General

Malware Config

Signatures

Files

• 2373c0c77d9177247d183e1075537e1e1be2092f580765260b080704c63001cd

  .exe windows x86

  ef8a5b4c3f8f97e5c38c672c2e432a62

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mprapi

  MprAdminMIBServerDisconnect

  MprConfigTransportSetInfo

  lz32

  LZSeek

  LZInit

  LZClose

  gdi32

  GetPath

  CreateFontA

  SelectPalette

  GetTextCharacterExtra

  CreateSolidBrush

  winscard

  SCardTransmit

  setupapi

  SetupIterateCabinetW

  winmm

  mixerGetControlDetailsW

  waveInGetID

  secur32

  EnumerateSecurityPackagesW

  ole32

  GetHGlobalFromStream

  StringFromGUID2

  OleBuildVersion

  oleaut32

  VarParseNumFromStr

  GetActiveObject

  VariantTimeToSystemTime

  VarCyFromR4

  wininet

  InternetReadFile

  InternetWriteFile

  shlwapi

  PathFindNextComponentW

  PathIsRootW

  StrToInt64ExA

  kernel32

  VerifyVersionInfoW

  WTSGetActiveConsoleSessionId

  ConnectNamedPipe

  SetVolumeLabelA

  GetDriveTypeW

  OutputDebugStringA

  UnlockFileEx

  UnhandledExceptionFilter

  VerifyScripts

  GetModuleHandleA

  SetLocalTime

  LoadLibraryExW

  advapi32

  RevertToSelf

  RegDisablePredefinedCacheEx

  powrprof

  EnumPwrSchemes

  wintrust

  CryptCATPutMemberInfo

  CryptCATPutAttrInfo

  ntdll

  isdigit

  crypt32

  CryptMsgGetAndVerifySigner

  user32

  IsWindow

  GetParent

  GetCaretBlinkTime

  opengl32

  glEvalCoord1f

  ws2_32

  bind

  msvcrt

  fprintf

  fputwc

  realloc

  ungetc

  rpcrt4

  RpcServerRegisterAuthInfoW

  comdlg32

  GetSaveFileNameW

  urlmon

  CoInternetCreateZoneManager

  Sections

  .text

  Size: 212KB - Virtual size: 211KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 50KB - Virtual size: 56KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ