
plist_uint_val_compare
property_list_service_client_free
property_list_service_client_new
property_list_service_disable_ssl
property_list_service_enable_ssl
property_list_service_receive_plist
property_list_service_receive_plist_with_timeout
property_list_service_send_binary_plist
property_list_service_send_xml_plist
service_client_factory_start_service
service_client_free
service_client_new
service_disable_bypass_ssl
service_disable_ssl
service_enable_ssl
service_receive
service_receive_with_timeout
service_send

Sections

.textbss
Size: - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 802B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 671B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 703KB - Virtual size: 702KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb2bf3520724955aed9f77cb1e5ff121

Headers

DLL Characteristics

File Characteristics

Imports

version

crypt32

wldap32

normaliz

kernel32

user32

advapi32

shell32

ole32

shlwapi

winmm

comctl32

gdiplus

imm32

msimg32

uiautomationcore

bcrypt

ws2_32

gdi32

oleaut32

Exports

Exports

Sections

.textbss Size: - Virtual size: 4.6MB

.text Size: 9.5MB - Virtual size: 9.5MB

.rdata Size: 2.4MB - Virtual size: 2.4MB

.data Size: 152KB - Virtual size: 193KB

.pdata Size: 447KB - Virtual size: 447KB

.idata Size: 28KB - Virtual size: 28KB

.msvcjmc Size: 62KB - Virtual size: 62KB

.tls Size: 1024B - Virtual size: 802B

.00cfg Size: 512B - Virtual size: 373B

_RDATA Size: 1024B - Virtual size: 671B

.rsrc Size: 703KB - Virtual size: 702KB

.reloc Size: 121KB - Virtual size: 121KB

.textbss
Size: - Virtual size: 4.6MB

.text
Size: 9.5MB - Virtual size: 9.5MB

.rdata
Size: 2.4MB - Virtual size: 2.4MB

.data
Size: 152KB - Virtual size: 193KB

.pdata
Size: 447KB - Virtual size: 447KB

.idata
Size: 28KB - Virtual size: 28KB

.msvcjmc
Size: 62KB - Virtual size: 62KB

.tls
Size: 1024B - Virtual size: 802B

.00cfg
Size: 512B - Virtual size: 373B

_RDATA
Size: 1024B - Virtual size: 671B

.rsrc
Size: 703KB - Virtual size: 702KB

.reloc
Size: 121KB - Virtual size: 121KB