General

Malware Config

Signatures

Files

• 05e82296d30fe9cdf01d61726e84a597f30be00bdbf11b4c97c14135c50f3f29

  .exe windows x86

  8270818c1f311315a999b07a5a5675e4

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  winhttp

  WinHttpGetIEProxyConfigForCurrentUser

  ws2_32

  shutdown

  recv

  closesocket

  select

  gethostbyaddr

  gethostbyname

  freeaddrinfo

  WSAAddressToStringW

  getaddrinfo

  connect

  WSACleanup

  WSAStartup

  accept

  listen

  bind

  htons

  inet_addr

  socket

  send

  __WSAFDIsSet

  winmm

  waveOutGetNumDevs

  waveOutOpen

  waveOutReset

  waveOutPrepareHeader

  waveOutClose

  waveOutWrite

  waveOutUnprepareHeader

  kernel32

  GetCommandLineW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  FlushFileBuffers

  ReadFile

  SetFilePointer

  InitializeCriticalSectionAndSpinCount

  LoadLibraryA

  GetDateFormatA

  GetTimeFormatA

  GlobalFree

  MultiByteToWideChar

  WideCharToMultiByte

  lstrlenW

  GetLastError

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrlenA

  CloseHandle

  CreateThread

  GetProcAddress

  GetModuleFileNameW

  FreeLibrary

  LoadLibraryW

  GetCurrentThreadId

  Sleep

  MoveFileW

  CreateDirectoryW

  FindFirstFileW

  DeleteFileW

  FindNextFileW

  FindClose

  OpenProcess

  GetCurrentProcessId

  CreateMutexW

  GetVersionExW

  GetUserDefaultLangID

  WriteProcessMemory

  GetCurrentProcess

  SetUnhandledExceptionFilter

  GlobalHandle

  GlobalUnlock

  QueryPerformanceCounter

  GlobalLock

  WriteFile

  GetStartupInfoA

  GetFileType

  GetStdHandle

  SetHandleCount

  SetLastError

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  VirtualAlloc

  VirtualFree

  HeapCreate

  GetTimeZoneInformation

  GetStringTypeW

  GetCPInfo

  LCMapStringW

  LCMapStringA

  RaiseException

  RtlUnwind

  HeapReAlloc

  GetStartupInfoW

  ExitProcess

  GetModuleHandleW

  HeapAlloc

  IsDebuggerPresent

  UnhandledExceptionFilter

  TerminateProcess

  HeapFree

  GetModuleFileNameA

  GetSystemTimeAsFileTime

  InterlockedExchange

  InterlockedCompareExchange

  InterlockedDecrement

  InterlockedIncrement

  HeapSize

  GetConsoleCP

  GetConsoleMode

  GetACP

  GetOEMCP

  IsValidCodePage

  GetTickCount

  GetModuleHandleA

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  GetStringTypeA

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetStdHandle

  CreateFileW

  GetLocaleInfoW

  CreateFileA

  SetEndOfFile

  GetProcessHeap

  CompareStringA

  CompareStringW

  GlobalAlloc

  SetEnvironmentVariableA

  user32

  SystemParametersInfoW

  CallWindowProcW

  SetFocus

  GetKeyState

  KillTimer

  EnableWindow

  SetTimer

  EndDialog

  GetForegroundWindow

  EndPaint

  DrawTextW

  SetRect

  BeginPaint

  TrackPopupMenu

  GetCursorPos

  ModifyMenuW

  LoadCursorW

  AttachThreadInput

  GetWindowThreadProcessId

  DestroyMenu

  TranslateAcceleratorW

  LoadAcceleratorsW

  LoadMenuW

  SetForegroundWindow

  PostMessageW

  SetCursorPos

  GetWindowRect

  IsWindow

  FindWindowW

  SetMenuItemInfoW

  GetMenuItemInfoW

  AppendMenuW

  GetSubMenu

  CheckMenuItem

  LoadIconW

  InvalidateRect

  DialogBoxParamW

  GetWindowTextW

  GetDlgItem

  SetWindowTextW

  DestroyWindow

  UpdateWindow

  ShowWindow

  CreateWindowExW

  RegisterClassExW

  RegisterWindowMessageW

  MessageBoxW

  PostQuitMessage

  DefWindowProcW

  GetWindowLongW

  SetWindowLongW

  SendMessageTimeoutW

  SendMessageW

  wsprintfW

  TranslateMessage

  UnregisterClassW

  DispatchMessageW

  GetMessageW

  LoadStringW

  LoadBitmapW

  gdi32

  GetStockObject

  SetBkMode

  SetTextColor

  comdlg32

  GetOpenFileNameW

  advapi32

  RegSetValueExW

  RegQueryValueExW

  RegOpenKeyExW

  RegCloseKey

  RegDeleteValueW

  RegCreateKeyW

  shell32

  Shell_NotifyIconW

  SHGetFolderPathW

  ShellExecuteW

  ole32

  CoCreateInstance

  CoInitialize

  CoUninitialize

  CoInitializeEx

  CoTaskMemFree

  Exports

  Exports

  Hunspell_add

  Hunspell_add_with_affix

  Hunspell_analyze

  Hunspell_create

  Hunspell_create_key

  Hunspell_destroy

  Hunspell_free_list

  Hunspell_generate

  Hunspell_get_dic_encoding

  Hunspell_remove

  Hunspell_spell

  Hunspell_stem

  Hunspell_suggest

  Sections

  .text

  Size: 390KB - Virtual size: 389KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 133KB - Virtual size: 132KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 72KB - Virtual size: 1008KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 150KB - Virtual size: 149KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  PACK

  Size: 144KB - Virtual size: 380KB

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE