General

Malware Config

Signatures

Files

• 79a64484f6019383b118350c93a61e22bdc63ed01f477926d6afaf496488f926

  .exe windows x86

  0a14b1df5553c3a8a2cc2e18054a4da6

  
  

  Code Sign

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetNumberOfConsoleMouseButtons

  InitializeSListHead

  CreateJobObjectW

  HeapFree

  SetHandleInformation

  GetProfileStringW

  GetTimeFormatA

  LockFile

  ConnectNamedPipe

  FreeEnvironmentStringsA

  SetTapeParameters

  GetTickCount

  GetConsoleAliasesLengthA

  CreateRemoteThread

  GetCompressedFileSizeW

  GetVolumePathNameW

  SetSystemTimeAdjustment

  LeaveCriticalSection

  GetFileAttributesA

  IsDBCSLeadByte

  GetModuleFileNameW

  GetTimeZoneInformation

  LCMapStringA

  CreateDirectoryA

  WriteConsoleOutputCharacterA

  GetCurrentDirectoryW

  GetProcAddress

  CreateJobSet

  LocalLock

  CreateMemoryResourceNotification

  SetFileAttributesA

  DisableThreadLibraryCalls

  GetAtomNameA

  LocalAlloc

  SetCalendarInfoW

  SetConsoleOutputCP

  AddAtomW

  HeapLock

  GetCommMask

  GetOEMCP

  GetModuleHandleA

  GetProcessShutdownParameters

  EnumSystemGeoID

  CompareStringW

  CompareStringA

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  LCMapStringW

  GetConsoleAliasExesLengthA

  SetLocalTime

  SetFilePointer

  SetPriorityClass

  InterlockedExchange

  GetEnvironmentVariableW

  GetLastError

  HeapReAlloc

  HeapAlloc

  GetModuleHandleW

  Sleep

  ExitProcess

  GetStartupInfoW

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  EnterCriticalSection

  RtlUnwind

  DeleteCriticalSection

  FatalAppExitA

  HeapCreate

  HeapDestroy

  VirtualFree

  VirtualAlloc

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  GetCurrentThreadId

  InterlockedDecrement

  GetCurrentThread

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  SetConsoleCtrlHandler

  FreeLibrary

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCommandLineW

  SetHandleCount

  GetFileType

  GetStartupInfoA

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  CloseHandle

  CreateFileA

  GetCPInfo

  GetACP

  IsValidCodePage

  HeapSize

  GetLocaleInfoW

  GetLocaleInfoA

  WideCharToMultiByte

  GetConsoleCP

  GetConsoleMode

  FlushFileBuffers

  SetStdHandle

  SetEndOfFile

  GetProcessHeap

  MultiByteToWideChar

  ReadFile

  GetDateFormatA

  GetUserDefaultLCID

  EnumSystemLocalesA

  IsValidLocale

  GetStringTypeA

  GetStringTypeW

  SetEnvironmentVariableA

  user32

  GetMonitorInfoA

  GetDesktopWindow

  SetProcessDefaultLayout

  GetUserObjectInformationW

  GetClassLongW

  advapi32

  RegCreateKeyA

  GetPrivateObjectSecurity

  DuplicateToken

  EqualSid

  OpenEventLogA

  Sections

  .text

  Size: 150KB - Virtual size: 149KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 39KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 20KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ