General

Malware Config

Signatures

Files

• ea6bafd96818930f83200987d64c970ad03afcae9d69fbde9dd18f2ace154a99

  .exe windows x86

  fd44c9faedcbda650077f5e6fa038938

  
  

  Code Sign

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  LCMapStringW

  CompareStringW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  QueryPerformanceCounter

  GetModuleFileNameA

  SetStdHandle

  GetProcessHeap

  GetCPInfo

  GetOEMCP

  GetACP

  IsValidCodePage

  LoadLibraryExW

  GetModuleFileNameW

  GetModuleHandleW

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  TerminateProcess

  GetCurrentProcess

  FlushFileBuffers

  GetConsoleCP

  GetConsoleMode

  CreateFileW

  OutputDebugStringW

  GetStringTypeW

  SetFilePointerEx

  WriteConsoleW

  SetEndOfFile

  ReadFile

  Process32NextW

  CreateToolhelp32Snapshot

  GetFullPathNameW

  GetFullPathNameA

  GetSystemDirectoryA

  UpdateResourceA

  EnumResourceTypesA

  InitializeCriticalSectionAndSpinCount

  SetUnhandledExceptionFilter

  FindResourceExA

  CreateEventA

  lstrcpyA

  FormatMessageW

  CloseHandle

  SizeofResource

  LoadResource

  Sleep

  WaitForSingleObject

  CreateThread

  GetLastError

  VirtualAlloc

  LocalFree

  LocalAlloc

  UnhandledExceptionFilter

  GetCurrentThreadId

  SetLastError

  GetStartupInfoW

  GetFileType

  GetStdHandle

  IsDebuggerPresent

  LockResource

  FreeResource

  FindNextFileW

  DeleteCriticalSection

  HeapSize

  FindFirstFileExW

  SetCurrentDirectoryA

  GetTempPathA

  FindClose

  WriteFile

  IsProcessorFeaturePresent

  GetCommandLineA

  RtlUnwind

  RaiseException

  HeapReAlloc

  EncodePointer

  DecodePointer

  EnterCriticalSection

  LeaveCriticalSection

  ExitProcess

  GetModuleHandleExW

  GetProcAddress

  MultiByteToWideChar

  WideCharToMultiByte

  HeapFree

  HeapAlloc

  ReadConsoleW

  user32

  WaitForInputIdle

  DefWindowProcA

  wsprintfA

  SendMessageA

  PostMessageA

  CreateWindowExA

  ShowWindow

  GetIconInfo

  DestroyCursor

  LoadCursorFromFileW

  GetWindow

  FindWindowExA

  FindWindowA

  GetDesktopWindow

  GetWindowLongA

  FillRect

  GetSysColorBrush

  MapWindowPoints

  ClipCursor

  GetCursorPos

  ShowCursor

  MessageBoxA

  GetWindowRect

  GetClientRect

  SetWindowTextA

  InvalidateRect

  EndPaint

  BeginPaint

  ReleaseDC

  GetWindowDC

  GetDC

  SetActiveWindow

  DrawTextA

  DrawIcon

  ReleaseCapture

  SendInput

  GetFocus

  SendDlgItemMessageA

  GetDlgItem

  EndDialog

  IsWindowVisible

  EndDeferWindowPos

  DeferWindowPos

  BeginDeferWindowPos

  gdi32

  SetBkMode

  CombineRgn

  CreateCompatibleBitmap

  CreateCompatibleDC

  SwapBuffers

  TextOutA

  GetObjectA

  GetTextMetricsA

  SetTextAlign

  SetTextColor

  BitBlt

  SelectObject

  GetStockObject

  DeleteDC

  CreateRectRgn

  CreateMetaFileA

  CreateFontIndirectA

  winspool.drv

  ConnectToPrinterDlg

  comdlg32

  GetOpenFileNameA

  GetFileTitleA

  advapi32

  RegQueryValueExA

  GetUserNameW

  RegCloseKey

  RegCreateKeyA

  AllocateAndInitializeSid

  RegCreateKeyExA

  RegOpenKeyExW

  RegSetValueExA

  SetEntriesInAclW

  InitializeSecurityDescriptor

  shell32

  SHGetFolderPathA

  ws2_32

  WSALookupServiceEnd

  WSAProviderConfigChange

  WSANtohs

  netapi32

  NetUserGetInfo

  NetApiBufferFree

  comctl32

  ImageList_DragLeave

  ImageList_EndDrag

  opengl32

  wglGetCurrentDC

  imm32

  ImmEnumInputContext

  ImmGetCompositionStringA

  ImmGetContext

  ImmDisableTextFrameService

  rasapi32

  RasGetSubEntryPropertiesW

  RasGetSubEntryHandleW

  urlmon

  HlinkSimpleNavigateToString

  Sections

  .text

  Size: 92KB - Virtual size: 91KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 33KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 396KB - Virtual size: 395KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ