General

Malware Config

Signatures

Files

• 712902f16ad8e9570dc1e25dba5f4219f3fdd497d727f08dd98f1c6baa78335b

  .exe windows x86

  034f68f32b66f95cdc033137300fa902

  
  

  Code Sign

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shell32

  Shell_NotifyIconA

  kernel32

  GetSystemTimeAsFileTime

  Sleep

  WinExec

  GetModuleFileNameA

  GetModuleHandleA

  InterlockedCompareExchange

  GetStartupInfoA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  InterlockedExchange

  msvcr90

  _acmdln

  _initterm

  _initterm_e

  _configthreadlocale

  __setusermatherr

  _adjust_fdiv

  __p__commode

  __p__fmode

  exit

  __set_app_type

  _crt_debugger_hook

  ?terminate@@YAXXZ

  _unlock

  __dllonexit

  _lock

  _onexit

  _decode_pointer

  _except_handler4_common

  _invoke_watson

  _controlfp_s

  strrchr

  _ismbblead

  _XcptFilter

  _exit

  _cexit

  __getmainargs

  _amsg_exit

  __argc

  __argv

  strncpy

  _snprintf

  _encode_pointer

  user32

  PostMessageA

  TrackPopupMenuEx

  SetForegroundWindow

  GetCursorPos

  DefWindowProcA

  RegisterClassExA

  LoadCursorA

  LoadIconA

  RegisterWindowMessageA

  FindWindowA

  DestroyWindow

  DialogBoxParamA

  PostQuitMessage

  CreatePopupMenu

  InsertMenuItemA

  SetTimer

  EndDialog

  CreateWindowExA

  ShowWindow

  UpdateWindow

  GetSystemMetrics

  LoadImageA

  SendMessageA

  FindWindowExA

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 104KB - Virtual size: 104KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 866B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  �D�£uS

  Size: 73KB - Virtual size: 76KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE