2024-08-07_321d59b4b8fdf41f4d96a9a0bbbf0bff_magniber_revil

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-07_321d59b4b8fdf41f4d96a9a0bbbf0bff_magniber_revil
Size

35.3MB
MD5

321d59b4b8fdf41f4d96a9a0bbbf0bff
SHA1

a8b4daabf47f392bada0cab0eaa170b3b0ba0d3c
SHA256

383c1c1d5dfc5280ca0a573a3db1ac9388af0d4d8c44e1b2dd4235cfef054d97
SHA512

e892f3d1e09e468be73087880b52f6edd70c3e5c9de20ef5b015e9179b610e3b10be4be0270daaeab173e47a9ffc891d135cd6ee1fe16d27a590d0f564b135e6
SSDEEP

786432:S0Ki/UrkFLSSi9+DS6Q/4SumSGUcA0X3/k5nv:6t4J9lv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-07_321d59b4b8fdf41f4d96a9a0bbbf0bff_magniber_revil

Files

2024-08-07_321d59b4b8fdf41f4d96a9a0bbbf0bff_magniber_revil
.exe windows:6 windows x86 arch:x86

ee8390823f56f7a3a661b4ce30ceb229

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\SoftphonePro\build-SoftphonePro-qt_5_15_10_static_opengl_dynamic_sdk_10_vs22_openssl_3_0_11-Release\release\SoftphonePro.pdb

Imports

client

getNewCallID
PzGenerateFinished
PzGenerateTransferAnswer
PzGenerateOutcomingAnswer
PzGenerateOutcoming
PzGenerateIncoming
PzDisconnect
PzConnectWithLogCallback

hid

HidP_GetButtonCaps
HidP_SetUsages
HidP_GetUsages
HidD_GetAttributes
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_SetFeature
HidD_GetManufacturerString
HidD_GetProductString
HidD_GetIndexedString
HidD_GetSerialNumberString
HidP_GetCaps

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

libjabra

Jabra_SetAppID
Jabra_InitializeV2
Jabra_Uninitialize
Jabra_FreeDeviceInfo
Jabra_ConnectToJabraApplication
Jabra_DisconnectFromJabraApplication
Jabra_SetSoftphoneReady
Jabra_GetReturnCodeString
Jabra_SetOffHook
Jabra_IsOffHookSupported
Jabra_SetRinger
Jabra_SetMute
Jabra_IsMuteSupported
Jabra_SetHold
Jabra_IsHoldSupported
Jabra_SetOnline
Jabra_SetHidWorkingState

libvlc

libvlc_new
libvlc_vlm_add_broadcast
libvlc_vlm_play_media
libvlc_vlm_release
libvlc_vlm_stop_media

dbghelp

MiniDumpWriteDump

iphlpapi

GetNetworkParams
NotifyAddrChange
GetAdaptersInfo
ConvertInterfaceLuidToIndex
ConvertInterfaceLuidToNameW
GetAdaptersAddresses
ConvertInterfaceLuidToGuid
ConvertInterfaceIndexToLuid
ConvertInterfaceNameToLuidW

d3d12

D3D12SerializeRootSignature
ord102
ord101

d3dcompiler_47

D3DCompile
D3DReflect

dcomp

DCompositionCreateDevice

mf

MFCreateTopologyNode
MFCreateTopoLoader
MFCreateSampleGrabberSinkActivate
MFCreateVideoRendererActivate
MFCreateAudioRendererActivate
MFCreateTopology
MFGetService
MFCreateMediaSession

mfplat

MFStartup
MFShutdown
MFCreateWaveFormatExFromMFMediaType
MFFrameRateToAverageTimePerFrame
MFCreateMediaType
MFAllocateWorkQueue
MFUnlockWorkQueue
MFCreateAsyncResult
MFInvokeCallback
MFCreateEventQueue
MFCreateAttributes
MFCreateMemoryBuffer
MFCreateSample
MFCreateSourceResolver
MFPutWorkItem

d3d9

Direct3DCreate9Ex

dxva2

DXVA2CreateDirect3DDeviceManager9

evr

MFCreateVideoSampleFromSurface

mfreadwrite

MFCreateSourceReaderFromMediaSource

mmdevapi

ord17

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsDeleteString

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

odbc32

ord13
ord30
ord31
ord43
ord44
ord18
ord20
ord12
ord61
ord72
ord29
ord24
ord127
ord108
ord111
ord136
ord119
ord139
ord9
ord26
ord75
ord165
ord176
ord138
ord141
ord154
ord152
ord147
ord140
ord145

uxtheme

GetThemeInt
GetThemeEnumValue
GetThemeMargins
GetThemePropertyOrigin
GetThemeTransitionDuration
CloseThemeData
GetThemeColor
GetThemeBackgroundRegion
IsThemeBackgroundPartiallyTransparent
GetThemeBool
SetWindowTheme
IsThemeActive
GetCurrentThemeName
GetThemePartSize
ord47
OpenThemeData
IsAppThemed

dwmapi

DwmIsCompositionEnabled
DwmGetWindowAttribute
DwmEnableBlurBehindWindow
DwmSetWindowAttribute

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1
CreateDXGIFactory2

gdi32

SetGraphicsMode
SetBkMode
GetCharABCWidthsI
GetTextExtentPoint32W
GetOutlineTextMetricsW
GetGlyphOutlineW
SetTextColor
GetCharABCWidthsW
GetTextFaceW
GetTextMetricsW
RemoveFontMemResourceEx
SetTextAlign
SetWorldTransform
ExtTextOutW
AddFontMemResourceEx
RemoveFontResourceExW
AddFontResourceExW
GetDIBits
GetCharABCWidthsFloatW
GetStockObject
GetFontData
EnumFontFamiliesExW
CreateFontIndirectW
GetObjectW
GetBitmapBits
SwapBuffers
GetPixelFormat
DescribePixelFormat
SetPixelFormat
ChoosePixelFormat
CreateBitmap
CreateDCW
CreateCompatibleBitmap
GetDeviceCaps
SetLayout
OffsetRgn
BitBlt
Rectangle
CreateSolidBrush
CreatePen
GdiFlush
CreateDIBSection
SelectObject
SelectClipRgn
GetRegionData
DeleteObject
DeleteDC
CreateRectRgn
CreateCompatibleDC
CombineRgn

oleaut32

SysAllocString
SafeArrayCreateVector
SafeArrayPutElement
SysStringLen
VariantInit
VariantClear
SysFreeString

imm32

ImmSetCandidateWindow
ImmSetCompositionWindow
ImmNotifyIME
ImmGetOpenStatus
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmGetDefaultIMEWnd
ImmGetVirtualKey
ImmAssociateContextEx

crypt32

CertCloseStore
CertFreeCertificateChain
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertOpenSystemStoreW
CertOpenStore
CertCreateCertificateContext
CertFreeCertificateContext
CertAddCertificateContextToStore
CertGetCertificateChain
CertFindCertificateInStore

ws2_32

getsockname
getsockopt
htonl
htons
listen
ntohl
connect
closesocket
bind
accept
inet_ntoa
inet_addr
WSAIoctl
WSASocketA
WSAAddressToStringA
WSAStringToAddressA
WSAStartup
WSACleanup
WSASetLastError
gethostbyname
ioctlsocket
__WSAFDIsSet
select
getaddrinfo
freeaddrinfo
getnameinfo
WSAAccept
WSAConnect
WSAHtonl
WSANtohl
WSANtohs
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASocketW
WSAGetLastError
gethostbyaddr
getservbyport
getservbyname
socket
recvfrom
WSAAsyncSelect
getpeername
ntohs
recv
WSAPoll
gethostname
shutdown
setsockopt
sendto
send

advapi32

GetUserNameW
RegFlushKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
BuildTrusteeWithSidW
GetNamedSecurityInfoW
GetEffectiveRightsFromAclW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegNotifyChangeKeyValue
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetLengthSid
FreeSid
AllocateAndInitializeSid
AddAccessAllowedAce
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegCloseKey
LookupAccountSidW
MapGenericMask
DuplicateToken
CopySid
AccessCheck
GetSidSubAuthorityCount
GetSidSubAuthority
SystemFunction036

user32

GetMenu
ReleaseCapture
SetCapture
GetCapture
IsTouchWindow
UnregisterTouchWindow
RegisterTouchWindow
IsIconic
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
MoveWindow
FlashWindowEx
SetLayeredWindowAttributes
UpdateLayeredWindow
ShowWindow
IsChild
AttachThreadInput
PostMessageW
UpdateLayeredWindowIndirect
GetCaretBlinkTime
MessageBeep
GetDoubleClickTime
GetShellWindow
MsgWaitForMultipleObjects
DestroyMenu
PeekMessageW
EndPaint
BeginPaint
GetDesktopWindow
GetSysColor
ReleaseDC
GetDC
SystemParametersInfoW
GetSystemMetrics
UnregisterHotKey
RegisterHotKey
LoadCursorW
CreateWindowExW
RegisterClassExW
SetParent
GetParent
SetForegroundWindow
GetWindowLongW
EnableMenuItem
GetFocus
SetFocus
SetWindowPos
DestroyWindow
IsWindow
CallWindowProcW
DefWindowProcW
SendMessageW
GetLastInputInfo
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
TrackPopupMenu
GetMenuItemInfoW
SetMenuItemInfoW
MonitorFromWindow
GetUpdateRect
SetWindowRgn
InvalidateRect
SetWindowTextW
GetClientRect
UnregisterDeviceNotification
RegisterDeviceNotificationW
CharNextExA
KillTimer
SetTimer
MsgWaitForMultipleObjectsEx
GetQueueStatus
DispatchMessageW
TranslateMessage
GetUserObjectInformationW
GetProcessWindowStation
DrawIconEx
MessageBoxW
ChangeWindowMessageFilterEx
RealGetWindowClassW
EnumWindows
GetWindowTextW
CloseTouchInputHandle
GetTouchInputInfo
GetAsyncKeyState
GetMessageExtraInfo
TrackMouseEvent
GetClipboardFormatNameW
GetSystemMenu
EnableWindow
GetForegroundWindow
GetWindowRect
AdjustWindowRectEx
SetCursor
ClientToScreen
ScreenToClient
GetWindowThreadProcessId
GetWindow
DestroyCursor
DestroyIcon
MonitorFromPoint
GetAncestor
GetKeyboardLayoutList
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
UnregisterClassW
GetClassInfoW
GetCursorPos
WindowFromPoint
ChildWindowFromPointEx
GetSysColorBrush
LoadImageW
SetMenu
DrawMenuBar
CreateMenu
SetWindowLongW
GetCursorInfo
GetIconInfo
CreateIconIndirect
CreateCursor
GetCursor
SetCursorPos
EnumDisplayDevicesW
GetKeyboardLayout
RegisterClassW
TrackPopupMenuEx
MapVirtualKeyW
ToUnicode
ToAscii
GetKeyboardState
GetKeyState
IsZoomed
FindWindowA
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
CreateCaret
IsWindowEnabled
CreatePopupMenu
RegisterWindowMessageW
GetMonitorInfoW
RegisterClipboardFormatW
ChangeClipboardChain
SetClipboardViewer
IsHungAppWindow
LoadIconW
PostThreadMessageW
EnumDisplayMonitors

mpr

WNetGetUniversalNameW

userenv

GetUserProfileDirectoryW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

netapi32

NetShareEnum
NetApiBufferFree

kernel32

ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
EncodePointer
CopyFileW
MoveFileW
MoveFileExW
TzSpecificLocalTimeToSystemTime
GetFileInformationByHandleEx
GetDiskFreeSpaceExW
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetGeoInfoW
GetUserGeoID
VirtualQuery
OpenFileMappingW
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
CompareStringW
LCMapStringW
FindFirstFileExW
CreateSemaphoreW
ReleaseMutex
CompareStringEx
GetCommandLineW
DuplicateHandle
SwitchToThread
TerminateThread
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessId
TerminateProcess
GetNativeSystemInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitOnceExecuteOnce
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeCriticalSectionEx
GetSystemDirectoryW
ConvertFiberToThread
GetACP
GetFileType
FindNextFileW
FindFirstFileW
FindClose
CreateFiber
DeleteFiber
GetDateFormatW
GetTimeFormatW
GetCurrencyFormatW
GetUserDefaultLCID
GetVolumePathNamesForVolumeNameW
GetUserPreferredUILanguages
UnregisterWaitEx
RegisterWaitForSingleObject
ReadFileEx
PeekNamedPipe
CancelIoEx
GetExitCodeProcess
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
SwitchToFiber
InitializeCriticalSectionAndSpinCount
GetSystemDirectoryA
GetModuleHandleExW
GetEnvironmentVariableW
SetHandleInformation
GlobalFree
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
DisconnectNamedPipe
VirtualFree
VirtualProtect
VirtualAlloc
ExitProcess
GetConsoleWindow
GetDriveTypeW
GetLongPathNameW
GetVolumeInformationW
AreFileApisANSI
HeapCreate
GetFullPathNameW
GetDiskFreeSpaceW
LockFile
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
DeleteFileW
HeapReAlloc
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
GetSystemTimeAsFileTime
GetSystemTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSizeEx
GetUserDefaultLangID
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
SystemTimeToTzSpecificLocalTime
SetConsoleCtrlHandler
GetCommandLineA
SetStdHandle
SetFileAttributesW
GetConsoleOutputCP
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
SetEnvironmentVariableW
WriteConsoleW
SleepEx
WriteFileEx
GetStartupInfoW
GetModuleFileNameW
GetLogicalDrives
SetFilePointerEx
SetErrorMode
GetCurrentDirectoryW
CreateDirectoryW
GetFileInformationByHandle
RemoveDirectoryW
IsProcessorFeaturePresent
ConvertThreadToFiber
GlobalSize
GetLocaleInfoW
GlobalLock
GlobalUnlock
GlobalAlloc
OpenProcess
CheckRemoteDebuggerPresent
CreateProcessW
ExpandEnvironmentStringsW
WTSGetActiveConsoleSessionId
CreateEventExW
WaitForSingleObjectEx
LoadLibraryW
MulDiv
GetExitCodeThread
lstrcmpW
LocalAlloc
OutputDebugStringA
DebugBreak
WaitForMultipleObjects
WideCharToMultiByte
MultiByteToWideChar
GetFileSize
DeleteFileA
FormatMessageA
SetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExA
GetSystemInfo
SetFilePointer
FlushFileBuffers
SetConsoleTextAttribute
CreateSemaphoreA
GetModuleHandleA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
GetThreadPriority
SetThreadPriority
GetCurrentThread
Sleep
CreateEventA
ReleaseSemaphore
SetEvent
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RaiseException
IsDebuggerPresent
GetStdHandle
FileTimeToSystemTime
GetLocalTime
LoadLibraryA
GetProcAddress
FreeLibrary
SystemTimeToFileTime
SetFileTime
LocalFileTimeToFileTime
GetProcessHeap
HeapFree
HeapAlloc
GetCurrentProcessId
GetCurrentProcess
CreateFileW
GetModuleHandleW
GetTimeZoneInformation
GetCurrentThreadId
GetFileAttributesW
CreateThread
GetTickCount64
GetTickCount
GetVersionExW
FormatMessageW
LocalFree
CreateEventW
WaitForSingleObject
ResetEvent
CancelIo
GetOverlappedResult
DeviceIoControl
GetLastError
CloseHandle
WriteFile
ReadFile
CreateFileA

ole32

PropVariantClear
CoInitializeEx
CoTaskMemAlloc
StringFromGUID2
ReleaseStgMedium
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
OleUninitialize
OleInitialize
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoGetMalloc
StringFromCLSID
CoTaskMemFree
CoUninitialize
PropVariantCopy
CLSIDFromString
CreateBindCtx
CoInitialize

shell32

SHGetMalloc
SHCreateItemFromParsingName
SHGetKnownFolderIDList
SHBrowseForFolderW
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord155
SHParseDisplayName
CommandLineToArgvW
SHGetKnownFolderPath
SHCreateItemFromIDList
ShellExecuteW
ord727
SHGetStockIconInfo
SHGetPathFromIDListW
SHGetFileInfoW

winmm

PlaySoundW
waveInGetDevCapsW
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetID
mixerGetLineInfoW
waveOutGetDevCapsW
timeEndPeriod
timeBeginPeriod
timeKillEvent
timeSetEvent
timeGetTime
waveInReset
waveInStop
waveInStart
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
waveInOpen
waveInGetDevCapsA
waveInGetNumDevs
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutSetVolume
waveOutGetVolume
waveOutGetDevCapsA
waveOutGetNumDevs
waveInGetErrorTextA
waveOutGetErrorTextA

sensapi

IsNetworkAlive

Exports

Exports

??0QxtGlobalShortcut@@QAE@ABVQKeySequence@@PAVQObject@@@Z
??0QxtGlobalShortcut@@QAE@PAVQObject@@@Z
??1QxtGlobalShortcut@@UAE@XZ
??_7QxtGlobalShortcut@@6B@
??_FQxtGlobalShortcut@@QAEXXZ
?activated@QxtGlobalShortcut@@QAEXXZ
?isEnabled@QxtGlobalShortcut@@QBE_NXZ
?metaObject@QxtGlobalShortcut@@UBEPBUQMetaObject@@XZ
?qt_metacall@QxtGlobalShortcut@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QxtGlobalShortcut@@UAEPAXPBD@Z
?qt_static_metacall@QxtGlobalShortcut@@CAXPAVQObject@@W4Call@QMetaObject@@HPAPAX@Z
?setDisabled@QxtGlobalShortcut@@QAEX_N@Z
?setEnabled@QxtGlobalShortcut@@QAEX_N@Z
?setShortcut@QxtGlobalShortcut@@QAE_NABVQKeySequence@@@Z
?shortcut@QxtGlobalShortcut@@QBE?AVQKeySequence@@XZ
?staticMetaObject@QxtGlobalShortcut@@2UQMetaObject@@B
?tr@QxtGlobalShortcut@@SA?AVQString@@PBD0H@Z
?trUtf8@QxtGlobalShortcut@@SA?AVQString@@PBD0H@Z
hid_close
hid_enumerate
hid_error
hid_exit
hid_free_enumeration
hid_get_feature_report
hid_get_indexed_string
hid_get_manufacturer_string
hid_get_product_string
hid_get_serial_number_string
hid_init
hid_open
hid_open_path
hid_read
hid_read_timeout
hid_send_feature_report
hid_set_nonblocking
hid_write
qt_qmlDebugClearBuffer
qt_qmlDebugConnectionBlocker
qt_qmlDebugConnectorOpen
qt_qmlDebugDisableService
qt_qmlDebugEnableService
qt_qmlDebugMessageAvailable
qt_qmlDebugMessageBuffer
qt_qmlDebugMessageLength
qt_qmlDebugObjectAvailable
qt_qmlDebugSendDataToService
qt_qmlDebugSetStreamVersion

Sections

.text
Size: 23.3MB - Virtual size: 23.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmimed
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 957KB - Virtual size: 956KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee8390823f56f7a3a661b4ce30ceb229

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

client

hid

setupapi

libjabra

libvlc

dbghelp

iphlpapi

d3d12

d3dcompiler_47

dcomp

mf

mfplat

d3d9

dxva2

evr

mfreadwrite

mmdevapi

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

wtsapi32

odbc32

uxtheme

dwmapi

d3d11

dxgi

gdi32

oleaut32

imm32

crypt32

ws2_32

advapi32

user32

mpr

userenv

version

netapi32

kernel32

ole32

shell32

winmm

sensapi

Exports

Exports

Sections

.text Size: 23.3MB - Virtual size: 23.3MB

.rdata Size: 9.5MB - Virtual size: 9.5MB

.data Size: 1.1MB - Virtual size: 3.2MB

.qtmetad Size: 7KB - Virtual size: 6KB

.qtmimed Size: 315KB - Virtual size: 315KB

.rsrc Size: 112KB - Virtual size: 112KB

.reloc Size: 957KB - Virtual size: 956KB

.text
Size: 23.3MB - Virtual size: 23.3MB

.rdata
Size: 9.5MB - Virtual size: 9.5MB

.data
Size: 1.1MB - Virtual size: 3.2MB

.qtmetad
Size: 7KB - Virtual size: 6KB

.qtmimed
Size: 315KB - Virtual size: 315KB

.rsrc
Size: 112KB - Virtual size: 112KB

.reloc
Size: 957KB - Virtual size: 956KB