General

Malware Config

Signatures

Files

• 5c1b36a17a7e8ea361ad8dc6f9d14a284f5031d489639f89160db0b4b1a28067

  .exe windows x86

  273c650cc8ce65c39a2c9580e2cc0a26

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  LoadLibraryA

  GetProcAddress

  VirtualAlloc

  GetModuleHandleA

  MultiByteToWideChar

  lstrlenA

  LocalFree

  WriteConsoleW

  GetStdHandle

  FormatMessageW

  GetLastError

  CloseHandle

  WaitForMultipleObjects

  CreateThread

  lstrcmpW

  lstrcatW

  lstrlenW

  lstrcmpiW

  GetConsoleOutputCP

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  user32

  ReleaseCapture

  LoadCursorW

  ReleaseDC

  GetClassNameA

  DdeInitializeW

  EnumChildWindows

  MenuItemFromPoint

  PostMessageA

  GetAltTabInfoA

  GetPropA

  IsCharAlphaNumericW

  PeekMessageA

  GetFocus

  EmptyClipboard

  SwitchToThisWindow

  RegisterWindowMessageW

  SendMessageCallbackW

  SetWindowsHookA

  SetMenuItemBitmaps

  DdeCreateStringHandleA

  GetKeyboardLayoutNameW

  GetMenuStringA

  UnregisterDeviceNotification

  SetWindowTextA

  IsHungAppWindow

  SetScrollPos

  IsDialogMessage

  DialogBoxParamA

  DrawCaption

  RealGetWindowClassW

  EndMenu

  wvsprintfW

  DdeClientTransaction

  EnumClipboardFormats

  DdeKeepStringHandle

  SetThreadDesktop

  PackDDElParam

  VkKeyScanW

  EndTask

  GetMenuItemCount

  DeregisterShellHookWindow

  CreateIcon

  gdi32

  GetEnhMetaFileBits

  GetStockObject

  TranslateCharsetInfo

  TextOutA

  StretchDIBits

  StretchBlt

  StartPage

  StartDocA

  SetTextColor

  SetStretchBltMode

  SetMapMode

  SetBkMode

  SetBkColor

  SelectObject

  SelectClipRgn

  MoveToEx

  LineTo

  GetTextMetricsW

  GetTextFaceA

  GetTextExtentPointW

  GetTextExtentPoint32A

  GetTextExtentPoint32W

  GetRgnBox

  GetPaletteEntries

  GetObjectW

  GetNearestPaletteIndex

  GetDeviceCaps

  GetDIBits

  GdiFlush

  EndPage

  EndDoc

  DeleteObject

  DeleteDC

  CreateSolidBrush

  CreateRoundRectRgn

  CreateRectRgnIndirect

  CreateRectRgn

  CreatePen

  CreatePalette

  CreateFontIndirectW

  CreateFontA

  CreateFontW

  CreateDIBitmap

  CreateDIBSection

  CreateDCW

  CreateCompatibleDC

  CreateCompatibleBitmap

  CreateBitmap

  CombineRgn

  BitBlt

  comdlg32

  PrintDlgW

  GetSaveFileNameA

  GetSaveFileNameW

  GetOpenFileNameW

  advapi32

  RegQueryValueExA

  SetSecurityDescriptorDacl

  ReportEventW

  RegisterEventSourceW

  RegUnLoadKeyW

  RegSetValueExA

  RegSetValueExW

  RegQueryValueExW

  RegQueryInfoKeyW

  RegOpenKeyExA

  RegOpenKeyExW

  RegLoadKeyW

  RegEnumKeyA

  RegDeleteValueA

  RegCreateKeyExA

  RegCreateKeyExW

  RegCloseKey

  OpenProcessToken

  LookupAccountSidA

  LookupAccountSidW

  InitializeSecurityDescriptor

  GetUserNameA

  GetTokenInformation

  GetLengthSid

  FreeSid

  AllocateAndInitializeSid

  GetUserNameW

  GetKernelObjectSecurity

  StartServiceA

  StartServiceW

  QueryServiceStatus

  OpenServiceA

  OpenServiceW

  OpenSCManagerW

  ControlService

  CloseServiceHandle

  CryptSetProvParam

  CryptGetProvParam

  CryptDestroyHash

  CryptSignHashA

  CryptSetHashParam

  CryptCreateHash

  CryptImportKey

  CryptExportKey

  CryptReleaseContext

  CryptDestroyKey

  CryptGetUserKey

  CryptAcquireContextA

  CryptDecrypt

  shell32

  ExtractIconEx

  ExtractAssociatedIconExW

  Shell_NotifyIcon

  SHChangeNotify

  ExtractIconA

  ShellExecuteEx

  WOWShellExecute

  DoEnvironmentSubstW

  SHGetFileInfo

  ExtractIconExW

  SHAddToRecentDocs

  SHPathPrepareForWriteW

  ShellExecuteExA

  Shell_NotifyIconW

  ole32

  CoInitialize

  CoCreateInstance

  CoUninitialize

  shlwapi

  StrRStrIA

  StrRChrW

  comctl32

  ImageList_GetIconSize

  ImageList_Write

  ImageList_Read

  ImageList_GetIcon

  ImageList_ReplaceIcon

  ImageList_GetImageCount

  ImageList_Destroy

  ImageList_Create

  ord17

  Sections

  .text

  Size: 282KB - Virtual size: 282KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 512B - Virtual size: 266B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data2

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data3

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 154KB - Virtual size: 154KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ