13b6ded98139acb6d33bdd7c093fc8ff4816747ae295d8bb567b698137c5f32d

Sharing

Copy URL Twitter E-mail

General

Target
13b6ded98139acb6d33bdd7c093fc8ff4816747ae295d8bb567b698137c5f32d
Size 9.9MB
Sample260716-e8dgtagw7w
SHA256 13b6ded98139acb6d33bdd7c093fc8ff4816747ae295d8bb567b698137c5f32d
MD5 d3152d149d22349405d845b9555587ed
SHA1 453c5f30df4d5054c964226e8f7efee001fde7f2
SHA512 f9a1f2b33b33ad13cfbe29f37d8d4d52d0ef6fe28ee2970f84b76fa05174b60bd4959e34f875f2922caed651d1375b47edda25e92ed65ff541431b34622dc1b6
SSDEEP 98304:3oW7u+vSDSXkeeedx5xIxnxBK9Oh8vB//QlP44GCn9enRWHakD5kDfXXXn5GwAkl:3oW7u+vSDSWK9Of44of5dqfb9Sj
TLSH
T129A64A137E5CD4CEE91A45308C279AB412347C58B9A1BA2B628FFE0FD87239159DF607
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
13b6ded98139acb6d33bdd7c093fc8ff4816747ae295d8bb567b698137c5f32d

File Explorer

13b6ded98139acb6d33bdd7c093fc8ff4816747ae295d8bb567b698137c5f32d

.dll 9.9MB

13b6ded98139acb6d33bdd7c093fc8ff4816747ae295d8bb567b698137c5f32d

IMPHASH 46977754e9dab0132557b5a11a32aba8
SHA256 13b6ded98139acb6d33bdd7c093fc8ff4816747ae295d8bb567b698137c5f32d
MD5 d3152d149d22349405d845b9555587ed
SHA1 453c5f30df4d5054c964226e8f7efee001fde7f2
SHA512 f9a1f2b33b33ad13cfbe29f37d8d4d52d0ef6fe28ee2970f84b76fa05174b60bd4959e34f875f2922caed651d1375b47edda25e92ed65ff541431b34622dc1b6
SSDEEP 98304:3oW7u+vSDSXkeeedx5xIxnxBK9Oh8vB//QlP44GCn9enRWHakD5kDfXXXn5GwAkl:3oW7u+vSDSWK9Of44of5dqfb9Sj
TLSH
T129A64A137E5CD4CEE91A45308C279AB412347C58B9A1BA2B628FFE0FD87239159DF607
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

30:04:05:9e:50:60:72:8a:22:d2:f4:06:7b:a5:46:b2:cf:ee:b6:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Yaagl,O=Yaagl,ST=Seoul,C=KR

Chains

May 26, 2026

CN=Yaagl,O=Yaagl,ST=Seoul,C=KR

Subject

CN=Yaagl,O=Yaagl,ST=Seoul,C=KR

Serial Number

10:07

Issuer

CN=Dawn Winery CA1,OU=Dawn Winery Certificate Authority,O=The Dawn Winery,ST=Ontario,C=CA

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2026 - Jun 4, 2027

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

76048

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

advapi32

AdjustTokenPrivileges AllocateAndInitializeSid CloseServiceHandle CommandLineFromMsiDescriptor ConvertSidToStringSidW CreateProcessAsUserW EqualSid FreeSid GetTokenInformation LookupPrivilegeValueA OpenProcessToken OpenSCManagerW OpenServiceW QueryServiceStatusEx RegCloseKey RegCreateKeyExA RegCreateKeyExW RegCreateKeyW RegDeleteKeyA RegEnumKeyA RegEnumKeyExW RegEnumKeyW RegEnumValueA RegEnumValueW RegGetValueW RegLoadMUIStringA RegLoadMUIStringW RegOpenKeyA RegOpenKeyExA RegOpenKeyExW RegOpenKeyW RegQueryInfoKeyW RegQueryValueA RegQueryValueExA RegQueryValueExW RegQueryValueW RegSetValueExA RegSetValueExW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW DeleteObject ExtTextOutW GetBitmapBits GetDeviceCaps GetObjectW GetStockObject GetTextExtentPoint32W GetTextMetricsW SelectObject SetBkColor SetBkMode SetTextColor

kernel32

ActivateActCtx CloseHandle CompareFileTime CopyFileW CreateActCtxW CreateDirectoryW CreateFileMappingW CreateFileW CreateProcessW DeactivateActCtx DelayLoadFailureHook DeleteCriticalSection DeleteFileA DeleteFileW DeviceIoControl DisableThreadLibraryCalls DosDateTimeToFileTime EnterCriticalSection EnumResourceNamesW ExpandEnvironmentStringsA ExpandEnvironmentStringsW FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceW FormatMessageW FreeEnvironmentStringsW FreeLibrary GetBinaryTypeW GetCurrentDirectoryA GetCurrentDirectoryW GetDateFormatA GetDateFormatW GetDiskFreeSpaceExW GetDriveTypeA GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileSize GetFullPathNameA GetFullPathNameW GetLocalTime GetLogicalDrives GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetProfileStringW GetShortPathNameA GetShortPathNameW GetSystemDirectoryA GetSystemDirectoryW GetSystemWow64DirectoryW GetTickCount GetTimeFormatA GetTimeFormatW GetVersion GetVolumeInformationA GetVolumeInformationW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalSize GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitOnceExecuteOnce IsBadStringPtrA IsBadStringPtrW IsWow64Process LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFileTimeToFileTime LocalFree LockResource MapViewOfFile MoveFileExW MoveFileW MulDiv MultiByteToWideChar ProcessIdToSessionId RaiseException ReadFile ReleaseActCtx RemoveDirectoryW ResolveDelayLoadedAPI SearchPathW SetCurrentDirectoryA SetCurrentDirectoryW SetErrorMode SetFileAttributesW SetFilePointer SizeofResource Sleep SystemTimeToFileTime UnmapViewOfFile WaitForSingleObject WideCharToMultiByte Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection WriteFile WritePrivateProfileStringW lstrcmpA lstrcmpiA lstrcmpiW wine_get_unix_file_name wine_get_dos_file_name

ntdll

RtlDosPathNameToNtPathName_U RtlFreeUnicodeString RtlGUIDFromString RtlInitUnicodeString RtlRandom _vsnprintf wine_get_host_version

shlwapi

ord2 ord3 ord4 ord5 ord6 ord7 ord8 ord9 ord10 ord24 ShellMessageBoxW PathAddBackslashA PathAddBackslashW PathAppendA PathAppendW PathBuildRootA PathBuildRootW PathCombineA PathCombineW PathCreateFromUrlW PathFileExistsA PathFileExistsW PathFindExtensionA PathFindExtensionW PathFindFileNameA PathFindFileNameW PathFindOnPathA PathFindOnPathW PathGetArgsA PathGetArgsW PathGetCharTypeA PathGetCharTypeW PathGetDriveNumberA PathGetDriveNumberW PathIsDirectoryA PathIsDirectoryW PathIsFileSpecA PathIsFileSpecW PathIsPrefixW PathIsRelativeA PathIsRelativeW PathIsRootA PathIsRootW PathIsSameRootA PathIsSameRootW PathIsUNCA PathIsUNCW PathIsURLW PathMatchSpecA PathMatchSpecW PathParseIconLocationA PathParseIconLocationW PathQuoteSpacesA PathQuoteSpacesW PathRemoveArgsA PathRemoveArgsW PathRemoveBackslashW PathRemoveBlanksA PathRemoveBlanksW PathRemoveExtensionA PathRemoveExtensionW PathRemoveFileSpecA PathRemoveFileSpecW PathSetDlgItemPathA PathSetDlgItemPathW PathStripPathA PathStripPathW PathStripToRootA PathStripToRootW PathUnquoteSpacesA PathUnquoteSpacesW SHCreateStreamOnFileW SHDeleteKeyW SHGetValueW SHQueryValueExA SHQueryValueExW SHStrDupW StrChrW StrCmpIW StrCpyNW StrFormatByteSizeW StrFormatKBSizeA StrFormatKBSizeW StrPBrkW StrRChrW StrRetToBSTR StrRetToBufA StrRetToBufW StrRetToStrW UrlIsW

ucrtbase

__acrt_iob_func __stdio_common_vsprintf __stdio_common_vsscanf __stdio_common_vswprintf _assert _recalloc _strdup _wcsdup _wcsicmp _wcsnicmp _wgetenv atoi calloc free fwrite getenv isprint iswspace malloc memcmp memcpy memmove memset qsort realloc strchr strcmp strcpy strcspn strlen strncmp strrchr towlower towupper wcscat wcscat_s wcschr wcscmp wcscpy wcscpy_s wcslen wcsncmp wcsncpy_s wcspbrk wcsrchr wcsstr wcstol

user32

BeginDeferWindowPos BeginPaint CallWindowProcW CharLowerW CheckMenuRadioItem CreateIconIndirect CreateMenu CreatePopupMenu CreateWindowExW DdeClientTransaction DdeConnect DdeCreateDataHandle DdeCreateStringHandleW DdeDisconnect DdeFreeDataHandle DdeFreeStringHandle DdeGetData DdeGetLastError DdeInitializeA DdeInitializeW DdeNameService DdeQueryStringW DdeUninitialize DefWindowProcW DeferWindowPos DeleteMenu DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DialogBoxParamW DispatchMessageW DrawEdge DrawMenuBar DrawTextW EnableMenuItem EnableWindow EndDeferWindowPos EndDialog EndPaint ExitWindowsEx FindWindowExW FindWindowW GetActiveWindow GetAncestor GetCapture GetClassInfoW GetClientRect GetDC GetDCEx GetDlgItem GetDlgItemTextW GetIconInfo GetKeyState GetMenu GetMenuDefaultItem GetMenuInfo GetMenuItemCount GetMenuItemID GetMenuItemInfoW GetMenuItemRect GetMessageW GetParent GetPropW GetSubMenu GetSysColor GetSystemMetrics GetWindowLongA GetWindowLongW GetWindowRect GetWindowTextA GetWindowTextLengthW GetWindowTextW InsertMenuA InsertMenuItemW InsertMenuW InvertRect IsProcessDPIAware IsWindow IsWindowVisible LoadAcceleratorsW LoadCursorA LoadCursorW LoadIconW LoadImageA LoadImageW LoadMenuA LoadMenuW LoadStringA LoadStringW MapWindowPoints MessageBoxA MessageBoxIndirectW MessageBoxW MoveWindow PostQuitMessage PrivateExtractIconExW PrivateExtractIconsW RegisterClassExW RegisterClassW RegisterClipboardFormatA RegisterClipboardFormatW ReleaseCapture ReleaseDC RemoveMenu RemovePropW ScreenToClient SendDlgItemMessageW SendMessageA SendMessageTimeoutW SendMessageW SetCapture SetCursor SetDlgItemTextW SetFocus SetForegroundWindow SetMenu SetMenuDefaultItem SetMenuInfo SetPropW SetWindowLongA SetWindowLongW SetWindowPos SetWindowTextA SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu TrackPopupMenuEx TranslateMessage UpdateWindow WaitForInputIdle wsprintfA

AddCommasW CDefFolderMenu_Create2 CIDLData_CreateFromIDArray CheckEscapesA CheckEscapesW CommandLineToArgvW Control_FillCache_RunDLL Control_FillCache_RunDLLA Control_FillCache_RunDLLW Control_RunDLL Control_RunDLLA Control_RunDLLAsUserW Control_RunDLLW DAD_AutoScroll DAD_DragEnterEx DAD_DragLeave DAD_DragMove DAD_SetDragImage DAD_SetDragImageFromListView DAD_ShowDragImage Desktop_UpdateBriefcaseOnEvent DllCanUnloadNow DllGetClassObject DllGetVersion DllInstall DllRegisterServer DllUnregisterServer DoEnvironmentSubst DoEnvironmentSubstA DoEnvironmentSubstW DragAcceptFiles DragFinish DragQueryFile DragQueryFileA DragQueryFileAorW DragQueryFileW DragQueryInfo DragQueryPoint DriveType DuplicateIcon ExtractAssociatedIconA ExtractAssociatedIconExA ExtractAssociatedIconExW ExtractAssociatedIconW ExtractIconA ExtractIconEx ExtractIconExA ExtractIconExW ExtractIconResInfoA ExtractIconResInfoW ExtractIconW ExtractVersionResource16W FOOBAR1217 FindExeDlgProc FindExecutableA FindExecutableW FixupOptionalComponents FreeIconList GetCurrentProcessExplicitAppUserModelID GetFileNameFromBrowse ILAppendID ILClone ILCloneFirst ILCombine ILCreateFromPath ILCreateFromPathA ILCreateFromPathW ILFindChild ILFindLastID ILFree ILGetNext ILGetPseudoNameW ILGetSize ILIsEqual ILIsParent ILRemoveLastID ILSaveToStream InitNetworkAddressControl Int64ToString InternalExtractIconListA InternalExtractIconListW IsLFNDrive IsLFNDriveA IsLFNDriveW IsNetDrive IsUserAnAdmin LargeIntegerToString Link_AddExtraDataSection Link_ReadExtraDataSection Link_RemoveExtraDataSection LogoffWindowsDialog OCInstall OpenAs_RunDLL OpenAs_RunDLLA OpenAs_RunDLLW OpenRegStream PathCleanupSpec PathGetShortPath PathIsExe PathMakeUniqueName PathQualify PathResolve PathYetAnotherMakeUniqueName PickIconDlg PifMgr_CloseProperties PifMgr_GetProperties PifMgr_OpenProperties PifMgr_SetProperties Printer_LoadIconsW PrintersGetCommand_RunDLL PrintersGetCommand_RunDLLA PrintersGetCommand_RunDLLW Printers_AddPrinterPropPages Printers_GetPidl Printers_RegisterWindowW Printers_UnregisterWindow ReadCabinetState RealDriveType RealDriveTypeFlags RealShellExecuteA RealShellExecuteExA RealShellExecuteExW RealShellExecuteW ReceiveAddToRecentDocs RegenerateUserEnvironment RestartDialog SHAddFromPropSheetExtArray SHAddToRecentDocs SHAlloc SHAppBarMessage SHAssocEnumHandlers SHAssocEnumHandlersForProtocolByApplication SHBindToFolderIDListParent SHBindToObject SHBindToParent SHBrowseForFolder SHBrowseForFolderA SHBrowseForFolderW SHCLSIDFromString SHChangeNotification_Lock SHChangeNotification_Unlock SHChangeNotify SHChangeNotifyDeregister SHChangeNotifyReceive SHChangeNotifyRegister SHChangeNotifySuspendResume SHChangeRegistrationReceive SHCloneSpecialIDList SHCoCreateInstance SHCreateAssociationRegistration SHCreateDataObject SHCreateDefaultContextMenu SHCreateDirectory SHCreateDirectoryExA SHCreateDirectoryExW SHCreateFileExtractIconW SHCreateItemFromIDList SHCreateItemFromParsingName SHCreateItemFromRelativeName SHCreateItemInKnownFolder SHCreateItemWithParent SHCreateProcessAsUserW SHCreatePropSheetExtArray SHCreateQueryCancelAutoPlayMoniker SHCreateShellFolderView SHCreateShellFolderViewEx SHCreateShellItem SHCreateShellItemArray SHCreateShellItemArrayFromDataObject SHCreateShellItemArrayFromIDLists SHCreateShellItemArrayFromShellItem SHCreateStdEnumFmtEtc SHDefExtractIconA SHDefExtractIconW SHDestroyPropSheetExtArray SHDoDragDrop SHEmptyRecycleBinA SHEmptyRecycleBinW SHEnumerateUnreadMailAccountsW SHExtractIconsW SHFileOperation SHFileOperationA SHFileOperationW SHFindComputer SHFindFiles SHFind_InitMenuPopup SHFlushSFCache SHFormatDrive SHFree SHFreeNameMappings SHGetDataFromIDListA SHGetDataFromIDListW SHGetDesktopFolder SHGetDiskFreeSpaceA SHGetDiskFreeSpaceExA SHGetDiskFreeSpaceExW SHGetFileIcon SHGetFileInfo SHGetFileInfoA SHGetFileInfoW SHGetFolderLocation SHGetFolderPathA SHGetFolderPathAndSubDirA SHGetFolderPathAndSubDirW SHGetFolderPathEx SHGetFolderPathW SHGetFreeDiskSpace SHGetIDListFromObject SHGetIconOverlayIndexA SHGetIconOverlayIndexW SHGetImageList SHGetInstanceExplorer SHGetItemFromDataObject SHGetItemFromObject SHGetKnownFolderIDList SHGetKnownFolderItem SHGetKnownFolderPath SHGetLocalizedName SHGetMalloc SHGetNameFromIDList SHGetNewLinkInfo SHGetNewLinkInfoA SHGetNewLinkInfoW SHGetPathFromIDList SHGetPathFromIDListA SHGetPathFromIDListEx SHGetPathFromIDListW SHGetPropertyStoreForWindow SHGetPropertyStoreFromParsingName SHGetRealIDL SHGetSetFolderCustomSettings SHGetSetSettings SHGetSettings SHGetSpecialFolderLocation SHGetSpecialFolderPathA SHGetSpecialFolderPathW SHGetStockIconInfo SHGlobalDefect SHHandleDiskFull SHHandleUpdateImage SHHelpShortcuts_RunDLL SHHelpShortcuts_RunDLLA SHHelpShortcuts_RunDLLW SHILCreateFromPath SHInvokePrinterCommandA SHInvokePrinterCommandW SHIsBadInterfacePtr SHIsFileAvailableOffline SHLimitInputEdit SHLoadInProc SHLoadNonloadedIconOverlayIdentifiers SHLocalAlloc SHLocalFree SHLocalReAlloc SHMapPIDLToSystemImageListIndex SHMultiFileProperties SHNetConnectionDialog SHObjectProperties SHOpenFolderAndSelectItems SHOpenWithDialog SHParseDisplayName SHPathPrepareForWriteA SHPathPrepareForWriteW SHPropStgCreate SHPropStgReadMultiple SHPropStgWriteMultiple SHQueryRecycleBinA SHQueryRecycleBinW SHQueryUserNotificationState SHRegCloseKey SHRegDeleteKeyW SHRegOpenKeyA SHRegOpenKeyW SHRegQueryValueA SHRegQueryValueExA SHRegQueryValueExW SHRegQueryValueW SHRemoveLocalizedName SHReplaceFromPropSheetExtArray SHRestricted SHSetInstanceExplorer SHSetLocalizedName SHSetTemporaryPropertyForItem SHSetUnreadMailCountW SHShellFolderView_Message SHSimpleIDListFromPath SHUpdateImageA SHUpdateImageW SHUpdateRecycleBinIcon SHValidateUNC SHWaitOp_Operate SetCurrentProcessExplicitAppUserModelID SheChangeDirA SheChangeDirExA SheChangeDirExW SheChangeDirW SheConvertPathW SheFullPathA SheFullPathW SheGetCurDrive SheGetDirA SheGetDirExW SheGetDirW SheGetPathOffsetW SheRemoveQuotesA SheRemoveQuotesW SheSetCurDrive SheShortenPathA SheShortenPathW ShellAboutA ShellAboutW ShellExec_RunDLL ShellExec_RunDLLA ShellExec_RunDLLW ShellExecuteA ShellExecuteEx ShellExecuteExA ShellExecuteExW ShellExecuteW ShellHookProc ShellMessageBoxA ShellMessageBoxW Shell_GetCachedImageIndex Shell_GetCachedImageIndexA Shell_GetCachedImageIndexW Shell_GetImageLists Shell_MergeMenus Shell_NotifyIcon Shell_NotifyIconA Shell_NotifyIconGetRect Shell_NotifyIconW ShortSizeFormatW SignalFileOpen StrChrA StrChrIA StrChrIW StrChrW StrCmpNA StrCmpNIA StrCmpNIW StrCmpNW StrCpyNA StrCpyNW StrNCmpA StrNCmpIA StrNCmpIW StrNCmpW StrNCpyA StrNCpyW StrRChrA StrRChrIA StrRChrIW StrRChrW StrRStrA StrRStrIA StrRStrIW StrRStrW StrStrA StrStrIA StrStrIW StrStrW WOWShellExecute Win32DeleteFile wine_update_symbolic_links

Name

.text

Size

588KB

Virtual Size

586KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

184KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

964B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8.3MB

Virtual Size

8.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

44KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

4KB

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

4KB

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

4KB

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

4KB

Virtual Size

225B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

4KB

Virtual Size

213B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

13b6ded98139acb6d33bdd7c093fc8ff4816747ae295d8bb567b698137c5f32d

PE Signature issue

advapi32

gdi32

kernel32

ntdll

shlwapi

ucrtbase

user32

generic