General

Malware Config

Signatures

Files

• 750cbba9a36859b978bfe5f082be44815027bc74dc2728210abbcba828ce6f56

  .exe windows x86

  469902c5413cba2b13d3e7d2e63a4cc9

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ole32

  CoTaskMemFree

  StringFromCLSID

  CoCreateInstance

  CoUninitialize

  CoInitialize

  oleaut32

  VariantInit

  SysFreeString

  ws2_32

  WSASetLastError

  getaddrinfo

  WSAStartup

  getservbyname

  getservbyport

  WSACleanup

  WSAGetLastError

  freeaddrinfo

  socket

  shutdown

  setsockopt

  sendto

  select

  recvfrom

  ntohs

  listen

  inet_addr

  htons

  htonl

  getsockname

  getpeername

  connect

  closesocket

  bind

  accept

  inet_ntoa

  gethostbyaddr

  gethostbyname

  crypt32

  CertFreeCertificateContext

  secur32

  DecryptMessage

  EncryptMessage

  FreeContextBuffer

  QueryCredentialsAttributesA

  QueryContextAttributesA

  ApplyControlToken

  DeleteSecurityContext

  InitializeSecurityContextA

  AcquireCredentialsHandleA

  user32

  PostThreadMessageA

  kernel32

  FreeEnvironmentStringsW

  GetOEMCP

  SetStdHandle

  HeapReAlloc

  GetTimeZoneInformation

  FlushFileBuffers

  HeapFree

  HeapAlloc

  LCMapStringW

  CompareStringW

  GetTimeFormatW

  GetProcessHeap

  GetCommandLineW

  GetCommandLineA

  GetStringTypeW

  DeleteFileW

  FileTimeToSystemTime

  SystemTimeToTzSpecificLocalTime

  FindNextFileW

  FindFirstFileExW

  GetConsoleCP

  WriteFile

  ReadConsoleW

  GetConsoleMode

  GetDateFormatW

  SetEndOfFile

  GetFileType

  CreateDirectoryW

  GetCurrentDirectoryW

  SetEnvironmentVariableW

  GetDriveTypeW

  SetConsoleCtrlHandler

  GetModuleHandleExW

  LoadLibraryExW

  WriteConsoleW

  HeapSize

  MoveFileExW

  ExitProcess

  InterlockedIncrement

  InterlockedDecrement

  FreeLibrary

  GetProcAddress

  ReadFile

  SetFilePointerEx

  CloseHandle

  LoadLibraryA

  GetModuleHandleA

  CreateFileW

  SearchPathA

  LocalFree

  FlushInstructionCache

  VirtualProtectEx

  VirtualQueryEx

  GetCurrentProcess

  TerminateProcess

  GetThreadSelectorEntry

  GetLastError

  SetLastError

  ReadProcessMemory

  WriteProcessMemory

  GetThreadContext

  SetThreadContext

  SuspendThread

  ResumeThread

  WaitForDebugEvent

  ContinueDebugEvent

  DebugActiveProcess

  SetEvent

  WaitForSingleObject

  GetSystemInfo

  CreateEventA

  GetLogicalDriveStringsW

  GetSystemDirectoryA

  GetCurrentDirectoryA

  QueryDosDeviceW

  OpenProcess

  GetVersionExA

  GetCurrentProcessId

  FormatMessageA

  GetSystemTimeAsFileTime

  CompareFileTime

  DecodePointer

  IsDebuggerPresent

  Sleep

  FormatMessageW

  QueryPerformanceCounter

  QueryPerformanceFrequency

  GetExitCodeProcess

  GetEnvironmentStringsW

  CreateThread

  GetCurrentThreadId

  TerminateThread

  InitializeCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  ReleaseSemaphore

  GetStdHandle

  CreateSemaphoreA

  CreateProcessW

  SearchPathW

  GetFullPathNameW

  GetModuleFileNameW

  GetFileAttributesW

  MultiByteToWideChar

  IsValidCodePage

  GetACP

  GetCPInfo

  IsDBCSLeadByteEx

  WideCharToMultiByte

  FindClose

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsProcessorFeaturePresent

  GetStartupInfoW

  GetModuleHandleW

  InitializeSListHead

  TlsFree

  RtlUnwind

  RaiseException

  EncodePointer

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  Sections

  .text

  Size: 495KB - Virtual size: 495KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 96KB - Virtual size: 96KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 24KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ