General

Malware Config

Signatures

Files

• 3fa6a8ad5cede430a96feb1a9cd37693d47608eaa5f6adf89ea290871cc97405

  .exe windows x86

  6aea99b443fa2f09005b613f57953b58

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  strcat

  _wfopen

  fprintf

  fscanf

  _controlfp

  _except_handler3

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  fclose

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  wcscmp

  wcslen

  strcmp

  strncmp

  memmove

  strncpy

  _snprintf

  strtok

  atoi

  strchr

  malloc

  _snwprintf

  srand

  fgets

  rand

  sprintf

  strstr

  strlen

  memset

  feof

  strcpy

  ws2_32

  WSAStartup

  select

  inet_addr

  gethostbyname

  inet_pton

  WSACleanup

  htons

  closesocket

  getnameinfo

  socket

  connect

  recv

  send

  urlmon

  URLDownloadToFileW

  wininet

  InternetReadFile

  InternetOpenA

  InternetOpenUrlA

  InternetCloseHandle

  InternetOpenW

  InternetOpenUrlW

  dnsapi

  DnsFree

  DnsQuery_A

  shlwapi

  PathFindFileNameA

  PathFileExistsW

  kernel32

  CreateFileW

  WriteFile

  CloseHandle

  ExpandEnvironmentStringsW

  DeleteFileW

  ExitProcess

  ExitThread

  lstrlenA

  Sleep

  GetLocalTime

  CreateProcessW

  GetLocaleInfoA

  GetTimeZoneInformation

  GetTickCount

  FileTimeToLocalFileTime

  TerminateThread

  WaitForSingleObject

  CreateThread

  lstrcpyA

  SetFileAttributesW

  CopyFileW

  CreateDirectoryW

  GetModuleFileNameW

  GetLastError

  CreateMutexA

  ReadFile

  SetFilePointer

  GetFileSize

  GetSystemTime

  GetModuleHandleA

  GetStartupInfoA

  FileTimeToSystemTime

  user32

  CharUpperA

  wsprintfA

  advapi32

  RegCloseKey

  RegDeleteValueW

  RegOpenKeyExW

  RegQueryValueExW

  RegSetValueExW

  Sections

  .text

  Size: 30KB - Virtual size: 29KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ