General

Malware Config

Signatures

Files

• f1f82f3d986065d3546508f857b90adacd27eae091ff4da4b25e667101572f46

  .exe windows x86

  222e7b320f36011feb1642000d8fa826

  
  

  Code Sign

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  cryptdll

  CDBuildVect

  MD5Update

  CDLocateRng

  MD5Init

  shell32

  DragAcceptFiles

  SHCreateShellItem

  ShellAboutA

  SHGetFileInfoA

  StrChrA

  SHFileOperationA

  DragQueryFileA

  FreeIconList

  SHGetDataFromIDListA

  SHGetDiskFreeSpaceA

  FindExecutableA

  SHGetDesktopFolder

  ShellMessageBoxW

  SHGetFolderPathA

  SHGetMalloc

  DragFinish

  dbnmpntw

  ConnectionClose

  ConnectionWrite

  ConnectionError

  kernel32

  FileTimeToSystemTime

  SearchPathA

  OpenMutexA

  GetPrivateProfileIntW

  GetModuleHandleW

  GetLocalTime

  ReadConsoleW

  FindFirstFileA

  GetEnvironmentVariableA

  DeviceIoControl

  SetEnvironmentVariableW

  CompareStringW

  GetStringTypeW

  IsValidCodePage

  lstrcmpiA

  lstrcmpA

  TlsGetValue

  GetProcAddress

  GetTickCount

  WriteConsoleA

  lstrcpynW

  GetLastError

  CreateDirectoryA

  GetCurrentDirectoryW

  SetErrorMode

  SleepEx

  InterlockedDecrement

  GetFullPathNameW

  GetPrivateProfileIntW

  IsBadStringPtrA

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ