8f359516605953ffa165747e8d2c20caa6c57d3f57374e163db7c0543edcfea0

Sharing

Copy URL Twitter E-mail

General

Target

8f359516605953ffa165747e8d2c20caa6c57d3f57374e163db7c0543edcfea0
Size

3.7MB
MD5

8cdace7ea397d35f6e16334c41203145
SHA1

f575ad5cfa4d2cdf3bccd90bc284ed6026a12536
SHA256

8f359516605953ffa165747e8d2c20caa6c57d3f57374e163db7c0543edcfea0
SHA512

06e7ae2e69d5542b7f7b60a0369b10c8bcbc32f96c0cc3a72bbe660342920581ed40594edfae5a0778373b3d455db481b4111540d0f72943fe4692502c2fc58e
SSDEEP

98304:rhfDiXdPW3MFO2bUKb9Wo98i3HVDse71PO4Lw5YH:rhfDK0cOiGiXVn1Wd

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f359516605953ffa165747e8d2c20caa6c57d3f57374e163db7c0543edcfea0

Files

8f359516605953ffa165747e8d2c20caa6c57d3f57374e163db7c0543edcfea0
.dll windows:5 windows x86 arch:x86

1786c79a186f432a3e4bc7673d782a25

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sensapi

IsNetworkAlive

basemisc

?m_eAppConfigType@ModulePath@@0W4eAppConfigDefine@@A
?DecodeFileT@DecodeFileNP@@YAHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetIsTradeSupportIPV6@BaseMiscFuncNamespace@@YAHXZ
?GetTradeLastSucServer@CTradeInterMgr@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4TRADE_NODE@@@Z
?GetServerHostByPercent@CTradeInterMgr@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAUSERVER_HOST_INFO@@0@Z
?GetAppConfigFullPath@ModulePath@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?SetSeletctRoom@CSkeletonMultiManager@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetSelectRoom@CSkeletonMultiManager@@QAEAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetInstance@CSkeletonMultiManager@@SAAAV1@XZ
?m_mapHttpServerTypeToTag@CSkeletonBase@@0V?$map@W4HTTP_SERVER_TYPE@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@U?$less@W4HTTP_SERVER_TYPE@@@std@@V?$allocator@U?$pair@$$CBW4HTTP_SERVER_TYPE@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@std@@@5@@std@@A
?GetInstance@ModulePath@@SAPAV1@XZ
?GetTradeConnectState@CTradeInterMgr@@SA?AW4TRADE_SERVER_STATE@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4TRADE_SERVER_CONN_REC@@@Z
?IsRunningInVM@EMHWInfo@@YA_NXZ
?IsPopIdDisabled@CSkeletonMultiManager@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CheckTradeDllLoaderLegal@BaseMiscFuncNamespace@@YAHXZ
?SetTradeConnectState@CTradeInterMgr@@SAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4TRADE_SERVER_CONN_REC@@W4TRADE_SERVER_STATE@@@Z
?DateTime@CTradeServerTime@@SA?AVCOleDateTime@ATL@@XZ
?m_mapTcpServerTypeToTag@CSkeletonBase@@0V?$map@W4TCP_SERVER_TYPE@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@U?$less@W4TCP_SERVER_TYPE@@@std@@V?$allocator@U?$pair@$$CBW4TCP_SERVER_TYPE@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@std@@@5@@std@@A
?EncryptData@EncryptFileNP@@YAHPAEH0H@Z
?DecryptData@DecodeFileNP@@YAHPAEH0H@Z

globalenvironment

?GetGlobalEnv@CGlobalEnv@@SA?AV?$CComPtr@VCGlobalEnv@@@ATL@@XZ

framebase

?OnInitDialog@CSWCDialog@@MAEHXZ
?GetThisClass@CSWCDialog@@SGPAUCRuntimeClass@@XZ
??0CSWCDialog@@QAE@IPAVCWnd@@_N@Z
?SendExDataMessage@CViewManager@@SAHPAUHWND__@@KIIJ@Z
?SendBroadcastCommand@CViewManager@@QAEHIJ@Z
?PostBroadcastCommand@CViewManager@@QAEHIJ@Z
?SetParam@CSWCDialog@@UAEHPAUIUnknown@@@Z
?DoModal@CSWCDialog@@UAEHXZ
?PostExDataMessage@CViewManager@@SAHPAUHWND__@@KIIJ@Z
?GetThisMessageMap@CSWCDialog@@KGPBUAFX_MSGMAP@@XZ
??1CSWCDialog@@UAE@XZ

datacenter

?SiSheWuRuFloatValue@CDataComFun@@SAMMH@Z
?GetUID@CDataMgr@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetAppCurVersionType@CDataMgr@@QAE?AW4APP_VERSION_TYPE@@XZ
?SetUSAMarketConvert@CDataMgr@@SAXHH@Z
?SiSheWuRuFloatValue@CDataComFun@@SANNH@Z
?RequestCmd@CDataMgr@@QAEXPAUHWND__@@HHPAX_N@Z
?IsGrayScaleUser@CDataComFun@@SA_NXZ

tradesocket

?CreateStkTransOper@@YAPAVIStkTransOper@@XZ

kernel32

GetLogicalDrives
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetVersionExA
lstrcmpiA
QueryPerformanceCounter
GetFileAttributesW
CreateDirectoryW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
CopyFileW
DeleteFileW
GetFileAttributesExW
GetACP
GetStdHandle
GetFileType
WriteFile
GetModuleHandleA
GetCurrentProcessId
FreeLibrary
LoadLibraryA
GlobalMemoryStatus
FlushConsoleInputBuffer
LocalAlloc
LocalFree
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetLastError
GetCurrentThreadId
FormatMessageW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetTickCount
GetModuleFileNameW
CloseHandle
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
GetVersionExW
GetCurrentProcess
SetPriorityClass
DeviceIoControl
CreateFileA
WideCharToMultiByte
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

EnableWindow
UnregisterClassW
LoadImageW
IsIconic
DefWindowProcW
RegisterHotKey
RegisterClassExW
GetDesktopWindow
MessageBoxW
GetProcessWindowStation
MessageBoxA
CreateWindowExW
GetUserObjectInformationW
IsWindow
LoadCursorW
PostMessageW
SetParent
KillTimer
SendMessageW
SetTimer
IsWindowVisible
GetCapture
PtInRect
GetClientRect
UnregisterHotKey
GetProcessWindowStation
GetUserObjectInformationW

gdi32

CreateFontIndirectW

advapi32

RegCloseKey
RegOpenKeyExW
DeregisterEventSource
RegisterEventSourceA
ReportEventA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegCreateKeyW
RegQueryValueExW

shell32

SHGetSpecialFolderPathW

ole32

OleUninitialize
OleInitialize
CoCreateGuid

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

mfc140u

ord2034
ord11982
ord11983
ord14466
ord12531
ord8000
ord14667
ord6348
ord14669
ord6350
ord14668
ord6349
ord3852
ord5918
ord12239
ord12247
ord8217
ord10433
ord12251
ord12219
ord12928
ord5763
ord10250
ord9209
ord6860
ord4589
ord2272
ord2205
ord7997
ord995
ord7653
ord12559
ord1472
ord6501
ord1052
ord324
ord265
ord1452
ord976
ord266
ord4664
ord2990
ord12131
ord9040
ord11396
ord3404
ord3403
ord3164
ord6218
ord13752
ord3305
ord3302
ord8210
ord2760
ord14785
ord10285
ord10287
ord10286
ord10284
ord10288
ord5652
ord11725
ord11726
ord9139
ord12089
ord3838
ord11936
ord8965
ord6978
ord7941
ord9256
ord3266
ord13878
ord12262
ord12258
ord1722
ord1744
ord1770
ord1756
ord1777
ord4936
ord5003
ord4948
ord4966
ord4960
ord4954
ord5013
ord4997
ord4942
ord5019
ord4974
ord4912
ord4927
ord4988
ord4502
ord9693
ord4494
ord3055
ord14590
ord7923
ord14596
ord6877
ord11717
ord13703
ord5935
ord2682
ord12124
ord3372
ord3371
ord3265
ord12168
ord5249
ord5549
ord5760
ord9350
ord5525
ord5790
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord12947
ord8219
ord4090
ord10255
ord4152
ord9398
ord14595
ord14589
ord12542
ord12541
ord2486
ord5357
ord8324
ord12865
ord8386
ord8470
ord1692
ord13964
ord2383
ord13257
ord9210
ord3009
ord3941
ord285
ord5921
ord4092
ord7493
ord9468
ord14234
ord10472
ord1111
ord458
ord14588
ord7107
ord8360
ord14405
ord8719
ord4663
ord5110
ord2865
ord2885
ord14606
ord12351
ord11962
ord1142
ord500
ord2899
ord12429
ord11972
ord1449
ord973
ord2996
ord290
ord1526
ord6220
ord13756
ord2761
ord12220
ord6129
ord6865
ord12172
ord1476
ord8754
ord1002
ord5109
ord4485
ord1450
ord974
ord2246
ord2522
ord6559
ord6566
ord3882
ord6489
ord11015
ord14320
ord4886
ord1689
ord3833
ord11002
ord8757
ord9377
ord2304
ord286
ord280
ord1523
ord1525
ord5884
ord1663
ord4815
ord1045
ord296
ord2385
ord2389
ord4323
ord1511
ord1513
ord1703
ord3849
ord1514
ord325
ord1053
ord2365
ord2408
ord2411
ord2376
ord2410
ord485
ord2268
ord2374
ord2184
ord2300
ord2399
ord7922

shlwapi

PathIsDirectoryW
PathFileExistsW

ws2_32

inet_ntoa
ntohl
WSAStartup
gethostname
gethostbyname

msvcp140

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Xbad_alloc@std@@YAXXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??Bid@locale@std@@QAEIXZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

iphlpapi

SendARP
GetAdaptersInfo
GetAdaptersAddresses
GetIpAddrTable

vcruntime140

_CxxThrowException
__RTDynamicCast
_except_handler4_common
__std_type_info_destroy_list
memchr
__CxxFrameHandler3
memset
memmove
memcpy
wcschr
wcsstr
strchr
__std_exception_destroy
__std_exception_copy
strstr
_purecall
__std_terminate

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_errno
_resetstkoflw
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_exit
signal
raise
_invalid_parameter_noinfo

api-ms-win-crt-convert-l1-1-0

strtoul
atof
wcstol
atoi
_wtoi
_wtol

api-ms-win-crt-string-l1-1-0

wcstok_s
wcstok
_wcsicmp
strncpy
_wcsupr
_stricmp
_wcsnicmp
strncmp
isalnum
isprint
isspace
wcsncmp
strpbrk
strcpy_s
isdigit
strcmp
wcsncpy_s
wcscpy_s
_strnicmp
isxdigit
isupper
tolower
strncpy_s

api-ms-win-crt-heap-l1-1-0

malloc
realloc
free

api-ms-win-crt-stdio-l1-1-0

_setmode
ftell
fopen_s
fopen
_fileno
fgets
ferror
feof
fwrite
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
__stdio_common_vfprintf
fputs
fclose
__stdio_common_vswprintf
_fseeki64
fread
_ftelli64
_wfopen
__acrt_iob_func
fflush
__stdio_common_vsprintf_s
fseek
__stdio_common_vsprintf
__stdio_common_vsnwprintf_s

api-ms-win-crt-time-l1-1-0

wcsftime
_localtime64_s
_time64
_gmtime64_s

api-ms-win-crt-utility-l1-1-0

srand
rand
qsort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

??4CDataComFun@@QAEAAV0@ABV0@@Z
?AddOneSeltStk@CDataMgr@@QAE_NPADH@Z
?CalcZhangDie@CDataComFun@@SAMMMH@Z
?CalcZhangDie@CDataComFun@@SANNNH@Z
?GetOldSerMarkets@CDataMgr@@QAEXAAV?$vector@UMARKET_INFO@@V?$allocator@UMARKET_INFO@@@std@@@std@@@Z
?IsNegative@CDataComFun@@SA_NN@Z
?IsPositive@CDataComFun@@SA_NN@Z
?IsQiQuan@CDataComFun@@SA_NE@Z
?IsUKStock@CDataComFun@@SA_NE@Z
?IsUSAStock@CDataComFun@@SA_NE@Z
?IsUsaOrOtcbbStock@CDataComFun@@SA_NE@Z
?IsZeroValue@CDataComFun@@SA_NN@Z
?SetReqGssStkDictFail@CDataMgr@@QAEX_N@Z
?SetSelfStk@CDataMgr@@QAEXPAV?$CArray@PAU_ZIDING_STOCK_LIST_@@PAU1@@@@Z
GetClassObject
GetStockHqCode
GetTradeCode
Init
RegisterShell
Release
SetAppName
SetTradeRelatePath
Trade
TradeBuySellDlg
TradeBuySellDlgClose
TradeGoto
TradeInsert
TradeInsertClose
TradeParam
TradeRelease
TradeStart
TradeStartEx
UnRegisterShell

Sections

.text
Size: - Virtual size: 892KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1786c79a186f432a3e4bc7673d782a25

Headers

DLL Characteristics

File Characteristics

Imports

sensapi

basemisc

globalenvironment

framebase

datacenter

tradesocket

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

mfc140u

shlwapi

ws2_32

msvcp140

version

iphlpapi

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 892KB

.rdata Size: - Virtual size: 279KB

.data Size: - Virtual size: 20KB

.vmp0 Size: - Virtual size: 1.5MB

.vmp1 Size: 3.7MB - Virtual size: 3.7MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 17KB

.text
Size: - Virtual size: 892KB

.rdata
Size: - Virtual size: 279KB

.data
Size: - Virtual size: 20KB

.vmp0
Size: - Virtual size: 1.5MB

.vmp1
Size: 3.7MB - Virtual size: 3.7MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 17KB