General

Malware Config

Signatures

Files

• eeca50813e80c0c9611fe74e47917119450e6c07dcf0144305f20495369b3874

  .dll windows x86

  1110d92e74a89911b72f674bfa327447

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  ExitProcess

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  GetVersion

  GetModuleFileNameW

  FreeEnvironmentStringsA

  MultiByteToWideChar

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  GetEnvironmentStringsW

  WideCharToMultiByte

  GetCommandLineW

  GetCommandLineA

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  HeapDestroy

  HeapCreate

  VirtualFree

  RtlUnwind

  WriteFile

  GetModuleFileNameA

  HeapAlloc

  HeapFree

  VirtualAlloc

  GetProcAddress

  LoadLibraryA

  GetLastError

  FlushFileBuffers

  CloseHandle

  SetStdHandle

  SetFilePointer

  PostQueuedCompletionStatus

  FindResourceExA

  GetNumberOfConsoleMouseButtons

  GenerateConsoleCtrlEvent

  IsBadWritePtr

  GetFileAttributesW

  ReadConsoleInputW

  GetLocaleInfoW

  GetTickCount

  FindNextVolumeA

  WritePrivateProfileSectionA

  DeleteTimerQueueTimer

  Module32NextW

  DefineDosDeviceW

  ReadProcessMemory

  CopyFileExA

  GetExitCodeThread

  ScrollConsoleScreenBufferW

  LockFile

  GetDefaultCommConfigW

  VirtualProtectEx

  CreateDirectoryExA

  InitializeCriticalSection

  UnlockFileEx

  SetProcessWorkingSetSize

  GlobalFindAtomA

  SetConsoleCursor

  lstrcpyA

  GetEnvironmentStringsA

  GetTapePosition

  FindFirstChangeNotificationW

  SetUnhandledExceptionFilter

  GetModuleHandleW

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  GetFileSize

  MoveFileExW

  WaitForSingleObject

  InterlockedCompareExchange

  OpenProcess

  GetSystemDirectoryW

  Sleep

  GetVersionExW

  MoveFileW

  GetSystemInfo

  GetModuleHandleA

  DeleteFileW

  DeviceIoControl

  CreateFileW

  CreateProcessW

  GetCurrentProcessId

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  InitializeCriticalSectionAndSpinCount

  FreeLibrary

  lstrlenW

  LoadLibraryW

  GetLocaleInfoA

  LoadLibraryExW

  GetStringTypeW

  GetStringTypeA

  LCMapStringA

  GetConsoleMode

  GetConsoleCP

  RaiseException

  CreateFileA

  SystemTimeToFileTime

  GetSystemTimeAsFileTime

  LocalFileTimeToFileTime

  SetFilePointerEx

  ReadFile

  GetFileSizeEx

  OutputDebugStringW

  FormatMessageW

  SetLastError

  GetCurrentThreadId

  LocalFree

  GetSystemTime

  CreateMutexW

  TlsGetValue

  GetProcessHeap

  TlsSetValue

  GetAtomNameW

  OpenThread

  AddAtomW

  ReleaseMutex

  TlsAlloc

  FindAtomW

  DeleteAtom

  TlsFree

  GetStartupInfoW

  HeapReAlloc

  IsDebuggerPresent

  GetCPInfo

  InterlockedIncrement

  GetACP

  GetOEMCP

  IsValidCodePage

  LCMapStringW

  HeapSize

  QueryPerformanceCounter

  InterlockedDecrement

  SetErrorMode

  user32

  LoadImageA

  EnumPropsA

  GetLastInputInfo

  SetWindowLongA

  SetWindowPlacement

  SetMenuDefaultItem

  GetQueueStatus

  GetAltTabInfoA

  UnpackDDElParam

  GetClipboardFormatNameW

  GetKBCodePage

  MapVirtualKeyExW

  GetNextDlgTabItem

  SetDlgItemTextA

  IsIconic

  SetPropA

  GetParent

  GetThreadDesktop

  EnumPropsExW

  BlockInput

  IMPSetIMEA

  GetSystemMetrics

  GetWindowRect

  GetDesktopWindow

  PostMessageW

  FindWindowW

  DialogBoxParamW

  GetDlgItem

  SetWindowTextW

  LoadStringW

  EndDialog

  RegisterClassW

  GetClassInfoW

  SetWindowPos

  LoadCursorFromFileA

  gdi32

  ExtCreateRegion

  BRUSHOBJ_ulGetBrushColor

  CreateDiscardableBitmap

  HT_Get8BPPFormatPalette

  SetWinMetaFileBits

  STROBJ_vEnumStart

  GdiDescribePixelFormat

  SetMetaFileBitsEx

  UnloadNetworkFonts

  bMakePathNameW

  DeleteColorSpace

  GdiConvertFont

  GdiQueryFonts

  GdiFixUpHandle

  GetEnhMetaFileBits

  GetStockObject

  advapi32

  RegOpenKeyExW

  RegCloseKey

  RegSetValueExW

  RegCreateKeyExW

  RegQueryValueExW

  OpenServiceW

  OpenSCManagerW

  DeleteService

  CloseServiceHandle

  RegQueryValueExA

  RegEnumKeyExW

  RegOpenKeyA

  shell32

  SHQueryRecycleBinW

  ExtractAssociatedIconExA

  ExtractIconW

  SHLoadNonloadedIconOverlayIdentifiers

  SHGetPathFromIDListA

  Shell_NotifyIconW

  CommandLineToArgvW

  SHGetFileInfo

  SHGetFileInfoW

  ExtractIconA

  FindExecutableW

  ShellExecuteExA

  SHFileOperation

  SHGetFileInfoA

  SHGetDiskFreeSpaceExA

  SHAppBarMessage

  SHChangeNotify

  ole32

  CoCreateInstance

  CoUninitialize

  CoInitializeEx

  CoTaskMemFree

  shlwapi

  StrChrW

  StrRChrIA

  StrRChrW

  StrCmpNW

  StrStrA

  StrChrIA

  SHDeleteValueW

  PathCombineW

  PathFileExistsW

  PathRemoveFileSpecW

  SHDeleteKeyW

  imm32

  ImmDisableIME

  Sections

  .text

  Size: 21KB - Virtual size: 20KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 17KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata8

  Size: 340KB - Virtual size: 340KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ