0bcf42819c4c02e07e600d35c67ac23ad4eef565b80155abd3f2f92d09eacfcd

Sharing

Copy URL Twitter E-mail

General

Target
0bcf42819c4c02e07e600d35c67ac23ad4eef565b80155abd3f2f92d09eacfcd
Size 10.9MB
Sample260805-n5ltfser7x
SHA256 0bcf42819c4c02e07e600d35c67ac23ad4eef565b80155abd3f2f92d09eacfcd
MD5 dc7bc023a85a5e8b208e32324678a198
SHA1 276676796193b891045ff7cd857ae44e4d9da53f
SHA512 1aa0a247267672eee50f11e9ff17a31aae2c39681ae49347caf4a82161ad010f42a1bffa1f171faecff271db9524c868065b7e3f1f1065d2b1e9670f7f4d309b
SSDEEP 98304:4OgAYihpiO6muYhkdTuTGKeJUnUkIKEYbw3YYv0h72OOqOxOzqq8/p3:4chIXCRUkIKEMOqOxOWP/p3
TLSH
T113B6392B47AD80FCD5B6E27CD6175913E2363C1503325ADB0B904D662F6B6E48E3DB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
0bcf42819c4c02e07e600d35c67ac23ad4eef565b80155abd3f2f92d09eacfcd

File Explorer

0bcf42819c4c02e07e600d35c67ac23ad4eef565b80155abd3f2f92d09eacfcd

.exe 10.9MB

0bcf42819c4c02e07e600d35c67ac23ad4eef565b80155abd3f2f92d09eacfcd

IMPHASH bd4e84b4fda45f003a36c75edac2d4b0
SHA256 0bcf42819c4c02e07e600d35c67ac23ad4eef565b80155abd3f2f92d09eacfcd
MD5 dc7bc023a85a5e8b208e32324678a198
SHA1 276676796193b891045ff7cd857ae44e4d9da53f
SHA512 1aa0a247267672eee50f11e9ff17a31aae2c39681ae49347caf4a82161ad010f42a1bffa1f171faecff271db9524c868065b7e3f1f1065d2b1e9670f7f4d309b
SSDEEP 98304:4OgAYihpiO6muYhkdTuTGKeJUnUkIKEYbw3YYv0h72OOqOxOzqq8/p3:4chIXCRUkIKEMOqOxOWP/p3
TLSH
T113B6392B47AD80FCD5B6E27CD6175913E2363C1503325ADB0B904D662F6B6E48E3DB22
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

09:23:ef:2c:6a:47:84:70:d4:27:eb:71:06:d7:30:ba:6b:40:9a:96:9f:20:a5:04:09:71:84:7d:8a:76:1b:5f

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Aug 4, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0e:84:8e:a3:9b:36:d7:bb:53:3c:f4:3d:96:d6:e1:3e

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 6, 2025 - Oct 5, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

6803488

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

AcroTray.pdb

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueW GetFileVersionInfoW VerQueryValueA GetFileVersionInfoSizeW

winhttp

WinHttpReceiveResponse WinHttpQueryHeaders WinHttpGetProxyForUrl WinHttpQueryAuthSchemes WinHttpSetTimeouts WinHttpSetStatusCallback WinHttpCrackUrl WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpSetOption WinHttpSetCredentials WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpGetIEProxyConfigForCurrentUser WinHttpSendRequest

wininet

InternetSetOptionW

kernel32

GlobalFree GlobalAlloc GetProcessId GetShortPathNameW GetFileAttributesA GetUserDefaultLCID GetSystemInfo GetUserDefaultLangID GetUserDefaultUILanguage MulDiv IsBadWritePtr GetModuleFileNameA CreateSemaphoreExW CreateMutexExW WaitForSingleObjectEx OutputDebugStringW DebugBreak IsDebuggerPresent CreateSemaphoreW OpenSemaphoreW ReleaseSemaphore CreateThread CreateNamedPipeW ConnectNamedPipe FileTimeToSystemTime LocalAlloc GetComputerNameExW CreateProcessW CreatePipe RaiseException SetHandleInformation GetTimeFormatW GetDateFormatW GetLocalTime GetFileInformationByHandleEx SetFileAttributesW GetFileAttributesW FindClose DeleteFileW ReadDirectoryChangesW CreateWaitableTimerW WaitForMultipleObjects CancelWaitableTimer SetWaitableTimer CreateEventW ResetEvent SetEvent GetOverlappedResult GetProcAddress GetModuleHandleW FreeLibrary GetSystemFirmwareTable GetNativeSystemInfo GetVersionExW GetWindowsDirectoryW GetSystemDirectoryW GetCurrentProcess DeviceIoControl GetVolumePathNameW FindNextFileW FindFirstFileW LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetCurrentProcessId GetCurrentThreadId CreateMutexW WaitForSingleObject ReleaseMutex FormatMessageW LocalFree VerifyVersionInfoW VerSetConditionMask TerminateProcess QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx LoadLibraryExW lstrcpyA LoadLibraryW FindResourceW SizeofResource LockResource LoadResource GetModuleHandleExW GetModuleFileNameW FindResourceExW DeleteCriticalSection GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP EnumSystemLocalesW IsValidLocale LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetStdHandle ExitProcess SetStdHandle VirtualQuery VirtualAlloc GetCommandLineW GetCommandLineA HeapQueryInformation GetTimeZoneInformation PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW MoveFileExW FreeLibraryAndExitThread ExitThread RtlUnwindEx GetCPInfo CompareStringEx SetLastError DecodePointer OutputDebugStringA WideCharToMultiByte GetTempPathW GetFileSizeEx MultiByteToWideChar GetCurrentDirectoryW SetCurrentDirectoryW lstrlenW GetTickCount Sleep OpenMutexW InitializeCriticalSectionEx SetNamedPipeHandleState GetLastError CloseHandle WriteFile CreateActCtxW GetEnvironmentVariableW LCMapStringEx GetStringTypeW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns GetExitCodeThread InitOnceComplete InitOnceBeginInitialize QueryPerformanceFrequency RtlPcToFileHeader RtlUnwind WakeConditionVariable FormatMessageA TryAcquireSRWLockExclusive InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext ReadFile GetVolumeInformationW CreateFileW GetLocaleInfoEx SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalSize GlobalUnlock GlobalLock CopyFileW FlushFileBuffers GetFileSize GetFullPathNameW LockFile SetEndOfFile SetFilePointer UnlockFile DuplicateHandle lstrcmpiW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GlobalReAlloc GlobalHandle LocalReAlloc CompareStringW lstrcmpA GlobalGetAtomNameW FileTimeToLocalFileTime GetFileAttributesExW GetFileTime SystemTimeToTzSpecificLocalTime SetThreadPriority ResumeThread GlobalAddAtomW GlobalFlags lstrcmpW EncodePointer GlobalDeleteAtom GlobalFindAtomW GetLocaleInfoW VirtualProtect lstrcpyW GetTickCount64 GetProfileIntW SearchPathW GetTempFileNameW

user32

InsertMenuW AppendMenuW RemoveMenu CharUpperW UnhookWindowsHookEx IsWindowEnabled GetWindowLongW GetLastActivePopup GetSysColorBrush GetWindowTextW GetWindowTextLengthW PeekMessageW GetKeyState ValidateRect SetWindowsHookExW CallNextHookEx DestroyIcon GetDlgCtrlID GetFocus PtInRect GetWindow RealChildWindowFromPoint SetFocus SetScrollPos GetScrollPos GetDlgItem CheckDlgButton SetWindowLongW IsDialogMessageW DrawTextExW GrayStringW TabbedTextOutW GetWindowDC FillRect EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW GetMessagePos GetMessageTime CallWindowProcW RegisterClassW GetClassInfoW IsMenu IsChild GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos IsIconic GetCapture GetMenu GetMenuItemCount UpdateWindow SetActiveWindow RedrawWindow ScrollWindow SetScrollRange GetScrollRange ShowScrollBar SetPropW GetPropW RemovePropW MapWindowPoints CopyRect EqualRect GetClassLongPtrW GetTopWindow LoadIconW SetScrollInfo GetScrollInfo WinHelpW MonitorFromWindow InflateRect IntersectRect GetMenuItemInfoW CopyImage SendDlgItemMessageA SetRectEmpty OffsetRect CreateDialogIndirectParamW EndDialog GetNextDlgTabItem MapDialogRect ShowOwnedPopups SetCursor GetMenuItemID InvalidateRect TrackMouseEvent GetNextDlgGroupItem SetCapture ReleaseCapture WindowFromPoint DrawFocusRect IsRectEmpty DrawIconEx GetIconInfo MessageBeep EnableScrollBar HideCaret InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW GetKeyNameTextW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW SetWindowRgn SetParent DrawEdge DrawFrameControl IsZoomed GetSystemMenu SetCursorPos CopyIcon FrameRect DrawIcon UnionRect UpdateLayeredWindow MonitorFromPoint LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetComboBoxInfo PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW LockWindowUpdate SetMenuDefaultItem GetDoubleClickTime ModifyMenuW RegisterClipboardFormatW CharUpperBuffW IsClipboardFormatAvailable GetUpdateRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel SubtractRect GetSystemMetrics CreateMenu GetWindowRgn DestroyCursor SetWindowTextW GetAncestor LoadCursorW SetWindowLongPtrW GetWindowLongPtrW EnableWindow DestroyWindow CreateWindowExW GetClassInfoExW RegisterClassExW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage GetMessageW GetActiveWindow MessageBoxW SendMessageW UnregisterClassW IsWindow FindWindowW PostMessageW AttachThreadInput ShowWindow SetWindowPos BringWindowToTop GetForegroundWindow SetForegroundWindow GetClientRect GetMenuState SetRect ReleaseDC GetDC GetMenuStringW DeleteMenu SetMenu GetWindowRect AdjustWindowRectEx GetDesktopWindow GetWindowThreadProcessId MonitorFromRect SystemParametersInfoW FindWindowExW MoveWindow RegisterWindowMessageW LoadImageW GetClassNameW EnumThreadWindows GetParent SetClassLongPtrW GetSysColor ScreenToClient ClientToScreen GetCursorPos EndPaint BeginPaint DrawTextW TrackPopupMenu GetSubMenu CheckMenuItem DestroyMenu LoadMenuW KillTimer SetTimer SendDlgItemMessageW SetDlgItemTextW CreateDialogParamW IsWindowVisible WaitForInputIdle LoadStringW GetMonitorInfoW GetAsyncKeyState

gdi32

CreateRectRgn CreatePatternBrush Escape ExcludeClipRect GetClipBox GetObjectType CreatePen GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectPalette SetBkMode SetMapMode CreateHatchBrush CreateCompatibleDC CreateBitmap BitBlt DeleteObject DeleteDC CreateDCW CopyMetaFileW GetPixel SetViewportExtEx GetBoundsRect PtInRegion ExtFloodFill GetObjectW SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx GetTextFaceW CreateSolidBrush SetLayout GetLayout SetPolyFillMode SetROP2 SetViewportOrgEx ExtTextOutW SetTextColor SetBkColor SelectObject GetStockObject GetDeviceCaps SetTextAlign SetWindowExtEx MoveToEx FrameRgn FillRgn RoundRect OffsetRgn GetRgnBox Rectangle LPtoDP CreateRoundRectRgn Polyline Polygon CreatePolygonRgn GetTextColor Ellipse CreateEllipticRgn SetDIBColorTable CreateDIBSection StretchBlt SetPixel GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap CreateCompatibleBitmap GetBkColor RealizePalette GetSystemPaletteEntries GetPaletteEntries GetNearestPaletteIndex CreatePalette EnumFontFamiliesExW GetTextMetricsW GetTextExtentPoint32W DPtoLP SetRectRgn PatBlt CreateRectRgnIndirect CreateFontIndirectW CombineRgn ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx TextOutW

winspool.drv

ClosePrinter GetJobW DocumentPropertiesW OpenPrinterW

advapi32

RegOpenKeyW RegEnumKeyExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW CredWriteW CredReadW CredEnumerateW CredDeleteW CredFree GetUserNameW RegDeleteKeyExW RegEnumValueW AllocateAndInitializeSid FreeSid InitializeSecurityDescriptor SetSecurityDescriptorDacl SetEntriesInAclW RegFlushKey RegDeleteValueW RegOpenKeyExA RegQueryValueExA RegNotifyChangeKeyValue RegCreateKeyA RegCreateKeyW RegDeleteKeyW RegOpenKeyA RegQueryValueW RegDeleteKeyA RegSetValueExA EventRegister EventSetInformation EventWriteTransfer EventUnregister RegGetValueW RegCloseKey

shell32

ShellExecuteExW SHGetFolderPathW SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDesktopFolder DragQueryFileW DragFinish ShellExecuteW SHGetSpecialFolderPathW Shell_NotifyIconW SHBrowseForFolderW SHAppBarMessage SHCreateDirectoryExW SHGetKnownFolderPath

ole32

OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleCreateMenuDescriptor OleTranslateAccelerator IsAccelerator CreateStreamOnHGlobal CoDisconnectObject ReleaseStgMedium OleDuplicateData CoUninitialize CoInitializeEx CoCreateInstance CoSetProxyBlanket CoTaskMemFree CoInitialize CoCreateGuid CoTaskMemAlloc OleCreate OleSetContainedObject OleLockRunning OleInitialize OleUninitialize OleDestroyMenuDescriptor DoDragDrop

oleaut32

VarBstrFromDate VariantCopy VariantTimeToSystemTime SystemTimeToVariantTime LoadTypeLi SysAllocStringByteLen SysStringByteLen SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SysAllocStringLen SysFreeString SysAllocString VariantChangeType VariantClear VariantInit SysStringLen

msimg32

TransparentBlt AlphaBlend

shlwapi

PathStripToRootW PathIsUNCW UrlCanonicalizeW PathRenameExtensionW PathRemoveExtensionW PathIsFileSpecW PathIsDirectoryW PathFindFileNameW PathAppendW PathAddExtensionW UrlEscapeW PathRemoveFileSpecW PathFileExistsW StrFormatKBSizeW PathFindExtensionW

uxtheme

DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName GetWindowTheme GetThemePartSize IsThemeBackgroundPartiallyTransparent GetThemeSysColor IsAppThemed

bcrypt

BCryptDestroyKey BCryptDecrypt BCryptEncrypt BCryptGenerateSymmetricKey BCryptSetProperty BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptGetProperty BCryptVerifySignature BCryptCreateHash BCryptHashData BCryptFinishHash BCryptOpenAlgorithmProvider

crypt32

CertCloseStore CertOpenStore CryptImportPublicKeyInfoEx2 CryptHashCertificate2 CertCreateCertificateContext CertVerifySubjectCertificateContext CertFreeCertificateContext CryptUnprotectData CryptProtectData CryptQueryObject CertNameToStrA CryptMsgGetParam CryptStringToBinaryW CertFindCertificateInStore CertAddCertificateContextToStore

secur32

GetUserNameExW

ws2_32

getnameinfo WSACleanup WSAStartup

iphlpapi

GetAdaptersAddresses

wintrust

WinVerifyTrust

gdiplus

GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipDeleteGraphics GdipDrawImageI GdipCreateBitmapFromHBITMAP GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdipCreateBitmapFromStream

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

winmm

PlaySoundW

Name

.text

Size

8.1MB

Virtual Size

8.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

92KB

Virtual Size

397KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

382KB

Virtual Size

382KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0bcf42819c4c02e07e600d35c67ac23ad4eef565b80155abd3f2f92d09eacfcd

PE Signature issue

version

winhttp

wininet

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

msimg32

shlwapi

uxtheme

bcrypt

crypt32

secur32

ws2_32

iphlpapi

wintrust

gdiplus

oleacc

imm32

winmm

generic