fc0ebc3c1cdd447bd2c9b9f0d32a9f76ca50a4dfe71dbe861f066178301d4630

Sharing

Copy URL Twitter E-mail

General

Target

fc0ebc3c1cdd447bd2c9b9f0d32a9f76ca50a4dfe71dbe861f066178301d4630
Size

8.1MB
MD5

1e49c04310a2d0632dab445238a74432
SHA1

6c8ddd70b2445cdb27f6c66fa9ebb8db07ec73dc
SHA256

fc0ebc3c1cdd447bd2c9b9f0d32a9f76ca50a4dfe71dbe861f066178301d4630
SHA512

e402a88a3f2d003a3ee82f5ca5b1f31309b16b13c822150af28bd0b30da3ad21e53ab00ad4684b72f36c38e2506aed87a9f519570c379d4f2e920b87b92950e1
SSDEEP

196608:oSoC5N+pONz/6mTPiWlL0H62pg4WZO78Fnz:roC5wpONziq0V1Cnz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc0ebc3c1cdd447bd2c9b9f0d32a9f76ca50a4dfe71dbe861f066178301d4630

Files

fc0ebc3c1cdd447bd2c9b9f0d32a9f76ca50a4dfe71dbe861f066178301d4630
.exe windows:6 windows x86 arch:x86

18ffb967d6d056a8acca726d7d9ab989

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
GetModuleHandleExW
LockResource
GetModuleFileNameW
GetProcAddress
LoadResource
LoadLibraryExW
GetModuleFileNameA
SizeofResource
LoadStringA
GetModuleHandleW
FreeLibraryAndExitThread
LoadLibraryExA
GetModuleHandleA
LoadStringW

api-ms-win-core-libraryloader-l1-2-1

FindResourceW
LoadLibraryA
LoadLibraryW

api-ms-win-core-string-l1-1-0

GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
CompareStringW

api-ms-win-core-kernel32-legacy-l1-1-0

MoveFileExA
GetComputerNameW
MoveFileA
GetComputerNameA
FindResourceA
CopyFileA
CreateFileMappingA

api-ms-win-core-localization-l1-2-0

LCMapStringW
IsValidCodePage
SetThreadLocale
FormatMessageW
IsDBCSLeadByte
FormatMessageA
IsDBCSLeadByteEx
GetCPInfo
GetUserDefaultLCID
GetLocaleInfoA
GetACP
GetOEMCP

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetWindowsDirectoryA
GetSystemTimeAsFileTime
GetSystemInfo
GetLocalTime
GetVersionExA
GetTickCount

api-ms-win-core-heap-obsolete-l1-1-0

GlobalReAlloc
GlobalLock
GlobalUnlock
GlobalSize

oleaut32

SafeArrayPutElement
SafeArrayGetUBound
SafeArrayGetLBound
LoadTypeLi
SysAllocStringLen
SysFreeString
VarBstrFromDate
VariantCopy
SafeArrayGetElement
SafeArrayGetElemsize
VariantClear
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
SafeArrayGetDim
OleCreateFontIndirect
SysStringLen
SysAllocString
VariantTimeToSystemTime
SafeArrayCreate
SysAllocStringByteLen
VariantInit
SystemTimeToVariantTime
VariantChangeType
SysStringByteLen

api-ms-win-core-processenvironment-l1-1-0

GetCurrentDirectoryA
GetCommandLineA
ExpandEnvironmentStringsA
GetEnvironmentVariableW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetEnvironmentVariableA
GetCommandLineW
SetStdHandle
GetEnvironmentStringsW
GetStdHandle
SetCurrentDirectoryA
GetCurrentDirectoryW

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
ReleaseSemaphore
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
ReleaseMutex
InitializeCriticalSection
CreateSemaphoreExW
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
WaitForSingleObject
DeleteCriticalSection

api-ms-win-core-privateprofile-l1-1-0

GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
ResumeThread
CreateProcessA
GetExitCodeProcess
ExitThread
GetExitCodeThread
ExitProcess
GetCurrentThread
GetCurrentThreadId
CreateThread

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-file-l1-1-0

SetEndOfFile
SetFileAttributesW
SetFilePointer
WriteFile
DeleteFileA
SetFilePointerEx
FindFirstFileW
GetDriveTypeA
FindFirstFileExW
GetFileSize
FindNextFileA
DeleteFileW
SetFileAttributesA
GetFileType
GetFullPathNameW
FindNextFileW
GetFileTime
CreateDirectoryA
GetFileAttributesA
FindClose
RemoveDirectoryA
SetFileTime
ReadFile
FindFirstFileA
CompareFileTime
CreateFileA
GetFileAttributesW
CreateFileW

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW
GetTimeFormatA
GetDateFormatA
GetDateFormatW

api-ms-win-core-errorhandling-l1-1-0

RaiseException
GetLastError
SetLastError

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-memory-l1-1-0

VirtualAlloc
VirtualProtect
MapViewOfFile
UnmapViewOfFile
VirtualQuery

api-ms-win-core-string-obsolete-l1-1-0

lstrcatW
lstrlenW
lstrlenA
lstrcmpA

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
FileTimeToSystemTime
GetTimeZoneInformation

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegGetValueW
RegQueryValueExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA

api-ms-win-core-registry-l2-1-0

RegDeleteKeyA

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoInitializeEx

api-ms-win-core-heap-l1-1-0

HeapReAlloc
HeapAlloc
HeapCreate
HeapSize
HeapCompact
HeapDestroy
GetProcessHeap
HeapQueryInformation
HeapFree

api-ms-win-core-heap-l2-1-0

GlobalAlloc
GlobalFree
LocalFree

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-string-obsolete-l1-1-1

lstrcatA
lstrcpyA

ws2_32

WSAGetLastError
WSAIoctl
WSACleanup
WSAStartup
WSASetLastError
gethostname
inet_ntoa
getsockname
listen
freeaddrinfo
getaddrinfo
shutdown
__WSAFDIsSet
select
ntohs
accept
bind
closesocket
connect
getsockopt
ioctlsocket
htons
inet_addr
recv
send
setsockopt
socket
gethostbyname

api-ms-win-core-file-l1-2-2

GetTempPathA
GetVolumeInformationA

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
OutputDebugStringA
DebugBreak

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister

api-ms-win-security-cryptoapi-l1-1-0

CryptExportKey
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptGenRandom
CryptGetUserKey
CryptGetProvParam
CryptAcquireContextA

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-synch-ansi-l1-1-0

CreateSemaphoreA

kernel32

GlobalFindAtomA
IsBadWritePtr
OpenFile
_lopen
_lclose
GlobalGetAtomNameA
EncodePointer
GetSystemDirectoryW
lstrcmpW
CompareStringA
FindResourceExW
GetUserDefaultUILanguage
SetEvent
CreateEventA
SetThreadPriority
SuspendThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
ReplaceFileA
GetThreadLocale
GetProfileIntA
GlobalAddAtomA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetCurrentProcess
GetShortPathNameA
lstrcmpiA
GetStringTypeExA
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
SetErrorMode
VerSetConditionMask
VerifyVersionInfoA
SearchPathA
ResetEvent
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
WinExec
GlobalDeleteAtom
IsBadReadPtr
lstrcpynA

user32

GetWindowRgn
SubtractRect
CharUpperBuffA
MapVirtualKeyExA
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
SetMenuDefaultItem
SendMessageA
PostMessageA
GetFocus
GetAsyncKeyState
SetTimer
KillTimer
EnableWindow
GetDC
ReleaseDC
InvalidateRect
GetClientRect
GetWindowRect
GetCursorPos
GetSysColor
CopyRect
InflateRect
PtInRect
GetParent
LoadBitmapW
MessageBeep
IsWindowVisible
SystemParametersInfoA
SendMessageW
OpenClipboard
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
IsWindowUnicode
GetWindowTextW
SetWindowLongW
GetClassInfoA
IsIconic
IsZoomed
LoadMenuW
CreatePopupMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AppendMenuA
SetForegroundWindow
CheckMenuRadioItem
LoadIconA
LoadIconW
GetDlgCtrlID
GetKeyState
GetCapture
SetCapture
ReleaseCapture
SetCursor
ClientToScreen
ScreenToClient
WindowFromPoint
GetClassNameA
GetWindow
IsWindow
EnableMenuItem
RedrawWindow
OffsetRect
GetDesktopWindow
LoadBitmapA
DrawTextA
DrawTextW
PeekMessageA
PostQuitMessage
ShowWindow
RegisterClipboardFormatA
UpdateWindow
MessageBoxA
MessageBoxW
FindWindowA
DestroyIcon
LoadImageA
CreateWindowExW
SetDlgItemTextW
GetDlgItemTextW
SetClipboardData
EmptyClipboard
CheckMenuItem
SetActiveWindow
GetForegroundWindow
SetWindowTextW
ChildWindowFromPoint
FillRect
SetRectEmpty
GetWindowLongA
DrawEdge
GetMessageA
TranslateMessage
DispatchMessageA
GetMessageExtraInfo
ValidateRect
DrawFocusRect
FrameRect
InsertMenuA
ModifyMenuA
IsRectEmpty
EqualRect
SetFocus
IsWindowEnabled
GetWindowPlacement
SetWindowPos
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetClassLongA
SetClassLongA
LoadCursorA
IsChild
wsprintfA
GetSystemMenu
DeleteMenu
GetSysColorBrush
SetParent
DrawTextExA
GrayStringA
TabbedTextOutA
GetKeyboardLayout
SetWindowTextA
GetWindowTextA
GetMenuStringA
GetMenuState
RemoveMenu
SetCursorPos
GetCaretPos
EnumChildWindows
EnumWindows
GetLastActivePopup
GetKeyboardState
SetKeyboardState
GetKeyNameTextA
MapVirtualKeyA
CopyAcceleratorTableA
CreateMenu
GetMenuItemInfoA
SetMenuItemInfoA
DrawStateA
SetRect
CreateWindowExA
MoveWindow
GetWindowTextLengthA
GetWindowTextLengthW
SetWindowLongA
BeginPaint
EndPaint
LoadCursorW
GetNextDlgTabItem
HideCaret
ScrollDC
ShowCaret
RegisterWindowMessageA
DefWindowProcA
GetDoubleClickTime
keybd_event
DrawMenuBar
CreateCaret
DestroyCaret
SetCaretPos
DdeInitializeA
DdeUninitialize
DdeConnect
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
DdeFreeStringHandle
RegisterClassExA
CallWindowProcA
GetActiveWindow
AppendMenuW
DrawTextExW
mouse_event
ShowCursor
UnregisterClassA
GetUpdateRect
MapWindowPoints
IntersectRect
IsCharLowerA
DestroyCursor
DrawIconEx
UnhookWindowsHookEx
GetWindowDC
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMessagePos
GetMessageTime
RegisterClassA
GetClassInfoExA
IsMenu
DestroyWindow
SetWindowPlacement
GetMenu
SetMenu
TrackPopupMenu
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
AdjustWindowRectEx
GetTopWindow
SetWindowsHookExA
CallNextHookEx
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
SetDlgItemTextA
CheckDlgButton
SendDlgItemMessageA
IsDialogMessageA
GetWindowThreadProcessId
CreateDialogIndirectParamA
EndDialog
MapDialogRect
DestroyMenu
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
UnionRect
DrawIcon
SetWindowRgn
ShowOwnedPopups
InvalidateRgn
SetWindowContextHelpId
GetNextDlgGroupItem
CharNextA
WaitMessage
NotifyWinEvent
MonitorFromPoint
LockWindowUpdate
CharUpperA
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
RealChildWindowFromPoint
CopyImage
TrackMouseEvent
LoadImageW
LoadAcceleratorsW
PostThreadMessageA
GetTabbedTextExtentW
GetIconInfo
EnableScrollBar
InvertRect
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawFrameControl
CopyIcon
UpdateLayeredWindow
GetComboBoxInfo
CreateCursor

gdi32

StretchDIBits
DPtoLP
LPtoDP
CreateHatchBrush
CreatePen
CreatePatternBrush
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
GetViewportExtEx
GetMapMode
DeleteDC
CreateHalftonePalette
GetDIBColorTable
CreatePalette
CreateDIBitmap
FrameRgn
FillRgn
EnumFontsA
CreateRectRgnIndirect
CreateBitmap
TextOutW
GetTextCharset
GetCurrentPositionEx
EnumFontFamiliesExA
GetObjectW
GetBkColor
StartDocA
MoveToEx
GetObjectA
GetDeviceCaps
GetStockObject
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
CreateSolidBrush
RealizePalette
StretchBlt
GetTextExtentPoint32W
GetTextMetricsA
CreateRectRgn
GetBkMode
GetTextColor
RectVisible
SetBkColor
SelectObject
BitBlt
CreateCompatibleDC
Ellipse
TextOutA
Rectangle
PtVisible
GetWindowExtEx
SetTextAlign
CreatePolygonRgn
SetTextColor
ExtTextOutA
ExtTextOutW
SetViewportExtEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
RoundRect
OffsetRgn
EnumFontFamiliesA
CreateCompatibleBitmap
PatBlt
CreateICA
Escape
CreateRoundRectRgn
Polyline
Polygon
SetDIBColorTable
SetPixel
GetTextCharsetInfo
GetSystemPaletteEntries
GetNearestPaletteIndex
GetTextFaceA
GetWindowOrgEx
GetTextExtentPointA
GetTextAlign
GetStretchBltMode
GetPolyFillMode
GetNearestColor
GetROP2
CopyMetaFileA
GetViewportOrgEx
SetAbortProc
AbortDoc
EndPage
StartPage
EndDoc
CreateDCA
GetRgnBox
CreateDIBSection
CreateEllipticRgn
GetCharWidthA
CreateFontA
SetRectRgn
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
GetPaletteEntries

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetOpenFileNameW
GetSaveFileNameW

winspool.drv

OpenPrinterA
GetJobA
DocumentPropertiesA
ClosePrinter

advapi32

GetUserNameA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegSetValueA

shell32

ShellExecuteA
ShellExecuteW
ExtractAssociatedIconA
SHGetFileInfoA
DragQueryFileA
DragQueryFileW
DragFinish
DragAcceptFiles
FindExecutableA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Shell_NotifyIconA
ExtractIconA
SHGetDesktopFolder
SHBrowseForFolderA
SHAppBarMessage
SHFileOperationA

comctl32

ImageList_AddMasked
ImageList_GetImageCount
ImageList_Draw
ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_Remove
ImageList_GetIconSize
ImageList_SetOverlayImage
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_GetIcon

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA

uxtheme

GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
OpenThemeData
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
DrawThemeText
CloseThemeData

ole32

CoGetClassObject
CoFreeUnusedLibraries
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleUninitialize
OleDuplicateData
StringFromCLSID
CoDisconnectObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CreateBindCtx
OleRun
CoUninitialize
CoCreateGuid
OleGetClipboard
DoDragDrop
OleLockRunning
ReleaseStgMedium
OleIsCurrentClipboard
OleFlushClipboard
OleInitialize
CLSIDFromProgID
CLSIDFromString
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoInitialize

oledlg

ord8

urlmon

CreateURLMoniker

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwind

api-ms-win-core-console-l1-1-0

ReadConsoleW
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP

Exports

Exports

BKA_Alloc
BKA_AppendMessage
BKA_B64Convert
BKA_Command
BKA_CompAttachFile
BKA_CompGetCharSet
BKA_CompGetHeader
BKA_CompGetSource
BKA_CompGetSpecifiedHeader
BKA_CompGetText
BKA_CompSetSource
BKA_CompSetSpecifiedHeader
BKA_CompSetText
BKA_ComposeMail
BKA_Connect
BKA_EUC_JP
BKA_Free
BKA_GetCharSet
BKA_GetCurrentFolder
BKA_GetCurrentMail
BKA_GetCurrentMailBox
BKA_GetDataFolder
BKA_GetFolderDisplayName
BKA_GetHeader
BKA_GetNextMail
BKA_GetSize
BKA_GetSource
BKA_GetSpecifiedHeader
BKA_GetStatus
BKA_GetTempFileName
BKA_GetTempFolder
BKA_GetText
BKA_GetVersion
BKA_GetWindowHandles
BKA_HZ_GB2312
BKA_ISO_2022_JP
BKA_ISO_2022_KR
BKA_ISO_8859_2
BKA_MIMEHeader
BKA_MoveMessages
BKA_MoveSelectedMessages
BKA_NextUnread
BKA_ProcessMail
BKA_QPConvert
BKA_ReAlloc
BKA_RegisterCommand
BKA_RegisterUICallback
BKA_SerializeRcpts
BKA_SetCurrentFolder
BKA_SetCurrentMail
BKA_SetCurrentMailBox
BKA_SetMessageText
BKA_SetSel
BKA_SetSource
BKA_SetSpecifiedHeader
BKA_SetStatus
BKA_SetText
BKA_UTF_7
BKA_UTF_8

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 999KB - Virtual size: 998KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18ffb967d6d056a8acca726d7d9ab989

Headers

DLL Characteristics

File Characteristics

Imports

winmm

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-string-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

oleaut32

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-privateprofile-l1-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-largeinteger-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-datetime-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-file-l2-1-2

api-ms-win-core-string-obsolete-l1-1-1

ws2_32

api-ms-win-core-file-l1-2-2

api-ms-win-core-debug-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-security-cryptoapi-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-synch-ansi-l1-1-0

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oledlg

urlmon

gdiplus

oleacc

imm32

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-console-l1-1-0

Exports

Exports

Sections

.text Size: 5.5MB - Virtual size: 5.5MB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 120KB - Virtual size: 257KB

.rsrc Size: 999KB - Virtual size: 998KB

.reloc Size: 332KB - Virtual size: 331KB

.text
Size: 5.5MB - Virtual size: 5.5MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 120KB - Virtual size: 257KB

.rsrc
Size: 999KB - Virtual size: 998KB

.reloc
Size: 332KB - Virtual size: 331KB