General

Malware Config

Signatures

Files

• 3e1665aa7d0e5097773b0c05671dcda6d39f1350a1d50d2d7a89c932ba99f9dd

  .exe windows x86

  fc4cfc48f87bf067e69c65d6d68c79c3

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _controlfp

  _except_handler3

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  fclose

  wcscmp

  wcslen

  strcmp

  strncmp

  memmove

  strncpy

  _snprintf

  fwprintf

  strtok

  atoi

  strchr

  malloc

  _snwprintf

  srand

  fgets

  rand

  sprintf

  strstr

  strlen

  memset

  strcpy

  strcat

  _wfopen

  feof

  fprintf

  fscanf

  ws2_32

  WSAStartup

  select

  inet_addr

  gethostbyname

  inet_pton

  WSACleanup

  htons

  closesocket

  getnameinfo

  socket

  connect

  recv

  send

  urlmon

  URLDownloadToFileW

  wininet

  InternetReadFile

  InternetOpenA

  InternetOpenUrlA

  InternetCloseHandle

  InternetOpenW

  InternetOpenUrlW

  dnsapi

  DnsFree

  DnsQuery_A

  shlwapi

  PathFindFileNameA

  PathFileExistsW

  kernel32

  GetTickCount

  ExitThread

  lstrlenA

  DeleteFileW

  GetLocalTime

  CreateProcessW

  GetLocaleInfoA

  ExpandEnvironmentStringsW

  Sleep

  CloseHandle

  TerminateThread

  WriteFile

  CreateThread

  lstrcpyA

  SetFileAttributesW

  CopyFileW

  CreateDirectoryW

  GetModuleFileNameW

  GetLastError

  CreateMutexA

  ReadFile

  SetFilePointer

  GetFileSize

  GetSystemTime

  GetModuleHandleA

  GetStartupInfoA

  CreateFileW

  ExitProcess

  GetTimeZoneInformation

  FileTimeToSystemTime

  WaitForSingleObject

  FileTimeToLocalFileTime

  user32

  CharUpperA

  wsprintfA

  advapi32

  RegQueryValueExW

  RegOpenKeyExW

  RegDeleteValueW

  RegCloseKey

  RegSetValueExW

  Sections

  .text

  Size: 30KB - Virtual size: 30KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ