db4ae88eec1f5daa63a7e8aea2cf95018427c51149f726dcca418432bddc1e76

Sharing

Copy URL Twitter E-mail

General

Target
db4ae88eec1f5daa63a7e8aea2cf95018427c51149f726dcca418432bddc1e76
Size 8.1MB
Sample260916-rxgrba1grh
SHA256 db4ae88eec1f5daa63a7e8aea2cf95018427c51149f726dcca418432bddc1e76
MD5 e5ca8d6e2f9625cf728d215497357a95
SHA1 1b1d3f38957b301fe17888c286cb6662bb27ca28
SHA512 f03e54b98203fb811b99afaa5fb6a99efe962307af2907dc0940efb56e4eac11915720a03df9937155b683902373674f4b0913a367d1f847d17b6698e93ccc6a
SSDEEP 98304:to36O5kTiwZ0NhKrpuIt8n4+yiYAS3Q0i/V0Fn5AO31GfsnhOhr:tgmmNQM4XiY7i/V6bhOhr
TLSH
T1D086DF067EE980B9C4FAE13EC667896BD3F238010535DACF56A1CB452F33742992B365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
db4ae88eec1f5daa63a7e8aea2cf95018427c51149f726dcca418432bddc1e76

File Explorer

db4ae88eec1f5daa63a7e8aea2cf95018427c51149f726dcca418432bddc1e76

.dll 8.1MB

db4ae88eec1f5daa63a7e8aea2cf95018427c51149f726dcca418432bddc1e76

IMPHASH 8092d597112f996f559b767c5e45ee9b
SHA256 db4ae88eec1f5daa63a7e8aea2cf95018427c51149f726dcca418432bddc1e76
MD5 e5ca8d6e2f9625cf728d215497357a95
SHA1 1b1d3f38957b301fe17888c286cb6662bb27ca28
SHA512 f03e54b98203fb811b99afaa5fb6a99efe962307af2907dc0940efb56e4eac11915720a03df9937155b683902373674f4b0913a367d1f847d17b6698e93ccc6a
SSDEEP 98304:to36O5kTiwZ0NhKrpuIt8n4+yiYAS3Q0i/V0Fn5AO31GfsnhOhr:tgmmNQM4XiY7i/V6bhOhr
TLSH
T1D086DF067EE980B9C4FAE13EC667896BD3F238010535DACF56A1CB452F33742992B365
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

2b:46:98:8d:b2:ee:96:2e:53:48:9b:44:5d:2f:bb:8e:00:9c:6c:f8:8d:a9:e0:15:3a:90:ff:42:bc:f7:72:e2

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=91310115MADKJ4WN5T,CN=Shanghai Kongkong Technology Co.\, Ltd,O=Shanghai Kongkong Technology Co.\, Ltd,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13264368696e6120285368616e67686169292050696c6f742046726565205472616465205a6f6e65,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 11, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 13, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

03:e4:04:67:41:12:42:78:3f:13:93:90:32:b9:40:bd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 24, 2026 - May 27, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

1847156

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

F:\dd\vctools\vc7libs\ship\atlmfc\src\SecurityGuardSDK64\x64\Release\SecurityGuardSDK64.pdb

kernel32

GetStartupInfoW QueryPerformanceCounter InitializeSListHead SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW ReadConsoleW GetConsoleMode GetConsoleOutputCP GetTimeZoneInformation EnumSystemLocalesW IsValidLocale LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType SetStdHandle HeapQueryInformation FreeLibraryAndExitThread ExitThread GetCommandLineW IsProcessorFeaturePresent SleepConditionVariableSRW VirtualAlloc GetSystemInfo InterlockedFlushSList RtlPcToFileHeader RtlUnwindEx GetCPInfo LCMapStringEx InitOnceComplete InitOnceBeginInitialize TryAcquireSRWLockExclusive QueryPerformanceFrequency GetStringTypeW RaiseException OutputDebugStringW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry IsDebuggerPresent GetCommandLineA WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetUserDefaultLCID FindResourceExW GetProfileIntW SearchPathW GetWindowsDirectoryW lstrcmpiW DuplicateHandle UnlockFile SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers GetFileTime GetFileAttributesExW FileTimeToLocalFileTime VirtualProtect GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetCurrentDirectoryW RtlCaptureContext GlobalGetAtomNameW LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc GlobalFlags GetThreadLocale VerifyVersionInfoW VerSetConditionMask WritePrivateProfileStringW GetTickCount64 SuspendThread SetThreadPriority CreateEventW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime LocalAlloc InitializeCriticalSectionAndSpinCount lstrcmpA GetVersionExW GetCurrentThread GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryExW GetSystemDirectoryW EncodePointer GetCurrentThreadId FormatMessageW MulDiv LocalFree GlobalSize GlobalAlloc QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GlobalFree GlobalLock GlobalUnlock OutputDebugStringA CompareStringW GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc HeapReAlloc HeapSize InitializeCriticalSectionEx HeapFree CreateThread CreateMutexW SetLastError WriteConsoleW GetStdHandle DeviceIoControl GetComputerNameW GetComputerNameExW GetProductInfo RemoveDirectoryW TerminateProcess GetCurrentProcessId GetModuleHandleExW ResetEvent ResumeThread GetSystemTimeAsFileTime GetModuleHandleW SetEvent SetFileInformationByHandle GetTempFileNameW ExitProcess SetFileAttributesW GetExitCodeProcess WaitForSingleObject lstrcatW VirtualQueryEx Process32NextW GetNativeSystemInfo IsWow64Process OpenProcess Process32FirstW SizeofResource CreateToolhelp32Snapshot GetTempPathW GetLocalTime GetCurrentProcess ReadProcessMemory lstrcpyW lstrlenW GetEnvironmentVariableW GetTickCount SetFilePointerEx GetFileSizeEx LeaveCriticalSection SetFilePointer EnterCriticalSection InitializeCriticalSection UnmapViewOfFile MapViewOfFile CreateFileMappingW GetModuleFileNameW FreeLibrary GetProcAddress LoadLibraryW GetPrivateProfileIntW FindClose FindNextFileW FindFirstFileW CreateProcessW CreateDirectoryW MultiByteToWideChar ReadFile GetFileSize GetPrivateProfileStringW GetPrivateProfileSectionNamesW DeleteFileW GetFileAttributesW CloseHandle WriteFile CreateFileW WideCharToMultiByte Sleep GetLastError CopyFileW FindResourceW LoadResource LockResource VirtualQuery RtlUnwind

user32

RealChildWindowFromPoint EnumDisplayMonitors LoadCursorW GetSysColorBrush SetLayeredWindowAttributes SystemParametersInfoW InflateRect GetMenuItemInfoW DestroyMenu OffsetRect SetRectEmpty SendDlgItemMessageA SetCursor ShowOwnedPopups MapVirtualKeyW GetKeyNameTextW MapDialogRect SetWindowContextHelpId RegisterClipboardFormatW KillTimer SetTimer WaitMessage TranslateMessage GetMessageW IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow PostQuitMessage SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW EqualRect CopyRect MapWindowPoints IntersectRect LoadImageW DrawEdge DrawFrameControl DrawFocusRect DrawIconEx ToUnicodeEx EnableWindow AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow ValidateRect SetForegroundWindow GetForegroundWindow GetKeyboardLayout TrackPopupMenu SetMenu GetMenu GetCapture GetKeyState NotifyWinEvent GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos IsChild IsMenu CreateWindowExW CreatePopupMenu GetMenuDefaultItem SetMenuDefaultItem IsRectEmpty UpdateLayeredWindow EnableScrollBar UnionRect MonitorFromPoint CopyImage PostThreadMessageW GetNextDlgGroupItem CharNextW CopyAcceleratorTableW InvalidateRgn SetRect TrackMouseEvent GetClassInfoExW GetClassInfoW IsZoomed CharUpperW GetAsyncKeyState SetCapture ReleaseCapture LoadMenuW DeleteMenu SetWindowRgn MessageBeep DestroyIcon WindowFromPoint GetSystemMetrics GetDC ReleaseDC MessageBoxW GetTopWindow GetWindowThreadProcessId IsWindowVisible GetWindowLongW GetWindow LoadIconW GetSystemMenu AppendMenuW SendMessageW IsIconic GetClientRect DrawIcon CharUpperBuffW PostMessageW DrawStateW UpdateWindow InvalidateRect FillRect GetClassNameW LoadBitmapW IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetDesktopWindow GetParent GetLastActivePopup GetMenuStringW GetMenuState GetSubMenu GetMenuItemID GetMenuItemCount InsertMenuW RemoveMenu DrawTextW DrawTextExW GrayStringW TabbedTextOutW GetWindowDC BeginPaint EndPaint ClientToScreen ScreenToClient GetSysColor GetFocus GetWindowRect GetCursorPos PtInRect SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx RegisterWindowMessageW DispatchMessageW PeekMessageW GetMessagePos GetMessageTime DefWindowProcW GetKeyboardState LoadAcceleratorsW CreateAcceleratorTableW DestroyAcceleratorTable CallWindowProcW RegisterClassW SetFocus SetCursorPos SetParent BringWindowToTop LockWindowUpdate SetClassLongPtrW OpenClipboard CloseClipboard SetClipboardData EmptyClipboard ModifyMenuW TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam CopyIcon FrameRect GetIconInfo HideCaret InvertRect GetDoubleClickTime IsCharLowerW MapVirtualKeyExW DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsClipboardFormatAvailable GetUpdateRect SubtractRect CreateMenu DestroyCursor GetComboBoxInfo GetWindowRgn

gdi32

SelectClipRgn ExtSelectClipRgn SelectPalette SetBkColor SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetTextColor SetTextAlign MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateRectRgnIndirect PatBlt CreateFontIndirectW GetTextExtentPoint32W CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo GetTextMetricsW CombineRgn GetMapMode SetRectRgn SaveDC CreateRoundRectRgn CreateDIBSection GetBkColor GetTextColor GetRgnBox CreateEllipticRgn Ellipse CreatePolygonRgn Polygon Polyline RealizePalette SetPixel StretchBlt SetDIBColorTable OffsetRgn Rectangle EnumFontFamiliesExW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries LPtoDP RoundRect ExtFloodFill SetPaletteEntries FillRgn FrameRgn GetBoundsRect PtInRegion GetWindowOrgEx GetViewportOrgEx SetPixelV GetTextFaceW RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect Escape CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateBitmap GetDeviceCaps CreateDCW CopyMetaFileW GetObjectW GetStockObject CreateSolidBrush DeleteObject BitBlt SelectObject DeleteDC CreateCompatibleDC DPtoLP SetROP2 CreateCompatibleBitmap

msimg32

TransparentBlt AlphaBlend

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

ControlService RegQueryValueExW RegEnumKeyExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegDeleteKeyW FreeSid AllocateAndInitializeSid CheckTokenMembership CreateWellKnownSid GetTokenInformation DeleteService RegOpenKeyExW StartServiceW OpenServiceW CloseServiceHandle CreateServiceW OpenSCManagerW RegDeleteTreeW RegCreateKeyW RegSetValueExW RegCreateKeyExW GetUserNameW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey

shell32

DragFinish DragQueryFileW SHAppBarMessage ShellExecuteW SHGetFileInfoW SHGetDesktopFolder SHBrowseForFolderW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetMalloc ShellExecuteExW SHGetSpecialFolderPathW SHGetFolderPathW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW PathIsUNCW PathFindExtensionW PathFileExistsW PathFindFileNameW PathAppendW PathRemoveFileSpecW StrFormatKBSizeW

uxtheme

GetThemeColor IsAppThemed DrawThemeParentBackground DrawThemeText OpenThemeData CloseThemeData DrawThemeBackground IsThemeBackgroundPartiallyTransparent GetCurrentThemeName GetThemeSysColor GetWindowTheme GetThemePartSize

ole32

RevokeDragDrop RegisterDragDrop OleGetClipboard IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning CreateStreamOnHGlobal DoDragDrop CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoRegisterMessageFilter OleIsCurrentClipboard OleFlushClipboard CoRevokeClassObject CoGetClassObject CoDisconnectObject CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString OleUninitialize OleInitialize CoFreeUnusedLibraries CoCreateGuid CoUninitialize ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CoInitializeEx CoLockObjectExternal

oleaut32

VariantTimeToSystemTime SystemTimeToVariantTime LoadTypeLi SysStringLen VariantChangeType VariantCopy SysAllocStringLen SysFreeString SysAllocString VariantClear VarBstrFromDate OleCreateFontIndirect SafeArrayDestroy VariantInit

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDrawImageRectI GdipSetInterpolationMode GdipDeleteGraphics GdipCreateFromHDC GdiplusShutdown GdiplusStartup GdipSaveImageToFile GdipDisposeImage GdipCloneImage GdipAlloc GdipFree GdipCreateBitmapFromHBITMAP GdipGetImageEncoders GdipGetImageEncodersSize GdipDrawImageI GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0

ws2_32

WSASetLastError WSACleanup gethostname WSAStartup

wininet

InternetSetStatusCallbackW InternetReadFile InternetOpenUrlW InternetOpenW InternetWriteFile FtpOpenFileW FtpDeleteFileW FtpGetCurrentDirectoryW InternetConnectW FtpCommandW FtpCreateDirectoryW FtpFindFirstFileW InternetGetLastResponseInfoW InternetCloseHandle InternetSetOptionW InternetQueryOptionW

iphlpapi

GetAdaptersAddresses

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

winmm

PlaySoundW

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

644KB

Virtual Size

644KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

39KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

94KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CFG00

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

db4ae88eec1f5daa63a7e8aea2cf95018427c51149f726dcca418432bddc1e76

PE Signature issue

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

wininet

iphlpapi

oleacc

imm32

winmm

generic