General

Malware Config

Signatures

Files

• 5c3b9c929cac14277c3f810b57a487a6093470e3b4fd56ac65ab2d3f6b4e9959

  .exe windows x86

  0ceb02f53b0126903a06ed615d581540

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  user32

  CharUpperA

  GetDlgItemTextW

  LoadBitmapW

  IsDialogMessageW

  CreateWindowExA

  GetPropW

  LoadImageA

  GetMessageA

  wsprintfA

  IsWindow

  PostMessageW

  PeekMessageA

  authz

  AuthzFreeResourceManager

  AuthzFreeAuditEvent

  AuthzAddSidsToContext

  AuthzFreeContext

  comsvcs

  CoCreateActivity

  CoEnterServiceDomain

  CoLoadServices

  SafeRef

  RecycleSurrogate

  kernel32

  HeapFree

  IsBadReadPtr

  SetLocalTime

  SetLastError

  DefineDosDeviceW

  GetOEMCP

  lstrcmpA

  FindResourceExW

  CreateWaitableTimerW

  CloseHandle

  GetProcAddress

  GetTempFileNameW

  CreateDirectoryW

  OpenFileMappingA

  GetModuleHandleA

  GetCommandLineW

  CreateProcessW

  LoadLibraryA

  GlobalAddAtomA

  lstrcpy

  InterlockedIncrement

  GetFileAttributesW

  FindNextFileA

  WaitForSingleObject

  Sections

  .text

  Size: 46KB - Virtual size: 46KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .mdata

  Size: 512B - Virtual size: 444B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 103KB - Virtual size: 103KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ