62684fc22836ec4cb8e1e12d4c3ed7454dd5c7b756610ecd9fae9d0165e851fc[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

62684fc22836ec4cb8e1e12d4c3ed7454dd5c7b756610ecd9fae9d0165e851fc.exe
Size

424KB
MD5

88d5f01c223c61b8d33c916456a33650
SHA1

38d24400e8fdceecdfc8d49028a7b5191703c404
SHA256

62684fc22836ec4cb8e1e12d4c3ed7454dd5c7b756610ecd9fae9d0165e851fc
SHA512

bdea57e29847503a248f58f604000c88a988fadcb7baaab6040b5a18174eda105a3a3fc945ecf98a782e00fa6c3662b88a9f057970e92b0b7fcd8c2a447a334e
SSDEEP

6144:hzGfA7TNi73NuwFsEqWjU6HzGUtxWoYr4r+e5/qyYpWE0ao98bJ6zU6iT:sATNicEqWjU6iUtx5Yr4dtN8kzU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
62684fc22836ec4cb8e1e12d4c3ed7454dd5c7b756610ecd9fae9d0165e851fc.exe

Files

62684fc22836ec4cb8e1e12d4c3ed7454dd5c7b756610ecd9fae9d0165e851fc.exe
.dll windows:4 windows x86 arch:x86

81d54811b6253a62102ee664837329ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hibase

?BA_AddItem@@YAHPAUItemDesc@@@Z
?CMD_ExecuteCommand2@@YAHPBDP6AX0PAX@Z1@Z
?BA_SetMaxFrames@@YAXJ@Z
?DLG_GetMarkpointDialogAllowSize@@YAHPBD0H@Z
?BA_MaxFrames@@YAJXZ
?GetProcedure@SymbolTable@@QAEHKPAVItemInfo@@@Z
??4ItemInfo@@QAEAAV0@ABV0@@Z
?GetName@ItemInfo@@QAEHPADJ@Z
?GetModule@SymbolTable@@QAEHKPAVItemInfo@@@Z
?GetGlobalVariable@SymbolTable@@QAEHUAddress@@PAVItemInfo@@PADH@Z
?BA_AddFrame@@YAHJPAXJ@Z
?BA_GetFrameNumber@@YAPAEJ@Z
L_Reverse
L_Iteration
HEAP_Release
StdOutOfMemHandler
HEAP_Create
?Remove@Context@@QAEHPAVComponent@@@Z
?FreeComponent@@YAXPAVComponent@@@Z
?LoadComponent@@YAPAVComponent@@PBD0@Z
?Include@Context@@QAEHPAVComponent@@@Z
??0ItemInfo@@QAE@XZ
?GetModule@SymbolTable@@QAEHUAddress@@PAVItemInfo@@@Z
?GetProcessorType@ItemInfo@@QAEHPAW4GD_PROCESSOR_TYPE@@@Z
??1ItemInfo@@QAE@XZ
?StartReplayWithProgressBar@@YAHPBDH@Z
?RunTarget@@YAHPAVCMainFrame@@PAVContext@@@Z
L_Create
L_Remove
L_FreeList
?GetTheTarget@@YAPAVTarget@@XZ
L_First
L_Next
L_Nop
L_InsertData
?DLG_CreateProgressDlg@@YAHPAD0@Z
?DLG_SetLoadProgress@@YAHK@Z
?DLG_CloseLoadProgress@@YAHXZ
?DSC_NextSymbol@@YAHPAUtagSC_Reader@@@Z
HU_CopyStringDotDotDot
?DSC_ReadCString@@YAHAAVCString@@PAUtagSC_Reader@@@Z
?DSC_ReadString@@YAHPAUtagSC_Reader@@PADH@Z
FE_GetBytes
FE_freopen
FE_fopen
?DSC_InitFileScanner@@YAPAUtagSC_Scanner@@P6AHPAEHPAX@Z1P6AXPAUtagSC_Reader@@PBD1@Z14@Z
SC_OpenReader2
SC_Enter
SC_CloseReader
SC_Close
FE_Close
?DSC_Same@@YAHPBD0@Z
?DSC_ReadFileName@@YAHPAUtagSC_Reader@@PADH@Z
?DSC_GetNumberBase@@YAHXZ
?DSC_SetNumberBase@@YAXH@Z
?HB_WriteProjectValue@@YAHPBD0JH@Z
?StartReplay@@YAHPBDH@Z
SD_Wait
DB_MessageBox
?CL_Message@@YAXPADZZ
?HB_ReadProjectValue@@YAHPBD0PAJJ@Z
?DSC_Expression@@YAHPAUtagSC_Reader@@AAUEE_ExpVal@@HP6AHPBD1PAX@Z3@Z
FE_AppendFileOrDirName
FE_FileExists
??0DLG_ShowAddress@@QAE@PAVCWnd@@P6AHPAUtagSC_Reader@@AAUEE_ExpVal@@HP6AHPBD2PAX@Z4@Z@Z
?ExecCommandTableH@@YAHPAVComponent@@PBDPBUDisp_CmdTableH@@@Z
?DisplayShortHelp@@YAXPAVComponent@@PBDPBUDisp_CmdTableH@@@Z
?GetCpuFile@Target@@QAEHPAPAVCpuFile@@@Z
?Update@Context@@QAEXHPAUArgument@@@Z
SC_GetNumber
?DisplayString@@YAXPBDH@Z
?DSC_WhichSelection@@YAHPAUtagSC_Reader@@PAD@Z
?DSC_EndReached@@YAHPAUtagSC_Reader@@PBD@Z
?DSC_Scan@@YAHPAUtagSC_Reader@@@Z
?DisplayVersionInfo@@YAXPBDJ0@Z
HU_strcat
?BA_RemoveAllItems@@YAXXZ
?GetControlPointList@Context@@QAEPAVCTRLPT_ControlPointList@@XZ
?ClearAllBreakpointsOfTarget@CTRLPT_ControlPointList@@QAEHXZ
?ClearAllWatchpointsOfTarget@CTRLPT_ControlPointList@@QAEHXZ
?ActivateBreakpoints@@YAHPAVContext@@@Z
?HHELP_GetSingleHelpIdInCurrentTargetChmHelpFile@@YAHPBDPAI@Z
?CMD_ExecuteCmd@@YAHPBD@Z
?GetTargetMenu@@YAPAUHMENU__@@PAU1@PAH@Z
?ResetTargetMenu@@YAHXZ
?GetValue@CpuFile@@QAEHPAJPBDJ@Z
?ChangeMenuName@@YAHPAUHMENU__@@0HPBD@Z
SD_GetTimeResolution
?CL_Error@@YAXPADZZ
?CL_Printf@@YAXPADZZ
SD_GetTime
SD_SetTimeout
SD_Timeout
?Reset@Target@@UAEHXZ
?GetTheContext@@YAPAVContext@@XZ
?Execute@Context@@QAEHHPAUArgument@@@Z
ADRUTIL_ConvertAddressSpaceSpace
FE_SplitFileName
?GetApplicationDir@@YAPBDXZ
FE_BuildFileName
?CheckIfValueItemListedInSection@CpuFile@@QAEHPBDJ@Z
?GetMcuSectionName@CpuFile@@QAE?AVCString@@J@Z
?SelectSection@CpuFile@@QAEHPBD@Z
?GetString@CpuFile@@QAEHPAHPBDHPAD@Z
?GetTheSymbolTable@@YAPAVSymbolTable@@XZ
?SB_AppendStatusItemCallback@@YAHHHP6AHW4SB_ClickKind@@PAX1@Z1@Z
?SB_SetStatusText@@YAXHPBD@Z
?SB_AppendStatusItem@@YAHHH@Z
?UpdateComponents@@YAXHPAUArgument@@@Z
?SB_DeleteStatusItem@@YAHH@Z
??0Target@@QAE@PAD@Z
DB_IgnoreMessages
HE_GetValue
??1Target@@UAE@XZ
?Name@Component@@UAEPADXZ
?Type@Target@@UAEHXZ
?Execute@Component@@UAEHHPAUArgument@@@Z
?GetComponentPrintFct@Component@@UAEPAXXZ
?SetMode@Target@@UAEXXZ
?CheckCpu@Target@@UAEHPADH0@Z
?SetCpu@Target@@UAEHPBD@Z
?FreeCPU@Target@@UAEHXZ
?GetCpu@Target@@UAEPAVCPU@@XZ
?WriteQuad@Target@@UAEHUAddress@@_JH@Z
?ReadQuad@Target@@UAEHUAddress@@PA_JH@Z
?GetRegisterN@Target@@UAEHJPAEHAAH@Z
?SetRegisterN@Target@@UAEHJPBEH@Z
?GetProgramCounter@Target@@EAEHPAK@Z
?SetProgramCounter@Target@@EAEHK@Z
?SingleStep@Target@@EAEHPAK@Z
?StatusChanged@Target@@UAEHPAJPAUAddress@@@Z
??4CTRLPT_Condition@@QAEAAV0@ABV0@@Z
??4CTRLPT_Command@@QAEAAV0@ABV0@@Z
??1SymbolTable@@UAE@XZ
??1IOBase@@UAE@XZ
?Type@IOBase@@UAEHXZ
?GetNofValues@IOBase@@UAEKXZ
?GetValueIndex@IOBase@@UAEKPBD@Z
?GetValueName@IOBase@@UAEPBDK@Z
?GetValue@IOBase@@UAEHKPAVParam@@H@Z
?SetValue@IOBase@@UAEHKPAVParam@@H@Z
?EnumValues@IOBase@@UAEHP6AHPBDPAVParam@@@Z@Z
?Execute@IOBase@@MAEHHPAUArgument@@@Z
?Read@IOBase@@MAEHKAAKHH@Z
?Read@IOBase@@MAEHKAAKH@Z
?Write@IOBase@@MAEHKKHH@Z
?BA_InitDataBase@@YAXP6AJXZP6AXJ@ZP6AHJ@Z@Z
?BAM_EnumerateMenus@@YAXP6AXPAUHMENU__@@@Z@Z
?BAM_InstallTargetProcs@@YAXP6AXPAUHMENU__@@@ZP6AJIJ@Z@Z
?Execute@@YAHHPAUArgument@@@Z
SD_Deallocate
?BA_FreeDataBase@@YAXXZ
?GetMarkpointType@CTRLPT_MarkPoint@@QAEHXZ
?GetName@CTRLPT_MarkPoint@@QBEPBDXZ
?GetSize@CTRLPT_ControlPoint@@QAEJXZ
?GetAddress@CTRLPT_ControlPoint@@QAE?AUAddress@@XZ
L_Empty
?ListOfMarkpoints@CTRLPT_ControlPointList@@QAEPAUL_Desc@@XZ
?GetTheControlPointList@@YAPAVCTRLPT_ControlPointList@@XZ
SD_Allocate
?HB_ReadProjectString@@YAHPBD0HPAD@Z
?DLG_CreateLoadProgressDlg@@YAHPADK@Z
?Create@IOBase@@QAEHPBDKPAUIOB_ItemData@@@Z
??0IOBase@@QAE@PBD0@Z
?Destroy@IOBase@@QAEXXZ
?Changed@IOBase@@IAEXHKH@Z
?HIW_GetPrivateProfileString@@YAIPBD00PADI0@Z
?GetProjectFile@@YAPBDXZ
?Write@IOBase@@MAEHKKH@Z
?Reset@IOBase@@MAEHPAUArgument@@@Z
?IOBaseReserved1@IOBase@@EAEHXZ
?IOBaseReserved2@IOBase@@EAEHXZ
?IOBaseReserved3@IOBase@@EAEHXZ
?OP_GetObject@@YAPAVObject@@PAVValue@@@Z
??1Object@@UAE@XZ
?Name@Object@@UAEPBDXZ
?HIW_WritePrivateProfileString@@YAHPBD000@Z
?DSC_IdentString@@YAPADPAUtagSC_Reader@@@Z
?DSC_IsEndReached@@YAHPAUtagSC_Reader@@@Z
?IOR_CalculateMemoryBlocks@@YAHPAUL_Desc@@@Z
?IO_InitRegFile@@YAHPBD@Z
HHELP_GetSingleChmHelpId
HE_WhichByKey
DB_ShowPopupDialogs
?PutString@CpuFile@@QAEHPBD0@Z
?GetWholeSection@CpuFile@@QAEIPBDPAVCString@@@Z
?HHELP_GetSingleHelpId@@YAHPBDIAAI@Z
?GetWorkingDir@@YAPBDXZ
?GetTheCpu@@YAPAVCPU@@XZ
?DLG_SetProgressLabel@@YAHPADK@Z
?HB_WriteProjectString@@YAHPBD00@Z
?GetEntryPointAddress@SymbolTable@@QAE?AUAddress@@XZ
?DLG_CreateProgressDlgNoCancel@@YAHPAD0@Z
?Type@Object@@UAEHXZ
?GetNofValues@Object@@UAEKXZ
?GetValueIndex@Object@@UAEKPBD@Z
?GetValueName@Object@@UAEPBDK@Z
?GetValue@Object@@UAEHPAVValue@@PAVParam@@H@Z
?GetValue@Object@@UAEHKPAVParam@@H@Z
?SetValue@Object@@UAEHPAVValue@@PAVParam@@H@Z
?SetValue@Object@@UAEHKPAVParam@@H@Z
?EnumValues@Object@@UAEHP6AHPBDPAVParam@@@Z@Z
?Notify@Object@@UAEHHPAVParam@@@Z
?ChangedName@Object@@UAEHXZ
?RequestSubscription@Object@@UAEHKPAHPAK@Z
?Subscribe@Object@@UAEHHKKH@Z
?Unsubscribe@Object@@UAEHHKKH@Z
?Execute@Object@@UAEHHPAUArgument@@@Z
?Execute@Object@@UAEHPAD@Z
?Update@Object@@UAEXHPAUArgument@@@Z
DB_MsgBox
HU_StrCmpNoCase
DB_Message
HU_strncpy
?CMD_CommandLine_Msg@@YAXW4MSGCmdLine_Kind@@PAUtagSC_Reader@@PBDZZ

mfc42

ord342
ord1182
ord858
ord641
ord1253
ord941
ord939
ord5265
ord4376
ord4853
ord537
ord2818
ord540
ord768
ord800
ord860
ord1168
ord823
ord2514
ord535
ord1086
ord3089
ord4809
ord562
ord2860
ord5789
ord6605
ord6880
ord4299
ord816
ord4275
ord2080
ord4287
ord2915
ord2379
ord2864
ord542
ord802
ord3302
ord6762
ord2089
ord4243
ord693
ord3640
ord4402
ord2582
ord3874
ord4258
ord656
ord3610
ord3361
ord4284
ord2763
ord4123
ord3582
ord4398
ord2578
ord4218
ord2023
ord2411
ord4204
ord3998
ord6007
ord6907
ord3996
ord6569
ord3301
ord4674
ord1669
ord5981
ord2652
ord2302
ord567
ord609
ord3574
ord4424
ord3402
ord5290
ord4396
ord2575
ord3639
ord4401
ord2581
ord4219
ord2024
ord2413
ord6366
ord1771
ord2038
ord6215
ord355
ord2515
ord3499
ord491
ord4742
ord4202
ord2764
ord6648
ord616
ord692
ord6876
ord4259
ord497
ord1008
ord771
ord4431
ord2054
ord4439
ord5288
ord1776
ord6055
ord1690
ord4715
ord1908
ord6334
ord489
ord4835
ord5287
ord4854
ord4377
ord4358
ord4948
ord4976
ord4905
ord5160
ord5162
ord5161
ord1907
ord2528
ord6199
ord2642
ord3092
ord4710
ord4234
ord2301
ord2370
ord324
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord4998
ord825

msvcrt

_initterm
_vsnprintf
sprintf
exit
memmove
_purecall
strncpy
strstr
sscanf
_mbscmp
toupper
free
malloc
_ftol
__dllonexit
_onexit
_adjust_fdiv
__CxxFrameHandler
?terminate@@YAXXZ
_except_handler3

kernel32

FormatMessageA
GetLastError
LoadLibraryA
LoadLibraryExA
GetProcAddress
Sleep
FreeLibrary

user32

ModifyMenuA
AppendMenuA
EnableWindow
SendMessageA
CreateMenu
CreatePopupMenu
RemoveMenu
wsprintfA
RedrawWindow
GetClientRect
UpdateWindow
GetFocus
DispatchMessageA
TranslateMessage
GetKeyState
GetParent
PostMessageA

gdi32

GetTextExtentPoint32A

msvcp60

??0_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1_Lockit@std@@QAE@XZ

Exports

Exports

??0IOBase@@QAE@ABV0@@Z
??0Object@@QAE@ABV0@@Z
??0Param@@QAE@W4ParamType@@J@Z
??0Param@@QAE@XZ
??0SymbolTable@@QAE@ABV0@@Z
??0Value@@QAE@PBD@Z
??4CTRLPT_BreakPoint@@QAEAAV0@ABV0@@Z
??4CTRLPT_ControlPoint@@QAEAAV0@ABV0@@Z
??4CTRLPT_MarkPoint@@QAEAAV0@ABV0@@Z
??4CTRLPT_WatchPoint@@QAEAAV0@ABV0@@Z
??4IOBase@@QAEAAV0@ABV0@@Z
??4Object@@QAEAAV0@ABV0@@Z
??4Param@@QAEAAV0@ABV0@@Z
??4SymbolTable@@QAEAAV0@ABV0@@Z
??4Value@@QAEAAV0@ABV0@@Z
??_7IOBase@@6B@
??_7Object@@6B@
??_7SymbolTable@@6B@
??_FDLG_ShowAddress@@QAEXXZ
?AddSoftTrace2@Target@@QAEHPAVSoftTraceCB@1@@Z
?AttachRequest@Target@@UAEHPAUTB_TimeEvent2@@_K@Z
?CheckInternalIndex@IOBase@@ABEHH@Z
?CheckMemory@Target@@UAEHABUAddress@@0PBDW4MemType@@@Z
?CheckSum@Target@@UAEHUAddress@@JPAJ@Z
?CheckValid@ItemInfo@@AAEHH@Z
?CheckValid@ItemInfo@@ABEHH@Z
?Control@Target@@UAEHW4TargetOp@@@Z
?DeleteAllWatchpoints@Target@@UAEHXZ
?DeleteWatchpoint@Target@@UAEHUAddress@@@Z
?ExecuteMenuCommand@Target@@UAEHI@Z
?ExecuteTargetCommandFile@Target@@UAEHI@Z
?FillMemoryQ@Target@@UAEHUAddress@@JHPADH@Z
?FindQ@Target@@UAEHUAddress@@KPBEKPAU2@PAH@Z
?GetAllWatchpoints@Target@@UAEHPAUAddress@@PAJ1J@Z
?GetClock2@Target@@QAEHPA_K@Z
?GetClock@Target@@EAEHPAK@Z
?GetCurValue@IOBase@@IBEKH@Z
?GetFlags@Target@@UAEHUAddress@@PAE@Z
?GetLastAccessError@Target@@UAEHPAUAddress@@PAK@Z
?GetReads@Target@@UAEHUAddress@@PAK@Z
?GetStatusString@Target@@UAEHJPADI@Z
?GetTargetHelpFile@Target@@UAEHPAPAD@Z
?GetTargetHelpFileHelpId@Target@@UAEHIPAI@Z
?GetTargetName@IOBase@@IBEPBDXZ
?GetValue@Value@@QAEHPAVParam@@H@Z
?GetValueAddress@IOBase@@IBEKH@Z
?GetValueName@IOBase@@IBEPBDH@Z
?GetWatchpoint@Target@@UAEHUAddress@@PAJ1@Z
?GetWrites@Target@@UAEHUAddress@@PAK@Z
?InstallMenu@Target@@UAEHPAUHMENU__@@@Z
?InstallSoftTrace@Target@@EAEHP6AXJJPAEH@Z@Z
?KillRequest@Target@@UAEHPAUTB_TimeEvent2@@@Z
?MaxWatchpoints@Target@@UAEJXZ
?MoveMemoryQ@Target@@UAEHUAddress@@0HJ@Z
?ObjectReserved1@Object@@EAEHXZ
?ObjectReserved2@Object@@EAEHXZ
?ObjectReserved3@Object@@EAEHXZ
?ReleaseCache@Target@@UAEHXZ
?RemoveSoftTrace2@Target@@QAEHPAVSoftTraceCB@1@@Z
?RemoveSoftTrace@Target@@EAEHXZ
?Reserved1@Target@@UAEHPAX@Z
?Reserved2@Target@@UAEHPAX@Z
?Reserved3@Target@@UAEHPAX@Z
?Reserved4@Target@@UAEHPAX@Z
?ResetFlags@Target@@UAEHE@Z
?ResetStat@Target@@UAEHXZ
?SetClock2@Target@@QAEH_K@Z
?SetClock@Target@@EAEHK@Z
?SetCurValue@IOBase@@IAEXHK@Z
?SetName@Value@@QAEXPBD@Z
?SetTargetHelpFile@Target@@UAEHPBD@Z
?SetValue@Value@@QAEHPAVParam@@H@Z
?SetWatchpoint@Target@@UAEHUAddress@@JJJJPAD@Z
?TargetCapabilities@Target@@UAEHJPAJ@Z
?WaitUntilStopped@Target@@UAEHKK@Z
GetCompVersions
GetComponent
GetComponentInfo

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81d54811b6253a62102ee664837329ea

Headers

File Characteristics

Imports

hibase

mfc42

msvcrt

kernel32

user32

gdi32

msvcp60

Exports

Exports

Sections

.text Size: 292KB - Virtual size: 289KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 40KB - Virtual size: 72KB

.rsrc Size: 24KB - Virtual size: 20KB

.reloc Size: 24KB - Virtual size: 22KB

.text
Size: 292KB - Virtual size: 289KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 40KB - Virtual size: 72KB

.rsrc
Size: 24KB - Virtual size: 20KB

.reloc
Size: 24KB - Virtual size: 22KB