General

Malware Config

Signatures

Files

• 48cfbb10d7cfec67e737d376835132865e4d55db838793bc73f30132b5d04b6f

  .exe windows x86

  38b253caa9618f9f2cee555ba722f884

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  esent

  JetCloseTable

  iphlpapi

  GetBestInterface

  rasapi32

  RasValidateEntryNameW

  cfgmgr32

  CM_Get_Device_ID_Size_Ex

  secur32

  QuerySecurityPackageInfoW

  mprapi

  MprConfigInterfaceGetInfo

  setupapi

  SetupDiSetClassInstallParamsA

  SetupDiEnumDriverInfoA

  user32

  CheckRadioButton

  GetMenuCheckMarkDimensions

  GetShellWindow

  CharToOemW

  UnhookWinEvent

  UnregisterHotKey

  MessageBoxExW

  OemToCharA

  SetMenuItemBitmaps

  GetWindowInfo

  GetDlgItem

  TabbedTextOutW

  GetMenuStringA

  netapi32

  NetLocalGroupAddMember

  rpcrt4

  NdrDcomAsyncClientCall

  NdrConformantStringMarshall

  RpcRevertToSelf

  RpcRevertToSelfEx

  ole32

  StgOpenPropStg

  OleCreateStaticFromData

  gdi32

  LineDDA

  GetSystemPaletteEntries

  UpdateColors

  CreatePalette

  GetFontLanguageInfo

  CreateMetaFileA

  urlmon

  CreateAsyncBindCtx

  GetClassFileOrMime

  kernel32

  SuspendThread

  DecodePointer

  FormatMessageA

  GetProcAddress

  ReadConsoleA

  GetSystemWow64DirectoryA

  GetExitCodeProcess

  GetPrivateProfileStructA

  GetVersionExW

  CopyFileW

  GetProfileStringW

  ReleaseSemaphore

  GetLongPathNameA

  GetConsoleSelectionInfo

  GetCurrentProcess

  GetHandleInformation

  Thread32First

  GetLongPathNameW

  GetVersion

  DosDateTimeToFileTime

  winspool.drv

  EnumPrintProcessorDatatypesW

  GetPrinterDriverW

  oleaut32

  VarBoolFromR4

  VariantClear

  VarCyFromUI2

  VarI4FromStr

  comctl32

  ImageList_DrawEx

  shlwapi

  StrFromTimeIntervalW

  AssocIsDangerous

  StrCmpNA

  IsCharSpaceA

  PathIsContentTypeW

  crypt32

  CertGetPublicKeyLength

  CryptFindOIDInfo

  winmm

  mmioGetInfo

  midiOutOpen

  waveOutClose

  wininet

  FindCloseUrlCache

  GetUrlCacheEntryInfoW

  shell32

  SHGetFolderPathA

  ShellAboutA

  advapi32

  CryptHashSessionKey

  ReadEventLogW

  RegCreateKeyA

  GetSecurityDescriptorDacl

  RegOpenKeyA

  GetFileSecurityW

  GetAclInformation

  msvfw32

  ICGetInfo

  Sections

  .text

  Size: 76KB - Virtual size: 75KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  g1q1

  Size: 40KB - Virtual size: 39KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 564B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ