General

Malware Config

Signatures

Files

• 20fbdedfeb0334ad02265234f4defe6e43944566d02be150df9acd3aed899938

  .dll regsvr32 windows x86

  e5d27dcbf8c1ae348ed6c033ad16252c

  
  

  Code Sign

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetSystemTime

  QueryPerformanceCounter

  GetDateFormatW

  GetConsoleMode

  GetConsoleCP

  WriteFile

  FlushFileBuffers

  HeapSize

  SetStdHandle

  SetFilePointerEx

  GetModuleHandleW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCommandLineW

  GetCommandLineA

  GetOEMCP

  GetACP

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  FindClose

  GetFileType

  GetStdHandle

  GetProcessHeap

  GetWindowsDirectoryW

  CloseHandle

  Sleep

  OpenProcess

  GetVersionExW

  CreateFileW

  VirtualProtect

  SizeofResource

  EnumSystemLocalesW

  GetUserDefaultLCID

  IsValidLocale

  GetModuleFileNameW

  GetModuleHandleExW

  ExitProcess

  HeapReAlloc

  HeapFree

  HeapAlloc

  LoadLibraryExW

  FreeLibrary

  GetLastError

  InterlockedFlushSList

  RaiseException

  RtlUnwind

  GetStartupInfoW

  IsDebuggerPresent

  MultiByteToWideChar

  WideCharToMultiByte

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  EncodePointer

  DecodePointer

  GetCPInfo

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  SetLastError

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetSystemTimeAsFileTime

  GetProcAddress

  GetStringTypeW

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  GetCurrentProcessId

  GetCurrentThreadId

  InitializeSListHead

  WriteConsoleW

  user32

  BeginPaint

  GetCursorPos

  InvalidateRect

  LoadImageW

  GetClassInfoExW

  SystemParametersInfoW

  GetKeyNameTextW

  AppendMenuW

  GetClassNameW

  SetFocus

  DestroyMenu

  IsWindowEnabled

  FrameRect

  ValidateRect

  MapWindowPoints

  ClientToScreen

  DispatchMessageW

  OpenClipboard

  DrawIcon

  GetWindowTextLengthW

  CallWindowProcW

  PostMessageW

  CheckMenuRadioItem

  GetFocus

  GetSystemMetrics

  RegisterClassExW

  gdi32

  GetClipBox

  CreateRectRgnIndirect

  CreatePatternBrush

  SetTextColor

  SetBkColor

  CreateSolidBrush

  CreateBitmap

  StretchDIBits

  ole32

  StgCreateDocfile

  CoSuspendClassObjects

  CoTaskMemFree

  CoUninitialize

  OleCreate

  CoTaskMemAlloc

  CoInitialize

  ws2_32

  socket

  WSACleanup

  accept

  bind

  closesocket

  WSACloseEvent

  WSASocketW

  WSAStartup

  WSAWaitForMultipleEvents

  connect

  WSAConnect

  Exports

  Exports

  DllRegisterServer

  Fineplanet

  Measureconsider

  Sections

  .text

  Size: 215KB - Virtual size: 215KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 73KB - Virtual size: 73KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 50KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .gfids

  Size: 512B - Virtual size: 496B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ