General

Malware Config

Signatures

Files

• 5a0cf8a63f38d1f2797ff223048817a37851b2b10496189dc8285ef5e0aef37a

  .dll windows x86

  f689a921f86af3457d79140d57e81982

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wsock32

  inet_addr

  gethostbyname

  socket

  connect

  closesocket

  send

  select

  recv

  setsockopt

  WSAStartup

  kernel32

  CreateFileA

  ReadFile

  CloseHandle

  WriteFile

  lstrlenA

  GlobalLock

  GlobalUnlock

  LocalFree

  LocalAlloc

  GetTickCount

  lstrcpyA

  lstrcatA

  GetFileAttributesA

  ExpandEnvironmentStringsA

  GetFileSize

  CreateFileMappingA

  MapViewOfFile

  UnmapViewOfFile

  LoadLibraryA

  GetProcAddress

  GetTempPathA

  CreateDirectoryA

  DeleteFileA

  GetCurrentProcess

  WideCharToMultiByte

  GetLastError

  lstrcmpA

  CreateToolhelp32Snapshot

  Process32First

  OpenProcess

  Process32Next

  GetModuleHandleA

  FindFirstFileA

  lstrcmpiA

  FindNextFileA

  FindClose

  GetVersionExA

  GetLocaleInfoA

  GetSystemInfo

  GetWindowsDirectoryA

  SetCurrentDirectoryA

  GetPrivateProfileSectionNamesA

  GetPrivateProfileStringA

  GetPrivateProfileIntA

  GetCurrentDirectoryA

  lstrlenW

  Sleep

  LCMapStringA

  ExitProcess

  SetUnhandledExceptionFilter

  urlmon

  ObtainUserAgentString

  userenv

  LoadUserProfileA

  UnloadUserProfile

  ole32

  CreateStreamOnHGlobal

  GetHGlobalFromStream

  CoCreateGuid

  CoTaskMemFree

  CoCreateInstance

  OleInitialize

  user32

  wsprintfA

  advapi32

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyA

  RegEnumKeyExA

  RegCreateKeyA

  RegSetValueExA

  IsTextUnicode

  RegOpenCurrentUser

  RegEnumValueA

  GetUserNameA

  wininet

  InternetCrackUrlA

  InternetCreateUrlA

  shlwapi

  StrStrIA

  StrRChrIA

  StrToIntA

  StrCmpNIA

  StrStrIW

  StrStrA

  Sections

  .text

  Size: 50KB - Virtual size: 49KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 512B - Virtual size: 256B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 14KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ