General

Malware Config

Signatures

Files

• 6A2F6DA502485750ACDE45AD22D36D186C335B2F61592.exe

  .exe windows x86

  46978de0f8944a65af1673d613222a98

  
  

  Code Sign

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wsock32

  WSACleanup

  inet_addr

  gethostbyname

  gethostname

  WSAStartup

  winmm

  mixerSetControlDetails

  waveOutGetVolume

  joyGetPosEx

  mixerGetControlDetailsW

  mixerOpen

  mixerGetDevCapsW

  mixerGetLineControlsW

  waveOutSetVolume

  mixerClose

  mciSendStringW

  joyGetDevCapsW

  mixerGetLineInfoW

  version

  VerQueryValueW

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  comctl32

  ImageList_Create

  CreateStatusWindowW

  ImageList_ReplaceIcon

  InitCommonControlsEx

  ImageList_GetIconSize

  ImageList_Destroy

  ImageList_AddMasked

  psapi

  GetModuleBaseNameW

  GetModuleFileNameExW

  kernel32

  FindNextFileW

  FindClose

  FileTimeToLocalFileTime

  SetEnvironmentVariableW

  Beep

  MoveFileW

  OutputDebugStringW

  CreateProcessW

  GetFileAttributesW

  WideCharToMultiByte

  MultiByteToWideChar

  GetExitCodeProcess

  WriteProcessMemory

  ReadProcessMemory

  GetCurrentProcessId

  OpenProcess

  TerminateProcess

  SetPriorityClass

  SetLastError

  GetEnvironmentVariableW

  GetLocalTime

  GetDateFormatW

  GetTimeFormatW

  GetDiskFreeSpaceW

  SetVolumeLabelW

  CreateFileW

  DeviceIoControl

  GetDriveTypeW

  GetVolumeInformationW

  CreateDirectoryW

  ReadFile

  WriteFile

  DeleteFileW

  SetFileAttributesW

  LocalFileTimeToFileTime

  SetFileTime

  GetFileSizeEx

  GetSystemTime

  GetSystemDefaultUILanguage

  GetComputerNameW

  GetWindowsDirectoryW

  GetTempPathW

  GetFullPathNameW

  GetShortPathNameW

  FindFirstFileW

  FreeLibrary

  EnterCriticalSection

  LeaveCriticalSection

  VirtualProtect

  QueryDosDeviceW

  CompareStringW

  RemoveDirectoryW

  CopyFileW

  GetCurrentProcess

  FormatMessageW

  GetPrivateProfileStringW

  GetPrivateProfileSectionW

  GetPrivateProfileSectionNamesW

  WritePrivateProfileStringW

  WritePrivateProfileSectionW

  SetEndOfFile

  GetACP

  GetFileType

  GetStdHandle

  SetFilePointerEx

  SystemTimeToFileTime

  FileTimeToSystemTime

  GetFileSize

  VirtualAllocEx

  VirtualFreeEx

  EnumResourceNamesW

  LoadLibraryExW

  GlobalSize

  GetOEMCP

  InterlockedDecrement

  InterlockedIncrement

  GetStartupInfoW

  HeapSetInformation

  GetCommandLineW

  HeapQueryInformation

  HeapSize

  HeapFree

  HeapReAlloc

  ExitProcess

  HeapAlloc

  TlsFree

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  HeapCreate

  InitializeCriticalSectionAndSpinCount

  LockResource

  LoadResource

  SizeofResource

  FindResourceW

  GetSystemTimeAsFileTime

  GetModuleFileNameW

  DeleteCriticalSection

  GetCPInfo

  GetVersionExW

  GetModuleHandleW

  GetProcAddress

  GetLastError

  CreateMutexW

  CloseHandle

  GetExitCodeThread

  SetThreadPriority

  CreateThread

  lstrcmpiW

  GetCurrentThreadId

  GlobalUnlock

  GlobalFree

  GlobalAlloc

  GlobalLock

  GetCurrentDirectoryW

  SetErrorMode

  InitializeCriticalSection

  SetCurrentDirectoryW

  Sleep

  GetTickCount

  MulDiv

  IsValidCodePage

  TlsAlloc

  TlsGetValue

  SetHandleCount

  IsProcessorFeaturePresent

  GetStringTypeW

  RaiseException

  LCMapStringW

  RtlUnwind

  GetConsoleCP

  GetConsoleMode

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  TlsSetValue

  SetFilePointer

  FlushFileBuffers

  WriteConsoleW

  SetStdHandle

  GetProcessHeap

  LoadLibraryW

  VirtualQuery

  user32

  GetMenuItemCount

  GetMenuItemID

  GetSubMenu

  GetMenuStringW

  ExitWindowsEx

  SetMenu

  FlashWindow

  MapWindowPoints

  RedrawWindow

  SetParent

  GetClassInfoExW

  GetAncestor

  UpdateWindow

  GetMessagePos

  GetClassLongW

  DefDlgProcW

  CallWindowProcW

  CheckRadioButton

  IntersectRect

  PtInRect

  CreateAcceleratorTableW

  DestroyAcceleratorTable

  InsertMenuItemW

  SetMenuDefaultItem

  RemoveMenu

  SetMenuItemInfoW

  IsMenu

  GetMenuItemInfoW

  CreateMenu

  CreatePopupMenu

  SetMenuInfo

  AppendMenuW

  DestroyMenu

  TrackPopupMenuEx

  CreateIconIndirect

  GetDesktopWindow

  CopyImage

  CreateIconFromResourceEx

  EnumClipboardFormats

  GetWindow

  BringWindowToTop

  GetTopWindow

  GetIconInfo

  SetWindowTextW

  IsWindowVisible

  CheckMenuItem

  MessageBoxW

  LoadImageW

  GetLastInputInfo

  SetClipboardViewer

  LoadAcceleratorsW

  EnableMenuItem

  CreateWindowExW

  RegisterClassExW

  LoadCursorW

  DestroyIcon

  DestroyWindow

  IsCharAlphaW

  MapVirtualKeyW

  GetSysColorBrush

  VkKeyScanExW

  GetWindowTextW

  mouse_event

  WindowFromPoint

  GetSystemMetrics

  keybd_event

  SetKeyboardState

  GetKeyboardState

  GetCursorPos

  GetAsyncKeyState

  AttachThreadInput

  SendInput

  UnregisterHotKey

  RegisterHotKey

  PostQuitMessage

  SendMessageTimeoutW

  UnhookWindowsHookEx

  SetWindowsHookExW

  PostThreadMessageW

  IsCharUpperW

  IsCharLowerW

  IsCharAlphaNumericW

  ToUnicodeEx

  GetKeyboardLayout

  CallNextHookEx

  CharLowerW

  ReleaseDC

  GetDC

  OpenClipboard

  GetClipboardData

  GetClipboardFormatNameW

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  PostMessageW

  FindWindowW

  EndDialog

  IsWindow

  DispatchMessageW

  GetCursor

  ClientToScreen

  MessageBeep

  IsWindowEnabled

  SetDlgItemTextW

  GetDlgItem

  SendDlgItemMessageW

  DialogBoxParamW

  SetForegroundWindow

  DefWindowProcW

  FillRect

  ChangeClipboardChain

  DrawIconEx

  TranslateMessage

  ShowWindow

  CountClipboardFormats

  SetWindowLongW

  ScreenToClient

  IsDialogMessageW

  SendMessageW

  GetWindowLongW

  GetKeyState

  TranslateAcceleratorW

  GetSysColor

  RegisterWindowMessageW

  IsIconic

  IsZoomed

  EnumWindows

  GetWindowTextLengthW

  EnableWindow

  InvalidateRect

  SetLayeredWindowAttributes

  SetWindowPos

  SetWindowRgn

  SetFocus

  GetGUIThreadInfo

  SetActiveWindow

  EnumChildWindows

  MoveWindow

  GetQueueStatus

  GetWindowRect

  GetClientRect

  SystemParametersInfoW

  AdjustWindowRectEx

  KillTimer

  PeekMessageW

  GetFocus

  GetClassNameW

  GetWindowThreadProcessId

  GetForegroundWindow

  GetMessageW

  SetTimer

  GetParent

  GetDlgCtrlID

  CharUpperW

  IsClipboardFormatAvailable

  DrawTextW

  MapVirtualKeyExW

  SetRect

  GetMenu

  gdi32

  GetPixel

  GetClipBox

  GetCharABCWidthsW

  SetBkMode

  EnumFontFamiliesExW

  CreateDIBSection

  GdiFlush

  ExcludeClipRect

  SetBkColor

  SetTextColor

  FillRgn

  BitBlt

  CreateCompatibleBitmap

  GetSystemPaletteEntries

  GetDIBits

  CreateCompatibleDC

  CreatePolygonRgn

  CreateRectRgn

  CreateRoundRectRgn

  CreateEllipticRgn

  DeleteDC

  GetObjectW

  GetTextMetricsW

  GetTextFaceW

  SelectObject

  GetStockObject

  CreateDCW

  CreateSolidBrush

  CreateFontW

  GetClipRgn

  GetDeviceCaps

  DeleteObject

  comdlg32

  CommDlgExtendedError

  GetOpenFileNameW

  GetSaveFileNameW

  advapi32

  RegDeleteKeyW

  RegSetValueExW

  RegCreateKeyExW

  RegQueryValueExW

  AdjustTokenPrivileges

  LookupPrivilegeValueW

  OpenProcessToken

  CloseServiceHandle

  UnlockServiceDatabase

  LockServiceDatabase

  OpenSCManagerW

  GetUserNameW

  RegEnumKeyExW

  RegEnumValueW

  RegQueryInfoKeyW

  RegOpenKeyExW

  RegCloseKey

  RegConnectRegistryW

  RegDeleteValueW

  shell32

  DragQueryPoint

  SHFileOperationW

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHGetDesktopFolder

  SHGetMalloc

  SHGetFolderPathW

  ShellExecuteExW

  Shell_NotifyIconW

  DragFinish

  DragQueryFileW

  ExtractIconW

  ole32

  OleInitialize

  OleUninitialize

  CoCreateInstance

  CoInitialize

  CoUninitialize

  CLSIDFromString

  CoGetObject

  StringFromGUID2

  CreateStreamOnHGlobal

  oleaut32

  SafeArrayGetLBound

  GetActiveObject

  OleLoadPicture

  SafeArrayUnaccessData

  SafeArrayGetElemsize

  SafeArrayAccessData

  SafeArrayUnlock

  SafeArrayPtrOfIndex

  SafeArrayLock

  SafeArrayGetDim

  SafeArrayDestroy

  SafeArrayGetUBound

  VariantCopyInd

  SafeArrayCopy

  SysAllocString

  VariantChangeType

  VariantClear

  SafeArrayCreate

  SysFreeString

  SysStringLen

  Sections

  .text

  Size: 626KB - Virtual size: 626KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 140KB - Virtual size: 139KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 9.8MB - Virtual size: 9.8MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ