General

Malware Config

Signatures

Files

• 11375d1347b5112cec46dc7f281d88785d0043635bd3a6eaf182eec5f5563f9b

  .exe windows x86

  60efa693a19725b0dd128cb84a9a313f

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegQueryValueExA

  RegCloseKey

  LookupPrivilegeValueA

  OpenProcessToken

  RegOpenKeyExA

  kernel32

  SearchPathA

  GetModuleFileNameA

  GetModuleHandleA

  lstrcatA

  ShowConsoleCursor

  GetFileSize

  Sleep

  RemoveDirectoryA

  lstrlenA

  GetShortPathNameA

  CopyFileA

  lstrcpynA

  lstrcpyA

  GetUserDefaultUILanguage

  MoveFileA

  GetFullPathNameA

  SetFileAttributesA

  lstrcatW

  CreateTimerQueue

  WaitForSingleObjectEx

  SetEnvironmentVariableW

  SetLocalTime

  FlushConsoleInputBuffer

  GetCurrentConsoleFont

  WaitForMultipleObjects

  QueryPerformanceCounter

  ExitProcess

  GetConsoleCP

  LocalReAlloc

  WaitCommEvent

  IsDBCSLeadByteEx

  GetSystemTimeAsFileTime

  SetThreadAffinityMask

  GetModuleHandleA

  CreateTimerQueueTimer

  GetCurrentThreadId

  GlobalMemoryStatus

  SetConsolePalette

  ClearCommError

  version

  GetFileVersionInfoA

  GetFileVersionInfoSizeA

  VerQueryValueA

  user32

  SendDlgItemMessageA

  ShowWindow

  CreateWindowExA

  GetDlgItemTextA

  SetWindowTextA

  Sections

  .text

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 7KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 152KB - Virtual size: 152KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE