General

Malware Config

Signatures

Files

• 218a0ceebeae56f564fe4103e92fd17cba63081744e3e02e5f4bb7cf1dd8586b

  .exe windows x86

  f6327db2cfead3b407d927dcb1378dd1

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_AGGRESIVE_WS_TRIM

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

  Imports

  kernel32

  LoadLibraryW

  SetStdHandle

  IsValidCodePage

  GetCPInfo

  HeapSize

  Sleep

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  CloseHandle

  CreateFileA

  HeapReAlloc

  GetConsoleCP

  GetConsoleMode

  FlushFileBuffers

  LCMapStringW

  GetStringTypeW

  SetEndOfFile

  GetProcessHeap

  ReadFile

  WriteConsoleW

  SetLastError

  GetCurrentThreadId

  GetLastError

  LoadLibraryA

  GetProcAddress

  GetCurrentDirectoryW

  lstrcpyW

  lstrcmpW

  HeapAlloc

  GetVersionExA

  GetSystemDirectoryA

  EnumSystemCodePagesW

  InterlockedDecrement

  GetCurrentProcess

  lstrcatA

  lstrlenA

  GetOEMCP

  GetACP

  CreateFileW

  GetFileInformationByHandle

  FileTimeToLocalFileTime

  FileTimeToSystemTime

  GlobalMemoryStatusEx

  GetModuleHandleW

  InterlockedIncrement

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  TerminateProcess

  IsDebuggerPresent

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  HeapCreate

  GetModuleFileNameW

  WriteFile

  ExitProcess

  SetFilePointer

  DeleteCriticalSection

  GetFileType

  InitializeCriticalSectionAndSpinCount

  GetStdHandle

  SetHandleCount

  MultiByteToWideChar

  WideCharToMultiByte

  LocalFree

  GetLocalTime

  RaiseException

  RtlUnwind

  GetCommandLineA

  HeapSetInformation

  GetStartupInfoW

  HeapFree

  EncodePointer

  DecodePointer

  IsProcessorFeaturePresent

  EnterCriticalSection

  LeaveCriticalSection

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  user32

  GetWindowThreadProcessId

  SetWindowTextW

  GetDlgItem

  SendDlgItemMessageA

  EndDialog

  CharNextW

  GetWindowRect

  GetWindow

  ScreenToClient

  SetRect

  GetClientRect

  wsprintfA

  SendMessageA

  DestroyWindow

  GetParent

  SetTimer

  FindWindowA

  FillRect

  FindWindowExW

  GetWindowTextW

  FindWindowExA

  KillTimer

  DefWindowProcA

  GetDC

  ReleaseDC

  GetSystemMetrics

  DrawFrameControl

  GetWindowLongA

  SetWindowLongA

  GetClassInfoA

  gdi32

  CreateBitmap

  CreatePatternBrush

  SetBrushOrgEx

  SelectObject

  PatBlt

  DeleteObject

  ExcludeClipRect

  CreateSolidBrush

  SelectClipRgn

  Rectangle

  MoveToEx

  LineTo

  SaveDC

  SetWindowExtEx

  Ellipse

  SetTextAlign

  RestoreDC

  CreateCompatibleDC

  CreateCompatibleBitmap

  DeleteDC

  comdlg32

  FindTextW

  GetFileTitleA

  advapi32

  FreeSid

  ControlService

  GetTokenInformation

  AllocateAndInitializeSid

  IsValidSid

  GetLengthSid

  InitializeAcl

  AddAccessAllowedAce

  IsValidAcl

  OpenServiceA

  InitializeSecurityDescriptor

  SetSecurityDescriptorDacl

  IsValidSecurityDescriptor

  OpenSCManagerA

  CloseServiceHandle

  oleaut32

  OleCreatePictureIndirect

  VariantClear

  ws2_32

  WSAAsyncGetProtoByNumber

  psapi

  GetProcessMemoryInfo

  shlwapi

  PathRemoveFileSpecA

  PathFindFileNameA

  PathFileExistsW

  PathAppendA

  PathFileExistsA

  PathFindExtensionA

  comctl32

  ord413

  pdh

  PdhUpdateLogFileCatalog

  PdhSetCounterScaleFactor

  secur32

  GetUserNameExA

  Sections

  .text

  Size: 81KB - Virtual size: 80KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 37KB - Virtual size: 37KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .get

  Size: 162KB - Virtual size: 161KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .mss

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 115KB - Virtual size: 114KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ