7cd35217b6607f90df3e5f8583fd4b2df8e03758e428eab7057e1b0bf5a50942

Sharing

Copy URL Twitter E-mail

General

Target
7cd35217b6607f90df3e5f8583fd4b2df8e03758e428eab7057e1b0bf5a50942
Size 10.6MB
Sample260901-2ssccsyeke
SHA256 7cd35217b6607f90df3e5f8583fd4b2df8e03758e428eab7057e1b0bf5a50942
MD5 1501ba014f798613a203fcd208a3a7a5
SHA1 656105e50590648a9809969e1c49d10d5dbb3813
SHA512 c72743202039d30b95a14c413adbb3045d1203def408861fee0a3a10326cc6bedc230222ef323a98dcc76ff86c2338e8da15c02555c95358313b8ad4df7feb4b
SSDEEP 98304:BtIskZT3+niqifhaZua8vcABv2+jx79oxTqesuW8tDj6iC3SsYbTlD2Ph:IskZTOniqi44eivzgTwdOTJ
TLSH
T14AB66C00B7F99596F9BA6F709C72D7A10B3C7C619932CB0FB6A5790F1E326608D14722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cd35217b6607f90df3e5f8583fd4b2df8e03758e428eab7057e1b0bf5a50942

File Explorer

7cd35217b6607f90df3e5f8583fd4b2df8e03758e428eab7057e1b0bf5a50942

.dll 10.6MB

7cd35217b6607f90df3e5f8583fd4b2df8e03758e428eab7057e1b0bf5a50942

IMPHASH d4e124445c3ff6bd5a8e833f1fab8191
SHA256 7cd35217b6607f90df3e5f8583fd4b2df8e03758e428eab7057e1b0bf5a50942
MD5 1501ba014f798613a203fcd208a3a7a5
SHA1 656105e50590648a9809969e1c49d10d5dbb3813
SHA512 c72743202039d30b95a14c413adbb3045d1203def408861fee0a3a10326cc6bedc230222ef323a98dcc76ff86c2338e8da15c02555c95358313b8ad4df7feb4b
SSDEEP 98304:BtIskZT3+niqifhaZua8vcABv2+jx79oxTqesuW8tDj6iC3SsYbTlD2Ph:IskZTOniqi44eivzgTwdOTJ
TLSH
T14AB66C00B7F99596F9BA6F709C72D7A10B3C7C619932CB0FB6A5790F1E326608D14722
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1123736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ntdll

DbgPrint NtQueryInformationFile NtQueryObject NtQueryVolumeInformationFile RtlAnsiStringToUnicodeString RtlAssert RtlCreateUnicodeStringFromAsciiz RtlFreeUnicodeString RtlGUIDFromString RtlInitAnsiString RtlInitUnicodeString RtlRaiseException vDbgPrintExWithPrefix

advapi32

AdjustTokenPrivileges AllocateAndInitializeSid ChangeServiceConfigW CheckTokenMembership CloseServiceHandle CommandLineFromMsiDescriptor ControlService ConvertSidToStringSidW CreateProcessWithLogonW FreeSid GetTokenInformation GetUserNameW LookupPrivilegeValueW OpenProcessToken OpenSCManagerW OpenServiceW OpenThreadToken QueryServiceStatusEx RegCloseKey RegCreateKeyExW RegCreateKeyW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumKeyW RegEnumValueW RegGetValueA RegGetValueW RegOpenKeyA RegOpenKeyExA RegOpenKeyExW RegOpenKeyW RegQueryInfoKeyW RegQueryValueA RegQueryValueExA RegQueryValueExW RegQueryValueW RegSetValueExW StartServiceW

comctl32

ord167 ord401 ord71 ord400 CreatePropertySheetPageW ord328 ord337 ord336 ord329 ord386 ord332 ord334 ord339 ord335 ord338 ord320 ord327 ord321 ord388 ord387 ord323 ord324 DestroyPropertySheetPage ord403 ord169 ord73 ord152 ImageList_AddMasked ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_Draw ImageList_EndDrag ImageList_GetIcon ImageList_GetImageCount ImageList_Remove ImageList_ReplaceIcon InitCommonControls InitCommonControlsEx PropertySheetW

comdlg32

GetFileTitleW GetOpenFileNameW

kernel32

ActivateActCtx CancelIo CloseHandle CompareFileTime CompareStringW CopyFileExW CopyFileW CreateActCtxW CreateDirectoryW CreateEventW CreateFileMappingW CreateFileW CreateProcessW CreateSemaphoreW DeactivateActCtx DeleteCriticalSection DeleteFileW DeviceIoControl DisableThreadLibraryCalls DosDateTimeToFileTime EnterCriticalSection EnumResourceNamesW ExitProcess ExpandEnvironmentStringsA ExpandEnvironmentStringsW FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FindResourceW FlushInstructionCache FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetBinaryTypeW GetComputerNameW GetCurrentDirectoryA GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDiskFreeSpaceExA GetDiskFreeSpaceExW GetDiskFreeSpaceW GetDriveTypeA GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW GetFileAttributesExW GetFileAttributesW GetFileSize GetFileTime GetFullPathNameW GetLastError GetLocaleInfoW GetLogicalDrives GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNumberFormatW GetPrivateProfileIntW GetPrivateProfileStringW GetProcAddress GetProcessHeap GetProfileStringW GetShortPathNameA GetShortPathNameW GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetSystemWow64DirectoryW GetTempPathW GetThreadLocale GetTickCount GetTimeFormatW GetVersion GetVolumeInformationA GetVolumeInformationW GetWindowsDirectoryW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFree GlobalGetAtomNameW GlobalLock GlobalMemoryStatusEx GlobalSize GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSection IsBadCodePtr IsBadReadPtr IsDebuggerPresent IsWow64Process LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree LocalReAlloc LockResource MapViewOfFile MoveFileW MoveFileWithProgressW MulDiv MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueueUserAPC RaiseException ReadDirectoryChangesW ReadFile ReleaseSemaphore RemoveDirectoryW RestoreLastError SearchPathW SetCurrentDirectoryA SetCurrentDirectoryW SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFilePointer SetLastError SetUnhandledExceptionFilter SetVolumeLabelW SizeofResource Sleep SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpyA lstrcpyW lstrcpynA lstrcpynW lstrlenA lstrlenW

msvcrt

__dllonexit _amsg_exit _assert _beginthreadex _exit _initterm _iob _isctype _itoa _itow _lock _memicmp _onexit _snprintf _snwprintf _stricmp _ultow _unlock _vscwprintf _vsnprintf _vsnwprintf _wcsdup _wcsicmp _wcslwr _wcsnicmp _wcsupr _wtoi abort acos atoi bsearch calloc cos free fwrite isprint isspace iswspace malloc memcmp memcpy memmove memset raise realloc sin sprintf strcat strchr strcmp strcpy strcspn strncmp strrchr swprintf tolower toupper towupper vfprintf vsprintf vswprintf swprintf wcscat wcschr wcscmp wcscpy wcslen wcsrchr wcsstr wcstol wcstoul _wcsicmp

shlwapi

AssocCreate AssocQueryStringByKeyW AssocQueryStringW ord448 ord316 ord317 ord164 ord175 ord256 ord172 ord481 ord509 ord176 ord484 ord536 ord163 ord174 ord478 ord479 ord437 ord2 PathAddBackslashW PathAddExtensionW PathAppendA PathAppendW PathBuildRootW PathCombineW PathCommonPrefixW PathCreateFromUrlW PathFileExistsA ord446 ord4 PathFileExistsW PathFindExtensionA PathFindExtensionW PathFindFileNameW ord6 PathFindOnPathW PathGetArgsW PathGetCharTypeA PathGetCharTypeW PathGetDriveNumberW PathIsDirectoryEmptyW PathIsDirectoryW PathIsFileSpecW PathIsNetworkPathW PathIsRelativeW PathIsRootA PathIsRootW PathIsSameRootW PathIsUNCW PathIsURLW ord456 PathMatchSpecW PathParseIconLocationW PathQuoteSpacesW PathRemoveArgsW PathRemoveBackslashW PathRemoveBlanksW PathRemoveExtensionW PathRemoveFileSpecA PathRemoveFileSpecW PathSearchAndQualifyW PathSetDlgItemPathW PathStripPathW PathStripToRootW PathUnExpandEnvStringsW PathUnquoteSpacesA PathUnquoteSpacesW ord219 ord544 ord20 ord7 ord215 SHAutoComplete SHCopyKeyW ord12 ord477 ord471 SHCreateStreamOnFileEx SHCreateStreamOnFileW ord16 ord278 SHDeleteKeyW SHDeleteValueW ord464 ord460 ord197 ord22 ord545 ord19 ord10 ord461 ord193 ord192 ord476 ord271 ord491 SHGetValueW ord515 ord222 ord223 ord224 ord540 ord8 ord510 ord179 SHOpenRegStream2W ord535 ord507 ord531 ord508 ord532 SHQueryValueExA SHQueryValueExW ord18 SHRegDuplicateHKey SHRegGetBoolUSValueW ord344 SHRegGetUSValueW SHRegGetValueW SHRegSetUSValueW ord21 ord384 ord266 ord433 SHSetValueW ord165 ord186 SHSkipJunction SHStrDupW ord24 ord217 ord9 ord17 ord388 StrCatBuffW StrChrW StrCmpIW StrCmpLogicalW StrCmpNA StrCmpNIW StrCmpNW StrCmpW StrCpyNW ord400 StrDupW StrFormatByteSize64A StrFormatByteSizeW StrFormatKBSizeW StrPBrkW StrRChrW StrRetToBSTR StrRetToBufW StrRetToStrW StrStrIW StrToIntA StrToIntExW StrToIntW StrTrimW UrlIsW wnsprintfW

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreateFontW CreatePen CreateSolidBrush DeleteDC DeleteObject Ellipse ExtTextOutW GdiGetCharDimensions GetDIBits GetDeviceCaps GetObjectW GetStockObject GetTextExtentPoint32W GetTextMetricsW LineTo MaskBlt MoveToEx Pie SelectObject SetBkColor SetBkMode SetDIBits SetPixel SetTextColor StretchBlt

user32

AdjustWindowRect AllowSetForegroundWindow AppendMenuW BeginDeferWindowPos BeginPaint BringWindowToTop CallNextHookEx CallWindowProcW ChangeClipboardChain CharLowerBuffW CharLowerW CharNextA CharNextW CharPrevW CheckDlgButton CheckMenuItem CheckMenuRadioItem CheckRadioButton ClientToScreen CloseClipboard CopyIcon CopyImage CreateDialogParamW CreateIconIndirect CreateMenu CreatePopupMenu CreateWindowExW DdeAccessData DdeClientTransaction DdeConnect DdeCreateStringHandleW DdeDisconnect DdeFreeDataHandle DdeFreeStringHandle DdeGetLastError DdeInitializeA DdeInitializeW DdeNameService DdeQueryStringW DdeUnaccessData DdeUninitialize DefWindowProcW DeferWindowPos DeleteMenu DeregisterShellHookWindow DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DialogBoxParamW DispatchMessageW DrawFocusRect DrawIconEx DrawTextExW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDeferWindowPos EndDialog EndPaint EnumDisplaySettingsW EnumWindows EqualRect ExitWindowsEx FillRect FindWindowExW FindWindowW FrameRect GetAncestor GetAsyncKeyState GetCapture GetClassInfoExW GetClassNameW GetClientRect GetClipboardData GetClipboardFormatNameA GetComboBoxInfo GetCursorPos GetDC GetDesktopWindow GetDlgCtrlID GetDlgItem GetDlgItemInt GetDlgItemTextW GetFocus GetForegroundWindow GetIconInfo GetKeyState GetLastActivePopup GetMenuDefaultItem GetMenuInfo GetMenuItemCount GetMenuItemID GetMenuItemInfoW GetMenuItemRect GetMessagePos GetMessageW GetParent GetPropW GetScrollPos GetShellWindow GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemW InsertMenuW InvalidateRect IsChild IsDlgButtonChecked IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible KillTimer LoadAcceleratorsW LoadBitmapW LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringA LoadStringW MapWindowPoints MessageBeep MessageBoxA MessageBoxW MonitorFromWindow MoveWindow OffsetRect OpenClipboard PaintDesktop PostMessageW PostQuitMessage PrivateExtractIconsW PtInRect RedrawWindow RegisterClassExW RegisterClipboardFormatA RegisterClipboardFormatW RegisterShellHookWindow ReleaseCapture ReleaseDC RemoveMenu RemovePropW ScreenToClient SendDlgItemMessageW SendMessageW SendNotifyMessageW SetCapture SetClipboardData SetClipboardViewer SetCursor SetDlgItemInt SetDlgItemTextA SetDlgItemTextW SetFocus SetForegroundWindow SetMenuDefaultItem SetMenuInfo SetMenuItemInfoW SetParent SetPropW SetRect SetShellWindowEx SetTaskmanWindow SetTimer SetWindowLongA SetWindowLongW SetWindowPos SetWindowTextW SetWindowsHookExW ShowWindow SwitchToThisWindow SystemParametersInfoW TrackPopupMenu TrackPopupMenuEx TranslateAcceleratorW TranslateMessage UnhookWindowsHookEx UpdateWindow WaitForInputIdle WinHelpW WindowFromPoint wsprintfW

Activate_RunDLL AppCompat_RunDLLW CDefFolderMenu_Create CDefFolderMenu_Create2 CallCPLEntry16 CheckEscapesA CheckEscapesW CommandLineToArgvW Control_FillCache_RunDLL Control_FillCache_RunDLLA Control_FillCache_RunDLLW Control_RunDLL Control_RunDLLA Control_RunDLLAsUserW Control_RunDLLW DAD_AutoScroll DAD_DragEnterEx DAD_DragEnterEx2 DAD_DragLeave DAD_DragMove DAD_SetDragImage DAD_ShowDragImage DllCanUnloadNow DllGetClassObject DllGetVersion DllInstall DllRegisterServer DllUnregisterServer DoEnvironmentSubstA DoEnvironmentSubstW DragAcceptFiles DragFinish DragQueryFile DragQueryFileA DragQueryFileAorW DragQueryFileW DragQueryPoint DriveType DuplicateIcon ExtractAssociatedIconA ExtractAssociatedIconExA ExtractAssociatedIconExW ExtractAssociatedIconW ExtractIconA ExtractIconEx ExtractIconExA ExtractIconExW ExtractIconResInfoA ExtractIconResInfoW ExtractIconW ExtractVersionResource16W FindExeDlgProc FindExecutableA FindExecutableW FreeIconList GetFileNameFromBrowse ILAppendID ILClone ILCloneFirst ILCombine ILCreateFromPath ILCreateFromPathA ILCreateFromPathW ILFindChild ILFindLastID ILFree ILGetNext ILGetSize ILIsEqual ILIsParent ILLoadFromStream ILRemoveLastID ILSaveToStream InternalExtractIconListA InternalExtractIconListW IsLFNDrive IsLFNDriveA IsLFNDriveW IsNetDrive IsUserAnAdmin OpenAs_RunDLL OpenAs_RunDLLA OpenAs_RunDLLW OpenRegStream Options_RunDLL Options_RunDLLA Options_RunDLLW PathCleanupSpec PathGetShortPath PathIsExe PathIsSlowA PathIsSlowW PathMakeUniqueName PathProcessCommand PathQualify PathResolve PathYetAnotherMakeUniqueName PickIconDlg PifMgr_CloseProperties PifMgr_GetProperties PifMgr_OpenProperties PifMgr_SetProperties PrintersGetCommand_RunDLL PrintersGetCommand_RunDLLA PrintersGetCommand_RunDLLW ReadCabinetState RealDriveType RealShellExecuteA RealShellExecuteExA RealShellExecuteExW RealShellExecuteW RegenerateUserEnvironment RestartDialog RestartDialogEx SHAddFromPropSheetExtArray SHAddToRecentDocs SHAlloc SHAllocShared SHAppBarMessage SHBindToParent SHBrowseForFolder SHBrowseForFolderA SHBrowseForFolderW SHCLSIDFromString SHChangeNotification_Lock SHChangeNotification_Unlock SHChangeNotify SHChangeNotifyDeregister SHChangeNotifyRegister SHChangeNotifySuspendResume SHCloneSpecialIDList SHCoCreateInstance SHCreateDirectory SHCreateDirectoryExA SHCreateDirectoryExW SHCreateFileExtractIconW SHCreateLocalServerRunDll SHCreateProcessAsUserW SHCreatePropSheetExtArray SHCreateQueryCancelAutoPlayMoniker SHCreateShellFolderView SHCreateShellFolderViewEx SHCreateShellItem SHCreateStdEnumFmtEtc SHDefExtractIconA SHDefExtractIconW SHDestroyPropSheetExtArray SHDoDragDrop SHEmptyRecycleBinA SHEmptyRecycleBinW SHEnableServiceObject SHEnumerateUnreadMailAccountsW SHExtractIconsW SHFileOperation SHFileOperationA SHFileOperationW SHFindFiles SHFind_InitMenuPopup SHFlushClipboard SHFlushSFCache SHFormatDrive SHFree SHFreeNameMappings SHFreeShared SHGetDataFromIDListA SHGetDataFromIDListW SHGetDesktopFolder SHGetDiskFreeSpaceA SHGetDiskFreeSpaceExA SHGetDiskFreeSpaceExW SHGetFileInfo SHGetFileInfoA SHGetFileInfoW SHGetFolderLocation SHGetFolderPathA SHGetFolderPathAndSubDirA SHGetFolderPathAndSubDirW SHGetFolderPathW SHGetIconOverlayIndexA SHGetIconOverlayIndexW SHGetImageList SHGetInstanceExplorer SHGetMalloc SHGetNewLinkInfo SHGetNewLinkInfoA SHGetNewLinkInfoW SHGetPathFromIDList SHGetPathFromIDListA SHGetPathFromIDListW SHGetRealIDL SHGetSetFolderCustomSettingsW SHGetSetSettings SHGetSettings SHGetSpecialFolderLocation SHGetSpecialFolderPathA SHGetSpecialFolderPathW SHGetUnreadMailCountW SHHandleUpdateImage SHHelpShortcuts_RunDLL SHHelpShortcuts_RunDLLA SHHelpShortcuts_RunDLLW SHILCreateFromPath SHInvokePrinterCommandA SHInvokePrinterCommandW SHIsFileAvailableOffline SHLimitInputEdit SHLoadInProc SHLoadNonloadedIconOverlayIdentifiers SHLoadOLE SHLockShared SHMapIDListToImageListIndexAsync SHMapPIDLToSystemImageListIndex SHMultiFileProperties SHObjectProperties SHOpenFolderAndSelectItems SHOpenPropSheetW SHParseDisplayName SHPathPrepareForWriteA SHPathPrepareForWriteW SHPropStgCreate SHPropStgReadMultiple SHPropStgWriteMultiple SHQueryRecycleBinA SHQueryRecycleBinW SHReplaceFromPropSheetExtArray SHRestricted SHRunControlPanel SHSetInstanceExplorer SHSetLocalizedName SHSetUnreadMailCountW SHShellFolderView_Message SHSimpleIDListFromPath SHStartNetConnectionDialogW SHTestTokenMembership SHUnlockShared SHUpdateImageA SHUpdateImageW SHUpdateRecycleBinIcon SHValidateUNC SheChangeDirA SheChangeDirExA SheChangeDirExW SheChangeDirW SheConvertPathW SheFullPathA SheFullPathW SheGetCurDrive SheGetDirA SheGetDirExW SheGetDirW SheGetPathOffsetW SheRemoveQuotesA SheRemoveQuotesW SheSetCurDrive SheShortenPathA SheShortenPathW ShellAboutA ShellAboutW ShellExec_RunDLL ShellExec_RunDLLA ShellExec_RunDLLW ShellExecuteA ShellExecuteEx ShellExecuteExA ShellExecuteExW ShellExecuteW ShellHookProc ShellMessageBoxA ShellMessageBoxW Shell_GetCachedImageIndex Shell_GetImageLists Shell_MergeMenus Shell_NotifyIcon Shell_NotifyIconA Shell_NotifyIconW SignalFileOpen StrChrA StrChrIA StrChrIW StrChrW StrCmpNA StrCmpNIA StrCmpNIW StrCmpNW StrCpyNA StrCpyNW StrNCmpA StrNCmpIA StrNCmpIW StrNCmpW StrNCpyA StrNCpyW StrRChrA StrRChrIA StrRChrIW StrRChrW StrRStrA StrRStrIA StrRStrIW StrRStrW StrStrA StrStrIA StrStrIW StrStrW WOWShellExecute Win32DeleteFile WriteCabinetState

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ATL

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

287KB

Virtual Size

287KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7.1MB

Virtual Size

7.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rossym

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7cd35217b6607f90df3e5f8583fd4b2df8e03758e428eab7057e1b0bf5a50942

ntdll

advapi32

comctl32

comdlg32

kernel32

msvcrt

shlwapi

gdi32

user32

generic