General

Malware Config

Signatures

Files

• 33652c978f2bad5c7bf62ca311fe9b3802c0cbf2ad3519620c7c4779d783e7f0

  .exe windows x86

  37eb19c3d32eb9a605703ee10b695e85

  
  

  Code Sign

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualAlloc

  GetModuleHandleW

  SetErrorMode

  LockFile

  UnlockFile

  SetEndOfFile

  MoveFileA

  GetVolumeInformationA

  GetStringTypeExA

  GetThreadLocale

  GetShortPathNameA

  GetFileSize

  LocalFileTimeToFileTime

  SystemTimeToFileTime

  InterlockedExchange

  RtlUnwind

  SetEnvironmentVariableA

  SetCurrentDirectoryA

  HeapReAlloc

  HeapAlloc

  HeapFree

  CreateDirectoryA

  GetDriveTypeA

  GetTimeZoneInformation

  GetSystemTime

  GetLocalTime

  RaiseException

  GetStartupInfoA

  GetCommandLineA

  ExitProcess

  TerminateProcess

  CreateThread

  ExitThread

  HeapSize

  FlushFileBuffers

  LCMapStringA

  LCMapStringW

  CompareStringA

  CompareStringW

  VirtualFree

  IsBadWritePtr

  GetEnvironmentVariableA

  HeapDestroy

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  GetEnvironmentStringsW

  GetStringTypeA

  GetStringTypeW

  IsValidLocale

  IsValidCodePage

  GetLocaleInfoA

  EnumSystemLocalesA

  GetUserDefaultLCID

  IsBadReadPtr

  IsBadCodePtr

  SetStdHandle

  SetConsoleCtrlHandler

  GetLocaleInfoW

  SetFilePointer

  WriteFile

  ReadFile

  CreateFileA

  GetProfileStringA

  GetCurrentProcess

  DuplicateHandle

  GetCurrentDirectoryA

  SizeofResource

  GetOEMCP

  GetCPInfo

  GetProcessVersion

  TlsGetValue

  LocalReAlloc

  TlsSetValue

  GlobalReAlloc

  TlsFree

  GlobalHandle

  TlsAlloc

  LocalAlloc

  GlobalFlags

  MulDiv

  GlobalSize

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  SetLastError

  GetDiskFreeSpaceA

  GetFileTime

  SetFileTime

  GetFullPathNameA

  GetTempFileNameA

  GetFileAttributesA

  WritePrivateProfileStringA

  GetPrivateProfileStringA

  GetPrivateProfileIntA

  CreateEventA

  SuspendThread

  SetThreadPriority

  ResumeThread

  SetEvent

  WaitForSingleObject

  GetModuleFileNameA

  GlobalAlloc

  lstrcmpA

  GetCurrentThread

  GlobalFree

  FindResourceA

  LoadResource

  LockResource

  GetCurrentThreadId

  lstrcmpiA

  GlobalFindAtomA

  GlobalDeleteAtom

  GetModuleHandleA

  lstrcatA

  lstrcpyA

  lstrcpynA

  GlobalGetAtomNameA

  GlobalAddAtomA

  GetVersion

  FileTimeToLocalFileTime

  FileTimeToSystemTime

  lstrlenW

  GlobalLock

  GlobalUnlock

  FormatMessageA

  LocalFree

  lstrlenA

  InterlockedDecrement

  InterlockedIncrement

  CreateMutexA

  GetLastError

  ReleaseMutex

  CloseHandle

  CreateProcessA

  Sleep

  MultiByteToWideChar

  WideCharToMultiByte

  GetProcAddress

  GetTickCount

  CopyFileA

  FindFirstFileA

  DeleteFileA

  FindNextFileA

  FindClose

  RemoveDirectoryA

  SetFileAttributesA

  GetVersionExA

  GetACP

  SetUnhandledExceptionFilter

  FreeLibrary

  LoadLibraryA

  FatalAppExitA

  user32

  LoadIconA

  LoadIconW

  gdi32

  GetStockObject

  SetBkMode

  SetPolyFillMode

  SetROP2

  SetStretchBltMode

  SetMapMode

  SetViewportOrgEx

  OffsetViewportOrgEx

  SetViewportExtEx

  ScaleViewportExtEx

  SetWindowOrgEx

  OffsetWindowOrgEx

  SetWindowExtEx

  ScaleWindowExtEx

  SelectClipRgn

  ExcludeClipRect

  IntersectClipRect

  OffsetClipRgn

  MoveToEx

  LineTo

  SetTextAlign

  SetTextJustification

  SetTextCharacterExtra

  SetMapperFlags

  GetCurrentPositionEx

  ArcTo

  SetArcDirection

  PolyDraw

  SelectPalette

  SetColorAdjustment

  PolyBezierTo

  GetClipRgn

  CreateRectRgn

  SelectClipPath

  ExtSelectClipRgn

  PlayMetaFileRecord

  GetObjectType

  EnumMetaFile

  PlayMetaFile

  GetViewportExtEx

  GetWindowExtEx

  CreatePen

  ExtCreatePen

  CreateSolidBrush

  CreateHatchBrush

  CreatePatternBrush

  CreateDIBPatternBrushPt

  PtVisible

  RectVisible

  TextOutA

  ExtTextOutA

  Escape

  GetTextExtentPoint32A

  GetTextMetricsA

  CreateFontIndirectA

  SelectObject

  RestoreDC

  SaveDC

  StartDocA

  DeleteDC

  DeleteObject

  GetDeviceCaps

  CreateDCA

  CopyMetaFileA

  CreateBitmap

  GetObjectA

  SetBkColor

  SetTextColor

  GetClipBox

  PolylineTo

  CreateDIBitmap

  PatBlt

  GetTextExtentPointA

  BitBlt

  CreateCompatibleDC

  GetDCOrgEx

  advapi32

  GetUserNameA

  RegOpenKeyA

  RegQueryValueExA

  shell32

  ExtractIconA

  DragAcceptFiles

  DragQueryFileA

  DragFinish

  SHGetSpecialFolderPathA

  SHGetFileInfoA

  msvcrt

  _except_handler3

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  _onexit

  __dllonexit

  _controlfp

  Sections

  .text

  Size: 726KB - Virtual size: 725KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 512B - Virtual size: 28B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 87KB - Virtual size: 86KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ