General

Malware Config

Signatures

Files

• ac4daabcc33e6d296965a9e4b5af21fa43e47f49c58da62c420ebb66694b819a

  .exe windows x86

  ded6c839e7f7258224ae021602258361

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  HttpSendRequestA

  HttpOpenRequestA

  InternetSetOptionA

  InternetReadFile

  InternetConnectA

  InternetCloseHandle

  InternetOpenA

  InternetCrackUrlA

  InternetQueryOptionA

  kernel32

  MultiByteToWideChar

  WideCharToMultiByte

  FreeLibrary

  GetProcAddress

  LoadLibraryA

  VirtualAlloc

  VirtualFree

  TerminateThread

  GetExitCodeThread

  Sleep

  LocalFree

  GetCurrentProcess

  ExitProcess

  CreateThread

  SetThreadExecutionState

  GetLastError

  SetErrorMode

  GetFileSizeEx

  GetSystemInfo

  GetTickCount

  CreateMutexA

  GetModuleFileNameW

  GetProcessHeap

  GetWindowsDirectoryW

  CreateDirectoryW

  TerminateProcess

  ExitThread

  ReadProcessMemory

  GetThreadContext

  SetThreadContext

  HeapFree

  CreateProcessW

  GetCurrentProcessId

  DeleteFileW

  MoveFileW

  GetLongPathNameW

  WaitForSingleObject

  GetTempPathW

  OpenProcess

  GetExitCodeProcess

  ReadFile

  GetModuleHandleA

  GetModuleHandleW

  CreateFileW

  GetFileAttributesW

  CreateToolhelp32Snapshot

  Process32First

  Process32Next

  HeapReAlloc

  HeapAlloc

  GetCommandLineW

  CloseHandle

  user32

  GetLastInputInfo

  advapi32

  RegOpenKeyExW

  ConvertSidToStringSidW

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextW

  IsValidSid

  RegSetValueExW

  OpenProcessToken

  GetTokenInformation

  RegCloseKey

  shell32

  CommandLineToArgvW

  ole32

  CoTaskMemFree

  Sections

  .text

  Size: 31KB - Virtual size: 30KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ