General

Malware Config

Signatures

Files

• 5e37c410d8a3c7888cf430a1d5fd4605e43ee889493b4687fff193cac1e5a9ea

  .exe windows x86

  ec3e884399de1a7a053488acd8434950

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  SetWindowPos

  CreateWindowExA

  MoveWindow

  PostQuitMessage

  wsprintfA

  DefWindowProcA

  FillRect

  ReleaseDC

  GetWindowDC

  DrawTextA

  DispatchMessageA

  TranslateMessage

  EnableWindow

  GetForegroundWindow

  SetWindowTextW

  OffsetRect

  GetSystemMetrics

  SetWindowTextA

  ShowWindow

  DestroyWindow

  KillTimer

  EndDialog

  GetDlgItem

  PostMessageA

  SendMessageA

  SetTimer

  MessageBoxW

  LoadStringW

  LoadStringA

  DialogBoxParamW

  DialogBoxParamA

  SetWindowLongA

  GetWindowLongA

  CharUpperW

  CharUpperA

  GetWindowTextA

  GetWindowRect

  IsWindow

  SystemParametersInfoA

  CheckDlgButton

  IsDialogMessageA

  BeginPaint

  EndPaint

  InvalidateRect

  SetFocus

  LoadCursorA

  LoadIconA

  RegisterClassA

  MessageBoxA

  SetCursor

  GetMessageA

  PeekMessageA

  shell32

  SHFileOperationA

  SHGetPathFromIDListA

  SHBrowseForFolderA

  advapi32

  RegDeleteValueA

  RegDeleteKeyA

  RegCreateKeyA

  RegOpenKeyA

  RegEnumKeyA

  RegCloseKey

  RegEnumValueA

  RegQueryValueExA

  RegSetValueExA

  RegCreateKeyExA

  RegOpenKeyExA

  gdi32

  CreateFontA

  CreateSolidBrush

  DeleteDC

  DeleteObject

  GetObjectA

  CreatePalette

  kernel32

  TlsGetValue

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  LeaveCriticalSection

  EnterCriticalSection

  GetStartupInfoA

  TlsAlloc

  TlsSetValue

  GetProcessHeap

  HeapAlloc

  GetVersionExA

  HeapFree

  GetSystemTimeAsFileTime

  InterlockedDecrement

  GetStringTypeA

  IsDBCSLeadByte

  GetCPInfo

  GetCurrentDirectoryA

  SetFileAttributesW

  GetFileAttributesW

  SetLastError

  GetStdHandle

  CreateFileW

  GetFileType

  GetLastError

  DosDateTimeToFileTime

  FormatMessageA

  GlobalAddAtomA

  GlobalDeleteAtom

  TlsFree

  VirtualAlloc

  VirtualFree

  WinExec

  _lcreat

  GetStringTypeW

  RaiseException

  WideCharToMultiByte

  GetTimeZoneInformation

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  HeapDestroy

  HeapCreate

  QueryPerformanceCounter

  GetCurrentProcessId

  HeapReAlloc

  LCMapStringA

  LCMapStringW

  InitializeCriticalSection

  GetConsoleCP

  GetConsoleMode

  FlushFileBuffers

  GetLocaleInfoW

  HeapSize

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetStdHandle

  CompareStringA

  GetCurrentThreadId

  DeleteCriticalSection

  GetACP

  GetOEMCP

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  RtlUnwind

  IsValidCodePage

  CompareStringW

  SetEnvironmentVariableA

  InterlockedIncrement

  _lopen

  _lread

  GlobalFlags

  lstrcmpiA

  CloseHandle

  SetFileTime

  GetFileAttributesA

  GetCommandLineA

  WriteFile

  MultiByteToWideChar

  FreeLibrary

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  ReadFile

  SetFilePointer

  FindClose

  FindNextFileA

  FindFirstFileA

  lstrlenA

  lstrcpyA

  SetEndOfFile

  CreateFileA

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  ExitProcess

  CopyFileA

  GetCurrentProcess

  GetTickCount

  GetModuleFileNameA

  Sleep

  SetFileAttributesA

  CreateDirectoryA

  SetCurrentDirectoryA

  lstrcatA

  MoveFileA

  GetFullPathNameA

  Sections

  .text

  Size: 81KB - Virtual size: 81KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 389KB - Virtual size: 523KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ