General

Malware Config

Signatures

Files

• Setup.exe

  .exe windows x86

  fa6308284ac6b0e6a0b4d6e4e61f4983

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  api-ms-win-ntuser-sysparams-l1-1-0

  GetSystemMetrics

  api-ms-win-core-localization-l1-2-0

  GetOEMCP

  GetCPInfo

  IsValidCodePage

  LCMapStringEx

  EnumSystemLocalesW

  FormatMessageA

  GetACP

  GetLocaleInfoEx

  GetUserDefaultLCID

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSectionAndSpinCount

  EnterCriticalSection

  DeleteCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionEx

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-string-l1-1-0

  CompareStringW

  MultiByteToWideChar

  WideCharToMultiByte

  CompareStringEx

  GetStringTypeW

  user32

  PostQuitMessage

  BeginPaint

  FindWindowA

  DefWindowProcW

  GetSysColorBrush

  FillRect

  EndPaint

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  RaiseException

  GetLastError

  SetLastError

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  GetStartupInfoW

  GetCurrentProcessId

  TlsGetValue

  TlsAlloc

  TlsFree

  GetCurrentThread

  TerminateProcess

  TlsSetValue

  ExitProcess

  GetCurrentThreadId

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  OutputDebugStringW

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetModuleHandleExW

  LoadLibraryExW

  FreeLibrary

  GetProcAddress

  GetModuleFileNameW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  api-ms-win-core-interlocked-l1-1-0

  InterlockedFlushSList

  InterlockedPushEntrySList

  InitializeSListHead

  api-ms-win-core-rtlsupport-l1-1-0

  RtlUnwind

  api-ms-win-core-processenvironment-l1-1-0

  GetStdHandle

  GetCommandLineA

  SetStdHandle

  GetCommandLineW

  SetEnvironmentVariableW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  api-ms-win-core-file-l1-1-0

  CreateFileW

  WriteFile

  SetFilePointerEx

  FlushFileBuffers

  FindNextFileW

  GetFileType

  GetFileSizeEx

  ReadFile

  FindClose

  FindFirstFileExW

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapReAlloc

  HeapAlloc

  HeapSize

  GetProcessHeap

  api-ms-win-core-datetime-l1-1-0

  GetTimeFormatW

  GetDateFormatW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-console-l1-1-0

  GetConsoleMode

  WriteConsoleW

  GetConsoleOutputCP

  ReadConsoleW

  SetConsoleCtrlHandler

  api-ms-win-core-timezone-l1-1-0

  GetTimeZoneInformation

  Sections

  .text

  Size: 450KB - Virtual size: 449KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 84KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 115KB - Virtual size: 121KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ