General

Malware Config

Signatures

Files

• 7941776127.zip

  .zip

  Password: infected

• 01a53007f9b19d8ae4f12cc75bafcbef064f75d3a4b31b347b334a2d30558d68

  .exe windows x86

  Password: infected

  32569d67dc210c5cb9a759b08da2bdb3

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  oleaut32

  SysStringLen

  SysAllocStringLen

  VariantClear

  user32

  DialogBoxParamW

  SetWindowLongW

  GetWindowLongW

  GetDlgItem

  LoadStringW

  CharUpperW

  DestroyWindow

  EndDialog

  PostMessageW

  SetWindowTextW

  ShowWindow

  MessageBoxW

  SendMessageW

  LoadIconW

  KillTimer

  SetTimer

  shell32

  ShellExecuteExW

  msvcrt

  _controlfp

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  _except_handler3

  _beginthreadex

  memset

  wcsstr

  free

  malloc

  memcpy

  _CxxThrowException

  _purecall

  memmove

  memcmp

  wcscmp

  __CxxFrameHandler

  kernel32

  WaitForSingleObject

  GetStartupInfoA

  InitializeCriticalSection

  ResetEvent

  SetEvent

  CreateEventW

  lstrlenW

  lstrcatW

  VirtualFree

  VirtualAlloc

  Sleep

  WaitForMultipleObjects

  GetFileInformationByHandle

  GetStdHandle

  GlobalMemoryStatus

  GetSystemInfo

  GetCurrentProcess

  GetProcessAffinityMask

  SetEndOfFile

  WriteFile

  ReadFile

  SetFilePointer

  GetFileSize

  GetFileAttributesW

  GetModuleHandleA

  FindNextFileW

  FindFirstFileW

  FindClose

  GetCurrentThreadId

  GetTickCount

  GetCurrentProcessId

  GetTempPathW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  SetLastError

  DeleteFileW

  CreateDirectoryW

  GetModuleHandleW

  GetProcAddress

  RemoveDirectoryW

  SetFileAttributesW

  CreateFileW

  SetFileTime

  GetSystemDirectoryW

  FormatMessageW

  LocalFree

  GetModuleFileNameW

  LoadLibraryExW

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  GetLastError

  GetVersionExW

  GetCommandLineW

  CreateProcessW

  CloseHandle

  Sections

  .text

  Size: 102KB - Virtual size: 101KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .sxdata

  Size: 512B - Virtual size: 4B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ