4e5fc012718e562ed588de4ebac425e7[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

4e5fc012718e562ed588de4ebac425e7.bin
Size

32.2MB
MD5

34f8fd0f7972e3074bc25d45ccd64e8a
SHA1

0cb1122db1c4508c9d953f3bc410aa8485a0913b
SHA256

d11e6e522a023268b8138037c868d0cc1da7c505f5c3e3633d3bda6fa470ea65
SHA512

50660c32f4075b75501d85f4cc5275cefd13fa3afb73e96b73797ce14f776147ce18bd9f4974347de857fdb75483f8b5533d69f5772973276196c1ccc8b2fbf7
SSDEEP

786432:0jZjEtxlCeaJ2YneMYgfTvL9vK14sbso76i6+a46SPJz:VlgkMYg7j1NsIq/Dd68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2229c7887ef2ed9e18ff0d3c1277c490bd04f53e7a71b31d17244d0166aa0b94.exe

Files

4e5fc012718e562ed588de4ebac425e7.bin
.zip

Password: infected
2229c7887ef2ed9e18ff0d3c1277c490bd04f53e7a71b31d17244d0166aa0b94.exe
.exe windows:6 windows x64 arch:x64

Password: infected

4e6f13c8bc766fcc3b3f4c4842bc983a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\source\repos\MFCApplication1\x64\Debug\MFCApplication1.pdb

Imports

kernel32

SwitchToThread
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
ExitProcess
HeapValidate
GetSystemInfo
VirtualAlloc
QueryPerformanceFrequency
GetCommandLineA
GetCommandLineW
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
WriteConsoleW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
VirtualQuery
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
OutputDebugStringW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
LocalUnlock
LocalLock
GetWindowsDirectoryW
CreateSemaphoreW
WaitForMultipleObjects
CreateMutexW
ReleaseMutex
ReleaseSemaphore
FindResourceExW
SystemTimeToTzSpecificLocalTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SearchPathW
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
GetTempPathW
SetFilePointer
Sleep
PulseEvent
ResetEvent
LocalReAlloc
LocalAlloc
GlobalHandle
QueryPerformanceCounter
TlsSetValue
TlsGetValue
TlsAlloc
SetErrorMode
InitializeCriticalSection
GlobalFlags
VirtualProtect
GetProfileIntW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetThreadLocale
FileTimeToSystemTime
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetTempFileNameW
GetFullPathNameW
GetFileTime
GetDiskFreeSpaceW
GetTickCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateEventW
WaitForSingleObject
SetEvent
CompareStringA
GetVersionExW
GetCurrentThread
lstrcmpA
CopyFileW
FormatMessageW
LocalFree
GetCurrentDirectoryW
GlobalFree
GlobalSize
GlobalReAlloc
GlobalAlloc
CloseHandle
GetFileSize
GetFileAttributesW
CreateFileW
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
MulDiv
GetAtomNameW
WideCharToMultiByte
GlobalUnlock
GlobalLock
GetCurrentProcessId
ResumeThread
SuspendThread
GetThreadPriority
SetThreadPriority
CompareStringW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalGetAtomNameW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleExW
GetModuleHandleW
GetModuleFileNameW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
GetLastError
EncodePointer
OutputDebugStringA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
LoadLibraryW
GetProcAddress
FindResourceW
SizeofResource
LockResource
LoadResource
SetLastError
TlsFree
RtlUnwind

user32

CreatePopupMenu
CreateMenu
GetMenuState
GetMenuStringW
LoadMenuIndirectW
DrawFrameControl
DrawEdge
UnionRect
SetRect
GetCursorPos
GetAsyncKeyState
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GetMenuItemID
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
DestroyIcon
GetWindowThreadProcessId
IntersectRect
SetCursor
GetMenuItemCount
GetSubMenu
DestroyMenu
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
ReleaseCapture
IsDialogMessageW
SetWindowTextW
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExW
DlgDirListComboBoxW
DlgDirSelectExW
DlgDirListW
LoadCursorW
GetLastActivePopup
FindWindowExW
FindWindowW
SetParent
GetDesktopWindow
ChildWindowFromPointEx
ChildWindowFromPoint
WindowFromPoint
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
ReleaseDC
GetWindowDC
GetDCEx
GetDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
KillTimer
CheckMenuItem
SetCapture
GetActiveWindow
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageW
SendNotifyMessageW
DrawAnimatedRects
DrawCaption
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
SetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
DrawIcon
GetDialogBaseUnits
CharNextW
MsgWaitForMultipleObjectsEx
IsCharLowerW
PeekMessageW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
EndPaint
BeginPaint
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
DrawTextW
DrawTextExW
GrayStringW
DrawStateW
GetTabbedTextExtentW
WindowFromDC
ExcludeUpdateRgn
ScrollDC
SetMenuContextHelpId
GetMenuContextHelpId
GetSysColorBrush
DrawFocusRect
FillRect
FrameRect
EnableMenuItem
GetKeyState
SetFocus
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
DeleteMenu
InsertMenuItemW
SetTimer
GetMenuItemInfoW
PostQuitMessage
IsChild
GetFocus
EnableWindow
GetSysColor
SetRectEmpty
InflateRect
GetSystemMetrics
LoadImageW
EnumThreadWindows
UnregisterClassW
RegisterWindowMessageW
IsWindow
GetComboBoxInfo
DestroyWindow
CopyRect
OffsetRect
IsRectEmpty
GetClassLongPtrW
GetParent
SendMessageW
PostMessageW
TabbedTextOutW
MapDialogRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
DispatchMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetDlgCtrlID
MapVirtualKeyExW
EnumChildWindows
GetDoubleClickTime
IsClipboardFormatAvailable
CopyAcceleratorTableW
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyIcon
SubtractRect
DestroyCursor
GetClipboardFormatNameW
GetClipboardFormatNameA
SendDlgItemMessageA
RealChildWindowFromPoint
SetCursorPos
MonitorFromRect
InSendMessage
WaitMessage
TranslateMessage
EndDialog
CreateDialogIndirectParamW
CharUpperBuffW
GetIconInfo
DestroyAcceleratorTable
MonitorFromPoint
UpdateLayeredWindow
GetMessageW
MessageBeep
CharUpperW
TrackMouseEvent
SetClassLongPtrW
DrawIconEx
RegisterClipboardFormatW
CopyImage
EmptyClipboard
SetClipboardData
CloseClipboard
EnumDisplayMonitors
SystemParametersInfoW
SetLayeredWindowAttributes
MapVirtualKeyW
GetKeyNameTextW
CheckMenuRadioItem
InvertRect

gdi32

BitBlt
Chord
CombineRgn
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateFontIndirectW
CreateFontW
CreateHatchBrush
CreateICW
CreatePalette
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DrawEscape
Ellipse
EnumObjects
EqualRgn
Escape
ExtEscape
ExtCreateRegion
ExtFloodFill
FillRgn
FloodFill
FrameRgn
GetROP2
GetAspectRatioFilterEx
GetBkColor
GetBkMode
GetBitmapBits
GetBitmapDimensionEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthW
GetCharWidthFloatW
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetCurrentObject
GetCurrentPositionEx
GetDeviceCaps
GetFontData
GetGlyphOutlineW
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOutlineTextMetricsW
GetPaletteEntries
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextExtentPoint32W
GetFontLanguageInfo
GetCharacterPlacementW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCW
RealizePalette
RoundRect
ResizePalette
SetBitmapBits
SetBoundsRect
AnimatePalette
SetPixel
SetPixelV
StretchBlt
SetRectRgn
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsW
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocW
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
TextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceW
GetKerningPairsW
UnrealizeObject
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesW
Arc
SetBkColor
SetTextColor
CreateBitmap
ExtTextOutW
CreateEnhMetaFileW
CloseEnhMetaFile
CreateMetaFileW
CloseMetaFile
GetObjectW
CreateDIBSection
SelectObject
CreateCompatibleDC
GetStockObject
CreateDCW
DeleteObject
SetPaletteEntries
GetTextCharsetInfo
GetTextExtentPointW
GetSystemPaletteEntries
EnumFontFamiliesExW
DeleteMetaFile
StretchDIBits
CopyMetaFileW
SetDIBColorTable
GetDIBits
DeleteDC

msimg32

AlphaBlend
GradientFill
TransparentBlt

winspool.drv

OpenPrinterW
GetJobW
ClosePrinter
DocumentPropertiesW

advapi32

RegOpenKeyExW
RegSetValueW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyExW
RegEnumValueW
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ExtractIconW
ShellExecuteW
SHBrowseForFolderW
SHAppBarMessage
DragFinish
DragQueryFileW
DragAcceptFiles
SHAddToRecentDocs
ShellExecuteExW
SHGetFileInfoW
SHGetDesktopFolder

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW
PathRemoveFileSpecW
PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
StrFormatKBSizeW

uxtheme

CloseThemeData
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
IsAppThemed
DrawThemeText
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
OpenThemeData
DrawThemeParentBackground
GetThemeColor

ole32

OleGetClipboard
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
StgCreateDocfileOnILockBytes
StgIsStorageILockBytes
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
CoInitializeEx
OleCreateFromFile
OleSave
OleSaveToStream
OleSetContainedObject
GetClassFile
OleIsRunning
OleLockRunning
OleGetIconOfClass
OleSetMenuDescriptor
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
OleRun
CreateDataAdviseHolder
OleCreateLinkToFile
CreateFileMoniker
CreateILockBytesOnHGlobal
CreateOleAdviseHolder
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
CoGetMalloc
CoLockObjectExternal
GetRunningObjectTable
OleRegEnumVerbs
OleRegGetMiscStatus
CoDisconnectObject
StringFromGUID2
PropVariantCopy
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RegisterDragDrop
RevokeDragDrop
OleQueryLinkFromData
OleQueryCreateFromData
OleLoad
CreateStreamOnHGlobal

oleaut32

OleCreateFontIndirect
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VarDecFromStr
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
CreateErrorInfo
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
GetErrorInfo
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
VariantChangeType
VariantInit
SysAllocStringLen
VariantClear
SysAllocString
SetErrorInfo
SafeArrayGetLBound
SafeArrayDestroyData

oledlg

OleUIChangeIconW
OleUIUpdateLinksW
OleUIPasteSpecialW
OleUIInsertObjectW
OleUIBusyW
OleUIEditLinksW
OleUIConvertW

gdiplus

GdipGetImagePaletteSize
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImagePalette
GdipGetImagePixelFormat

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.textbss
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 283B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29.7MB - Virtual size: 29.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

4e6f13c8bc766fcc3b3f4c4842bc983a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.textbss Size: - Virtual size: 4.1MB

.text Size: 8.4MB - Virtual size: 8.4MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 52KB - Virtual size: 105KB

.pdata Size: 392KB - Virtual size: 391KB

.idata Size: 37KB - Virtual size: 37KB

.msvcjmc Size: 1024B - Virtual size: 828B

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 283B

.rsrc Size: 29.7MB - Virtual size: 29.7MB

.reloc Size: 178KB - Virtual size: 177KB

.textbss
Size: - Virtual size: 4.1MB

.text
Size: 8.4MB - Virtual size: 8.4MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 52KB - Virtual size: 105KB

.pdata
Size: 392KB - Virtual size: 391KB

.idata
Size: 37KB - Virtual size: 37KB

.msvcjmc
Size: 1024B - Virtual size: 828B

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 283B

.rsrc
Size: 29.7MB - Virtual size: 29.7MB

.reloc
Size: 178KB - Virtual size: 177KB