General

Malware Config

Signatures

Files

• d3f0ee2f8e4bdb79adc9464fc9a83f00f5171a53ef73761efec1972b5780dc3f

  .zip
• RFQ Request For Quotation.exe

  .exe windows x86

  bfffefca6535afcc9bd6b5d20058c57e

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetCurrentDirectoryA

  WaitForSingleObject

  GetCurrentDirectoryW

  SetEndOfFile

  GetStringTypeW

  GetStringTypeA

  LoadLibraryA

  SetEnvironmentVariableA

  CompareStringW

  CompareStringA

  GetCPInfo

  CreateProcessA

  IsBadCodePtr

  IsBadReadPtr

  SetUnhandledExceptionFilter

  FlushFileBuffers

  SetStdHandle

  IsBadWritePtr

  VirtualAlloc

  LCMapStringW

  LCMapStringA

  MultiByteToWideChar

  GetProcAddress

  VirtualFree

  HeapCreate

  HeapDestroy

  GetFileType

  GetStdHandle

  SetHandleCount

  GetEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  FreeEnvironmentStringsA

  UnhandledExceptionFilter

  WideCharToMultiByte

  HeapFree

  HeapSize

  GetLastError

  SetFileTime

  LocalFileTimeToFileTime

  GetFullPathNameW

  GetFullPathNameA

  GetTempPathW

  GetTempPathA

  GetModuleFileNameW

  DeleteFileW

  DeleteFileA

  SetFilePointer

  GetFileAttributesW

  CreateDirectoryW

  SetCurrentDirectoryW

  SetCurrentDirectoryA

  SetFileAttributesW

  RemoveDirectoryW

  CreateDirectoryA

  SetFileAttributesA

  GetFileAttributesA

  CreateFileA

  Sleep

  GetTickCount

  GetACP

  GetOEMCP

  GetComputerNameW

  FormatMessageA

  GetModuleFileNameA

  CloseHandle

  ReadFile

  WriteFile

  GetFileSize

  FileTimeToSystemTime

  SystemTimeToFileTime

  GetLocalTime

  GetVersionExA

  CreateFileW

  GetCurrentThreadId

  RtlUnwind

  ExitProcess

  TerminateProcess

  GetCurrentProcess

  GetModuleHandleA

  GetStartupInfoA

  GetCommandLineA

  GetVersion

  GetTimeZoneInformation

  HeapReAlloc

  HeapAlloc

  GetExitCodeProcess

  user32

  PostMessageA

  SetTimer

  GetDlgItemTextA

  LoadStringA

  DefWindowProcA

  DestroyWindow

  BeginPaint

  EndPaint

  GetDlgItemTextW

  SetWindowTextW

  MoveWindow

  SetDlgItemTextW

  EnableWindow

  EndDialog

  PostQuitMessage

  MessageBoxW

  GetDlgItem

  SendMessageA

  GetDesktopWindow

  GetWindowRect

  CopyRect

  OffsetRect

  SetWindowPos

  CreateWindowExW

  DialogBoxParamW

  LoadCursorA

  RegisterClassExW

  LoadStringW

  GetMessageA

  TranslateMessage

  DispatchMessageA

  MessageBoxA

  SetDlgItemTextA

  shell32

  ShellExecuteExW

  SHBrowseForFolderW

  SHGetPathFromIDListW

  SHGetMalloc

  advapi32

  CryptAcquireContextA

  CryptReleaseContext

  CryptGenRandom

  GetUserNameA

  Sections

  .text

  Size: 236KB - Virtual size: 232KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 36KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 76KB - Virtual size: 91KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ