General

Malware Config

Signatures

Files

• 4fb0c6f1ebbb575bc67390b6ff08eae473b00a3c8c40bbfdc77da34ff0e43b01

  .exe windows x86

  957e7f4e0923b1fa2719bafbe8f87147

  
  

  Code Sign

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  gethostbyaddr

  ntohl

  setsockopt

  htonl

  bind

  sendto

  recvfrom

  inet_addr

  gethostname

  inet_ntoa

  WSAGetLastError

  WSAStartup

  gethostbyname

  socket

  htons

  connect

  closesocket

  WSACleanup

  send

  recv

  comctl32

  ImageList_Create

  ord17

  ImageList_GetImageCount

  ImageList_ReplaceIcon

  PropertySheetA

  mpr

  WNetAddConnection2A

  WNetCancelConnection2A

  WNetCancelConnectionA

  kernel32

  GetTickCount

  QueryPerformanceCounter

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  LocalFree

  FormatMessageA

  lstrcpyA

  lstrcatW

  SetLastError

  lstrlenW

  MultiByteToWideChar

  GetProcAddress

  GetCurrentThreadId

  LoadLibraryA

  GetVersionExA

  Sleep

  GetCurrentProcess

  WaitForMultipleObjects

  CreateThread

  TerminateThread

  VirtualAlloc

  WideCharToMultiByte

  lstrlenA

  LocalAlloc

  WritePrivateProfileStringA

  GetPrivateProfileStringA

  GetModuleFileNameA

  FreeLibrary

  TerminateProcess

  GetStartupInfoA

  InterlockedCompareExchange

  InterlockedExchange

  GetLastError

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  user32

  EnableWindow

  LoadCursorA

  LoadIconA

  RegisterClassA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  GetWindowRect

  GetDlgItem

  SetWindowPos

  PostQuitMessage

  GetMessagePos

  MapWindowPoints

  LoadMenuA

  ClientToScreen

  GetSubMenu

  ModifyMenuA

  TrackPopupMenu

  DestroyMenu

  DialogBoxParamA

  OpenClipboard

  EmptyClipboard

  SetClipboardData

  CloseClipboard

  GetSystemMenu

  AppendMenuA

  CheckDlgButton

  IsDlgButtonChecked

  SetDlgItemTextA

  MessageBoxA

  SetWindowTextA

  SendMessageA

  PostMessageA

  ShowWindow

  GetDlgItemTextA

  EndDialog

  EnableMenuItem

  gdi32

  DeleteObject

  advapi32

  OpenSCManagerA

  OpenServiceA

  CloseServiceHandle

  RegConnectRegistryA

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyExA

  RegQueryInfoKeyA

  RegEnumValueA

  AbortSystemShutdownA

  InitiateSystemShutdownA

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  EnumServicesStatusA

  shell32

  ShellExecuteA

  msvcr80

  exit

  _ismbblead

  _XcptFilter

  _exit

  _cexit

  __getmainargs

  _amsg_exit

  strrchr

  isdigit

  _crt_debugger_hook

  atol

  realloc

  mbstowcs

  asctime

  _gmtime64

  free

  strncpy

  _acmdln

  atoi

  malloc

  memcpy

  perror

  strncat

  toupper

  memset

  sprintf

  _decode_pointer

  _adjust_fdiv

  __p__commode

  _except_handler4_common

  _invoke_watson

  _controlfp_s

  __p__fmode

  _encode_pointer

  __set_app_type

  _onexit

  _initterm

  __setusermatherr

  sscanf

  _configthreadlocale

  _unlock

  __dllonexit

  _initterm_e

  _lock

  _stricmp

  Exports

  Exports

  lhxXfY9mIrDZ

  Sections

  .text

  Size: 76KB - Virtual size: 76KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 512B - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 160KB - Virtual size: 160KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ