General

Malware Config

Signatures

Files

• 195db0588ad011d7b3adf724473e656826ac04cc387c4dedfd5d68150d761a75

  .exe windows x86

  f86b2df1eb4d6cbc905fee73f4d5b5bb

  
  

  Code Sign

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetThreadLocale

  GlobalFlags

  GetModuleHandleA

  InterlockedExchange

  CompareStringA

  GetLocaleInfoW

  ReadFile

  WriteFile

  SetFilePointer

  FlushFileBuffers

  GlobalAddAtomW

  GetCurrentProcess

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetSystemTimeAsFileTime

  GetCommandLineA

  HeapFree

  HeapAlloc

  GetProcessHeap

  GetStartupInfoA

  RaiseException

  RtlUnwind

  HeapReAlloc

  HeapSize

  GetTimeZoneInformation

  GetStdHandle

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  HeapDestroy

  HeapCreate

  VirtualFree

  QueryPerformanceCounter

  GetTickCount

  GetCPInfo

  GetConsoleCP

  GetConsoleMode

  GetACP

  GetOEMCP

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  IsValidCodePage

  GetStringTypeA

  GetStringTypeW

  LCMapStringA

  LCMapStringW

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetEnvironmentVariableA

  CreateFileA

  GlobalFindAtomW

  GlobalDeleteAtom

  CompareStringW

  LoadLibraryA

  lstrcmpW

  GetVersionExA

  GetVersion

  InterlockedIncrement

  GetCurrentThreadId

  CloseHandle

  FormatMessageW

  FreeLibrary

  InterlockedDecrement

  GetModuleHandleW

  GetProcAddress

  TlsFree

  GlobalFree

  DeleteCriticalSection

  LocalReAlloc

  TlsSetValue

  TlsAlloc

  InitializeCriticalSection

  GlobalAlloc

  GlobalHandle

  GlobalUnlock

  GlobalReAlloc

  GlobalLock

  EnterCriticalSection

  TlsGetValue

  LeaveCriticalSection

  LocalFree

  LocalAlloc

  lstrlenW

  WideCharToMultiByte

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  GetLastError

  SetLastError

  GetCurrentProcessId

  DeleteFileW

  VirtualProtect

  ResetEvent

  VirtualProtectEx

  VirtualAlloc

  GetTempPathW

  MultiByteToWideChar

  GetModuleFileNameW

  Sleep

  LoadLibraryW

  GetSystemDirectoryW

  CreateDirectoryW

  FindFirstChangeNotificationW

  ExitProcess

  user32

  DrawTextExW

  GrayStringW

  PostQuitMessage

  UnregisterClassA

  DrawTextW

  TabbedTextOutW

  DestroyMenu

  ClientToScreen

  SetWindowTextW

  RegisterWindowMessageW

  WinHelpW

  GetCapture

  GetClassLongW

  GetClassNameW

  SetPropW

  GetPropW

  RemovePropW

  GetWindowTextW

  GetForegroundWindow

  GetDlgItem

  GetTopWindow

  DestroyWindow

  GetMessageTime

  GetMessagePos

  MapWindowPoints

  SetForegroundWindow

  GetClientRect

  GetMenu

  PostMessageW

  GetClassInfoExW

  GetClassInfoW

  RegisterClassW

  AdjustWindowRectEx

  CopyRect

  PtInRect

  GetDlgCtrlID

  DefWindowProcW

  CallWindowProcW

  SetWindowLongW

  SetWindowPos

  SystemParametersInfoA

  IsIconic

  GetWindowPlacement

  GetWindowRect

  GetWindow

  GetMenuCheckMarkDimensions

  LoadBitmapW

  SetScrollInfo

  SetMenuItemInfoW

  CreateWindowExW

  IsWindow

  GetScrollInfo

  LoadIconW

  SetDlgItemInt

  GetScrollRange

  InsertMenuItemW

  UnhookWinEvent

  GetDlgItemInt

  SetCursor

  MessageBoxW

  EnableWindow

  IsWindowEnabled

  GetLastActivePopup

  GetWindowLongW

  GetParent

  SendMessageW

  GetWindowThreadProcessId

  UnhookWindowsHookEx

  GetFocus

  ModifyMenuW

  EnableMenuItem

  CheckMenuItem

  LoadCursorW

  GetSystemMetrics

  GetDC

  ReleaseDC

  GetSysColor

  GetSysColorBrush

  SetWindowsHookExW

  CallNextHookEx

  DispatchMessageW

  GetKeyState

  PeekMessageW

  ValidateRect

  GetMenuState

  GetMenuItemID

  GetMenuItemCount

  GetSubMenu

  SetMenuItemBitmaps

  gdi32

  ExtTextOutW

  GetStockObject

  GetPixel

  CreateRectRgn

  CreateFontW

  SelectClipRgn

  SaveDC

  RestoreDC

  DeleteObject

  SetBkColor

  SetTextColor

  GetClipBox

  SetMapMode

  CreateBitmap

  ScaleWindowExtEx

  DeleteDC

  GetDeviceCaps

  SetWindowExtEx

  ScaleViewportExtEx

  SetViewportExtEx

  OffsetViewportOrgEx

  SetViewportOrgEx

  SelectObject

  Escape

  TextOutW

  RectVisible

  PtVisible

  ole32

  CoInitialize

  CoRegisterSurrogate

  OleUninitialize

  OleInitialize

  CoUninitialize

  OleSetContainedObject

  comctl32

  ImageList_Remove

  ImageList_GetImageCount

  ImageList_SetBkColor

  ImageList_SetIconSize

  ImageList_Destroy

  oleaut32

  VariantClear

  VariantChangeType

  VariantInit

  oleacc

  LresultFromObject

  CreateStdAccessibleObject

  AccessibleObjectFromPoint

  AccessibleObjectFromWindow

  GetOleaccVersionInfo

  avifil32

  AVIFileExit

  AVIStreamRelease

  AVIFileInit

  AVIStreamFindSample

  AVIStreamSetFormat

  AVIStreamEndStreaming

  winspool.drv

  OpenPrinterW

  DocumentPropertiesW

  ClosePrinter

  Sections

  .text

  Size: 364KB - Virtual size: 360KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 923KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 28KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ