General

Malware Config

Signatures

Files

• a8ed64c2ba2355ae29d0f0d8fff78a40b8488fd60351839c6ce2347e355a74c3

  .exe windows x86

  b7c47584dc3cf5834f23e069567238c5

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  api-ms-win-core-processthreads-l1-1-0

  TlsGetValue

  GetCurrentThreadId

  GetStartupInfoW

  TlsFree

  ExitProcess

  TlsAlloc

  TerminateProcess

  TlsSetValue

  GetCurrentProcessId

  GetCurrentProcess

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-console-l3-2-0

  GetConsoleWindow

  api-ms-win-core-localization-l1-2-0

  GetOEMCP

  GetUserDefaultLCID

  LCMapStringEx

  GetACP

  EnumSystemLocalesW

  IsValidLocale

  GetLocaleInfoW

  LCMapStringW

  GetCPInfo

  IsValidCodePage

  api-ms-win-core-synch-l1-1-0

  DeleteCriticalSection

  EnterCriticalSection

  InitializeCriticalSectionEx

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  api-ms-win-core-util-l1-1-0

  DecodePointer

  EncodePointer

  api-ms-win-core-string-l1-1-0

  MultiByteToWideChar

  GetStringTypeW

  WideCharToMultiByte

  CompareStringW

  user32

  PostMessageA

  GetForegroundWindow

  ShowWindow

  MessageBeep

  GetWindowThreadProcessId

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  RaiseException

  GetLastError

  SetLastError

  SetUnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetModuleHandleExW

  GetModuleFileNameW

  LoadLibraryExW

  FreeLibrary

  GetProcAddress

  api-ms-win-core-rtlsupport-l1-1-0

  RtlUnwind

  api-ms-win-core-processenvironment-l1-1-0

  FreeEnvironmentStringsW

  GetCommandLineW

  GetStdHandle

  GetCommandLineA

  SetStdHandle

  SetEnvironmentVariableW

  GetEnvironmentStringsW

  api-ms-win-core-file-l1-1-0

  FindNextFileW

  WriteFile

  GetFileType

  FlushFileBuffers

  ReadFile

  GetFileSizeEx

  SetFilePointerEx

  FindFirstFileExW

  CreateFileW

  FindClose

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapAlloc

  HeapSize

  HeapReAlloc

  HeapFree

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-console-l1-1-0

  ReadConsoleW

  GetConsoleMode

  GetConsoleOutputCP

  WriteConsoleW

  Sections

  .text

  Size: 116KB - Virtual size: 116KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 53KB - Virtual size: 52KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 112KB - Virtual size: 115KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ