General

Malware Config

Signatures

Files

• 9dc3402992dcee334e7dd20afd97a43a2f881a46283679a765184ea17dcd1a5d

  .exe windows x86

  d843baffe3bcbe009cbf239c98dadb49

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  Imports

  crypt32

  CryptBinaryToStringA

  shlwapi

  PathAppendW

  user32

  GetDC

  LoadAcceleratorsA

  LoadCursorA

  LoadIconA

  RegisterClassA

  ws2_32

  WSACleanup

  WSAStartup

  kernel32

  CloseHandle

  CreateEventA

  CreateFileA

  DeleteFileW

  ExitProcess

  GetCommandLineA

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThreadId

  GetLastError

  GetModuleFileNameA

  GetModuleHandleA

  GetProcAddress

  GetStartupInfoA

  GetStdHandle

  GetSystemDirectoryW

  GetSystemTimeAsFileTime

  GetTickCount

  GetVersionExA

  InterlockedCompareExchange

  LoadLibraryA

  LocalFree

  QueryPerformanceCounter

  SetEvent

  SetStdHandle

  SetUnhandledExceptionFilter

  TerminateProcess

  UnhandledExceptionFilter

  VirtualProtect

  WaitForSingleObject

  WriteFile

  lstrcmpiA

  lstrlenA

  FreeEnvironmentStringsA

  advapi32

  RegCreateKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  RegSetValueExA

  RegCloseKey

  Sections

  AUTO

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  DGROUP

  Size: 64KB - Virtual size: 102KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size:

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size:

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ