General

Malware Config

Signatures

Files

• 50579f60434dc090c747bf01985ddfb348b19ced73767a2d6030cda4babad6cc

  .zip

  Password: infected

• 780be7a70ce3567ef268f6c768fc5a3d2510310c603bf481ebffd65e4fe95ff3.exe

  .dll windows:4 windows x64 arch:x64

  4909d86e8d4f27d34abd965637b2f699

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  kernel32

  DeleteCriticalSection

  EnterCriticalSection

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThreadId

  GetLastError

  GetSystemTimeAsFileTime

  GetTickCount

  InitializeCriticalSection

  LeaveCriticalSection

  QueryPerformanceCounter

  RtlAddFunctionTable

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  SetUnhandledExceptionFilter

  Sleep

  TerminateProcess

  TlsGetValue

  UnhandledExceptionFilter

  VirtualProtect

  VirtualQuery

  msvcrt

  __dllonexit

  __iob_func

  _amsg_exit

  _initterm

  _lock

  _onexit

  _unlock

  abort

  calloc

  free

  fwrite

  isalnum

  isalpha

  iscntrl

  isgraph

  islower

  isprint

  ispunct

  isspace

  isupper

  isxdigit

  malloc

  memcmp

  memcpy

  memmove

  signal

  strchr

  strcmp

  strlen

  strncmp

  tolower

  toupper

  vfprintf

  Exports

  Exports

  _pcre_OP_lengths

  _pcre_default_tables

  _pcre_find_bracket

  _pcre_hspace_list

  _pcre_is_newline

  _pcre_ord2utf

  _pcre_ucd_caseless_sets

  _pcre_ucd_records

  _pcre_ucd_stage1

  _pcre_ucd_stage2

  _pcre_ucp_gbtable

  _pcre_ucp_gentype

  _pcre_utf8_table1

  _pcre_utf8_table1_size

  _pcre_utf8_table2

  _pcre_utf8_table3

  _pcre_utf8_table4

  _pcre_utt

  _pcre_utt_names

  _pcre_utt_size

  _pcre_valid_utf

  _pcre_vspace_list

  _pcre_was_newline

  _pcre_xclass

  pcre_assign_jit_stack

  pcre_callout

  pcre_compile

  pcre_compile2

  pcre_config

  pcre_copy_named_substring

  pcre_copy_substring

  pcre_dfa_exec

  pcre_exec

  pcre_free

  pcre_free_study

  pcre_free_substring

  pcre_free_substring_list

  pcre_fullinfo

  pcre_get_named_substring

  pcre_get_stringnumber

  pcre_get_stringtable_entries

  pcre_get_substring

  pcre_get_substring_list

  pcre_jit_free_unused_memory

  pcre_jit_stack_alloc

  pcre_jit_stack_free

  pcre_maketables

  pcre_malloc

  pcre_pattern_to_host_byte_order

  pcre_refcount

  pcre_stack_free

  pcre_stack_guard

  pcre_stack_malloc

  pcre_study

  pcre_version

  Sections

  .text

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 112B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 95KB - Virtual size: 95KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .pdata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .xdata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 2KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 88B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 177KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 216B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /4

  Size: 512B - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .str

  Size: 512B - Virtual size: 50B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .l

  Size: 4KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE