EXSTIA1ss01[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
EXSTIA1ss01.exe
Size 4.9MB
Sample260713-kq38eagv21
SHA256 fef0ddae37c9abc00eca0cb2585501abc35f75f00ea0283219be718e5c0855e3
MD5 ac685a82a5c12fdb5c7c11747ee7a926
SHA1 18f25db54dd36c452b688bc82607cfb116f22d4c
SHA512 5d5085c3bb16f0a8c75d7f022a999e61ac0a2ef78a5e8996974b59f8135701bcf8743340bf23f999e5f9dfb45c188526cc3e43eaac950b0fb58bececb14db6c3
SSDEEP 98304:YX8j1Ld15ssHJAX17TuQrK21xqXmkVUeHC7HCiPNIYHl+rgEzDlDq8+dVw:YX89PqaA8QrhxqXmkVUeHC7HCiPNIYH
TLSH
T165369E12F640D43BD0A215718A26E7F5657A7F302E00A66777907BAC3EB07D1DE123AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EXSTIA1ss01.exe

File Explorer

EXSTIA1ss01.exe

.exe 4.9MB

EXSTIA1ss01.exe

IMPHASH c5da557f98b424fa757e1817839995cd
SHA256 fef0ddae37c9abc00eca0cb2585501abc35f75f00ea0283219be718e5c0855e3
MD5 ac685a82a5c12fdb5c7c11747ee7a926
SHA1 18f25db54dd36c452b688bc82607cfb116f22d4c
SHA512 5d5085c3bb16f0a8c75d7f022a999e61ac0a2ef78a5e8996974b59f8135701bcf8743340bf23f999e5f9dfb45c188526cc3e43eaac950b0fb58bececb14db6c3
SSDEEP 98304:YX8j1Ld15ssHJAX17TuQrK21xqXmkVUeHC7HCiPNIYHl+rgEzDlDq8+dVw:YX89PqaA8QrhxqXmkVUeHC7HCiPNIYH
TLSH
T165369E12F640D43BD0A215718A26E7F5657A7F302E00A66777907BAC3EB07D1DE123AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

aaaaaaaa

Minor OS version

Major OS version

Entry point

3329152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

dsound

ord1

advapi32

GetUserNameA RegCloseKey RegCreateKeyExA RegFlushKey RegOpenKeyExA RegQueryValueExA RegSetValueExA

kernel32

CloseHandle CompareStringA CopyFileA CreateDirectoryA CreateEventA CreateFileA CreateFileMappingA CreateFileW CreateMutexA CreateSemaphoreA CreateThread DeleteCriticalSection DeleteFileA DeleteFileW EnterCriticalSection EnumCalendarInfoA ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FindResourceW FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentDirectoryW GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatA GetDiskFreeSpaceA GetDriveTypeA GetEnvironmentStrings GetEnvironmentVariableA GetExitCodeThread GetFileAttributesA GetFileSize GetFileType GetFullPathNameA GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeExA GetStringTypeW GetSystemDefaultLangID GetSystemInfo GetTempFileNameA GetTempFileNameW GetTempPathA GetTempPathW GetThreadLocale GetThreadPriority GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetVersion GetVersionExA GetVersionExW GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFindAtomA GlobalFree GlobalHandle GlobalLock GlobalMemoryStatus GlobalReAlloc GlobalSize GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedIncrement IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryW LoadResource LocalAlloc LocalFree LockResource MapViewOfFile MoveFileA MulDiv MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseMutex ReleaseSemaphore ResetEvent ResumeThread RtlUnwind SetConsoleCtrlHandler SetCurrentDirectoryA SetCurrentDirectoryW SetEndOfFile SetEnvironmentVariableA SetErrorMode SetEvent SetFilePointer SetHandleCount SetLastError SetThreadLocale SetThreadPriority SizeofResource Sleep SuspendThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpW lstrcpyA lstrcpyW lstrcpynA lstrcpynW lstrlenA lstrlenW GetVolumeInformationA

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetIconSize ImageList_Write

gdi32

BitBlt CombineRgn CopyEnhMetaFileA CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateFontW CreateHalftonePalette CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse EnumFontFamiliesExA EnumFontFamiliesExW ExcludeClipRect ExtCreatePen ExtTextOutA GdiFlush GetBitmapBits GetBrushOrgEx GetCharacterPlacementW GetClipBox GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetGlyphOutlineA GetGlyphOutlineW GetObjectA GetPaletteEntries GetPixel GetStockObject GetSystemPaletteEntries GetTextExtentPoint32A GetTextExtentPoint32W GetTextMetricsA GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt Pie PlayEnhMetaFile PolyPolyline RealizePalette RectVisible Rectangle RestoreDC SaveDC SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetDIBitsToDevice SetEnhMetaFileBits SetMapMode SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportExtEx SetViewportOrgEx SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx StretchBlt StretchDIBits TextOutW UnrealizeObject

shell32

DragAcceptFiles DragFinish DragQueryFileA DragQueryFileW ShellExecuteA

user32

ActivateKeyboardLayout AdjustWindowRectEx AttachThreadInput BeginPaint BringWindowToTop CallNextHookEx CallWindowProcA ChangeDisplaySettingsA CharLowerA CharLowerBuffA CharNextA CharUpperBuffA CheckMenuItem ClientToScreen ClipCursor CloseClipboard CreateIcon CreateMenu CreatePopupMenu CreateWindowExA CreateWindowExW DefFrameProcA DefMDIChildProcA DefWindowProcA DefWindowProcW DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextA EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumClipboardFormats EnumDisplayMonitors EnumDisplaySettingsA EnumDisplaySettingsW EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FindWindowW FrameRect GetActiveWindow GetCapture GetCaretPos GetClassInfoA GetClassNameA GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuItemInfoW GetMenuState GetMenuStringA GetMessageTime GetMonitorInfoA GetMonitorInfoW GetParent GetPropA GetQueueStatus GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA InsertMenuItemW IntersectRect InvalidateRect IsCharAlphaA IsCharAlphaNumericA IsChild IsClipboardFormatAvailable IsDialogMessageA IsDialogMessageW IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadCursorW LoadIconA LoadIconW LoadKeyboardLayoutA LoadStringA MapVirtualKeyA MapWindowPoints MessageBeep MessageBoxA MessageBoxW MoveWindow MsgWaitForMultipleObjects OemToCharA OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageA PostMessageW PostQuitMessage PostThreadMessageA PtInRect RedrawWindow RegisterClassA RegisterClassExW RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow ScrollWindowEx SendMessageA SendMessageW SetActiveWindow SetCapture SetClassLongA SetClassLongW SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetKeyboardState SetMenu SetMenuItemInfoA SetMenuItemInfoW SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW SetWindowsHookExA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA SystemParametersInfoW TrackPopupMenu TranslateAcceleratorW TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnionRect UnregisterClassA UnregisterClassW UpdateWindow ValidateRect WaitMessage WinHelpA WindowFromPoint wsprintfA GetSysColor

winmm

timeEndPeriod timeGetTime

oleaut32

SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeType VariantClear VariantCopy VariantCopyInd VariantInit

@$xp$10TCCalendar @$xp$16Cspin@TCSpinEdit @$xp$17TPerformanceGraph @$xp$18Cspin@TCSpinButton @$xp$23Cspin@TTimerSpeedButton @$xp$27Cdiroutl@TCDirectoryOutline @$xp$7TCGauge @@Ccalendr@Finalize @@Ccalendr@Initialize @@Cdiroutl@Finalize @@Cdiroutl@Initialize @@Cgauges@Finalize @@Cgauges@Initialize @@Compile@Finalize @@Compile@Initialize @@Config@Finalize @@Config@Initialize @@Cspin@Finalize @@Cspin@Initialize @@Debug@Finalize @@Debug@Initialize @@File@Finalize @@File@Initialize @@Gamemain@Finalize @@Gamemain@Initialize @@Global@Finalize @@Global@Initialize @@Graph@Finalize @@Graph@Initialize @@Init@Finalize @@Init@Initialize @@Lint@Finalize @@Lint@Initialize @@Log@Finalize @@Log@Initialize @@Main@Finalize @@Main@Initialize @@Makescr@Finalize @@Makescr@Initialize @@Manpu@Finalize @@Manpu@Initialize @@Mmx@Finalize @@Mmx@Initialize @@Perfgrap@Finalize @@Perfgrap@Initialize @@Ponjan@Finalize @@Ponjan@Initialize @@Roll@Finalize @@Roll@Initialize @@Save@Finalize @@Save@Initialize @@Script@Finalize @@Script@Initialize @@Select@Finalize @@Select@Initialize @@Seltree@Finalize @@Seltree@Initialize @@Sound@Finalize @@Sound@Initialize @@Sub@Finalize @@Sub@Initialize @@Swing@Finalize @@Swing@Initialize @@System@Finalize @@System@Initialize @@Text@Finalize @@Text@Initialize @@Title_uniq@Finalize @@Title_uniq@Initialize @@Tower@Finalize @@Tower@Initialize @@View@Finalize @@View@Initialize @@Win@Finalize @@Win@Initialize @Cdiroutl@TCDirectoryOutline@ @Cdiroutl@TCDirectoryOutline@$bctr$qqrp18Classes@TComponent @Cdiroutl@TCDirectoryOutline@APointer @Cdiroutl@TCDirectoryOutline@AssignCaseProc$qqrv @Cdiroutl@TCDirectoryOutline@BuildOneLevel$qqrl @Cdiroutl@TCDirectoryOutline@BuildSubTree$qqrl @Cdiroutl@TCDirectoryOutline@BuildTree$qqrv @Cdiroutl@TCDirectoryOutline@Change$qqrv @Cdiroutl@TCDirectoryOutline@Click$qqrv @Cdiroutl@TCDirectoryOutline@CreateWnd$qqrv @Cdiroutl@TCDirectoryOutline@CurDir$qv @Cdiroutl@TCDirectoryOutline@DriveToInt$qqrc @Cdiroutl@TCDirectoryOutline@Expand$qqri @Cdiroutl@TCDirectoryOutline@ForceCase$qqrrx17System@AnsiString @Cdiroutl@TCDirectoryOutline@GetChildNamed$qqrrx17System@AnsiStringl @Cdiroutl@TCDirectoryOutline@InvalidIndex @Cdiroutl@TCDirectoryOutline@Loaded$qqrv @Cdiroutl@TCDirectoryOutline@RootIndex @Cdiroutl@TCDirectoryOutline@SetDirectory$qqr17System@AnsiString @Cdiroutl@TCDirectoryOutline@SetDrive$qqrc @Cdiroutl@TCDirectoryOutline@SetTextCase$qqr18Cdiroutl@TTextCase @Cdiroutl@TCDirectoryOutline@WalkTree$qqrrx17System@AnsiString @Cspin@TCSpinButton@ @Cspin@TCSpinButton@$bctr$qqrp18Classes@TComponent @Cspin@TCSpinButton@$bdtr$qqrv @Cspin@TCSpinButton@AdjustSize$qqrrit1 @Cspin@TCSpinButton@BtnClick$qqrp14System@TObject @Cspin@TCSpinButton@BtnMouseDown$qqrp14System@TObject21Controls@TMouseButton46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6%ii @Cspin@TCSpinButton@CreateButton$qqrv @Cspin@TCSpinButton@Dispatch$qqrpv @Cspin@TCSpinButton@GetDownGlyph$qqrv @Cspin@TCSpinButton@GetUpGlyph$qqrv @Cspin@TCSpinButton@KeyDown$qqrrus46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6% @Cspin@TCSpinButton@Loaded$qqrv @Cspin@TCSpinButton@SetBounds$qqriiii @Cspin@TCSpinButton@SetDownGlyph$qqrp16Graphics@TBitmap @Cspin@TCSpinButton@SetFocusBtn$qqrp23Cspin@TTimerSpeedButton @Cspin@TCSpinButton@SetUpGlyph$qqrp16Graphics@TBitmap @Cspin@TCSpinButton@WMGetDlgCode$qqrr20Messages@TWMNoParams @Cspin@TCSpinButton@WMKillFocus$qqrr21Messages@TWMKillFocus @Cspin@TCSpinButton@WMSetFocus$qqrr20Messages@TWMSetFocus @Cspin@TCSpinButton@WMSize$qqrr16Messages@TWMSize @Cspin@TCSpinEdit@ @Cspin@TCSpinEdit@$bctr$qqrp18Classes@TComponent @Cspin@TCSpinEdit@$bdtr$qqrv @Cspin@TCSpinEdit@CMEnter$qqrr20Messages@TWMNoParams @Cspin@TCSpinEdit@CMExit$qqrr20Messages@TWMNoParams @Cspin@TCSpinEdit@CheckValue$qqrl @Cspin@TCSpinEdit@CreateParams$qqrr22Controls@TCreateParams @Cspin@TCSpinEdit@CreateWnd$qqrv @Cspin@TCSpinEdit@Dispatch$qqrpv @Cspin@TCSpinEdit@DownClick$qqrp14System@TObject @Cspin@TCSpinEdit@GetChildren$qqrynpqqrp18Classes@TComponent$vp18Classes@TComponent @Cspin@TCSpinEdit@GetMinHeight$qqrv @Cspin@TCSpinEdit@GetValue$qqrv @Cspin@TCSpinEdit@IsValidChar$qqrc @Cspin@TCSpinEdit@KeyDown$qqrrus46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6% @Cspin@TCSpinEdit@KeyPress$qqrrc @Cspin@TCSpinEdit@SetEditRect$qqrv @Cspin@TCSpinEdit@SetValue$qqrl @Cspin@TCSpinEdit@UpClick$qqrp14System@TObject @Cspin@TCSpinEdit@WMCut$qqrr20Messages@TWMNoParams @Cspin@TCSpinEdit@WMPaste$qqrr20Messages@TWMNoParams @Cspin@TCSpinEdit@WMSize$qqrr16Messages@TWMSize @Cspin@TTimerSpeedButton@ @Cspin@TTimerSpeedButton@$bctr$qqrp18Classes@TComponent @Cspin@TTimerSpeedButton@$bdtr$qqrv @Cspin@TTimerSpeedButton@MouseDown$qqr21Controls@TMouseButton46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6%ii @Cspin@TTimerSpeedButton@MouseUp$qqr21Controls@TMouseButton46System@%Set$t18Classes@Classes__1$iuc$0$iuc$6%ii @Cspin@TTimerSpeedButton@Paint$qqrv @Cspin@TTimerSpeedButton@TimerExpired$qqrp14System@TObject @TCCalendar@ @TCCalendar@$bctr$qqrp18Classes@TComponent @TCCalendar@Change$qqrv @TCCalendar@ChangeMonth$qqri @TCCalendar@Click$qqrv @TCCalendar@DaysPerMonth$qqrii @TCCalendar@DaysThisMonth$qqrv @TCCalendar@Dispatch$qqrpv @TCCalendar@DrawCell$qqriirx11Types@TRect42System@%Set$t14Grids@Grids__3$iuc$0$iuc$2% @TCCalendar@GetCellText$qqrii @TCCalendar@GetDateElement$qqri @TCCalendar@IsLeapYear$qqri @TCCalendar@NextMonth$qqrv @TCCalendar@NextYear$qqrv @TCCalendar@PrevMonth$qqrv @TCCalendar@PrevYear$qqrv @TCCalendar@SeTCCalendarDate$qqr16System@TDateTime @TCCalendar@SelectCell$qqrii @TCCalendar@SetDateElement$qqrii @TCCalendar@SetStartOfWeek$qqrs @TCCalendar@SetUseCurrentDate$qqro @TCCalendar@StoreCalendarDate$qqrv @TCCalendar@UpdateCalendar$qqrv @TCCalendar@WMSize$qqrr16Messages@TWMSize @TCGauge@ @TCGauge@$bctr$qqrp18Classes@TComponent @TCGauge@AddProgress$qqrl @TCGauge@GetPercentDone$qqrv @TCGauge@Paint$qqrv @TCGauge@PaintAsBar$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsNeedle$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsNothing$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsPie$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintAsText$qqrp16Graphics@TBitmaprx11Types@TRect @TCGauge@PaintBackground$qqrp16Graphics@TBitmap @TCGauge@SeTCGaugeKind$qqr11TCGaugeKind @TCGauge@SetBackColor$qqr15Graphics@TColor @TCGauge@SetBorderStyle$qqr22Forms@TFormBorderStyle @TCGauge@SetForeColor$qqr15Graphics@TColor @TCGauge@SetMaxValue$qqrl @TCGauge@SetMinValue$qqrl @TCGauge@SetProgress$qqrl @TCGauge@SetShowText$qqro @TPerformanceGraph@ @TPerformanceGraph@$bctr$qqrp18Classes@TComponent @TPerformanceGraph@$bdtr$qqrv @TPerformanceGraph@DataPoint$qqr15Graphics@TColorl @TPerformanceGraph@DisplayPoints$qqrl @TPerformanceGraph@FirstY$qqrv @TPerformanceGraph@GetBandCount$qqrv @TPerformanceGraph@Initialize$qqrl @TPerformanceGraph@LastY$qqri @TPerformanceGraph@NextY$qqri @TPerformanceGraph@Paint$qqrv @TPerformanceGraph@PaintBar$qqr15Graphics@TColorll @TPerformanceGraph@PaintLine$qqr15Graphics@TColorll @TPerformanceGraph@ReallocHistory$qqrv @TPerformanceGraph@Replay$qqrv @TPerformanceGraph@RoundUp$qqrll @TPerformanceGraph@ScrollGraph$qqrv @TPerformanceGraph@SetBackColor$qqr15Graphics@TColor @TPerformanceGraph@SetForeColor$qqr15Graphics@TColor @TPerformanceGraph@SetGradient$qqrl @TPerformanceGraph@SetGraphKind$qqr10TGraphKind @TPerformanceGraph@SetGridSize$qqrl @TPerformanceGraph@SetGridlines$qqro @TPerformanceGraph@SetPenWidth$qqrl @TPerformanceGraph@SetScale$qqrl @TPerformanceGraph@SetStepSize$qqrl @TPerformanceGraph@ShiftY$qqrv @TPerformanceGraph@Update$qqrv _Form1 __GetExceptDLLinfo ___CPPdebugHook

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1.1MB

Virtual Size

5.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

428KB

Virtual Size

432KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

147KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

EXSTIA1ss01.exe

dsound

advapi32

kernel32

comctl32

gdi32

shell32

user32

winmm

oleaut32

generic