General

Malware Config

Signatures

Files

• d008307d113d72d5263145c03c46fe35c705af1213c942bbc8b13c51940e3759

  .exe windows x86

  0be69f577d0bf12e6e208b1c06f58b9c

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  CryptAcquireContextA

  gdi32

  CreateSolidBrush

  kernel32

  AddAtomA

  CloseHandle

  CreateDirectoryW

  CreateMutexA

  CreateSemaphoreA

  DeleteCriticalSection

  DeleteFileW

  EnterCriticalSection

  ExitProcess

  FindAtomA

  FindResourceW

  GetAtomNameA

  GetCommandLineA

  GetCurrentThreadId

  GetLastError

  GetModuleHandleA

  GetProcAddress

  GetStartupInfoA

  InitializeCriticalSection

  InterlockedDecrement

  InterlockedIncrement

  LeaveCriticalSection

  LoadResource

  LockResource

  ReleaseMutex

  ReleaseSemaphore

  RemoveDirectoryW

  SetLastError

  SetUnhandledExceptionFilter

  SizeofResource

  Sleep

  TlsAlloc

  TlsFree

  TlsGetValue

  TlsSetValue

  VirtualAlloc

  VirtualProtect

  VirtualQuery

  WaitForSingleObject

  msvcrt

  _write

  __getmainargs

  __p__environ

  __p__fmode

  __set_app_type

  _cexit

  _iob

  _onexit

  _setmode

  abort

  atexit

  calloc

  fputc

  fputs

  free

  fwrite

  malloc

  realloc

  signal

  sprintf

  strcmp

  strcpy

  vfprintf

  user32

  CreateWindowExA

  DefWindowProcA

  DispatchMessageA

  GetMessageA

  GetSysColor

  GetSystemMetrics

  GetWindowRect

  IsWindow

  LoadCursorA

  LoadIconA

  PostQuitMessage

  RegisterClassExA

  SetWindowPos

  ShowWindow

  TranslateMessage

  Sections

  .text

  Size: 48KB - Virtual size: 47KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 18KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 32B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 94KB - Virtual size: 94KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  /4

  Size: 512B - Virtual size: 416B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /19

  Size: 1024B - Virtual size: 1004B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /35

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /51

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /63

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /77

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /89

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /102

  Size: 512B - Virtual size: 427B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /113

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /124

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ