General

Malware Config

Signatures

Files

• 3a0d64454066910e3c88696e28148e30e8d0a375f98a167753179596e1799bec

  .exe windows x86

  1b1bf0dd2adfccb116eec91922ccd58e

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shell32

  ExtractAssociatedIconExW

  wininet

  FindNextUrlCacheEntryExW

  psapi

  GetModuleFileNameExW

  user32

  SendMessageA

  SetCapture

  IsWindowVisible

  GetForegroundWindow

  GetSysColor

  GetKeyboardLayoutList

  GetComboBoxInfo

  GetMenuStringW

  LoadCursorA

  GetClassLongW

  GetPropW

  DrawTextExA

  DeleteMenu

  DefFrameProcW

  GetUpdateRgn

  InsertMenuItemW

  GetClassInfoExW

  GetLastInputInfo

  GetMenuItemRect

  winspool.drv

  FindFirstPrinterChangeNotification

  DeletePrinterDriverW

  advapi32

  InitiateSystemShutdownA

  LookupPrivilegeDisplayNameW

  GetLengthSid

  DeleteService

  gdi32

  DeleteMetaFile

  GetTextCharset

  EqualRgn

  GetSystemPaletteEntries

  GetLayout

  kernel32

  FindAtomA

  GetVolumePathNameW

  GetSystemDirectoryA

  FindResourceW

  ExitThread

  GetExitCodeThread

  DeviceIoControl

  GetStartupInfoA

  FormatMessageA

  DeleteAtom

  lstrcatA

  FindActCtxSectionGuid

  GetProcessId

  lstrcmpW

  lstrcpynW

  GetConsoleDisplayMode

  FindNextVolumeMountPointW

  GlobalAddAtomW

  DeleteVolumeMountPointW

  GetCurrentProcess

  GetNumberOfConsoleInputEvents

  GetCurrentThread

  GetThreadId

  GetSystemPowerStatus

  GetCommandLineA

  GetPrivateProfileIntA

  FlushFileBuffers

  LocalSize

  WriteProfileStringW

  VirtualFree

  oleaut32

  VarDecFromR8

  Sections

  .text

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  LngAgI.d

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  |VT9T

  Size: 132KB - Virtual size: 131KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 180KB - Virtual size: 179KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ