General

Malware Config

Signatures

Files

• 53f1438a01754b197b51b4034b7ccacf90677125359730731282a8d4d734647d

  .exe windows x86

  b8c14bc897613c1128c2fc7265378546

  
  

  Code Sign

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualAlloc

  GetModuleHandleW

  FlushFileBuffers

  GetEnvironmentStrings

  GetSystemInfo

  LocalFree

  GetCurrentProcess

  lstrcpyW

  ExpandEnvironmentStringsW

  LocalReAlloc

  LocalAlloc

  lstrlenW

  FindNextFileW

  CompareStringW

  FindClose

  lstrcmpiW

  GetLastError

  FindFirstFileW

  SetLastError

  LeaveCriticalSection

  EnterCriticalSection

  ExitThread

  GetEnvironmentVariableW

  SetEvent

  FindCloseChangeNotification

  Sleep

  WaitForMultipleObjects

  FindNextChangeNotification

  CloseHandle

  CreateEventW

  FindFirstChangeNotificationW

  ResumeThread

  SetThreadPriority

  CreateThread

  WaitForSingleObject

  InitializeCriticalSection

  SetProcessShutdownParameters

  OpenEventW

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoA

  GetCommandLineA

  GetVersionExA

  ExitProcess

  GetProcAddress

  GetModuleHandleA

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  FreeEnvironmentStringsA

  VirtualProtect

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  HeapDestroy

  HeapCreate

  VirtualFree

  HeapFree

  LoadLibraryA

  GetACP

  GetOEMCP

  GetCPInfo

  HeapAlloc

  HeapReAlloc

  RtlUnwind

  InterlockedExchange

  VirtualQuery

  SetFilePointer

  MultiByteToWideChar

  LCMapStringA

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  SetStdHandle

  GetLocaleInfoA

  GetTempPathA

  DnsHostnameToComputerNameW

  DeleteTimerQueue

  GetFullPathNameW

  VirtualFreeEx

  SetNamedPipeHandleState

  WaitNamedPipeA

  GetDateFormatA

  RtlFillMemory

  ReplaceFileA

  GetPrivateProfileStringW

  BackupRead

  SuspendThread

  ClearCommError

  SleepEx

  FormatMessageW

  GetDevicePowerState

  GetSystemPowerStatus

  user32

  LoadIconA

  LoadCursorFromFileW

  GetAsyncKeyState

  GetForegroundWindow

  GetKeyboardLayout

  GetDC

  GetSystemMetrics

  GetDlgCtrlID

  GetListBoxInfo

  GetThreadDesktop

  ShowCaret

  DestroyWindow

  GetClipboardViewer

  GetTopWindow

  CharLowerA

  IsWindow

  GetFocus

  GetOpenClipboardWindow

  CreateMenu

  GetCapture

  GetKBCodePage

  LoadStringW

  SendMessageW

  SetWindowPos

  GetDesktopWindow

  GetParent

  GetWindowLongW

  GetWindowRect

  SetForegroundWindow

  CheckDlgButton

  GetClientRect

  EndDialog

  PostMessageW

  GetDlgItem

  IsDlgButtonChecked

  SendDlgItemMessageW

  SetDlgItemTextW

  KillTimer

  SetTimer

  LoadImageW

  DialogBoxParamW

  MessageBoxW

  DefWindowProcW

  LoadIconW

  PostQuitMessage

  DispatchMessageW

  TranslateMessage

  GetMessageW

  CreateWindowExW

  RegisterClassW

  GetDlgItemTextA

  PackDDElParam

  ShowCursor

  WinHelpA

  CreateDialogIndirectParamA

  DlgDirListComboBoxW

  SetMenuContextHelpId

  DdeCmpStringHandles

  GetMenuContextHelpId

  LoadMenuIndirectW

  ChangeDisplaySettingsExA

  GetWindowTextLengthA

  EnableScrollBar

  CloseWindowStation

  SetWindowTextW

  CreateMDIWindowA

  SetScrollPos

  SetShellWindow

  CreateIconIndirect

  GetMenuDefaultItem

  GetClipboardSequenceNumber

  WINNLSEnableIME

  SendNotifyMessageW

  BroadcastSystemMessageA

  CreateAcceleratorTableW

  GetWindowTextW

  ReleaseDC

  EnumDesktopWindows

  GetLastActivePopup

  gdi32

  GetStockObject

  CreateMetaFileA

  CreatePatternBrush

  GetPolyFillMode

  DeleteDC

  FillPath

  UnrealizeObject

  AddFontResourceA

  GetFontLanguageInfo

  SetICMProfileW

  GdiEntry3

  SetGraphicsMode

  XLATEOBJ_iXlate

  GetTextMetricsA

  InvertRgn

  AnyLinkedFonts

  AddFontResourceW

  CopyEnhMetaFileW

  GdiComment

  DescribePixelFormat

  GdiIsMetaPrintDC

  RemoveFontResourceExA

  EngLockSurface

  FONTOBJ_vGetInfo

  SetAbortProc

  SetMetaRgn

  AddFontResourceExW

  GetROP2

  EngBitBlt

  STROBJ_vEnumStart

  advapi32

  RegOpenKeyA

  RegQueryValueExA

  GetAce

  RegNotifyChangeKeyValue

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  SetSecurityInfo

  GetSecurityInfo

  RegOpenKeyExA

  shell32

  Shell_NotifyIconW

  Sections

  .text

  Size: 2.2MB - Virtual size: 2.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ