General

Malware Config

Signatures

Files

• a43e06bcb221f023a05ecd2dffc305cab8ccd8ef9437746237047f67dbcdfb0f

  .exe windows x86

  30bd52970a0ab2c057b7c31f539e387f

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  api-ms-win-core-processthreads-l1-1-0

  TerminateProcess

  GetStartupInfoW

  ExitProcess

  GetCurrentThreadId

  TlsAlloc

  TlsFree

  GetCurrentProcess

  TlsSetValue

  GetCurrentProcessId

  TlsGetValue

  api-ms-win-core-console-l3-2-0

  GetConsoleWindow

  api-ms-win-core-localization-l1-2-0

  LCMapStringEx

  IsValidCodePage

  GetCPInfo

  EnumSystemLocalesW

  GetOEMCP

  GetUserDefaultLCID

  IsValidLocale

  GetACP

  LCMapStringW

  GetLocaleInfoW

  api-ms-win-core-synch-l1-1-0

  LeaveCriticalSection

  EnterCriticalSection

  InitializeCriticalSectionEx

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  api-ms-win-core-util-l1-1-0

  DecodePointer

  EncodePointer

  api-ms-win-core-string-l1-1-0

  GetStringTypeW

  CompareStringW

  WideCharToMultiByte

  MultiByteToWideChar

  user32

  ShowWindow

  MessageBeep

  GetWindowThreadProcessId

  PostMessageA

  GetForegroundWindow

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  GetLastError

  RaiseException

  SetLastError

  SetUnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  GetModuleFileNameW

  FreeLibrary

  GetProcAddress

  LoadLibraryExW

  GetModuleHandleW

  api-ms-win-core-rtlsupport-l1-1-0

  RtlUnwind

  api-ms-win-core-processenvironment-l1-1-0

  GetCommandLineW

  GetCommandLineA

  FreeEnvironmentStringsW

  SetEnvironmentVariableW

  SetStdHandle

  GetStdHandle

  GetEnvironmentStringsW

  api-ms-win-core-file-l1-1-0

  GetFileType

  SetFilePointerEx

  FindClose

  CreateFileW

  ReadFile

  FlushFileBuffers

  FindNextFileW

  FindFirstFileExW

  GetFileSizeEx

  WriteFile

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapReAlloc

  GetProcessHeap

  HeapSize

  HeapFree

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-console-l1-1-0

  GetConsoleMode

  WriteConsoleW

  GetConsoleOutputCP

  ReadConsoleW

  Sections

  .text

  Size: 116KB - Virtual size: 116KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 52KB - Virtual size: 52KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 112KB - Virtual size: 115KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ