General

Malware Config

Signatures

Files

• c5fe4b5d1803a096c1a4330512406595bb585846b4a691459de1a65b6b390409

  .dll windows x86

  5a598793568c435bcb4cc8d714e727c9

  
  

  Code Sign

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  OpenMutexW

  GetSystemInfo

  WaitForMultipleObjects

  lstrcmpiW

  GetUserDefaultUILanguage

  DeleteCriticalSection

  GetShortPathNameW

  GetWindowsDirectoryW

  GetVolumeInformationW

  CreateThread

  lstrcpyA

  ExpandEnvironmentStringsW

  GetTickCount

  lstrcmpiA

  Process32FirstW

  Process32NextW

  CreateToolhelp32Snapshot

  LeaveCriticalSection

  EnterCriticalSection

  VirtualLock

  FindFirstFileW

  MoveFileExW

  FindFirstFileExW

  WideCharToMultiByte

  lstrcmpW

  FindClose

  FindNextFileW

  GetSystemTime

  GetNativeSystemInfo

  GetDriveTypeW

  GetDiskFreeSpaceW

  VirtualUnlock

  VerSetConditionMask

  VerifyVersionInfoW

  SetLastError

  LoadLibraryA

  LocalAlloc

  GetModuleHandleA

  LocalFree

  GlobalAlloc

  MulDiv

  GetTempPathW

  GlobalFree

  SetStdHandle

  GetConsoleMode

  GetConsoleCP

  FlushFileBuffers

  OutputDebugStringW

  HeapAlloc

  RtlUnwind

  ExitThread

  GetModuleFileNameW

  VirtualAlloc

  TerminateProcess

  OpenProcess

  InitializeCriticalSection

  GetDriveTypeA

  GetCommandLineA

  GetProcessHeap

  GetComputerNameW

  WaitForSingleObject

  SetErrorMode

  GetSystemDefaultUILanguage

  CreateMutexW

  ExitProcess

  lstrcpyW

  lstrcatW

  GetProcAddress

  GetLastError

  LoadLibraryW

  GetSystemDirectoryW

  GetModuleHandleW

  GetCurrentProcess

  LoadLibraryExW

  VirtualQuery

  MultiByteToWideChar

  VirtualFree

  lstrlenA

  lstrlenW

  CloseHandle

  CreateFileW

  ReadFile

  Sleep

  WriteFile

  UnlockFile

  SetFilePointerEx

  GetStdHandle

  LCMapStringW

  IsDebuggerPresent

  TlsSetValue

  TlsGetValue

  InitializeCriticalSectionAndSpinCount

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetStringTypeW

  HeapFree

  GetModuleHandleExW

  IsProcessorFeaturePresent

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  GetCurrentThreadId

  EncodePointer

  DecodePointer

  WriteConsoleW

  user32

  SystemParametersInfoW

  ReleaseDC

  GetDC

  wsprintfA

  wsprintfW

  CreateWindowStationW

  SetProcessWindowStation

  DrawTextA

  DrawTextW

  FillRect

  GetForegroundWindow

  gdi32

  SetTextColor

  DeleteDC

  GetDeviceCaps

  GetDIBits

  SetBkColor

  SetPixel

  DeleteObject

  SelectObject

  CreateCompatibleDC

  CreateCompatibleBitmap

  CreateFontW

  GetObjectW

  GetPixel

  GetStockObject

  SetBitmapBits

  CreateBitmap

  GetBitmapBits

  advapi32

  GetTokenInformation

  GetSidSubAuthorityCount

  GetSidSubAuthority

  OpenProcessToken

  GetUserNameW

  CryptDestroyKey

  CryptGenKey

  CryptEncrypt

  CryptImportKey

  CryptReleaseContext

  CryptGetKeyParam

  CryptAcquireContextW

  CryptExportKey

  RegSetValueExW

  RegCloseKey

  RegOpenKeyExW

  RegQueryValueExW

  RegCreateKeyExW

  shell32

  ShellExecuteW

  ShellExecuteExW

  SHGetSpecialFolderPathW

  mpr

  WNetEnumResourceW

  WNetCloseEnum

  WNetOpenEnumW

  wininet

  InternetOpenW

  HttpOpenRequestW

  HttpSendRequestW

  HttpQueryInfoA

  InternetCloseHandle

  InternetConnectW

  Exports

  Exports

  _ReflectiveLoader@0

  Sections

  .text

  Size: 72KB - Virtual size: 71KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 26KB - Virtual size: 33KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ