General

Malware Config

Signatures

Files

• a8556e73e368184c3bf17b3d64b53902c9ac8a78cef12a344397ba050f4df02d

  .exe windows x86

  2eaa4ba26870008067a90e5527b8ed55

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  kernel32

  LoadLibraryA

  GetPrivateProfileSectionA

  DeviceIoControl

  GetCurrentThread

  GetDriveTypeA

  VirtualProtectEx

  GetCurrentProcess

  GlobalLock

  GetStringTypeA

  HeapFree

  GetPrivateProfileIntA

  CreateEventA

  CloseHandle

  GetFileAttributesW

  GetFileAttributesW

  RemoveDirectoryA

  GlobalFlags

  CreateDirectoryW

  GetStdHandle

  GetVersionExA

  FindVolumeClose

  shell32

  DllUnregisterServer

  ExtractIconA

  SHGetSettings

  ShellAboutA

  DllUnregisterServer

  SHGetMalloc

  DuplicateIcon

  DragAcceptFiles

  ShellMessageBoxA

  SHFree

  DragFinish

  DragQueryFileA

  StrChrA

  odbccp32

  SQLInstallDriver

  SQLInstallODBC

  SQLGetAvailableDrivers

  SQLConfigDataSource

  uxtheme

  CloseThemeData

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 7KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 512B - Virtual size: 508B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 113KB - Virtual size: 113KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .import

  Size: 512B - Virtual size: 372B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ