General

Malware Config

Signatures

Files

• orden grande pdf.exe.xz

  .xz
• orden grande pdf.exe

  .exe windows x86

  09876ad8ac5cf1f5f38f35bc6647489a

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

  IMAGE_FILE_NET_RUN_FROM_SWAP

  IMAGE_FILE_BYTES_REVERSED_HI

  Imports

  oleaut32

  SysFreeString

  SysReAllocStringLen

  SysAllocStringLen

  SafeArrayPtrOfIndex

  SafeArrayGetUBound

  SafeArrayGetLBound

  SafeArrayCreate

  VariantChangeType

  VariantCopy

  VariantClear

  VariantInit

  advapi32

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  RegQueryValueExA

  RegOpenKeyExA

  RegFlushKey

  RegCloseKey

  user32

  GetKeyboardType

  DestroyWindow

  LoadStringA

  MessageBoxA

  CharNextA

  UnionRect

  SetRect

  SetCapture

  ReleaseDC

  ReleaseCapture

  RegisterClassExA

  PostMessageA

  OffsetRect

  MessageBoxA

  LoadStringA

  LoadIconA

  LoadCursorA

  GetWindowLongA

  GetSystemMetrics

  GetSysColor

  GetParent

  GetDC

  GetCapture

  DrawTextA

  DestroyCursor

  DefWindowProcA

  CharNextA

  CharToOemA

  kernel32

  GetACP

  Sleep

  VirtualFree

  VirtualAlloc

  GetCurrentThreadId

  InterlockedDecrement

  InterlockedIncrement

  VirtualQuery

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenA

  lstrcpynA

  LoadLibraryExA

  GetThreadLocale

  GetStartupInfoA

  GetProcAddress

  GetModuleHandleA

  GetModuleFileNameA

  GetLocaleInfoA

  GetCommandLineA

  FreeLibrary

  FindFirstFileA

  FindClose

  ExitProcess

  WriteFile

  UnhandledExceptionFilter

  RtlUnwind

  RaiseException

  GetStdHandle

  TlsSetValue

  TlsGetValue

  LocalAlloc

  GetModuleHandleA

  WriteFile

  WaitForSingleObject

  VirtualQuery

  VirtualProtect

  VirtualAlloc

  SetFilePointer

  SetEvent

  SetErrorMode

  ResetEvent

  ReadFile

  MulDiv

  LoadLibraryA

  LeaveCriticalSection

  InitializeCriticalSection

  GetVersionExA

  GetThreadLocale

  GetStdHandle

  GetProcAddress

  GetModuleHandleA

  GetModuleFileNameA

  GetLocaleInfoA

  GetLocalTime

  GetLastError

  GetDiskFreeSpaceA

  GetDateFormatA

  GetCurrentThreadId

  GetCurrentProcess

  GetCPInfo

  FreeLibrary

  FormatMessageA

  FlushInstructionCache

  EnumCalendarInfoA

  EnterCriticalSection

  DeleteCriticalSection

  CreateFileA

  CreateEventA

  CompareStringA

  CloseHandle

  AddAtomA

  Sleep

  gdi32

  UnrealizeObject

  SetTextColor

  SetROP2

  SetBkMode

  SetBkColor

  SetBitmapBits

  SelectPalette

  SelectObject

  MoveToEx

  GetTextMetricsA

  GetSystemPaletteEntries

  GetStockObject

  GetObjectA

  GetDeviceCaps

  GetCurrentPositionEx

  GetBitmapBits

  DeleteObject

  DeleteDC

  CreatePenIndirect

  CreatePalette

  CreateFontIndirectA

  CreateFontA

  CreateDIBSection

  CreateCompatibleDC

  CreateBrushIndirect

  BitBlt

  url

  InetIsOffline

  Sections

  .text

  Size: 75KB - Virtual size: 75KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 13KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: - Virtual size: 12B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 152KB - Virtual size: 152KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ