General

Malware Config

Signatures

Files

• 3ce62212879838e3c447b0e1d289e8dd704bbf12bd60a0326d5804848c0fd714

  .exe windows x86

  6355a9be4a0c07f06cb37221c0075c29

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetConsoleMode

  GetConsoleCP

  FlushFileBuffers

  HeapReAlloc

  HeapSize

  SetFilePointerEx

  GetProcessHeap

  SetStdHandle

  GetCommandLineW

  GetCommandLineA

  FindNextFileW

  FindFirstFileExW

  FindClose

  GetTimeZoneInformation

  SetEnvironmentVariableW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  WideCharToMultiByte

  GetOEMCP

  GetACP

  IsValidCodePage

  MultiByteToWideChar

  GetStringTypeW

  GetCPInfo

  GetFileType

  LCMapStringW

  CompareStringW

  QueryPerformanceFrequency

  ExitProcess

  GetConsoleWindow

  GetStdHandle

  GetModuleHandleExW

  FreeLibraryAndExitThread

  ExitThread

  LoadLibraryExW

  FreeLibrary

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  EncodePointer

  SetLastError

  RaiseException

  RtlUnwind

  TerminateProcess

  GetCurrentProcess

  InitializeSListHead

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  IsProcessorFeaturePresent

  GetStartupInfoW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  IsDebuggerPresent

  GetModuleHandleW

  CreateEventW

  WaitForSingleObjectEx

  ResetEvent

  GetConsoleTitleA

  EnumLanguageGroupLocalesA

  GetFullPathNameA

  GetWindowsDirectoryW

  CreateProcessW

  LoadLibraryA

  CreateEventA

  CreatePipe

  GetTickCount

  MulDiv

  SetCommState

  CloseHandle

  Sleep

  WaitForMultipleObjects

  WaitForSingleObject

  GetLastError

  CreateThread

  GetCurrentProcessId

  HeapFree

  HeapAlloc

  HeapDestroy

  HeapCreate

  FlushInstructionCache

  GlobalFree

  GlobalAlloc

  QueryPerformanceCounter

  GetModuleFileNameW

  GetSystemInfo

  SetThreadIdealProcessor

  WriteConsoleW

  SetEvent

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  LeaveCriticalSection

  EnterCriticalSection

  CreateFileW

  WriteFile

  GetProcAddress

  DecodePointer

  GetCurrentThread

  user32

  GetClientRect

  RedrawWindow

  SendMessageW

  GetMessageW

  CreateDialogParamW

  GetDlgItem

  PostMessageW

  PostQuitMessage

  ReleaseDC

  DefDlgProcW

  GetDC

  EnableMenuItem

  SendDlgItemMessageW

  MessageBoxIndirectW

  FillRect

  EndPaint

  DispatchMessageW

  BeginPaint

  CopyRect

  SetWindowLongW

  GetShellWindow

  IsWindowVisible

  SetWindowPos

  ShowWindow

  DestroyWindow

  LoadCursorW

  GetMenu

  TranslateMessage

  ClientToScreen

  CallWindowProcW

  LoadImageW

  LoadImageA

  LoadIconA

  LoadCursorA

  GetWindow

  GetDesktopWindow

  OffsetRect

  UnionRect

  InflateRect

  SetRect

  GetSysColorBrush

  GetSysColor

  LoadStringW

  GetCursorPos

  MessageBoxA

  AdjustWindowRect

  GetWindowRect

  GetWindowTextLengthA

  SetWindowTextA

  GetWindowDC

  SetActiveWindow

  UpdateWindow

  DrawMenuBar

  GetSystemMetrics

  IsWindowEnabled

  SetCapture

  GetFocus

  IsClipboardFormatAvailable

  IsDlgButtonChecked

  DialogBoxIndirectParamA

  CreateDialogParamA

  MoveWindow

  IsWindow

  CreateWindowExW

  DefWindowProcA

  AttachThreadInput

  SendMessageA

  DrawFrameControl

  TrackMouseEvent

  wsprintfA

  RegisterClassExW

  gdi32

  CreateCompatibleBitmap

  TextOutA

  GetObjectA

  SetBkMode

  SetBkColor

  GetTextExtentPoint32A

  ExcludeClipRect

  CreateSolidBrush

  CreateRoundRectRgn

  CreateRectRgnIndirect

  CreateFontIndirectA

  CombineRgn

  StretchDIBits

  GetDIBits

  GetDeviceCaps

  SelectObject

  GetStockObject

  DeleteObject

  DeleteDC

  CreateCompatibleDC

  BitBlt

  comdlg32

  GetSaveFileNameW

  GetOpenFileNameW

  advapi32

  GetTokenInformation

  LookupPrivilegeNameA

  OpenProcessToken

  ole32

  ReleaseStgMedium

  odbc32

  ord60

  ord61

  gdiplus

  GdiplusStartup

  GdipFree

  GdipAlloc

  GdipLoadImageFromFile

  GdipLoadImageFromFileICM

  GdipCloneImage

  GdipGetImageEncoders

  GdipGetImageEncodersSize

  GdipDrawImageRectI

  GdipDeleteGraphics

  GdipCreateFromHDC

  GdipCreateBitmapFromHBITMAP

  GdipCreateBitmapFromScan0

  GdipGetEncoderParameterListSize

  GdipGetImageHeight

  GdipGetImageWidth

  GdipSaveImageToFile

  GdipDisposeImage

  comctl32

  ord17

  ImageList_ReplaceIcon

  netapi32

  NetAuditClear

  winmm

  mmioAscend

  shlwapi

  PathAppendW

  pdh

  PdhGetFormattedCounterValue

  PdhAddCounterW

  PdhOpenQueryA

  PdhCollectQueryData

  PdhCloseQuery

  opengl32

  glViewport

  glOrtho

  glMatrixMode

  glLoadIdentity

  glu32

  gluLookAt

  setupapi

  SetupDeleteErrorA

  SetupDiCancelDriverInfoSearch

  uxtheme

  DrawThemeBackground

  GetThemeInt

  ntdsapi

  DsWriteAccountSpnA

  DsInheritSecurityIdentityA

  DsIsMangledDnA

  Sections

  .text

  Size: 160KB - Virtual size: 160KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 60KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 202KB - Virtual size: 201KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ