General

Malware Config

Signatures

Files

• 15a259fc7995b7b4274962c8a8f872b5bce90d7986f69cfd75f6edc9ad7b7d01

  .exe windows x86

  0c08d0445a9d1bbaf877397a6d8d98f2

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdi32

  SelectObject

  CreateCompatibleDC

  DeleteObject

  SetTextColor

  BitBlt

  TextOutA

  SetBkColor

  GetStockObject

  version

  VerQueryValueA

  GetFileVersionInfoW

  rpcrt4

  RpcStringFreeW

  UuidToStringW

  shell32

  DragQueryFileA

  DragQueryFileW

  DragFinish

  ExtractIconExA

  comctl32

  InitCommonControls

  ImageList_Create

  olepro32

  OleTranslateColor

  OleLoadPicture

  advapi32

  RegQueryValueExA

  RegQueryValueExW

  RegCloseKey

  kernel32

  GetPrivateProfileStringA

  lstrcpynW

  MulDiv

  GetACP

  GetVersion

  GetModuleHandleA

  GlobalAlloc

  LocalFree

  lstrcatA

  VirtualAlloc

  GlobalFree

  lstrlenW

  GetPrivateProfileIntW

  GetStartupInfoA

  lstrcpyW

  LocalAlloc

  CloseHandle

  GetCommandLineA

  ExitProcess

  WriteProfileStringA

  ReadFile

  lstrcpynA

  VirtualProtect

  GetCurrentProcess

  LocalReAlloc

  user32

  CreateWindowExW

  GetWindowRect

  EndPaint

  SendMessageA

  ReleaseDC

  GetClientRect

  CreateMenu

  SetForegroundWindow

  GetDC

  LoadIconA

  TranslateMessage

  LoadStringW

  SetWindowTextW

  BeginPaint

  RegisterClassA

  AppendMenuA

  GetWindowLongA

  GetSysColor

  CreatePopupMenu

  DestroyMenu

  GetSysColorBrush

  DefWindowProcW

  GetActiveWindow

  DialogBoxParamA

  UpdateWindow

  GetWindowTextW

  MessageBoxW

  IsWindow

  msvcrt

  __CxxFrameHandler

  wcscpy

  _adjust_fdiv

  strlen

  __getmainargs

  _XcptFilter

  __p__fmode

  _acmdln

  memmove

  __initenv

  exit

  wcslen

  malloc

  wcschr

  _controlfp

  wcscat

  __p__commode

  __setusermatherr

  realloc

  strncpy

  wcscmp

  _CxxThrowException

  _initterm

  wcsncmp

  _cexit

  __set_app_type

  free

  _except_handler3

  comdlg32

  GetSaveFileNameA

  FindTextA

  GetFileTitleA

  winmm

  timeGetTime

  sndPlaySoundW

  ole32

  OleInitialize

  shlwapi

  PathRemoveExtensionA

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 313KB - Virtual size: 313KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ