General

Malware Config

Signatures

Files

• 2897e555be336cb52bf83da45ca4cf28ec455f06ad960bb41b1b08bfcc80d74b

  .exe windows x86

  f9413603e99539a63249884c4f50d254

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  clbcatq

  CoRegCleanup

  ComPlusMigrate

  SetSetupSave

  SetSetupOpen

  DowngradeAPL

  crypt32

  CryptMsgGetParam

  CertFreeCTLContext

  CertGetStoreProperty

  CryptFindOIDInfo

  CertGetNameStringA

  CryptMsgDuplicate

  CertFindCTLInStore

  CryptMsgUpdate

  CryptMemAlloc

  CertDeleteCTLFromStore

  CryptMsgControl

  CertAlgIdToOID

  CertCloseStore

  cryptdll

  MD5Init

  MD5Update

  MD5Final

  CDBuildVect

  CDLocateRng

  advapi32

  RegEnumKeyA

  CreateServiceA

  RegOpenKeyA

  RegSaveKeyA

  LogonUserW

  RegLoadKeyW

  GetUserNameA

  RegRestoreKeyW

  RegUnLoadKeyW

  CryptSignHashA

  ReadEventLogW

  OpenEventLogW

  RegDeleteValueW

  user32

  MessageBoxA

  GetWindow

  InsertMenuA

  IsWindowVisible

  GetMessageW

  DispatchMessageW

  GetDlgItemTextW

  DialogBoxParamW

  LoadMenuW

  CharToOemA

  CreateDesktopA

  DrawStateA

  IsDialogMessageW

  GetClassLongA

  kernel32

  WriteFile

  LoadLibraryExA

  GetProcessHeap

  OpenWaitableTimerW

  GetLogicalDriveStringsA

  lstrlenA

  InitializeCriticalSection

  SleepEx

  CreateMutexW

  GetCommandLineA

  GetModuleHandleA

  GetStringTypeW

  GetConsoleAliasW

  lstrcpy

  HeapFree

  CreateFileW

  GetACP

  GetProcAddress

  Sections

  .text

  Size: 118KB - Virtual size: 117KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 960B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ