7034410cddfdc3d7da63360880b6dc782af9c7b147061c14528c57f48b6a01d5

Sharing

Copy URL Twitter E-mail

General

Target
7034410cddfdc3d7da63360880b6dc782af9c7b147061c14528c57f48b6a01d5
Size 5.3MB
Sample260925-qt543axcmd
SHA256 7034410cddfdc3d7da63360880b6dc782af9c7b147061c14528c57f48b6a01d5
MD5 ef1c238fe6eb5f70a52238785e9976f6
SHA1 34218003e56745396870aae306bd9e183f99cb7a
SHA512 d889ae649d894635cfc9893e8da8f9a456ebe9ce61d49652777e73b61032ea950c65f236208e21a3d6857cbd2b81aad5d6684da5f1f46b26505f9d8a032e44fe
SSDEEP 98304:CJPwTsC14klK0g04bzucg2znygnFmHpennC8zEN4OiZrq1DfPHNADtV6v+M:CRRIXKD04U2ygnFmHpqnhEN4O7NADtVb
TLSH
T12446C0313DDC3176D00E8130CE7DA2F9FAAE7D642B65009B1580BA1BFD317A25A1B95B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7034410cddfdc3d7da63360880b6dc782af9c7b147061c14528c57f48b6a01d5

File Explorer

7034410cddfdc3d7da63360880b6dc782af9c7b147061c14528c57f48b6a01d5

.dll 5.3MB

7034410cddfdc3d7da63360880b6dc782af9c7b147061c14528c57f48b6a01d5

IMPHASH 41406f4e87d8dd95f4eaeaa73a3fc4c6
SHA256 7034410cddfdc3d7da63360880b6dc782af9c7b147061c14528c57f48b6a01d5
MD5 ef1c238fe6eb5f70a52238785e9976f6
SHA1 34218003e56745396870aae306bd9e183f99cb7a
SHA512 d889ae649d894635cfc9893e8da8f9a456ebe9ce61d49652777e73b61032ea950c65f236208e21a3d6857cbd2b81aad5d6684da5f1f46b26505f9d8a032e44fe
SSDEEP 98304:CJPwTsC14klK0g04bzucg2znygnFmHpennC8zEN4OiZrq1DfPHNADtV6v+M:CRRIXKD04U2ygnFmHpqnhEN4O7NADtVb
TLSH
T12446C0313DDC3176D00E8130CE7DA2F9FAAE7D642B65009B1580BA1BFD317A25A1B95B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\src\vctools\VC7Libs\Ship\ATLMFC\Src\MFC\NvPluginWatchdog.NVX.Installer\Release\NvPluginWatchdog.NVX.Installer.pdb

ws2_32

shutdown WSACloseEvent WSACreateEvent WSASetLastError WSAEventSelect WSAResetEvent htons recv connect socket send WSAStartup select gethostbyname closesocket WSAIoctl WSACleanup WSAGetLastError WSAEnumNetworkEvents WSAWaitForMultipleEvents setsockopt

kernel32

GetStringTypeExW FileTimeToLocalFileTime GlobalFree VerSetConditionMask GetFileAttributesExW GetFileSizeEx LocalFileTimeToFileTime SystemTimeToTzSpecificLocalTime FindResourceExW RtlUnwind InterlockedFlushSList FlsAlloc FlsGetValue FlsSetValue FlsFree ExitThread FreeLibraryAndExitThread UnhandledExceptionFilter TerminateProcess GetSystemInfo VirtualQuery QueryPerformanceFrequency GetCommandLineA GetCommandLineW HeapQueryInformation SetStdHandle GetFileType GetStdHandle LCMapStringW IsValidLocale EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode SetFilePointerEx ReadConsoleW IsValidCodePage GetFullPathNameW GetACP GetOEMCP GetTimeZoneInformation VerifyVersionInfoW RaiseException OutputDebugStringW IsDebuggerPresent WriteFile GetFileSize GetModuleHandleExW DeleteFileW GetTempPathW CreateThread SystemTimeToFileTime GetLocalTime ResumeThread CreateMutexW WriteProcessMemory LocalFree CreateDirectoryW Process32NextW Process32FirstW CreateToolhelp32Snapshot DeviceIoControl GetTickCount GetCurrentProcessId ExitProcess UnmapViewOfFile VirtualProtect MapViewOfFile CreateFileMappingW CreateFileW GetSystemDirectoryW GetCurrentProcess GetModuleHandleW CreateProcessW lstrcpyW MultiByteToWideChar CopyFileW lstrcatW GetModuleFileNameW GetFileAttributesW GetEnvironmentVariableW FindResourceW LoadResource LockResource SizeofResource GetProcAddress LoadLibraryW CreateWaitableTimerW SetWaitableTimer TryEnterCriticalSection WideCharToMultiByte ResetEvent CreateEventW lstrlenW CancelIo SetLastError GlobalSize SwitchToThread GetCurrentThreadId CreateEventA CloseHandle SetEvent FormatMessageW Sleep WaitForSingleObject LeaveCriticalSection InitializeCriticalSectionAndSpinCount EnterCriticalSection HeapCreate GetProcessHeap DeleteCriticalSection HeapDestroy DecodePointer HeapAlloc HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx VirtualAlloc VirtualFree HeapFree GlobalGetAtomNameW GlobalReAlloc SetThreadPriority GetCurrentDirectoryW GetDiskFreeSpaceW GetFileTime lstrcmpA SetEndOfFile GlobalAlloc MulDiv GlobalLock GlobalUnlock FileTimeToSystemTime CompareStringW GlobalFindAtomW GlobalAddAtomW GetTempFileNameW SetFileTime ReplaceFileW GetUserDefaultLCID ReadFile LockFile GetVolumeInformationW GetShortPathNameW FlushFileBuffers FindFirstFileW FindClose SetFilePointer GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc lstrcmpW GlobalDeleteAtom LoadLibraryA LoadLibraryExW GetModuleHandleA FreeLibrary OutputDebugStringA InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter IsProcessorFeaturePresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetCPInfo GetStringTypeW LCMapStringEx LocalAlloc GlobalHandle TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GetThreadLocale SearchPathW WritePrivateProfileStringW GetPrivateProfileStringW GetTickCount64 GetProfileIntW GetWindowsDirectoryW FindFirstFileExW FindNextFileW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW GetPrivateProfileIntW CompareStringA GetVersionExW GetCurrentThread EncodePointer MoveFileW UnlockFile DuplicateHandle lstrcmpiW

user32

CopyIcon GetDoubleClickTime CreateAcceleratorTableW GetKeyboardState DestroyCursor SubtractRect EnumChildWindows GetDCEx GetComboBoxInfo GetNextDlgGroupItem CharNextW InvalidateRgn GetKeyboardLayout IsIconic ClientToScreen RedrawWindow GetSystemMetrics LoadImageW RegisterClassW LoadCursorW LoadIconW DefWindowProcW PostThreadMessageW EnumWindows SetWindowPos SetWindowLongW GetWindowLongW GetWindowThreadProcessId GetFocus IsChild CharUpperBuffW GetSysColor GetWindowRect UpdateWindow InvalidateRect ScreenToClient SendMessageW GetSubMenu LoadMenuW SetRectEmpty GetParent InflateRect FillRect GetClientRect LoadBitmapW EnableWindow MsgWaitForMultipleObjects DispatchMessageW PeekMessageW TranslateMessage GetWindowRgn MapVirtualKeyExW IsCharLowerW GetTabbedTextExtentW MessageBoxW CallNextHookEx RegisterWindowMessageW GetMessagePos GetMessageTime PostMessageW CallWindowProcW GetClassInfoW GetClassInfoExW CreateWindowExW IsWindow IsMenu DestroyWindow GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos IsWindowVisible GetDlgItem GetDlgCtrlID SetFocus GetKeyState GetCapture GetMenu SetMenu GetMenuItemID GetMenuItemCount TrackPopupMenu SetActiveWindow GetForegroundWindow SetForegroundWindow BeginPaint EndPaint ValidateRect ScrollWindow SetScrollPos GetScrollPos SetScrollRange GetScrollRange ShowScrollBar SetPropW GetPropW RemovePropW GetWindowTextW GetWindowTextLengthW AdjustWindowRectEx MapWindowPoints CopyRect EqualRect PtInRect GetClassLongW GetClassNameW GetTopWindow GetLastActivePopup GetWindow SetWindowsHookExW UnhookWindowsHookEx DrawIcon SetScrollInfo GetScrollInfo WinHelpW MonitorFromWindow GetMonitorInfoW ShowWindow MoveWindow SetDlgItemTextW CheckDlgButton IsWindowEnabled SetWindowTextW IsDialogMessageW CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW GetKeyNameTextW MapVirtualKeyW GetDC ReleaseDC DrawTextW DrawTextExW GrayStringW TabbedTextOutW GetWindowDC GetMenuStringW GetMenuState InsertMenuW AppendMenuW RemoveMenu SetLayeredWindowAttributes GetSysColorBrush SystemParametersInfoW EnumDisplayMonitors DrawEdge DrawFrameControl DrawStateW SetWindowRgn DrawFocusRect OffsetRect IsRectEmpty DrawIconEx IntersectRect IsZoomed SetParent BringWindowToTop GetActiveWindow ReleaseCapture LoadAcceleratorsW TranslateAcceleratorW CreatePopupMenu DestroyMenu InsertMenuItemW SetCursor GetDesktopWindow DestroyIcon UnpackDDElParam ReuseDDElParam DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel TrackMouseEvent CharUpperW GetAsyncKeyState SetCapture SetTimer KillTimer GetSystemMenu DeleteMenu MessageBeep GetCursorPos WindowFromPoint NotifyWinEvent GetMenuDefaultItem SetMenuDefaultItem OpenClipboard CloseClipboard SetClipboardData EmptyClipboard CopyImage GetUpdateRect LockWindowUpdate SetRect UnionRect GetMenuItemInfoW RegisterClipboardFormatW SetClassLongW GetMessageW DestroyAcceleratorTable UpdateLayeredWindow EnableScrollBar MonitorFromPoint CreateMenu SendNotifyMessageW CopyAcceleratorTableW InSendMessage WindowFromDC IsClipboardFormatAvailable ClipCursor GetIconInfo ModifyMenuW SetCursorPos PostQuitMessage WaitMessage SetWindowContextHelpId MapDialogRect CreateDialogIndirectParamW EndDialog GetNextDlgTabItem ShowOwnedPopups FrameRect HideCaret InvertRect SendDlgItemMessageA RealChildWindowFromPoint ToUnicodeEx

advapi32

RegDeleteTreeW RegSetValueW GetFileSecurityW SetFileSecurityW RegCreateKeyExW RegDeleteKeyW RegEnumKeyW RegQueryValueW RegEnumKeyExW RegEnumValueW RegCloseKey RegSetValueExW RegOpenKeyExW RegCreateKeyW RegDeleteValueW RegQueryValueExW ConvertSidToStringSidW AdjustTokenPrivileges LookupPrivilegeValueW FreeSid CheckTokenMembership AllocateAndInitializeSid GetTokenInformation OpenProcessToken DeleteService ControlService QueryServiceStatusEx StartServiceW OpenServiceW CloseServiceHandle CreateServiceW OpenSCManagerW

shell32

ShellExecuteExW SHGetFolderPathW SHAddToRecentDocs SHBrowseForFolderW DragQueryFileW DragFinish ExtractIconW SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDesktopFolder SHAppBarMessage ShellExecuteW SHGetMalloc

oleaut32

SysFreeString SysStringByteLen SysStringLen SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantChangeType VariantInit SysAllocString VariantClear SysAllocStringLen VariantCopy VarBstrFromDate LoadTypeLi OleCreateFontIndirect

shlwapi

PathStripToRootW PathIsUNCW PathFindFileNameW StrFormatKBSizeW PathFindExtensionW PathRemoveFileSpecW PathStripPathW PathFileExistsW

winmm

PlaySoundW timeGetTime

gdi32

GetCharWidthW OffsetRgn GetRgnBox DeleteMetaFile CreateMetaFileW CloseMetaFile SetAbortProc AbortDoc EndPage StartPage EndDoc RoundRect Rectangle SetBrushOrgEx GetWindowOrgEx SetDIBColorTable StretchBlt SetPixel RealizePalette GetDIBits CreateRoundRectRgn CreateDIBSection DPtoLP SetRectRgn GetMapMode Polyline Polygon CreatePolygonRgn GetTextColor GetBkColor Ellipse CreateEllipticRgn CombineRgn GetTextMetricsW GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap CreateCompatibleBitmap CreateDCW CopyMetaFileW ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx ExtFloodFill SetViewportExtEx ExtTextOutW TextOutW MoveToEx StartDocW SetTextAlign SetStretchBltMode SetROP2 SetPolyFillMode SetLayout SetMapMode SetBkMode SelectPalette SelectObject ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetDeviceCaps GetCurrentPositionEx GetClipBox ExcludeClipRect Escape CreateSolidBrush CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateCompatibleDC BitBlt PatBlt CreateRectRgnIndirect CreateBitmap SetPaletteEntries GetViewportOrgEx LPtoDP GetTextAlign EnumFontFamiliesExW FillRgn FrameRgn GetBoundsRect PtInRegion GetNearestPaletteIndex GetSystemPaletteEntries GetROP2 GetBkMode GetNearestColor GetPolyFillMode GetStretchBltMode GetTextFaceW SetPixelV UnrealizeObject CreatePalette GetPaletteEntries SetViewportOrgEx GetLayout SetTextColor SetBkColor DeleteObject GetStockObject CreateFontIndirectW DeleteDC GetTextExtentPoint32W GetObjectW

msimg32

AlphaBlend TransparentBlt

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW GetJobW

comctl32

ImageList_Draw ImageList_AddMasked InitCommonControlsEx

uxtheme

GetThemePartSize DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName GetThemeSysColor GetWindowTheme IsAppThemed DrawThemeText IsThemeBackgroundPartiallyTransparent

oledlg

OleUIEditLinksW OleUIInsertObjectW OleUIConvertW OleUIBusyW OleUIAddVerbMenuW

gdiplus

GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipDeleteGraphics GdipSetInterpolationMode GdipDrawImageRectI GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipGetImagePalette GdipGetImagePaletteSize GdipCreateBitmapFromStream GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipDrawImageI GdiplusShutdown

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

imm32

ImmGetOpenStatus ImmReleaseContext ImmGetContext

ole32

CoUninitialize CoCreateGuid CoCreateInstance CoInitialize CoRegisterClassObject CoRevokeClassObject CoFreeUnusedLibraries OleInitialize OleUninitialize CLSIDFromString CLSIDFromProgID OleCreateLinkToFile RegisterDragDrop CreateDataAdviseHolder CreateOleAdviseHolder OleFlushClipboard OleIsCurrentClipboard DoDragDrop OleGetClipboard CoGetClassObject CoRegisterMessageFilter CoInitializeEx RevokeDragDrop CoLockObjectExternal IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleCreateFromFile OleIsRunning CreateFileMoniker StgIsStorageFile StgOpenStorage StgCreateDocfile OleRegEnumVerbs OleRegGetMiscStatus CoDisconnectObject OleSetMenuDescriptor OleGetIconOfClass OleLockRunning OleSetContainedObject OleSaveToStream OleSave OleLoad GetClassFile StringFromCLSID CoTaskMemAlloc CoTaskMemFree ReadClassStg WriteClassStg CoTreatAsClass CreateBindCtx WriteFmtUserTypeStg ReadFmtUserTypeStg OleCreateStaticFromData OleCreate CreateItemMoniker CreateGenericComposite CreateILockBytesOnHGlobal GetHGlobalFromILockBytes WriteClassStm StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes OleRun CreateStreamOnHGlobal SetConvertStg OleRegGetUserType ReleaseStgMedium OleDuplicateData GetRunningObjectTable

GetEngineState NvMessageBusBroadcastStartEngine NvMessageBusBroadcastStopEngine _swprintf_l _vswprintf_l fprintf fprintf_l fprintf_p fprintf_p_l fprintf_s fprintf_s_l fscanf fscanf_l fscanf_s fscanf_s_l fwprintf fwprintf_l fwprintf_p fwprintf_p_l fwprintf_s fwprintf_s_l fwscanf fwscanf_l fwscanf_s fwscanf_s_l luaJIT_profile_dumpstack luaJIT_profile_start luaJIT_profile_stop luaJIT_setmode luaJIT_version_2_1_1748459687 luaL_addlstring luaL_addstring luaL_addvalue luaL_argerror luaL_buffinit luaL_callmeta luaL_checkany luaL_checkinteger luaL_checklstring luaL_checknumber luaL_checkoption luaL_checkstack luaL_checktype luaL_checkudata luaL_error luaL_execresult luaL_fileresult luaL_findtable luaL_getmetafield luaL_gsub luaL_loadbuffer luaL_loadbufferx luaL_loadfile luaL_loadfilex luaL_loadstring luaL_newmetatable luaL_newstate luaL_openlib luaL_openlibs luaL_optinteger luaL_optlstring luaL_optnumber luaL_prepbuffer luaL_pushmodule luaL_pushresult luaL_ref luaL_register luaL_setfuncs luaL_setmetatable luaL_testudata luaL_traceback luaL_typerror luaL_unref luaL_where lua_atpanic lua_call lua_checkstack lua_close lua_concat lua_copy lua_cpcall lua_createtable lua_dump lua_equal lua_error lua_gc lua_getallocf lua_getfenv lua_getfield lua_gethook lua_gethookcount lua_gethookmask lua_getinfo lua_getlocal lua_getmetatable lua_getstack lua_gettable lua_gettop lua_getupvalue lua_insert lua_iscfunction lua_isnumber lua_isstring lua_isuserdata lua_isyieldable lua_lessthan lua_load lua_loadx lua_newstate lua_newthread lua_newuserdata lua_next lua_objlen lua_pcall lua_pushboolean lua_pushcclosure lua_pushfstring lua_pushinteger lua_pushlightuserdata lua_pushlstring lua_pushnil lua_pushnumber lua_pushstring lua_pushthread lua_pushvalue lua_pushvfstring lua_rawequal lua_rawget lua_rawgeti lua_rawset lua_rawseti lua_remove lua_replace lua_resume lua_setallocf lua_setfenv lua_setfield lua_sethook lua_setlocal lua_setmetatable lua_settable lua_settop lua_setupvalue lua_status lua_toboolean lua_tocfunction lua_tointeger lua_tointegerx lua_tolstring lua_tonumber lua_tonumberx lua_topointer lua_tothread lua_touserdata lua_type lua_typename lua_upvalueid lua_upvaluejoin lua_version lua_xmove lua_yield luaopen_base luaopen_bit luaopen_debug luaopen_ffi luaopen_io luaopen_jit luaopen_math luaopen_os luaopen_package luaopen_string luaopen_string_buffer luaopen_table printf printf_l printf_p printf_p_l printf_s printf_s_l scanf scanf_l scanf_s scanf_s_l scprintf scprintf_l scprintf_p scprintf_p_l scwprintf scwprintf_l scwprintf_p scwprintf_p_l snprintf snprintf snprintf_c snprintf_c_l snprintf_l snprintf_s snprintf_s_l snscanf snscanf_l snscanf_s snscanf_s_l snwprintf snwprintf_l snwprintf_s snwprintf_s_l snwscanf snwscanf_l snwscanf_s snwscanf_s_l sprintf sprintf_l sprintf_p sprintf_p_l sprintf_s sprintf_s_l sscanf sscanf_l sscanf_s sscanf_s_l swprintf swprintf swprintf_c swprintf_c_l swprintf_l swprintf_p swprintf_p_l swprintf_s swprintf_s_l swscanf swscanf_l swscanf_s swscanf_s_l vfprintf vfprintf_l vfprintf_p vfprintf_p_l vfprintf_s vfprintf_s_l vfscanf vfscanf_l vfscanf_s vfscanf_s_l vfwprintf vfwprintf_l vfwprintf_p vfwprintf_p_l vfwprintf_s vfwprintf_s_l vfwscanf vfwscanf_l vfwscanf_s vfwscanf_s_l vprintf vprintf_l vprintf_p vprintf_p_l vprintf_s vprintf_s_l vscanf vscanf_l vscanf_s vscanf_s_l vscprintf vscprintf_l vscprintf_p vscprintf_p_l vscwprintf vscwprintf_l vscwprintf_p vscwprintf_p_l vsnprintf vsnprintf vsnprintf_c vsnprintf_c_l vsnprintf_l vsnprintf_s vsnprintf_s vsnprintf_s_l vsnwprintf vsnwprintf_l vsnwprintf_s vsnwprintf_s_l vsnwscanf_l vsnwscanf_s_l vsprintf vsprintf_l vsprintf_p vsprintf_p_l vsprintf_s vsprintf_s_l vsscanf vsscanf_l vsscanf_s vsscanf_s_l vswprintf vswprintf vswprintf_c vswprintf_c_l vswprintf_l vswprintf_p vswprintf_p_l vswprintf_s vswprintf_s_l vswscanf vswscanf_l vswscanf_s vswscanf_s_l vwprintf vwprintf_l vwprintf_p vwprintf_p_l vwprintf_s vwprintf_s_l vwscanf vwscanf_l vwscanf_s vwscanf_s_l wprintf wprintf_l wprintf_p wprintf_p_l wprintf_s wprintf_s_l wscanf wscanf_l wscanf_s wscanf_s_l

Name

.text

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.s_text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

416KB

Virtual Size

415KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.s_rdata

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.s_data

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CMD0

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

175KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7034410cddfdc3d7da63360880b6dc782af9c7b147061c14528c57f48b6a01d5

ws2_32

kernel32

user32

advapi32

shell32

oleaut32

shlwapi

winmm

gdi32

msimg32

winspool.drv

comctl32

uxtheme

oledlg

gdiplus

oleacc

imm32

ole32

generic