General

Malware Config

Signatures

Files

• 7a5e20e021dc29a07cad61f4d0bdb98e22749f13c3ace58220bfe978908bb7e9.bin

  .exe windows x86

  79c5ab03c02854a056630e291956340b

  
  

  Code Sign

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mpr

  WNetOpenEnumW

  WNetEnumResourceW

  WNetCloseEnum

  rstrtmgr

  RmStartSession

  RmGetList

  RmRegisterResources

  RmEndSession

  kernel32

  WriteFile

  TerminateProcess

  GetModuleFileNameW

  GetEnvironmentVariableW

  WaitForSingleObject

  CreateFileW

  OpenProcess

  Sleep

  GetLastError

  lstrcatW

  CloseHandle

  GetPriorityClass

  LocalFree

  MoveFileExW

  GetCurrentProcessId

  CreateProcessW

  lstrcpyW

  IsDebuggerPresent

  CheckRemoteDebuggerPresent

  GetFileSizeEx

  lstrlenW

  CreateFileMappingW

  MapViewOfFile

  LoadLibraryW

  GetLogicalDrives

  FindFirstFileW

  FindNextFileW

  GetStdHandle

  WaitForMultipleObjects

  FindClose

  CreateMutexA

  ReleaseMutex

  GetExitCodeThread

  GlobalAlloc

  GlobalFree

  CreateThread

  lstrcmpiW

  lstrcmpW

  GetSystemInfo

  GetProcessHeap

  GetStringTypeW

  SetStdHandle

  GetCurrentProcess

  SetPriorityClass

  FlushFileBuffers

  ReadFile

  ReadConsoleW

  HeapSize

  SetEndOfFile

  WriteConsoleW

  DecodePointer

  UnmapViewOfFile

  GetCurrentThreadId

  SetEnvironmentVariableW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  WideCharToMultiByte

  MultiByteToWideChar

  QueryPerformanceCounter

  VirtualQuery

  GetSystemTimeAsFileTime

  InitializeSListHead

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  IsProcessorFeaturePresent

  GetModuleHandleW

  RtlUnwind

  SetLastError

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  FreeLibrary

  GetProcAddress

  LoadLibraryExW

  RaiseException

  ExitProcess

  GetModuleHandleExW

  QueryPerformanceFrequency

  GetCommandLineA

  GetCommandLineW

  HeapFree

  HeapAlloc

  GetFileType

  GetExitCodeProcess

  GetFileAttributesExW

  CompareStringW

  LCMapStringW

  GetConsoleOutputCP

  GetConsoleMode

  SetFilePointerEx

  HeapReAlloc

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  user32

  wsprintfW

  advapi32

  CryptGenRandom

  CryptAcquireContextW

  CryptReleaseContext

  CryptAcquireContextA

  LookupPrivilegeValueW

  AdjustTokenPrivileges

  AllocateAndInitializeSid

  SetEntriesInAclW

  SetNamedSecurityInfoW

  OpenProcessToken

  FreeSid

  shell32

  SHGetFolderPathW

  ole32

  CoCreateInstance

  CoInitialize

  Sections

  .text

  Size: 183KB - Virtual size: 183KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 157KB - Virtual size: 157KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 16.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ