General

Malware Config

Signatures

Files

• b017fcfb1afb809fb3d0e50c5a7bf00c5534b19c417b6b811f8dc87674394186

  .exe windows x86

  8c232963e1594df51ffbfca0acfdd8e6

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  FlushFileBuffers

  GetFullPathNameA

  LockFile

  SetEndOfFile

  UnlockFile

  GetVolumeInformationA

  DuplicateHandle

  GetFileAttributesExA

  GetFileSizeEx

  GetFileTime

  GetOEMCP

  GetCPInfo

  SetErrorMode

  CreateEventW

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  TerminateProcess

  IsProcessorFeaturePresent

  IsDebuggerPresent

  GetStartupInfoW

  QueryPerformanceCounter

  GetSystemTimeAsFileTime

  InitializeSListHead

  GetSystemDefaultUILanguage

  GetLocaleInfoW

  LocalReAlloc

  WriteConsoleW

  CreateFileW

  GetCurrentDirectoryW

  GetStringTypeW

  SetEnvironmentVariableW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  SetFilePointerEx

  ReadConsoleW

  GetConsoleMode

  GetConsoleOutputCP

  GetDriveTypeW

  GetTimeZoneInformation

  GetFileAttributesExW

  LCMapStringW

  CompareStringW

  GetStdHandle

  GetFileType

  SetStdHandle

  HeapQueryInformation

  GetFullPathNameW

  GlobalFlags

  GetModuleHandleExW

  GetCommandLineW

  GetCommandLineA

  RtlUnwind

  OutputDebugStringW

  GlobalHandle

  GlobalReAlloc

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  InitializeCriticalSection

  FindNextFileA

  FileTimeToLocalFileTime

  GlobalGetAtomNameA

  GlobalFindAtomA

  lstrcmpW

  GetSystemDirectoryW

  EncodePointer

  SystemTimeToTzSpecificLocalTime

  LocalAlloc

  FindResourceA

  FormatMessageA

  MulDiv

  LocalFree

  GlobalFree

  GlobalUnlock

  GetCurrentProcessId

  GlobalAddAtomA

  WaitForSingleObject

  WritePrivateProfileStringA

  GetPrivateProfileStringA

  GetPrivateProfileIntA

  CompareStringA

  lstrcmpA

  GlobalDeleteAtom

  GlobalLock

  GlobalAlloc

  LoadLibraryExW

  GetModuleFileNameA

  FreeLibrary

  GetVersionExA

  GetCurrentThreadId

  LoadLibraryW

  GetModuleHandleW

  GetModuleHandleA

  GetModuleFileNameW

  InitializeCriticalSectionAndSpinCount

  SetLastError

  OutputDebugStringA

  GetACP

  MultiByteToWideChar

  GetFileSize

  FileTimeToSystemTime

  SetFileTime

  CreateDirectoryA

  GetFileAttributesA

  LocalFileTimeToFileTime

  GetCurrentDirectoryA

  SystemTimeToFileTime

  ReadFile

  SetFilePointer

  GetProcessHeap

  DeleteCriticalSection

  DecodePointer

  HeapAlloc

  RaiseException

  HeapReAlloc

  HeapSize

  InitializeCriticalSectionEx

  LeaveCriticalSection

  EnterCriticalSection

  HeapFree

  FlushViewOfFile

  FindClose

  FindFirstFileA

  GetSystemInfo

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingA

  GetLastError

  CopyFileA

  DeleteFileA

  ExitProcess

  GetCurrentThread

  SetThreadPriority

  GetCurrentProcess

  SetPriorityClass

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  WideCharToMultiByte

  LoadLibraryA

  GetProcAddress

  CloseHandle

  WriteFile

  GetUserDefaultUILanguage

  CreateFileA

  user32

  DestroyMenu

  CharUpperA

  GetSysColorBrush

  InvalidateRect

  KillTimer

  SetTimer

  RealChildWindowFromPoint

  LoadCursorA

  IsDialogMessageA

  SetWindowTextA

  ShowWindow

  GetMonitorInfoA

  MonitorFromWindow

  WinHelpA

  LoadIconW

  LoadIconA

  UnhookWindowsHookEx

  GetWindow

  GetTopWindow

  GetClassNameA

  GetClassLongA

  SetWindowLongA

  PtInRect

  CopyRect

  MapWindowPoints

  AdjustWindowRectEx

  GetWindowRect

  GetWindowTextA

  SendMessageA

  IsIconic

  GetSystemMetrics

  GetClientRect

  RemovePropA

  GetPropA

  SetPropA

  GetScrollPos

  RedrawWindow

  SetForegroundWindow

  GetForegroundWindow

  UpdateWindow

  SetMenu

  DrawIcon

  EnableWindow

  UnregisterClassA

  wsprintfA

  GetDesktopWindow

  SendDlgItemMessageA

  SetRectEmpty

  OffsetRect

  GetParent

  PostMessageA

  PostQuitMessage

  GetFocus

  CheckMenuItem

  EnableMenuItem

  SetMenuItemBitmaps

  GetMenuCheckMarkDimensions

  SetMenuItemInfoA

  LoadBitmapW

  GetMessageA

  TranslateMessage

  DispatchMessageA

  PeekMessageA

  IsWindowVisible

  GetActiveWindow

  GetKeyState

  ValidateRect

  GetCursorPos

  SetWindowsHookExA

  CallNextHookEx

  SetCursor

  IsWindowEnabled

  MessageBoxA

  GetWindowLongA

  GetMenu

  GetCapture

  SetFocus

  GetDlgCtrlID

  EndDeferWindowPos

  DeferWindowPos

  BeginDeferWindowPos

  SetWindowPos

  IsChild

  IsMenu

  CreateWindowExA

  GetClassInfoExA

  GetClassInfoA

  RegisterClassA

  CallWindowProcA

  DefWindowProcA

  GetMessageTime

  GetMessagePos

  RegisterWindowMessageA

  GetSysColor

  ScreenToClient

  ClientToScreen

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  TabbedTextOutA

  GrayStringA

  DrawTextExA

  DrawTextA

  SetActiveWindow

  GetNextDlgTabItem

  GetDlgItem

  EndDialog

  CreateDialogIndirectParamA

  DestroyWindow

  IsWindow

  GetWindowThreadProcessId

  GetLastActivePopup

  GetSubMenu

  GetMenuItemID

  GetMenuItemCount

  gdi32

  SetViewportExtEx

  SetViewportOrgEx

  SetWindowExtEx

  OffsetViewportOrgEx

  ScaleViewportExtEx

  ScaleWindowExtEx

  ExtTextOutA

  TextOutA

  GetObjectA

  GetClipBox

  SetTextColor

  SetMapMode

  SetBkColor

  SelectObject

  SaveDC

  RestoreDC

  RectVisible

  PtVisible

  GetStockObject

  DeleteDC

  CreateBitmap

  GetDeviceCaps

  DeleteObject

  Escape

  winspool.drv

  OpenPrinterA

  DocumentPropertiesA

  ClosePrinter

  advapi32

  RegEnumValueA

  RegQueryValueA

  RegEnumKeyA

  RegSetValueExA

  RegDeleteValueA

  RegDeleteKeyA

  RegCreateKeyExA

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  shell32

  ShellExecuteA

  SHChangeNotify

  shlwapi

  PathIsUNCA

  UrlUnescapeA

  PathFindFileNameA

  PathFindExtensionA

  PathStripToRootA

  ole32

  CoTaskMemFree

  CoCreateGuid

  CoUninitialize

  CoCreateInstance

  CoInitialize

  oleaut32

  VariantInit

  VariantChangeType

  SysFreeString

  SysAllocStringLen

  VariantClear

  wininet

  HttpOpenRequestA

  HttpSendRequestA

  HttpQueryInfoA

  InternetSetFilePointer

  InternetReadFile

  InternetConnectA

  InternetCloseHandle

  InternetOpenA

  InternetCanonicalizeUrlA

  InternetCrackUrlA

  InternetSetStatusCallback

  InternetGetLastResponseInfoA

  InternetSetOptionA

  InternetQueryDataAvailable

  InternetWriteFile

  oleacc

  LresultFromObject

  CreateStdAccessibleObject

  Sections

  .text

  Size: 255KB - Virtual size: 255KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 81KB - Virtual size: 80KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 22KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 179KB - Virtual size: 178KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ