General

Malware Config

Signatures

Files

• 7e176f521d268cf22a4c913c17cdfab671becdaab92d5c1cbef3c3b71ca09775

  .exe windows x86

  3879656261145a2f1a33c1fc89a73624

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GlobalHandle

  FreeEnvironmentStringsA

  UnlockFile

  SetEndOfFile

  MulDiv

  GetLastError

  lstrcmpA

  WriteFile

  InterlockedDecrement

  GlobalUnlock

  SetUnhandledExceptionFilter

  GetCommandLineA

  FlushFileBuffers

  TlsGetValue

  ReadFile

  GetACP

  SetErrorMode

  CloseHandle

  RtlUnwind

  GetLocaleInfoA

  GetConsoleOutputCP

  GetFileTime

  TerminateProcess

  VirtualAlloc

  LCMapStringA

  GetStdHandle

  LeaveCriticalSection

  GlobalFree

  GetOEMCP

  GetCommandLineW

  GetModuleFileNameA

  GetProcessHeap

  FreeResource

  QueryPerformanceCounter

  GetSystemInfo

  GetVersionExA

  FileTimeToSystemTime

  TlsAlloc

  CreateFileA

  DeleteCriticalSection

  SetStdHandle

  GetEnvironmentStrings

  GetThreadLocale

  FindClose

  ConvertDefaultLocale

  Sleep

  HeapReAlloc

  HeapCreate

  HeapSize

  HeapFree

  InitializeCriticalSection

  SetEnvironmentVariableA

  GetModuleHandleA

  LockFile

  WriteConsoleA

  FileTimeToLocalFileTime

  HeapDestroy

  DuplicateHandle

  GetCurrentProcessId

  UnhandledExceptionFilter

  InterlockedExchange

  TlsSetValue

  InterlockedIncrement

  SystemTimeToFileTime

  IsDebuggerPresent

  GlobalLock

  SetHandleCount

  LoadResource

  HeapAlloc

  GetSystemTimeAsFileTime

  GetTimeZoneInformation

  LockResource

  GetSystemDirectoryA

  VirtualFree

  GlobalDeleteAtom

  GetConsoleCP

  GlobalReAlloc

  LocalReAlloc

  SetFileTime

  FreeLibrary

  GetStartupInfoA

  GetCurrentThread

  TlsFree

  LocalFileTimeToFileTime

  GetWindowsDirectoryA

  GetStringTypeA

  GlobalFlags

  RaiseException

  GlobalAlloc

  GetConsoleMode

  GetVersion

  EnumResourceLanguagesW

  SizeofResource

  VirtualQuery

  SetLastError

  GetFileType

  EnterCriticalSection

  CompareStringA

  GetFileSize

  SetFilePointer

  lstrcpyA

  LocalFree

  GetCurrentThreadId

  LocalAlloc

  LoadLibraryA

  GetProcAddress

  lstrcatA

  lstrlenA

  ExitProcess

  user32

  PtInRect

  DestroyIcon

  GetLastActivePopup

  GetWindowRect

  GetDC

  GetWindow

  InflateRect

  IsWindow

  ValidateRect

  BeginDeferWindowPos

  AdjustWindowRectEx

  GetNextDlgTabItem

  GetTopWindow

  MessageBeep

  SetCursor

  SetRectEmpty

  EnableMenuItem

  GetScrollPos

  SetActiveWindow

  GetWindowRgn

  GetWindowPlacement

  EqualRect

  LockWindowUpdate

  CreatePopupMenu

  GetForegroundWindow

  WindowFromPoint

  IsZoomed

  UnpackDDElParam

  GetWindowDC

  GetScrollRange

  SetParent

  GetSystemMenu

  TrackPopupMenu

  ReleaseDC

  GetMenuCheckMarkDimensions

  GetParent

  ScreenToClient

  FillRect

  GetMenuState

  SetCapture

  SetScrollInfo

  DeferWindowPos

  SetFocus

  GetDlgItem

  GetScrollInfo

  SetMenu

  UnregisterClassA

  GetSystemMetrics

  MapDialogRect

  GetMenuItemCount

  SendDlgItemMessageA

  GetDCEx

  InvalidateRect

  GetMessageTime

  SetTimer

  KillTimer

  CheckMenuItem

  SetScrollRange

  DestroyMenu

  GetSysColor

  TranslateMessage

  GetCursorPos

  PostQuitMessage

  ShowOwnedPopups

  ClientToScreen

  UpdateWindow

  SetWindowRgn

  GetMessagePos

  CopyRect

  GetKeyState

  IsWindowVisible

  SetWindowContextHelpId

  GetNextDlgGroupItem

  DestroyWindow

  SystemParametersInfoA

  GetClientRect

  BeginPaint

  ReuseDDElParam

  SetWindowPos

  DrawIcon

  DeleteMenu

  IsChild

  MapWindowPoints

  ScrollWindow

  IntersectRect

  SetMenuItemBitmaps

  GetMenu

  GetSysColorBrush

  GetWindowThreadProcessId

  EndPaint

  SetForegroundWindow

  MoveWindow

  ShowScrollBar

  CharUpperA

  IsWindowEnabled

  GetMenuItemID

  UnhookWindowsHookEx

  GetDlgCtrlID

  GetFocus

  SetScrollPos

  GetSubMenu

  ShowWindow

  ReleaseCapture

  InvalidateRgn

  BringWindowToTop

  EndDialog

  IsRectEmpty

  EndDeferWindowPos

  CallNextHookEx

  IsIconic

  RedrawWindow

  OffsetRect

  GetActiveWindow

  GetDesktopWindow

  GetCapture

  SetRect

  gdi32

  StretchDIBits

  PatBlt

  DeleteDC

  ScaleViewportExtEx

  SetViewportExtEx

  GetRgnBox

  SetBkColor

  GetDeviceCaps

  GetMapMode

  SetTextColor

  ScaleWindowExtEx

  CreateRectRgnIndirect

  ExcludeClipRect

  CombineRgn

  IntersectClipRect

  CreateEllipticRgn

  CreateSolidBrush

  CreateBitmap

  DeleteObject

  SetBkMode

  Escape

  SetViewportOrgEx

  CreatePatternBrush

  Ellipse

  SelectClipRgn

  SetRectRgn

  CreateCompatibleBitmap

  RestoreDC

  GetStockObject

  ExtSelectClipRgn

  GetPixel

  RectVisible

  GetClipBox

  SelectObject

  SetMapMode

  OffsetRgn

  CreateCompatibleDC

  GetBkColor

  GetTextColor

  OffsetViewportOrgEx

  DPtoLP

  GetWindowExtEx

  SetWindowExtEx

  SaveDC

  BitBlt

  CreateRectRgn

  PtVisible

  advapi32

  SetFileSecurityW

  RegCloseKey

  ole32

  CoGetClassObject

  CoCreateInstance

  OleUninitialize

  CLSIDFromProgID

  OleIsCurrentClipboard

  CLSIDFromString

  StgOpenStorageOnILockBytes

  CoFreeUnusedLibraries

  CreateStreamOnHGlobal

  OleInitialize

  CoRegisterMessageFilter

  StgCreateDocfileOnILockBytes

  OleFlushClipboard

  CreateILockBytesOnHGlobal

  CoRevokeClassObject

  oleaut32

  SysAllocString

  SysFreeString

  VariantInit

  SysAllocStringLen

  VariantTimeToSystemTime

  OleCreateFontIndirect

  OleLoadPicture

  SafeArrayDestroy

  VariantClear

  VariantCopy

  SysStringLen

  VariantChangeType

  SystemTimeToVariantTime

  comctl32

  ImageList_LoadImageW

  shlwapi

  PathFindFileNameW

  PathRemoveExtensionW

  PathFindExtensionW

  PathStripToRootW

  PathIsUNCW

  PathFileExistsW

  Sections

  .text

  Size: 555KB - Virtual size: 554KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 85KB - Virtual size: 85KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 153KB - Virtual size: 5.4MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: - Virtual size: 101B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 17KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ