General

Malware Config

Signatures

Files

• 2e818946ec3ef46b1274aa212fdf73c2214ea00f8db0533cbc4fba353a60ce5a

  .exe windows x86

  950b0bca768af462f821fef53421703c

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  rpcrt4

  NdrClientCall2

  kernel32

  WaitForSingleObject

  WaitForMultipleObjects

  CloseHandle

  lstrcmpiW

  CreateMutexW

  OpenMutexW

  GetModuleFileNameW

  ExpandEnvironmentStringsW

  GetDriveTypeA

  GetSystemDirectoryW

  GetVolumeInformationW

  VirtualUnlock

  GetComputerNameW

  MultiByteToWideChar

  GetTickCount

  lstrcmpiA

  EnterCriticalSection

  LeaveCriticalSection

  VirtualLock

  GetProcAddress

  WriteFile

  GetSystemTime

  lstrcmpW

  GetModuleHandleW

  CreateFileW

  DeleteCriticalSection

  GetNativeSystemInfo

  GetDriveTypeW

  GetDiskFreeSpaceW

  VerSetConditionMask

  LocalAlloc

  LocalFree

  GetCurrentProcess

  LoadLibraryA

  GetModuleHandleA

  InitializeCriticalSection

  GlobalAlloc

  GlobalFree

  MulDiv

  GetTempPathW

  VirtualQuery

  LoadLibraryW

  LoadLibraryExW

  GetCurrentProcessId

  CreateThread

  Sleep

  ReadFile

  ConnectNamedPipe

  CreateEventW

  CreateNamedPipeW

  GetFullPathNameW

  GetLastError

  ExitThread

  TerminateProcess

  ExitProcess

  OpenProcess

  GetShortPathNameW

  GetProcessHeap

  VirtualFree

  VirtualAlloc

  lstrlenW

  UnlockFile

  InterlockedIncrement

  WideCharToMultiByte

  VerifyVersionInfoW

  user32

  FillRect

  CreateWindowStationW

  SetProcessWindowStation

  DrawTextA

  wsprintfA

  SystemParametersInfoW

  wsprintfW

  ReleaseDC

  SetTimer

  ShowWindow

  CreateWindowExW

  RegisterClassW

  PostQuitMessage

  DefWindowProcW

  DispatchMessageW

  GetMessageW

  GetDC

  KillTimer

  DrawTextW

  gdi32

  SetBitmapBits

  GetBitmapBits

  CreateBitmap

  CreateCompatibleDC

  CreateFontW

  DeleteDC

  DeleteObject

  GetDeviceCaps

  GetDIBits

  GetPixel

  GetStockObject

  SelectObject

  SetBkColor

  SetPixel

  SetTextColor

  GetObjectW

  CreateCompatibleBitmap

  advapi32

  GetSidSubAuthorityCount

  GetSidSubAuthority

  ole32

  CoUninitialize

  CoCreateInstance

  CoInitialize

  Sections

  .text

  Size: 68KB - Virtual size: 68KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ