General

Malware Config

Signatures

Files

• 5509dab868388534ff1e34895a236315cd97ef84468aa5426b819f27e12227b3

  .exe windows x86

  7d4588a0360de272d80911753da6f782

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  version

  VerQueryValueA

  GetFileVersionInfoSizeA

  GetFileVersionInfoA

  kernel32

  GetFileAttributesA

  lstrcmpA

  GlobalLock

  DefineDosDeviceW

  GetSystemDirectoryA

  IsDBCSLeadByte

  SetConsoleMenuClose

  SetConsoleTextAttribute

  GetSystemDefaultUILanguage

  lstrcpyA

  _lopen

  lstrlenA

  GetWindowsDirectoryA

  CreateDirectoryA

  _lclose

  ExitThread

  FindFirstFileA

  LocalFree

  lstrcatA

  CompareFileTime

  GetShortPathNameA

  ExpandEnvironmentStringsA

  UnhandledExceptionFilter

  GetCurrentProcess

  WritePrivateProfileStringA

  GetPrivateProfileIntA

  RemoveDirectoryA

  GlobalAlloc

  lstrcatA

  SetFileAttributesA

  lstrcpyW

  GetModuleFileNameA

  GetComputerNameExW

  DeleteFileA

  FindNextFileA

  GlobalUnlock

  SearchPathA

  GetProcAddress

  lstrcmpiA

  GetLogicalDrives

  GetPrivateProfileStringA

  FindClose

  OutputDebugStringW

  _llseek

  gdi32

  GetDeviceCaps

  user32

  LoadStringA

  GetSystemMetrics

  MessageBeep

  SetDlgItemTextA

  GetDesktopWindow

  EndDialog

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 4KB - Virtual size: 37KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 148KB - Virtual size: 148KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE