General

Malware Config

Signatures

Files

• 0a2bc257eb1e266e2fd7c608bbb7e1f2ed34660c8ff21f32999fe49c6997329b.bin

  .exe windows x86

  b2e51b3711a18787e443d6ccf05ae799

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetModuleHandleA

  GetCurrentDirectoryA

  DuplicateHandle

  CloseHandle

  FindFirstVolumeW

  LocalFree

  GetStringTypeW

  GetStringTypeA

  LCMapStringW

  MultiByteToWideChar

  LCMapStringA

  GetLocaleInfoA

  HeapSize

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  InitializeCriticalSectionAndSpinCount

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetFileType

  SetHandleCount

  DeviceIoControl

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  InterlockedDecrement

  GetCurrentThreadId

  InterlockedIncrement

  TlsFree

  TlsSetValue

  TlsAlloc

  LockResource

  LoadLibraryA

  GetLocalTime

  SetStdHandle

  GetProcAddress

  SetLastError

  GetLastError

  GetStdHandle

  lstrlenW

  CreateFileW

  GetTimeZoneInformation

  FindNextVolumeW

  CreateEventA

  SizeofResource

  WideCharToMultiByte

  FindResourceExA

  OpenProcess

  EnumResourceTypesA

  TzSpecificLocalTimeToSystemTime

  GetDateFormatA

  FormatMessageA

  FindNextVolumeMountPointA

  GetCurrentThread

  GetTimeFormatA

  WaitForSingleObject

  TlsGetValue

  GetModuleFileNameA

  WriteFile

  ExitProcess

  Sleep

  GetModuleHandleW

  HeapReAlloc

  VirtualAlloc

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  VirtualFree

  HeapCreate

  RtlUnwind

  RaiseException

  GetStartupInfoA

  GetCurrentProcess

  GlobalAddAtomA

  UpdateResourceA

  LoadResource

  GetCommandLineA

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  HeapAlloc

  HeapFree

  lstrlenA

  FreeResource

  FindVolumeClose

  CreateFileA

  GetEnvironmentStringsW

  GetVolumeNameForVolumeMountPointA

  user32

  MapWindowPoints

  LoadImageA

  GetSystemMetrics

  MessageBoxW

  DefMDIChildProcA

  DispatchMessageA

  GetClassNameA

  GetCursorPos

  SetWindowPos

  GetSysColor

  GetDesktopWindow

  DefWindowProcA

  GetDlgItem

  ReleaseDC

  CreateWindowExA

  GetWindowLongA

  SetCursorPos

  GetWindow

  GetDialogBaseUnits

  GetDlgItemTextA

  SetWindowLongA

  OffsetRect

  TranslateMessage

  DestroyWindow

  GetMessageA

  UpdateWindow

  GetWindowRect

  PostQuitMessage

  FillRect

  GetParent

  IsWindowEnabled

  GetClientRect

  CreateMenu

  GetWindowTextLengthA

  SendMessageA

  GetDC

  gdi32

  CreateSolidBrush

  GetStockObject

  BitBlt

  SetTextColor

  GetDeviceCaps

  CreateFontIndirectA

  SetBkColor

  ExcludeClipRect

  GdiFlush

  CreatePalette

  DeleteObject

  SelectClipRgn

  ExtTextOutW

  GetTextMetricsA

  comdlg32

  GetOpenFileNameA

  GetSaveFileNameA

  advapi32

  ConvertSidToStringSidA

  GetSecurityInfo

  RegCloseKey

  OpenThreadToken

  shell32

  SHGetFolderPathW

  SHBrowseForFolderA

  ole32

  CLSIDFromProgID

  CoInitialize

  CoUninitialize

  oleaut32

  GetActiveObject

  VariantInit

  SysAllocString

  VariantChangeType

  odbc32

  ord235

  ord236

  ord234

  netapi32

  NetConfigSet

  NetUnjoinDomain

  avifil32

  AVIStreamGetFrameOpen

  winscard

  SCardGetStatusChangeA

  version

  GetFileVersionInfoSizeA

  shlwapi

  PathRelativePathToA

  PathRemoveBackslashA

  AssocCreate

  gdiplus

  GdipDrawLine

  GdipCreatePath

  GdipCreateFromHDC

  GdipDeleteBrush

  GdipDeletePath

  GdipCreateSolidFill

  GdipDeletePen

  GdipCreatePen1

  GdipDeleteGraphics

  opengl32

  glBegin

  glColor3d

  glMatrixMode

  glFlush

  glLoadIdentity

  glVertex3d

  glEnd

  glClearColor

  glClear

  glu32

  gluPerspective

  gluLookAt

  authz

  AuthzInitializeContextFromSid

  AuthzInitializeContextFromAuthzContext

  wlanapi

  WlanScan

  WlanOpenHandle

  Sections

  .text

  Size: 80KB - Virtual size: 80KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 184KB - Virtual size: 184KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ