6c5eb4ef695eba59c9dd0a5d09a502b1a2159aeb79686d2f256274516c6306e1

Sharing

Copy URL

Twitter E-mail

General

Target

6c5eb4ef695eba59c9dd0a5d09a502b1a2159aeb79686d2f256274516c6306e1
Size

1.1MB
MD5

e0867183f55cfed60691b7b0fd60e6db
SHA1

32e681e7838e969d8c8da266cb297958564e3991
SHA256

6c5eb4ef695eba59c9dd0a5d09a502b1a2159aeb79686d2f256274516c6306e1
SHA512

94d28a42859d77089a21e17ab132d27fd2bc64dfdd8f4704495734e56855de7b63cb999ed1bdd979cdc42aa43c7e16a76cd9e8c0a2c2c3938d2bc433639deabe
SSDEEP

24576:sC7dVESvlbggH4UB19fBKbw0GcxwITTHJZFnh6wlgHEHaqasbf5EKJqR4:LTBVHTBKE0Gc+IT1ZFnh6wlgHEHaqas3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c5eb4ef695eba59c9dd0a5d09a502b1a2159aeb79686d2f256274516c6306e1

Files

6c5eb4ef695eba59c9dd0a5d09a502b1a2159aeb79686d2f256274516c6306e1
.dll windows:4 windows x64 arch:x64

20144c1f86d5e45fac3bd38cf03fb30f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libgcc_s_seh-1

_Unwind_Resume

kernel32

AreFileApisANSI
DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_chdir
_ctime64
_errno
_findclose
_findfirst64
_findnext64
_fullpath
_getcwd
_initterm
_localtime64
_lock
_mkdir
_mktime64
_setjmp
_stat64
_stricmp
_strnicmp
_time64
_unlock
_utime64
_unlink
abort
acos
asin
atan
atoi
calloc
cosh
div
fclose
fflush
fgets
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
isalnum
isalpha
iscntrl
isgraph
islower
ispunct
isspace
isupper
isxdigit
localeconv
log10
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
perror
rand
realloc
rename
sinh
srand
strcat
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
tan
tanh
tolower
toupper
vfprintf
wcslen

libwinpthread-1

pthread_attr_init
pthread_attr_setschedparam
pthread_create
pthread_join
pthread_mutex_lock
pthread_mutex_trylock
pthread_mutex_unlock
sem_destroy
sem_init
sem_post
sem_wait

libstdc++-6

_ZNSt6chrono3_V212steady_clock3nowEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7reserveEy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE8_M_eraseEyy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt28__throw_bad_array_new_lengthv
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZSt9terminatev
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_rethrow
__gxx_personality_seh0

sdl2

SDL_CloseAudio
SDL_GetError
SDL_OpenAudio
SDL_PauseAudio
SDL_memset

qt5core

_Z9qBadAllocv
_ZN10QArrayData10deallocateEPS_yy
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEyyy6QFlagsINS_16AllocationOptionEE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStreamlsEPKc
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEy
_ZN13QElapsedTimer5startEv
_ZN6QDebugD1Ev
_ZN6QMutex4lockEv
_ZN6QMutex6unlockEv
_ZN6QMutexD1Ev
_ZN6QTimer10singleShotEiPK7QObjectPKc
_ZN6QTimer11setIntervalEi
_ZN6QTimer16staticMetaObjectE
_ZN6QTimer7timeoutENS_14QPrivateSignalE
_ZN6QTimerC1EP7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString15toLatin1_helperERKS_
_ZN7QString16fromAscii_helperEPKci
_ZN7QString6numberEji
_ZN7QStringaSERKS_
_ZN9QIODevice5writeEPKc
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK13QElapsedTimer10hasExpiredEx
_ZNK14QMessageLogger5debugEv

Exports

Exports

CHR_HOUR
CHR_INPUT
CrossfireDriver
Current_max
Current_used
DSM2Driver
DSMPDriver
GhostDriver
L
Master_frequency
MultiDriver
Multi_Buffer
PpmDriver
Pxx1Driver
Pxx2Driver
SBusDriver
STR_16CH_WITHOUT_TELEMETRY
STR_16CH_WITH_TELEMETRY
STR_8CH_WITH_TELEMETRY
STR_ABOUTUS
STR_ABOUT_US
STR_ADCFILTERVALUES
STR_ADD_ALL_TRIMS_TO_SUBTRIMS
STR_ADD_MAIN_VIEW
STR_ADJUST_GVAR
STR_ADJUST_RTC
STR_AFHDS3_POWERS
STR_AFHDS3_PROTOCOLS
STR_AILERON
STR_ALARM
STR_ALARMSDISABLED
STR_ALARMSWARN
STR_ALARMS_LABEL
STR_ALARMWARNING
STR_ALTITUDE
STR_ALTSENSOR
STR_ANADIAGS_CALIB
STR_ANADIAGS_FILTRAWDEV
STR_ANADIAGS_MINMAX
STR_ANADIAGS_MOVE
STR_ANADIAGS_UNFILTRAW
STR_ANALOGS_BTN
STR_ANALOG_SERVO
STR_AND_SWITCH
STR_ANTENNA
STR_ANTENNACONFIRM1
STR_ANTENNACONFIRM2
STR_ANTENNAPROBLEM
STR_ANTENNA_MODES
STR_ASSIGN_BITMAP
STR_AUDIO_MUTE
STR_AUTH_FAILURE
STR_AUTOOFFSET
STR_AUX2_SERIAL_MODE
STR_AUX_SERIAL_MODE
STR_AUX_SERIAL_MODES
STR_AUX_SERIAL_PORT_POWER
STR_BACKGROUND_COLOR
STR_BACKLIGHT_LABEL
STR_BACKUP_MODEL
STR_BACKUP_PATH
STR_BAD_RADIO_DATA
STR_BAR1_COLOR
STR_BAR2_COLOR
STR_BATTERY
STR_BATTERYCHARGING
STR_BATTERYFULL
STR_BATTERYNONE
STR_BATTERYWARNING
STR_BATTERY_RANGE
STR_BATT_CALIB
STR_BATT_LABEL
STR_BAUDRATE
STR_BEEPCOUNTDOWN
STR_BEEPCTR
STR_BEEP_LENGTH
STR_BEEP_PITCH
STR_BEEP_VOLUME
STR_BG_VOLUME
STR_BIND
STR_BINDING_1_8_TELEM_OFF
STR_BINDING_1_8_TELEM_ON
STR_BINDING_9_16_TELEM_OFF
STR_BINDING_9_16_TELEM_ON
STR_BIND_OK
STR_BITMAP
STR_BLADES
STR_BLCOLOR
STR_BLDELAY
STR_BRIGHTNESS
STR_BT_SELECT_DEVICE
STR_BUTTON_INIT
STR_BYTES
STR_CAL
STR_CALIBRATION
STR_CALIB_DONE
STR_CELLINDEX
STR_CELLSENSOR
STR_CENTER
STR_CH
STR_CHANNEL2FAILSAFE
STR_CHANNELRANGE
STR_CHANNELS2FAILSAFE
STR_CHANNELS_MONITOR
STR_CHANS
STR_CHECKLIST
STR_CHECKLIST_INTERACTIVE
STR_CHECKTRIMS
STR_CLEAR
STR_COLLECTIVE
STR_CONFIRMDELETE
STR_CONFIRMRESET
STR_CONFIRM_FORMAT
STR_CONNECTED
STR_CONSTANT
STR_CONTRAST
STR_CONVERTING
STR_COPROC
STR_COPROC_TEMP
STR_COPY
STR_COPYINGMODEL
STR_COPY_FILE
STR_COPY_MIN_MAX_TO_OUTPUTS
STR_COPY_MODEL
STR_COPY_STICKS_TO_OFS
STR_COPY_TRIMS_TO_OFS
STR_COUNT
STR_COUNTDOWNVALUES
STR_COUNTRY_CODE
STR_COUNTRY_CODES
STR_CPU_TEMP
STR_CREATE_MODEL
STR_CRITICALALARM
STR_CRSF_BAUDRATE
STR_CURRENTSENSOR
STR_CURRENT_CALIB
STR_CURRENT_VERSION
STR_CURVE
STR_CURVE_PRESET
STR_CURVE_TYPES
STR_CUSTOM_THROTTLE_WARNING
STR_CUSTOM_THROTTLE_WARNING_VAL
STR_CV
STR_CYC_VSRCRAW
STR_DATE
STR_DEAD_ZONE
STR_DEBUG
STR_DEFAULT
STR_DEF_CHAN_ORD
STR_DELAY
STR_DELAYDOWN
STR_DELAYUP
STR_DELETE
STR_DELETEMODEL
STR_DELETE_ALL_SENSORS
STR_DELETE_ERROR
STR_DELETE_FILE
STR_DELETE_MODEL
STR_DEVICE_DATA_REFUSED
STR_DEVICE_FILE_ERROR
STR_DEVICE_FILE_REJECTED
STR_DEVICE_FILE_WRONG_SIG
STR_DEVICE_NO_RESPONSE
STR_DEVICE_RESET
STR_DEVICE_WRONG_REQUEST
STR_DIGITAL_SERVO
STR_DISABLE
STR_DISABLE_ALARM
STR_DISABLE_CH_MAP
STR_DISABLE_INTERNAL
STR_DISABLE_TELEM
STR_DISCOVER
STR_DISCOVER_SENSORS
STR_DISPLAY_TRIMS
STR_DREX
STR_DSM_PROTOCOLS
STR_DUPLICATE_MODEL
STR_DURATION
STR_DURATION_MS
STR_EDIT
STR_EEPROMOVERFLOW
STR_EEPROM_CONVERTING
STR_ELEVATOR
STR_ELIMITS
STR_EMERGENCY_MODE
STR_EMPTY
STR_ENABLE
STR_ENABLED_FEATURES
STR_ETRIMS
STR_EXECUTE_FILE
STR_EXIT
STR_EXPONAME
STR_EXTERNALRF
STR_EXTERNAL_MODULE
STR_EXT_ANTENNA
STR_EXT_MULTI_SPEC
STR_FADEIN
STR_FADEOUT
STR_FAILSAFE
STR_FAILSAFESET
STR_FAILSAFEWARN
STR_FAVORITE_LABEL
STR_FILE_OPEN
STR_FILE_SIZE
STR_FILTER
STR_FIRMWARE_OPTIONS
STR_FIRMWARE_UPDATE_ERROR
STR_FIRMWARE_UPDATE_SUCCESS
STR_FLASH_BLUETOOTH_MODULE
STR_FLASH_BOOTLOADER
STR_FLASH_DEVICE
STR_FLASH_ERASE
STR_FLASH_EXTERNAL_DEVICE
STR_FLASH_EXTERNAL_ELRS
STR_FLASH_EXTERNAL_MODULE
STR_FLASH_EXTERNAL_MULTI
STR_FLASH_FLIGHT_CONTROLLER_BY_EXTERNAL_MODULE_OTA
STR_FLASH_FLIGHT_CONTROLLER_BY_INTERNAL_MODULE_OTA
STR_FLASH_INTERNAL_MODULE
STR_FLASH_INTERNAL_MULTI
STR_FLASH_POWER_MANAGEMENT_UNIT
STR_FLASH_RECEIVER_BY_EXTERNAL_MODULE_OTA
STR_FLASH_RECEIVER_BY_INTERNAL_MODULE_OTA
STR_FLASH_RECEIVER_OTA
STR_FLASH_WRITE
STR_FLEX_868
STR_FLEX_915
STR_FLMODE
STR_FLYSKY_PULSE_PROTO
STR_FLYSKY_SERIAL_PROTO
STR_FLYSKY_TELEMETRY
STR_FM
STR_FORMATTING
STR_FORMULA
STR_FREE
STR_FREE_MEM_LABEL
STR_FREE_STACK
STR_FSGROUPS
STR_FS_BTN
STR_FUNC
STR_FUNCSOUNDS
STR_FUNCTION_SWITCHES
STR_FUNC_SW
STR_GF
STR_GHOST_MENU_LABEL
STR_GLOBALVAR
STR_GLOBAL_VAR
STR_GLOBAL_VARS
STR_GPS
STR_GPSFORMAT
STR_GPSSENSOR
STR_GPS_COORDS_FORMAT
STR_GPS_FIX_NO
STR_GPS_FIX_YES
STR_GPS_HDOP
STR_GPS_SATS
STR_GV
STR_GVARS
STR_HAPTIC_LABEL
STR_HARDWARE
STR_HEARTBEAT_LABEL
STR_HOLD
STR_HOLD_UPPERCASE
STR_HZ
STR_ID
STR_IGNORE_INSTANCE
STR_IMU
STR_IMU_LABEL
STR_IMU_MAX
STR_IMU_OFFSET
STR_INACTIVITYALARM
STR_INCDEC
STR_INCOMPATIBLE
STR_INPUTNAME
STR_INPUTS
STR_INSERT
STR_INSERT_AFTER
STR_INSERT_BEFORE
STR_INTERNALRF
STR_INTERNAL_MODULE
STR_INTERVAL
STR_INTERVAL_MS
STR_INT_GPS_LABEL
STR_INT_MULTI_SPEC
STR_INVALID_MODEL
STR_INVERTED
STR_INVERTED_SERIAL
STR_ISRM_RF_PROTOCOLS
STR_JACK_MODE
STR_JACK_MODES
STR_JITTER_FILTER
STR_KEYSTUCK
STR_KEYS_BTN
STR_LAYOUT
STR_LCD
STR_LENGTH
STR_LIMITS_HEADERS_DIRECTION
STR_LOADINGMODEL
STR_LOGS
STR_LOGS_EXT
STR_LOGS_PATH
STR_LOWALARM
STR_LUA_SCRIPTS_LABEL
STR_MAIN_COLOR
STR_MAX
STR_MAXBAUDRATE
STR_MEMORYWARNING
STR_MEM_USED_EXTRA
STR_MEM_USED_SCRIPT
STR_MEM_USED_WIDGET
STR_MENUCALIBRATION
STR_MENUCURVE
STR_MENUCURVES
STR_MENUCUSTOMFUNC
STR_MENUCUSTOMSCRIPTS
STR_MENUDEBUG
STR_MENUFLIGHTMODE
STR_MENUFLIGHTMODES
STR_MENUHELISETUP
STR_MENUINPUTS
STR_MENULIMITS
STR_MENULOGICALSWITCH
STR_MENULOGICALSWITCHES
STR_MENUMODELSEL
STR_MENUSENSOR
STR_MENUSPECIALFUNCS
STR_MENUSTAT
STR_MENUTELEMETRY
STR_MENUTOOLS
STR_MENUTORESET
STR_MENUTOSTART
STR_MENUTRAINER
STR_MENUVERSION
STR_MENUWHENDONE
STR_MENU_CHANNELS
STR_MENU_DISPLAY
STR_MENU_FIRM_OPTIONS
STR_MENU_FSWITCH
STR_MENU_GLOBAL_VARS
STR_MENU_GVARS
STR_MENU_HELI
STR_MENU_INPUTS
STR_MENU_INVERT
STR_MENU_LOGICAL_SWITCHES
STR_MENU_LUA
STR_MENU_MAX
STR_MENU_MIN
STR_MENU_MODEL_SETUP
STR_MENU_MODULES_RX_VERSION
STR_MENU_OTHER
STR_MENU_POTS
STR_MENU_POWER_METER
STR_MENU_RADIO_ANALOGS
STR_MENU_RADIO_ANALOGS_CALIB
STR_MENU_RADIO_ANALOGS_RAWLOWFPS
STR_MENU_RADIO_SWITCHES
STR_MENU_SPECTRUM_ANALYSER
STR_MENU_STICKS
STR_MENU_SWITCHES
STR_MENU_TELEMETRY
STR_MENU_TRAINER
STR_MENU_TRIMS
STR_MIN
STR_MINUTEBEEP
STR_MINUTE_PLURAL1
STR_MINUTE_PLURAL2
STR_MINUTE_SINGULAR
STR_MIRROR
STR_MIXERS_MONITOR
STR_MIXES
STR_MIXNAME
STR_MIXSOURCE
STR_MIXWARNING
STR_MIX_SLOW_PREC
STR_MMMINV
STR_MODE
STR_MODEL
STR_MODELIDUNIQUE
STR_MODELIDUSED
STR_MODELNAME
STR_MODELS
STR_MODELS_EXT
STR_MODELS_MOVED
STR_MODELS_PATH
STR_MODEL_MENU_TABS
STR_MODEL_SELECT
STR_MODEL_SHUTDOWN
STR_MODEL_STILL_POWERED
STR_MODESRC
STR_MODULE
STR_MODULE_BIND
STR_MODULE_BINDING
STR_MODULE_NO_INPUT
STR_MODULE_NO_SERIAL_MODE
STR_MODULE_NO_TELEMETRY
STR_MODULE_OPTIONS
STR_MODULE_PROTOCOLS
STR_MODULE_PROTOCOL_EU_WARN_LINE1
STR_MODULE_PROTOCOL_FCC_WARN_LINE1
STR_MODULE_PROTOCOL_FLEX_WARN_LINE1
STR_MODULE_PROTOCOL_WARN_LINE2
STR_MODULE_RANGE
STR_MODULE_RESET
STR_MODULE_STATUS
STR_MODULE_SYNC
STR_MODULE_TELEMETRY
STR_MODULE_TELEM_ON
STR_MODULE_UPGRADE
STR_MODULE_UPGRADE_ALERT
STR_MODULE_WAITFORBIND
STR_MONITOR_CHANNELS
STR_MONITOR_MIXER_DESC
STR_MONITOR_OUTPUT_DESC
STR_MONITOR_SCREENS
STR_MONITOR_SWITCHES
STR_MONTHS
STR_MORE_OPTIONS_AVAILABLE
STR_MOVE
STR_MOVESTICKSPOTS
STR_MOVE_DOWN
STR_MOVE_MODEL
STR_MOVE_UP
STR_MOVINGMODEL
STR_MS
STR_MULTIPLIER
STR_MULTI_AUTOBIND
STR_MULTI_BAYANG_OPTIONS
STR_MULTI_CUSTOM
STR_MULTI_DSM_AUTODTECT
STR_MULTI_DSM_CLONE
STR_MULTI_DSM_OPTIONS
STR_MULTI_FIXEDID
STR_MULTI_LNA_DISABLE
STR_MULTI_LOWPOWER
STR_MULTI_MAX_THROW
STR_MULTI_OPTION
STR_MULTI_POWER
STR_MULTI_PROTOCOLS
STR_MULTI_RFCHAN
STR_MULTI_RFPOWER
STR_MULTI_RFTUNE
STR_MULTI_SERVOFREQ
STR_MULTI_TELEMETRY
STR_MULTI_VIDFREQ
STR_MULTI_WBUS
STR_MULTI_WBUS_MODE
STR_MULTPX
STR_NA
STR_NAME
STR_NEEDS_FILE
STR_NEW_MODEL
STR_NO
STR_NODATA
STR_NOFREEEXPO
STR_NOFREEMIXER
STR_NONE
STR_NONE_UPPERCASE
STR_NORMAL
STR_NOT_CONNECTED
STR_NOT_INVERTED
STR_NO_BITMAPS_ON_SD
STR_NO_FAILSAFE
STR_NO_INFORMATION
STR_NO_MODELS_ON_SD
STR_NO_MODULE_INFORMATION
STR_NO_PICTURE
STR_NO_SCRIPTS_ON_SD
STR_NO_SDCARD
STR_NO_SOUNDS_ON_SD
STR_NO_TELEMETRY_SCREENS
STR_NO_TOOLS
STR_NO_TX_OPTIONS
STR_OFF
STR_OFFON
STR_OFFSET
STR_OK
STR_ONLYPOSITIVE
STR_ON_ONE_SWITCHES
STR_OPENTX_UPGRADE_REQUIRED
STR_OPEN_CHANNEL_MONITORS
STR_OPTIONS
STR_OTA_UPDATE
STR_OTA_UPDATE_ERROR
STR_OUTPUTS
STR_OWN
STR_OWNER_ID
STR_PASTE
STR_PASTE_AFTER
STR_PASTE_BEFORE
STR_PATH_TOO_LONG
STR_PERIOD
STR_PERSISTENT
STR_PHASENAME
STR_PIN
STR_PITCH_AT_MAX
STR_PITCH_AT_ZERO
STR_PLAY_FILE
STR_PLAY_HELLO
STR_PLAY_TRACK
STR_PLAY_VALUE

Sections

.text
Size: 829KB - Virtual size: 829KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20144c1f86d5e45fac3bd38cf03fb30f

Headers

DLL Characteristics

File Characteristics

Imports

libgcc_s_seh-1

kernel32

msvcrt

libwinpthread-1

libstdc++-6

sdl2

qt5core

Exports

Exports

Sections

.text Size: 829KB - Virtual size: 829KB

.data Size: 1024B - Virtual size: 848B

.rdata Size: 163KB - Virtual size: 162KB

.pdata Size: 28KB - Virtual size: 28KB

.xdata Size: 28KB - Virtual size: 27KB

.bss Size: - Virtual size: 38KB

.edata Size: 92KB - Virtual size: 91KB

.idata Size: 8KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 829KB - Virtual size: 829KB

.data
Size: 1024B - Virtual size: 848B

.rdata
Size: 163KB - Virtual size: 162KB

.pdata
Size: 28KB - Virtual size: 28KB

.xdata
Size: 28KB - Virtual size: 27KB

.bss
Size: - Virtual size: 38KB

.edata
Size: 92KB - Virtual size: 91KB

.idata
Size: 8KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 9KB - Virtual size: 8KB