fe23f004706637de0d87dc4805c5be47

Sharing

Copy URL Twitter E-mail

General

Target

fe23f004706637de0d87dc4805c5be47
Size

2.8MB
MD5

fe23f004706637de0d87dc4805c5be47
SHA1

5b69ae9eef1de272e960ec866776b4ee024cf883
SHA256

7fee8ffceff250d9f30bf581251003e4c509386c1a9eb83565e7f3e4fcd05173
SHA512

f210101411e6fe9d8b32c675dd3ded118f3def77109f97485844d887a3bbd6190ffcfc1822247b63a8732d9cb75b20b60669509018389f93570f94821be6234b
SSDEEP

49152:e3QRiijrKSKWg4utK3X43qj67qtxTDGm4OT89vAx9ZLp8YydoUWTmSx:5b0SovqTTyOT/9ZLp8Y2ois

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe23f004706637de0d87dc4805c5be47

Files

fe23f004706637de0d87dc4805c5be47
.dll windows:4 windows x64 arch:x64

160ab018de8f51a27df64e28ab5456af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

comctl32

InitCommonControlsEx

comdlg32

ChooseColorW
ChooseFontW
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW

gdi32

Arc
BeginPath
BitBlt
Chord
CloseFigure
CombineRgn
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateFontIndirectW
CreatePalette
CreatePatternBrush
CreatePen
CreatePenIndirect
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
Ellipse
EndDoc
EndPage
EndPath
EnumFontFamiliesW
ExtCreatePen
ExtTextOutW
GetBkMode
GetCharWidth32W
GetCharWidthA
GetCharWidthW
GetDIBits
GetDeviceCaps
GetFontData
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectA
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextCharset
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextFaceW
GetTextMetricsW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
OffsetClipRgn
PatBlt
Pie
Polygon
Polyline
RealizePalette
RectInRegion
Rectangle
ResizePalette
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetMapMode
SetPaletteEntries
SetPolyFillMode
SetROP2
SetRectRgn
SetStretchBltMode
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartDocW
StartPage
StretchDIBits
StrokeAndFillPath
StrokePath
TextOutA
TextOutW
TranslateCharsetInfo
UpdateColors

imm32

ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

kernel32

DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FormatMessageW
FreeLibrary
GetCommState
GetConsoleMode
GetCurrentDirectoryW
GetCurrentThreadId
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStdHandle
GetTickCount
GetVersionExW
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
InitializeCriticalSection
IsDBCSLeadByte
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MulDiv
MultiByteToWideChar
OutputDebugStringW
SetCurrentDirectoryW
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__iob_func
__setusermatherr
_amsg_exit
_ctime64
_errno
_hypot
_initterm
_lock
_strcmpi
_stricmp
_strnicmp
_strtoi64
_time64
_unlock
_vscprintf
_vsnprintf
_wcsicmp
abort
asin
atan
atof
atoi
calloc
fclose
fflush
fopen
fread
free
fseek
ftell
fwrite
isalnum
isprint
isspace
isupper
isxdigit
ldexp
log10
memchr
memcmp
memcpy
memmove
memset
printf
puts
qsort
realloc
sscanf
strcat
strchr
strcmp
strcpy
strlen
strncmp
strncpy
strrchr
strstr
strtok
strtol
strtoul
tan
vfprintf
wcscmp
wcscpy
wcslen
wcsncpy
wcsrchr

ole32

CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
CreateErrorInfo
CreateFileMoniker
GetRunningObjectTable
SetErrorInfo

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantChangeType
VariantClear
VariantInit

shell32

SHBrowseForFolderW
SHCreateItemFromParsingName
SHGetDesktopFolder
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
Shell_NotifyIconW

user32

AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
ChangeWindowMessageFilter
ClientToScreen
CloseClipboard
CreateCaret
CreateIconFromResource
CreateIconFromResourceEx
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCaret
DestroyIcon
DestroyMenu
DestroyWindow
DrawEdge
DrawFocusRect
DrawFrameControl
DrawMenuBar
DrawTextW
EmptyClipboard
EnableWindow
EndDialog
EndPaint
EnumWindows
FillRect
GetAsyncKeyState
GetCapture
GetClassLongPtrW
GetClientRect
GetClipboardData
GetClipboardOwner
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetLastInputInfo
GetMenuItemCount
GetMessageA
GetMessagePos
GetMessageW
GetParent
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongPtrW
GetWindowPlacement
GetWindowRect
GetWindowTextW
InsertMenuW
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
IsWindow
IsWindowVisible
IsZoomed
LoadBitmapW
LoadCursorA
LoadCursorFromFileA
LoadCursorW
LoadIconA
LoadIconW
MapVirtualKeyW
MessageBeep
MessageBoxW
MoveWindow
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
RegisterClassA
RegisterClassExW
RegisterClassW
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
ScrollWindowEx
SendInput
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongPtrW
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenu
SetParent
SetScrollInfo
SetWindowLongPtrW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
ToUnicode
TrackPopupMenu
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
VkKeyScanW
WindowFromPoint
wsprintfW

winspool.drv

ClosePrinter
OpenPrinterW

Exports

Exports

TkAlignImageData
TkAllocWindow
TkBTreeNumLines
TkBezierPoints
TkBezierScreenPoints
TkBindEventProc
TkBindFree
TkBindInit
TkCanvasDashParseProc
TkCanvasDashPrintProc
TkChangeEventWindow
TkClipCleanup
TkClipInit
TkComputeAnchor
TkCreateCursorFromData
TkCreateFrame
TkCreateMainWindow
TkCreateThreadExitHandler
TkCreateXEventSource
TkCurrentTime
TkDebugBitmap
TkDebugBorder
TkDebugColor
TkDebugConfig
TkDebugCursor
TkDebugFont
TkDebugPhotoStringMatchDef
TkDeleteAllImages
TkDeleteThreadExitHandler
TkDoConfigureNotify
TkDrawAngledChars
TkDrawAngledTextLayout
TkDrawInsetFocusHighlight
TkEventDeadWindow
TkFillPolygon
TkFindStateNum
TkFindStateNumObj
TkFindStateString
TkFocusDeadWindow
TkFocusFilterEvent
TkFocusFree
TkFocusKeyEvent
TkFontPkgFree
TkFontPkgInit
TkFreeBindingTags
TkGCCleanup
TkGenerateActivateEvents
TkGetBitmapData
TkGetBitmapPredefTable
TkGetButtPoints
TkGetCursorByName
TkGetDefaultScreenName
TkGetDisplay
TkGetDisplayList
TkGetDisplayOf
TkGetFocusWin
TkGetInterpNames
TkGetMainInfoList
TkGetMiterPoints
TkGetOptionSpec
TkGetPointerCoords
TkGetServerInfo
TkGetWindowFromObj
TkGrabDeadWindow
TkGrabState
TkInOutEvents
TkIncludePoint
TkInstallFrameMenu
TkIntersectAngledTextLayout
TkKeysymToString
TkLineToArea
TkLineToPoint
TkMakeBezierCurve
TkMakeBezierPostscript
TkMakeRawCurve
TkMakeRawCurvePostscript
TkOffsetParseProc
TkOffsetPrintProc
TkOptionClassChanged
TkOptionDeadWindow
TkOrientParseProc
TkOrientPrintProc
TkOvalToArea
TkOvalToPoint
TkPhotoGetValidRegion
TkPixelParseProc
TkPixelPrintProc
TkPointerDeadWindow
TkPointerEvent
TkPolygonToArea
TkPolygonToPoint
TkPositionInTree
TkPutImage
TkQueueEventForAllChildren
TkReadBitmapFile
TkScrollWindow
TkSelDeadWindow
TkSelEventProc
TkSelGetSelection
TkSelInit
TkSelPropProc
TkSetFocusWin
TkSetPixmapColormap
TkSmoothParseProc
TkSmoothPrintProc
TkStateParseProc
TkStatePrintProc
TkStringToKeysym
TkStylePkgFree
TkStylePkgInit
TkTextChanged
TkTextGetIndex
TkTextIndexBackBytes
TkTextIndexForwBytes
TkTextInsertDisplayProc
TkTextMakeByteIndex
TkTextPrintIndex
TkTextSetMark
TkTextXviewCmd
TkThickPolyLineToArea
TkToplevelWindowForCommand
TkUnderlineAngledTextLayout
TkWinCancelMouseTimer
TkWinChildProc
TkWinClipboardRender
TkWinDialogDebug
TkWinEmbeddedEventProc
TkWinFillRect
TkWinGetBorderPixels
TkWinGetDrawableDC
TkWinGetMenuSystemDefault
TkWinGetModifierState
TkWinGetPlatformTheme
TkWinGetSystemPalette
TkWinGetWrapperWindow
TkWinHandleMenuEvent
TkWinIndexOfColor
TkWinReleaseDrawableDC
TkWinResendEvent
TkWinSelectPalette
TkWinSetForegroundWindow
TkWinSetHINSTANCE
TkWinSetMenu
TkWinSetWindowPos
TkWinWmCleanup
TkWinXCleanup
TkWinXInit
TkWmAddToColormapWindows
TkWmDeadWindow
TkWmFocusToplevel
TkWmMapWindow
TkWmNewWindow
TkWmProtocolEventProc
TkWmRemoveFromColormapWindows
TkWmRestackToplevel
TkWmSetClass
TkWmStackorderToplevel
TkWmUnmapWindow
Tk_3DBorderColor
Tk_3DBorderGC
Tk_3DHorizontalBevel
Tk_3DVerticalBevel
Tk_AddOption
Tk_Alloc3DBorderFromObj
Tk_AllocBitmapFromObj
Tk_AllocColorFromObj
Tk_AllocCursorFromObj
Tk_AllocFontFromObj
Tk_AllocStyleFromObj
Tk_AlwaysShowSelection
Tk_AttachHWND
Tk_BindEvent
Tk_CanvasDrawableCoords
Tk_CanvasEventuallyRedraw
Tk_CanvasGetCoord
Tk_CanvasGetCoordFromObj
Tk_CanvasGetTextInfo
Tk_CanvasPsBitmap
Tk_CanvasPsColor
Tk_CanvasPsFont
Tk_CanvasPsOutline
Tk_CanvasPsPath
Tk_CanvasPsStipple
Tk_CanvasPsY
Tk_CanvasSetOffset
Tk_CanvasSetStippleOrigin
Tk_CanvasTagsParseProc
Tk_CanvasTagsPrintProc
Tk_CanvasTkwin
Tk_CanvasWindowCoords
Tk_ChangeOutlineGC
Tk_ChangeWindowAttributes
Tk_CharBbox
Tk_ClearSelection
Tk_ClipboardAppend
Tk_ClipboardClear
Tk_CollapseMotionEvents
Tk_ComputeTextLayout
Tk_ConfigOutlineGC
Tk_ConfigureInfo
Tk_ConfigureValue
Tk_ConfigureWidget
Tk_ConfigureWindow
Tk_CoordsToWindow
Tk_CreateAnonymousWindow
Tk_CreateBinding
Tk_CreateBindingTable
Tk_CreateClientMessageHandler
Tk_CreateConsoleWindow
Tk_CreateErrorHandler
Tk_CreateEventHandler
Tk_CreateGenericHandler
Tk_CreateImageType
Tk_CreateItemType
Tk_CreateOptionTable
Tk_CreateOutline
Tk_CreatePhotoImageFormat
Tk_CreatePhotoImageFormatVersion3
Tk_CreateSelHandler
Tk_CreateSmoothMethod
Tk_CreateStyle
Tk_CreateWindow
Tk_CreateWindowFromPath
Tk_DefineBitmap
Tk_DefineCursor
Tk_DeleteAllBindings
Tk_DeleteBinding
Tk_DeleteBindingTable
Tk_DeleteClientMessageHandler
Tk_DeleteErrorHandler
Tk_DeleteEventHandler
Tk_DeleteGenericHandler
Tk_DeleteImage
Tk_DeleteOptionTable
Tk_DeleteOutline
Tk_DeleteSelHandler
Tk_DestroyWindow
Tk_DisplayName
Tk_DistanceToTextLayout
Tk_DitherPhoto
Tk_Draw3DPolygon
Tk_Draw3DRectangle
Tk_DrawChars
Tk_DrawElement
Tk_DrawFocusHighlight
Tk_DrawHighlightBorder
Tk_DrawTextLayout
Tk_Fill3DPolygon
Tk_Fill3DRectangle
Tk_FindPhoto
Tk_FontGetDescription
Tk_FontId
Tk_Free3DBorder
Tk_Free3DBorderFromObj
Tk_FreeBitmap
Tk_FreeBitmapFromObj
Tk_FreeColor
Tk_FreeColorFromObj
Tk_FreeColormap
Tk_FreeConfigOptions
Tk_FreeCursor
Tk_FreeCursorFromObj
Tk_FreeFont
Tk_FreeFontFromObj
Tk_FreeGC
Tk_FreeImage
Tk_FreeOptions
Tk_FreePixmap
Tk_FreeSavedOptions
Tk_FreeStyle
Tk_FreeTextLayout
Tk_GCForColor
Tk_GeometryRequest
Tk_Get3DBorder
Tk_Get3DBorderColors
Tk_Get3DBorderFromObj
Tk_GetAllBindings
Tk_GetAnchor
Tk_GetAnchorFromObj
Tk_GetAtomName
Tk_GetBinding
Tk_GetBitmap
Tk_GetBitmapFromData
Tk_GetBitmapFromObj
Tk_GetButtonMask
Tk_GetCapStyle
Tk_GetColor
Tk_GetColorByValue
Tk_GetColorFromObj
Tk_GetColormap
Tk_GetCursor
Tk_GetCursorFromData
Tk_GetCursorFromObj
Tk_GetDash
Tk_GetDoublePixelsFromObj
Tk_GetElementBorderWidth
Tk_GetElementBox
Tk_GetElementId
Tk_GetElementSize
Tk_GetFont
Tk_GetFontFromObj
Tk_GetFontMetrics
Tk_GetGC
Tk_GetHINSTANCE
Tk_GetHWND
Tk_GetImage
Tk_GetImageModelData
Tk_GetItemTypes
Tk_GetJoinStyle
Tk_GetJustify
Tk_GetJustifyFromObj
Tk_GetMMFromObj
Tk_GetNumMainWindows
Tk_GetOption
Tk_GetOptionInfo
Tk_GetOptionValue
Tk_GetOtherWindow
Tk_GetPixels
Tk_GetPixelsFromObj
Tk_GetPixmap
Tk_GetRelief
Tk_GetReliefFromObj
Tk_GetRootCoords
Tk_GetScreenMM
Tk_GetScrollInfo
Tk_GetScrollInfoObj
Tk_GetSelection
Tk_GetStyle
Tk_GetStyleEngine
Tk_GetStyledElement
Tk_GetSystemDefault
Tk_GetUid
Tk_GetUserInactiveTime
Tk_GetVRootGeometry
Tk_GetVisual
Tk_Grab
Tk_HWNDToWindow
Tk_HandleEvent
Tk_IdToWindow
Tk_ImageChanged
Tk_Init
Tk_InitConsoleChannels
Tk_InitOptions
Tk_InternAtom
Tk_Interp
Tk_IntersectTextLayout
Tk_MainEx
Tk_MainExW
Tk_MainLoop
Tk_MainWindow
Tk_MaintainGeometry
Tk_MakeContainer
Tk_MakeWindow
Tk_MakeWindowExist
Tk_ManageGeometry
Tk_MapWindow
Tk_MeasureChars
Tk_MoveResizeWindow
Tk_MoveToplevelWindow
Tk_MoveWindow
Tk_NameOf3DBorder
Tk_NameOfAnchor
Tk_NameOfBitmap
Tk_NameOfCapStyle
Tk_NameOfColor
Tk_NameOfCursor
Tk_NameOfFont
Tk_NameOfImage
Tk_NameOfJoinStyle
Tk_NameOfJustify
Tk_NameOfRelief
Tk_NameOfStyle
Tk_NameToWindow
Tk_NewWindowObj
Tk_OwnSelection
Tk_ParseArgv
Tk_PhotoBlank
Tk_PhotoExpand
Tk_PhotoGetImage
Tk_PhotoGetSize
Tk_PhotoPutBlock
Tk_PhotoPutZoomedBlock
Tk_PhotoSetSize
Tk_PkgInitStubsCheck
Tk_PointToChar
Tk_PostscriptBitmap
Tk_PostscriptColor
Tk_PostscriptFont
Tk_PostscriptFontName
Tk_PostscriptImage
Tk_PostscriptPath
Tk_PostscriptPhoto
Tk_PostscriptStipple
Tk_PostscriptY
Tk_PreserveColormap
Tk_QueueWindowEvent
Tk_RedrawImage
Tk_RegisterStyleEngine
Tk_RegisterStyledElement
Tk_ResetOutlineGC
Tk_ResetUserInactiveTime
Tk_ResizeWindow
Tk_RestackWindow
Tk_RestoreSavedOptions
Tk_RestrictEvents
Tk_SafeInit
Tk_SendVirtualEvent
Tk_SetAppName
Tk_SetBackgroundFromBorder
Tk_SetCaretPos
Tk_SetClass
Tk_SetClassProcs
Tk_SetGrid
Tk_SetInternalBorder
Tk_SetInternalBorderEx
Tk_SetMainMenubar
Tk_SetMinimumRequestSize
Tk_SetOptions
Tk_SetTSOrigin
Tk_SetWindowBackground
Tk_SetWindowBackgroundPixmap
Tk_SetWindowBorder
Tk_SetWindowBorderPixmap
Tk_SetWindowBorderWidth
Tk_SetWindowColormap
Tk_SetWindowMenubar
Tk_SetWindowVisual
Tk_SizeOfBitmap
Tk_SizeOfImage
Tk_StrictMotif
Tk_TextLayoutToPostscript
Tk_TextWidth
Tk_UndefineCursor
Tk_UnderlineChars
Tk_UnderlineTextLayout
Tk_Ungrab
Tk_UnmaintainGeometry
Tk_UnmapWindow
Tk_UnsetGrid
Tk_UpdatePointer
Tk_UseWindow
TkpChangeFocus
TkpClaimFocus
TkpCloseDisplay
TkpCmapStressed
TkpDisplayWarning
TkpDrawFrame
TkpFreeCursor
TkpGetAppName
TkpGetCapture
TkpGetKeySym
TkpGetMS
TkpGetString
TkpGetSubFonts
TkpGetWrapperWindow
TkpInit
TkpInitKeymapInfo
TkpInitializeMenuBindings
TkpMakeMenuWindow
TkpMenuNotifyToplevelCreate
TkpMenuThreadInit
TkpOpenDisplay
TkpPrintWindowId
TkpRedirectKeyEvent
TkpScanWindowId
TkpSetCapture
TkpSetCursor
TkpSetKeycodeAndState
TkpSync
TkpTestembedCmd
TkpTesttextCmd
TkpWmSetState
XAllocColor
XBell
XChangeGC
XChangeProperty
XChangeWindowAttributes
XClearWindow
XClipBox
XCloseIM
XConfigureWindow
XCopyArea
XCopyPlane
XCreateBitmapFromData
XCreateColormap
XCreateFontSet
XCreateGC
XCreateGlyphCursor
XCreateIC
XCreateImage
XCreatePixmapCursor
XCreateRegion
XCreateWindow
XDefineCursor
XDeleteProperty
XDestroyIC
XDestroyRegion
XDestroyWindow
XDrawArc
XDrawArcs

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 369KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 1024B - Virtual size: 655B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

160ab018de8f51a27df64e28ab5456af

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comctl32

comdlg32

gdi32

imm32

kernel32

msvcrt

ole32

oleaut32

shell32

user32

winspool.drv

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.data Size: 11KB - Virtual size: 10KB

.rdata Size: 369KB - Virtual size: 368KB

.pdata Size: 31KB - Virtual size: 31KB

.xdata Size: 38KB - Virtual size: 37KB

.bss Size: - Virtual size: 3KB

.edata Size: 17KB - Virtual size: 16KB

.idata Size: 13KB - Virtual size: 13KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 208KB - Virtual size: 208KB

.reloc Size: 19KB - Virtual size: 18KB

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 178KB - Virtual size: 178KB

/31 Size: 11KB - Virtual size: 10KB

/45 Size: 12KB - Virtual size: 12KB

/57 Size: 3KB - Virtual size: 3KB

/70 Size: 1024B - Virtual size: 708B

/81 Size: 9KB - Virtual size: 8KB

/97 Size: 9KB - Virtual size: 8KB

/113 Size: 1024B - Virtual size: 655B

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 11KB - Virtual size: 10KB

.rdata
Size: 369KB - Virtual size: 368KB

.pdata
Size: 31KB - Virtual size: 31KB

.xdata
Size: 38KB - Virtual size: 37KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 17KB - Virtual size: 16KB

.idata
Size: 13KB - Virtual size: 13KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 208KB - Virtual size: 208KB

.reloc
Size: 19KB - Virtual size: 18KB

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 178KB - Virtual size: 178KB

/31
Size: 11KB - Virtual size: 10KB

/45
Size: 12KB - Virtual size: 12KB

/57
Size: 3KB - Virtual size: 3KB

/70
Size: 1024B - Virtual size: 708B

/81
Size: 9KB - Virtual size: 8KB

/97
Size: 9KB - Virtual size: 8KB

/113
Size: 1024B - Virtual size: 655B