General

Malware Config

Signatures

Files

• 66bc2d1c6b51040616a0e36f12a03674

  .exe windows:6 windows x64 arch:x64

  e6e7b1289068c1d6a61bd37b71074b2a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  api-ms-win-crt-heap-l1-1-0

  _set_new_mode

  calloc

  free

  malloc

  api-ms-win-crt-private-l1-1-0

  __C_specific_handler

  memcpy

  api-ms-win-crt-runtime-l1-1-0

  __p___argc

  __p___argv

  __p___wargv

  __p__acmdln

  _cexit

  _configure_narrow_argv

  _configure_wide_argv

  _crt_atexit

  _exit

  _initialize_narrow_environment

  _initialize_wide_environment

  _initterm

  _set_app_type

  _set_invalid_parameter_handler

  abort

  exit

  signal

  api-ms-win-crt-stdio-l1-1-0

  __acrt_iob_func

  __p__commode

  __p__fmode

  __stdio_common_vfprintf

  __stdio_common_vfwprintf

  __stdio_common_vsprintf

  _close

  _open

  _write

  fwrite

  api-ms-win-crt-string-l1-1-0

  strlen

  strncmp

  kernel32

  CloseHandle

  ConnectNamedPipe

  CreateFileA

  CreateNamedPipeA

  CreateThread

  DeleteCriticalSection

  EnterCriticalSection

  GetLastError

  GetModuleHandleA

  GetProcAddress

  GetStartupInfoA

  GetTickCount

  InitializeCriticalSection

  LeaveCriticalSection

  ReadFile

  SetUnhandledExceptionFilter

  Sleep

  TlsGetValue

  VirtualAlloc

  VirtualProtect

  VirtualQuery

  WriteFile

  advapi32

  CryptAcquireContextA

  CryptGenRandom

  CryptReleaseContext

  api-ms-win-crt-math-l1-1-0

  __setusermatherr

  api-ms-win-crt-environment-l1-1-0

  __p__environ

  __p__wenviron

  api-ms-win-crt-time-l1-1-0

  __daylight

  __timezone

  __tzname

  _tzset

  api-ms-win-crt-locale-l1-1-0

  __initialize_lconv_for_unsigned_char

  Sections

  .text

  Size: 685KB - Virtual size: 684KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 265KB - Virtual size: 265KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 1024B - Virtual size: 552B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 140B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ