General

Malware Config

Signatures

Files

• 5a8089cb7519c8667b31517b57432905472c262bd9277b05593e55a2b6517e64

  .exe windows x86

  8084a544de1ab06efbfccb6fb543487b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  IsValidCodePage

  LoadLibraryW

  LoadLibraryExW

  OutputDebugStringW

  SetFilePointerEx

  ReadFile

  GetConsoleMode

  GetConsoleCP

  FlushFileBuffers

  GetProcessHeap

  GetCurrentThreadId

  HeapSize

  AreFileApisANSI

  ExitProcess

  WriteFile

  EnumSystemLocalesW

  GetUserDefaultLCID

  IsValidLocale

  GetLocaleInfoW

  LCMapStringW

  GetACP

  GetTimeFormatW

  GetDateFormatW

  GetStartupInfoW

  TlsFree

  TlsSetValue

  TlsAlloc

  TerminateProcess

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetOEMCP

  GetModuleFileNameA

  QueryPerformanceCounter

  GetSystemTimeAsFileTime

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEndOfFile

  HeapReAlloc

  SetFilePointer

  GetTimeZoneInformation

  SetStdHandle

  ReadConsoleW

  GetModuleHandleW

  GetCurrentProcess

  WriteProfileStringA

  GetProfileIntA

  InitializeCriticalSectionAndSpinCount

  GetCommandLineA

  IsDebuggerPresent

  RtlUnwind

  CreateFileW

  CompareStringW

  RaiseException

  WriteConsoleW

  GetModuleHandleA

  LoadLibraryA

  CreateEventA

  lstrcmpA

  GetModuleHandleExW

  GetModuleFileNameW

  GetFileType

  GetStdHandle

  SetEnvironmentVariableA

  HeapAlloc

  HeapFree

  IsProcessorFeaturePresent

  GetCPInfo

  DecodePointer

  EncodePointer

  Sleep

  DeleteCriticalSection

  LeaveCriticalSection

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetLocalTime

  LocalReAlloc

  LocalAlloc

  GlobalAlloc

  GetProcAddress

  CloseHandle

  ReadProcessMemory

  GetLastError

  GetCurrentProcessId

  OpenProcess

  EnterCriticalSection

  VirtualFreeEx

  GetStringTypeW

  MultiByteToWideChar

  TlsGetValue

  VirtualAllocEx

  InterlockedIncrement

  InterlockedDecrement

  WideCharToMultiByte

  user32

  EnumChildWindows

  FindWindowW

  GetShellWindow

  EnumWindows

  GetWindowRect

  GetWindowTextW

  IsWindowVisible

  SendMessageW

  FindWindowExW

  DdeCreateStringHandleW

  SystemParametersInfoA

  EnumDisplayDevicesA

  LoadCursorA

  GetClassNameA

  GetParent

  SetWindowLongA

  GetWindowLongA

  PtInRect

  InflateRect

  SetRect

  WindowFromPoint

  ClientToScreen

  SetCursor

  MessageBeep

  GetClientRect

  GetWindowTextA

  SetWindowTextA

  RedrawWindow

  BeginPaint

  SetMenuItemInfoA

  GetMenuItemInfoA

  DrawMenuBar

  GetMenu

  EnableWindow

  GetDialogBaseUnits

  SendDlgItemMessageA

  IsDlgButtonChecked

  SetDlgItemTextA

  GetDlgItem

  EndDialog

  MoveWindow

  CreateWindowExW

  CreateWindowExA

  RegisterClassExW

  SendMessageA

  wsprintfA

  MonitorFromRect

  GetWindowThreadProcessId

  GetClassNameW

  gdi32

  GetStockObject

  CreateFontIndirectA

  GetObjectA

  CreateHalftonePalette

  GetTextMetricsA

  SetTextAlign

  SelectObject

  GetDeviceCaps

  DeleteObject

  DeleteDC

  CreateHatchBrush

  CreateDCA

  comdlg32

  GetSaveFileNameA

  advapi32

  GetAce

  oleaut32

  SystemTimeToVariantTime

  opengl32

  glMatrixMode

  glClearColor

  glu32

  gluOrtho2D

  version

  GetFileVersionInfoW

  comctl32

  ImageList_ReplaceIcon

  InitCommonControlsEx

  ImageList_SetBkColor

  shlwapi

  PathCanonicalizeA

  StrToIntExA

  setupapi

  CM_Get_Log_Conf_Priority

  CM_Get_Next_Res_Des

  CM_Get_Next_Log_Conf

  wininet

  GetUrlCacheEntryInfoW

  FtpSetCurrentDirectoryA

  pdh

  PdhBrowseCountersA

  PdhCollectQueryData

  msvfw32

  DrawDibClose

  ICCompressorChoose

  avifil32

  AVIStreamGetFrameClose

  AVIStreamGetFrame

  AVIStreamGetFrameOpen

  AVIStreamWrite

  AVIStreamInfoA

  AVIStreamRelease

  AVIFileCreateStreamA

  AVIFileOpenA

  AVIStreamSetFormat

  AVIFileExit

  AVIFileInit

  AVIFileRelease

  d2d1

  ord1

  dwrite

  DWriteCreateFactory

  Sections

  .text

  Size: 272KB - Virtual size: 271KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 15KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 168KB - Virtual size: 167KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ