Behavioral task
behavioral1
Sample
SKIBIDI TOILET SIGHTING IN OHIO WITH NO RIZZ.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bruh i look gay.exe
Resource
win7-20240704-en
Behavioral task
behavioral3
Sample
gay wee wee simulator.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
guy commits mass puking on pizza, what the fuck must watch before i delete it mp4.exe
Resource
win7-20240708-en
Behavioral task
behavioral5
Sample
piss ur pants nigga.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
poo poo wee wee cock.exe
Resource
win7-20240705-en
Behavioral task
behavioral7
Sample
super mario 666.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
ur mother is literally so ugly bro like fuck u nigga boi.exe
Resource
win7-20240705-en
General
-
Target
Downloads.rar
-
Size
1.8MB
-
MD5
551a94a71ba518285063f528c08cf362
-
SHA1
7fa63aca7a52d9ff2725fc1dfd1fa63172db8547
-
SHA256
4f32899fdcb93cd2f663f0bb7d263a1af5f42975ccd6e2100328c09afbd499f0
-
SHA512
049c3ea308b4faa943be4392580e273c4e6c01d74a39b75f79bd7519f2a24657e3062b64094fa98c5ce67b397bb595e734aac7ded5c2b37555ea4eb41564cbde
-
SSDEEP
24576:RAvgakRPbv2q/2mTXBCvPJitv6VAehSDAYk9oa9XyBWgRT91ZMkgrEhG:RDgaTTXBC3YSSeh/3IXxZMkgrt
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule static1/unpack001/poo poo wee wee cock.exe family_gh0strat -
Gh0strat family
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/SKIBIDI TOILET SIGHTING IN OHIO WITH NO RIZZ.exe unpack001/bruh i look gay.exe unpack001/gay wee wee simulator.exe unpack001/guy commits mass puking on pizza, what the fuck must watch before i delete it mp4.exe unpack001/piss ur pants nigga.exe unpack001/poo poo wee wee cock.exe unpack001/super mario 666.exe unpack001/ur mother is literally so ugly bro like fuck u nigga boi.exe
Files
-
Downloads.rar.rar
-
SKIBIDI TOILET SIGHTING IN OHIO WITH NO RIZZ.exe.exe windows:4 windows x86 arch:x86
5ff6798c8d97a05428c5a1fa96a10e2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterDeviceNotificationA
CheckRadioButton
IsClipboardFormatAvailable
FlashWindowEx
LoadMenuW
SetDebugErrorLevel
GetAltTabInfo
DdeSetUserHandle
DefWindowProcW
InsertMenuW
ReplyMessage
IntersectRect
CharLowerBuffW
SetTimer
DlgDirListComboBoxW
MessageBoxA
ValidateRect
BringWindowToTop
MessageBoxExW
RegisterClassExA
DestroyWindow
GetDlgItemInt
ShowWindow
SetDlgItemTextW
LoadAcceleratorsW
LookupIconIdFromDirectory
CheckMenuRadioItem
SetShellWindow
ActivateKeyboardLayout
ShowOwnedPopups
RemovePropA
EnumDisplayDevicesA
ShowCaret
DrawEdge
DialogBoxParamA
AnimateWindow
PostMessageA
RemoveMenu
GetPropA
CloseWindowStation
RealChildWindowFromPoint
SendDlgItemMessageA
DefDlgProcW
CreateWindowExA
UnhookWinEvent
CharUpperA
ImpersonateDdeClientWindow
RegisterClassA
DialogBoxIndirectParamA
CharUpperBuffA
DdeQueryStringW
kernel32
LCMapStringW
GetExitCodeProcess
GetStdHandle
SetWaitableTimer
GetACP
GetTimeZoneInformation
InterlockedExchange
SetLastError
ReleaseMutex
VirtualFreeEx
VirtualQuery
GetModuleHandleA
HeapCreate
SetConsoleCtrlHandler
TlsSetValue
GetCurrentProcess
EnumSystemLocalesA
GetStartupInfoA
GetProfileSectionA
GetModuleFileNameA
GetDriveTypeW
HeapSize
ExpandEnvironmentStringsW
FindResourceW
GetPrivateProfileStringA
HeapFree
WritePrivateProfileStringA
SetFileAttributesW
GetLocaleInfoW
GetDateFormatA
TlsFree
FreeEnvironmentStringsW
LoadLibraryA
VirtualFree
QueryPerformanceCounter
GetCurrentThread
GetStringTypeA
GetProcAddress
lstrcat
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
CloseHandle
lstrcmpA
VirtualProtect
IsDebuggerPresent
Sleep
CommConfigDialogW
SetEnvironmentVariableA
OpenMutexA
ReadFile
MoveFileW
FlushConsoleInputBuffer
WriteConsoleOutputCharacterW
SetStdHandle
WriteFile
EnumDateFormatsExW
InterlockedIncrement
GetLocaleInfoA
GetProcessShutdownParameters
SetConsoleMode
GetConsoleCursorInfo
CreateSemaphoreW
GetShortPathNameA
HeapReAlloc
FreeEnvironmentStringsA
CreateFileW
FindAtomA
GetTimeFormatA
GlobalDeleteAtom
GetStringTypeW
GetVersionExA
TlsAlloc
ExitProcess
HeapDestroy
LeaveCriticalSection
GetCPInfo
CreateFileMappingW
FreeLibraryAndExitThread
CompareStringA
lstrcmpiA
CreateEventW
OpenWaitableTimerW
GetLastError
VirtualAlloc
DeleteCriticalSection
HeapAlloc
GetEnvironmentStrings
IsValidCodePage
GetFileAttributesExW
SetHandleCount
GetOEMCP
RtlZeroMemory
UnhandledExceptionFilter
GetCommandLineA
InitializeCriticalSection
GetSystemInfo
ReadConsoleInputA
MultiByteToWideChar
FormatMessageA
ReleaseSemaphore
LCMapStringA
WideCharToMultiByte
IsBadWritePtr
FlushFileBuffers
GetUserDefaultLCID
AllocConsole
IsValidLocale
SetFilePointer
RtlUnwind
EnterCriticalSection
GetCurrentThreadId
TerminateProcess
TlsGetValue
GetStringTypeExA
GetFileType
CreateMutexA
CompareStringW
GetEnvironmentStringsW
ReadConsoleOutputCharacterW
lstrcmpi
lstrlen
comctl32
ImageList_Copy
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_Destroy
ImageList_GetImageRect
ImageList_Remove
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_Add
ImageList_LoadImageA
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bruh i look gay.exe.exe windows:4 windows x86 arch:x86
a4742251f16a0b61a91a7a23df823bb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
VirtualQuery
LoadLibraryA
SetConsoleScreenBufferSize
RtlUnwind
GetSystemTimeAdjustment
QueryPerformanceCounter
GetCurrentProcess
GetProcAddress
VirtualAlloc
GetCurrentThreadId
EnumCalendarInfoW
HeapReAlloc
HeapAlloc
EnumSystemLocalesW
GetSystemTimeAsFileTime
HeapFree
InterlockedExchange
GetModuleFileNameA
TerminateProcess
GetModuleHandleA
ExitProcess
GetTickCount
wininet
InternetTimeFromSystemTimeA
HttpEndRequestW
FindFirstUrlCacheEntryW
DeleteUrlCacheEntryA
InternetTimeToSystemTimeW
DeleteUrlCacheEntry
InternetFindNextFileW
InternetReadFileExW
FindFirstUrlCacheContainerA
HttpAddRequestHeadersW
SetUrlCacheHeaderData
UnlockUrlCacheEntryFileW
InternetOpenUrlW
InternetAutodial
GetUrlCacheEntryInfoExA
IsUrlCacheEntryExpiredA
GopherGetLocatorTypeW
InternetGetConnectedState
SetUrlCacheEntryGroupW
InternetGoOnlineW
advapi32
RegSetValueA
RegReplaceKeyW
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
gay wee wee simulator.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
guy commits mass puking on pizza, what the fuck must watch before i delete it mp4.exe.exe windows:4 windows x86 arch:x86
d5fbda41f5f7cae97243b8aa6336c3f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetUserDefaultLCID
GetVolumeInformationW
SetConsoleTitleA
GetStartupInfoA
SetConsoleCP
HeapAlloc
LoadLibraryA
TlsSetValue
SetConsoleCtrlHandler
WideCharToMultiByte
SetEnvironmentVariableA
GetModuleHandleW
GetACP
TlsFree
TlsGetValue
FreeEnvironmentStringsW
GetStringTypeW
GetTimeFormatA
WriteConsoleA
Sleep
GetDateFormatA
GetTimeZoneInformation
GetEnvironmentStrings
WriteConsoleOutputAttribute
HeapSize
VirtualFree
GetStringTypeA
GetProcAddress
CompareStringW
GetStdHandle
HeapFree
SetCurrentDirectoryA
GetCurrentThread
EnumSystemCodePagesW
InitializeCriticalSectionAndSpinCount
VirtualQuery
MultiByteToWideChar
InterlockedDecrement
SetLastError
FreeLibrary
InterlockedIncrement
UnhandledExceptionFilter
GetOEMCP
HeapReAlloc
LeaveCriticalSection
ExitProcess
CompareStringA
SetVolumeLabelW
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
IsValidLocale
GetModuleHandleA
GetLastError
IsDebuggerPresent
IsValidCodePage
GetCurrentThreadId
SetUnhandledExceptionFilter
WriteFile
GetCommandLineA
GetLocaleInfoA
GetCurrentProcessId
GetModuleFileNameA
LCMapStringA
GetCPInfo
GetStartupInfoW
GetTickCount
HeapDestroy
EnumSystemLocalesA
GetFileType
TlsAlloc
SetHandleCount
RtlUnwind
GetEnvironmentStringsW
GetSystemTimeAsFileTime
InterlockedExchange
LCMapStringW
EnterCriticalSection
DeleteCriticalSection
GetLocaleInfoW
LocalSize
HeapCreate
gdi32
EnumFontFamiliesA
GetEnhMetaFilePaletteEntries
FloodFill
CloseEnhMetaFile
PathToRegion
GetStretchBltMode
GdiSetBatchLimit
GetMetaFileA
GetDIBColorTable
Ellipse
GetTextCharacterExtra
IntersectClipRect
SetMetaFileBitsEx
GetWorldTransform
GetNearestColor
GetTextAlign
ColorCorrectPalette
GetEnhMetaFileHeader
OffsetRgn
EqualRgn
EnumObjects
PtVisible
advapi32
CryptGenRandom
CryptSetProviderExW
InitiateSystemShutdownW
LookupPrivilegeDisplayNameW
CryptDestroyKey
CryptEnumProvidersW
CryptSetProviderW
comdlg32
GetSaveFileNameA
GetOpenFileNameA
FindTextW
FindTextA
GetSaveFileNameW
GetFileTitleA
PrintDlgW
PageSetupDlgW
ChooseColorW
ReplaceTextW
GetOpenFileNameW
GetFileTitleW
ChooseColorA
PrintDlgA
PageSetupDlgA
LoadAlterBitmap
ChooseFontA
ReplaceTextA
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 310KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
piss ur pants nigga.exe.exe windows:4 windows x86 arch:x86
731e9047734b94d10ec17f86e344bb31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
CharNextA
GetDesktopWindow
TranslateMessage
GetParent
GetDC
gdi32
GetObjectA
GetClipBox
SaveDC
SetTextAlign
SetMapMode
SelectObject
DeleteDC
CreatePalette
DeleteObject
SelectPalette
SetTextColor
GetStockObject
CreateCompatibleDC
GetPixel
CreateFontIndirectA
CreatePen
LineTo
RestoreDC
SetStretchBltMode
GetTextMetricsA
CreateSolidBrush
PatBlt
RectVisible
GetDeviceCaps
kernel32
GetCurrentProcess
GetACP
GetModuleHandleA
GetCommandLineW
GetStartupInfoA
RemoveDirectoryA
GlobalFindAtomW
GetCommandLineA
GlobalFindAtomA
DeleteFileA
GetCurrentThreadId
GetOEMCP
IsDebuggerPresent
DeleteFileW
GetTickCount
lstrlenW
GetProcessHeap
GetCurrentThread
GetDriveTypeA
GetVersion
GetThreadLocale
GetModuleHandleW
lstrcmpiA
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLangID
lstrlenA
GetConsoleOutputCP
lstrcmpA
SetCurrentDirectoryA
MulDiv
CopyFileA
GetWindowsDirectoryA
lstrcmpiW
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Uerkhnkf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Rlauycnq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
poo poo wee wee cock.exe.exe windows:4 windows x86 arch:x86
2e94fc3d5b4b0620c1ff16ad96eef21b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetStartupInfoA
OpenProcess
LoadLibraryA
LeaveCriticalSection
WideCharToMultiByte
lstrcpyA
InterlockedExchange
lstrlenA
GetPrivateProfileSectionNamesA
lstrcatA
GetModuleHandleA
FreeLibrary
WriteFile
DeleteFileA
CreateDirectoryA
GetFileAttributesA
GetVolumeInformationA
FindClose
FindFirstFileA
LocalAlloc
GetVersion
DeviceIoControl
Sleep
MultiByteToWideChar
GlobalUnlock
CloseHandle
GetModuleFileNameA
SetFileAttributesA
CopyFileA
GlobalAlloc
GetPrivateProfileStringA
GlobalLock
GetProcAddress
user32
CreateWindowExA
PostMessageA
OpenInputDesktop
CloseDesktop
EnumWindows
IsWindowVisible
LoadIconA
RegisterClassExA
UpdateWindow
DefWindowProcA
GetCursorPos
GetCursorInfo
GetDesktopWindow
GetDC
SetRect
GetSystemMetrics
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
mouse_event
WindowFromPoint
SetCapture
MapVirtualKeyA
SystemParametersInfoA
DestroyCursor
LoadCursorA
GetMessageA
GetAsyncKeyState
GetForegroundWindow
GetWindowTextA
ExitWindowsEx
MessageBoxA
CharNextA
EndDialog
CreateDialogParamA
ShowWindow
SetWindowPos
GetDlgItemTextA
DispatchMessageA
TranslateMessage
SetDlgItemTextA
GetDlgItem
SendMessageA
GetClientRect
CloseWindow
GetKeyState
gdi32
SelectObject
DeleteObject
DeleteDC
GetDIBits
CreateCompatibleBitmap
CreateDIBSection
advapi32
RegEnumValueA
LsaClose
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
LsaOpenPolicy
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenEventLogA
ClearEventLogA
CloseEventLog
RegOpenKeyExA
RegCloseKey
LsaFreeMemory
IsValidSid
shell32
SHGetSpecialFolderPathA
ole32
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
oleaut32
SysFreeString
msvcrt
wcscpy
strncat
strncpy
strncmp
atoi
exit
strrchr
_except_handler3
free
malloc
strchr
_purecall
strstr
_ftol
ceil
sprintf
_beginthreadex
vsprintf
calloc
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strnicmp
_strcmpi
??0exception@@QAE@ABV0@@Z
strlen
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
memcpy
_errno
memmove
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
??1type_info@@UAE@XZ
winmm
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
waveInStop
waveInReset
waveInUnprepareHeader
waveInClose
waveOutReset
waveOutUnprepareHeader
waveOutClose
waveOutWrite
ws2_32
ntohs
recv
closesocket
select
send
inet_ntoa
inet_addr
getsockname
bind
getpeername
accept
listen
sendto
recvfrom
__WSAFDIsSet
gethostname
socket
gethostbyname
htons
WSAStartup
WSACleanup
connect
setsockopt
WSAIoctl
netapi32
NetUserAdd
NetLocalGroupAddMembers
wtsapi32
WTSFreeMemory
Sections
.text Size: 412KB - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
super mario 666.exe.exe windows:4 windows x86 arch:x86
e6a513b61bc7dd3dc48bbcb210ae0ced
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueW
shell32
SHBrowseForFolder
SheGetDirA
wininet
FtpCommandA
DeleteUrlCacheGroup
FtpPutFileEx
InternetTimeFromSystemTimeA
UpdateUrlCacheContentPath
GetUrlCacheEntryInfoExW
ShowCertificate
DeleteUrlCacheEntry
kernel32
SetVolumeLabelW
GetLocalTime
GetLocaleInfoA
VirtualFreeEx
GetStartupInfoA
GetStringTypeA
SetEnvironmentVariableA
LeaveCriticalSection
ReleaseSemaphore
WriteFile
MultiByteToWideChar
VirtualFree
ReadConsoleInputA
TlsFree
SetConsoleWindowInfo
TlsAlloc
WideCharToMultiByte
GetCurrentProcess
VirtualProtect
EnterCriticalSection
TerminateProcess
QueryPerformanceCounter
GetComputerNameA
GetModuleHandleA
IsDebuggerPresent
GetProfileStringA
RtlUnwind
SetLastError
GetVersionExA
GetFileType
GetCurrentDirectoryW
GetCommandLineA
GetCPInfo
OpenSemaphoreA
HeapFree
GetUserDefaultLCID
HeapSize
GetModuleFileNameA
GetDateFormatA
GetCurrentThread
SetConsoleTitleW
OpenProcess
GetSystemInfo
EnumSystemLocalesA
TlsGetValue
GetLastError
GetLocaleInfoW
VirtualAlloc
SetHandleCount
DeleteCriticalSection
GetTimeFormatA
SetEvent
HeapCreate
CreateDirectoryExW
WriteFileEx
ExitProcess
HeapReAlloc
SetConsoleCursorInfo
VirtualQuery
LCMapStringA
GetOEMCP
CompareStringA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetStdHandle
TlsSetValue
GetCurrentThreadId
GetEnvironmentStringsW
GetStringTypeW
UnhandledExceptionFilter
InterlockedExchange
HeapAlloc
HeapDestroy
GetTimeZoneInformation
FreeEnvironmentStringsA
GetACP
InitializeCriticalSection
SleepEx
GetProcAddress
IsValidCodePage
CompareStringW
LCMapStringW
WriteConsoleOutputW
IsValidLocale
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GetCurrentProcessId
LoadLibraryA
MoveFileA
IsBadWritePtr
GetTickCount
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 285KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ur mother is literally so ugly bro like fuck u nigga boi.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ