General

Malware Config

Signatures

Files

• 5607414907c0494f734000ba029c6b74a0eafdf2bfbecc24d410855108635100

  .exe windows x86

  7e65b8bab91b6706e2b83ca4ed05ff37

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetFileTime

  SetTapePosition

  SetVolumeMountPointW

  SizeofResource

  TerminateThread

  WaitForSingleObject

  WriteFile

  WritePrivateProfileSectionA

  _lclose

  SetFilePointer

  _lopen

  lstrcatA

  lstrcmpA

  lstrcmpiA

  lstrcpyA

  lstrcpyW

  lstrcpynA

  lstrlenA

  SetFileAttributesA

  SetEvent

  SetCurrentDirectoryA

  SetComputerNameExW

  ScrollConsoleScreenBufferA

  ResetWriteWatch

  ResetEvent

  RemoveDirectoryA

  ReadFile

  OpenJobObjectA

  Module32NextW

  LockResource

  LocalFree

  LocalFileTimeToFileTime

  LocalAlloc

  LoadResource

  LoadLibraryExA

  LoadLibraryA

  IsDBCSLeadByte

  GlobalUnlock

  GlobalLock

  GlobalFree

  GlobalAlloc

  GetWindowsDirectoryA

  GetVolumeInformationA

  GetVersionExA

  GetTempPathA

  GetTempFileNameA

  GetSystemInfo

  GetSystemDirectoryA

  GetShortPathNameA

  GetPrivateProfileStringA

  GetPrivateProfileIntA

  GetModuleFileNameA

  GetLastError

  GetFileAttributesA

  GetExitCodeProcess

  GetDriveTypeA

  GetDiskFreeSpaceA

  GetCurrentProcess

  GetCurrentDirectoryA

  GetConsoleScreenBufferInfo

  GetConsoleAliasExesLengthA

  GetCommandLineA

  FreeResource

  FreeLibrary

  FormatMessageA

  FindResourceA

  FindNextFileA

  FindFirstFileA

  FindClose

  FillConsoleOutputCharacterW

  ExitProcess

  EnumTimeFormatsW

  EnumLanguageGroupLocalesA

  DosDateTimeToFileTime

  DeleteFileA

  CreateWaitableTimerW

  CreateThread

  CreateProcessA

  CreateMutexA

  CreateIoCompletionPort

  CreateFileA

  CreateEventA

  CreateDirectoryA

  CompareStringA

  CloseHandle

  BuildCommDCBAndTimeoutsA

  BackupRead

  AddConsoleAliasW

  GetModuleHandleW

  GetProcessHeap

  GetStartupInfoA

  LoadLibraryW

  GetModuleHandleA

  _llseek

  GetProcAddress

  user32

  wsprintfA

  WindowFromPoint

  UpdateLayeredWindow

  TrackPopupMenu

  SwitchDesktop

  ShowWindow

  SetWindowsHookW

  SetWindowTextA

  SetWindowPos

  SetWindowLongA

  SetForegroundWindow

  SetDlgItemTextW

  SetDlgItemTextA

  SendNotifyMessageA

  SendMessageW

  SendMessageCallbackW

  SendMessageA

  SendDlgItemMessageA

  ScrollWindowEx

  ReleaseDC

  ReleaseCapture

  RegisterHotKey

  RegisterClipboardFormatW

  PostMessageW

  PeekMessageA

  OpenWindowStationW

  OpenIcon

  OemKeyScan

  MsgWaitForMultipleObjects

  MessageBoxIndirectA

  MessageBoxA

  MessageBeep

  LookupIconIdFromDirectory

  LoadStringA

  LoadMenuA

  LoadKeyboardLayoutW

  IsClipboardFormatAvailable

  IsCharAlphaNumericW

  InflateRect

  IMPGetIMEW

  GetWindowTextLengthW

  GetWindowTextA

  GetWindowModuleFileNameA

  GetWindowLongA

  GetMenuStringW

  GetListBoxInfo

  GetGuiResources

  GetForegroundWindow

  GetDlgItemTextA

  GetDlgItem

  GetDesktopWindow

  GetDC

  GetClipboardSequenceNumber

  GetClassNameW

  GetClassLongA

  FindWindowW

  FillRect

  ExitWindowsEx

  EnumChildWindows

  EndDialog

  EnableWindow

  DrawTextW

  DlgDirSelectComboBoxExW

  DispatchMessageA

  DialogBoxIndirectParamA

  DdeQueryStringA

  DdeNameService

  DdeKeepStringHandle

  CharUpperA

  CharToOemBuffW

  CharPrevA

  CharNextExA

  CharNextA

  CallWindowProcA

  LoadBitmapW

  LoadIconA

  LoadCursorW

  GetWindowRect

  gdi32

  EnumFontFamiliesExW

  EnumICMProfilesW

  FONTOBJ_pfdg

  GdiInitializeLanguagePack

  GetClipBox

  GetCurrentObject

  GetDIBits

  GetDeviceCaps

  GetMetaFileW

  GetNearestPaletteIndex

  GetObjectType

  GetObjectW

  GetPaletteEntries

  CreatePalette

  GetStockObject

  Polygon

  RealizePalette

  ResizePalette

  SelectPalette

  SetBkMode

  GetGraphicsMode

  SetMetaFileBitsEx

  SetStretchBltMode

  StretchBlt

  StretchDIBits

  XLATEOBJ_iXlate

  CreateHalftonePalette

  CreateDIBSection

  CreateCompatibleBitmap

  CLIPOBJ_cEnumStart

  BitBlt

  SelectObject

  CreateCompatibleDC

  GdiFlush

  CreatePatternBrush

  GetDCPenColor

  FillPath

  DeleteDC

  EndDoc

  DeleteEnhMetaFile

  CreateMetaFileW

  GetDCBrushColor

  GetEnhMetaFileA

  GetBkMode

  GetRandomRgn

  GetBkColor

  DeleteColorSpace

  GetFontLanguageInfo

  GetColorSpace

  FlattenPath

  DeleteMetaFile

  EndPath

  CreateSolidBrush

  DeleteObject

  EndPage

  GetEnhMetaFileW

  advapi32

  RegQueryValueExA

  RegQueryInfoKeyA

  RegOpenKeyExA

  RegDeleteValueA

  RegCreateKeyExA

  RegCloseKey

  OpenProcessToken

  LookupPrivilegeValueA

  LookupAccountSidW

  GetUserNameW

  GetTokenInformation

  FreeSid

  EqualSid

  DuplicateTokenEx

  AllocateAndInitializeSid

  AdjustTokenPrivileges

  RegQueryValueExW

  RegOpenKeyA

  RegSetValueExA

  shell32

  ShellExecuteW

  ShellExecuteEx

  SHInvokePrinterCommandW

  SHGetSpecialFolderPathW

  SHGetPathFromIDListW

  SHGetFolderLocation

  SHCreateDirectoryExW

  shlwapi

  StrStrIW

  winmm

  timeGetTime

  Sections

  .text

  Size: 82KB - Virtual size: 82KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 261KB - Virtual size: 261KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 27KB - Virtual size: 27KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ