General

Malware Config

Signatures

Files

• 6edd491c388060704121265e17ed11050f23f6076b11fa3da236139282810d04

  .exe windows x86

  595c8e07c4166f952a61ff57a74892c1

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetFullPathNameW

  LockFile

  VirtualFree

  GetVolumeInformationA

  GetUserDefaultLangID

  GlobalMemoryStatus

  HeapCreate

  GetProfileIntW

  GetTimeZoneInformation

  winmm

  timeKillEvent

  midiOutReset

  mciGetDeviceIDW

  midiInClose

  waveInGetDevCapsA

  mixerGetNumDevs

  mixerGetControlDetailsW

  waveOutMessage

  mixerGetID

  waveOutClose

  waveOutSetVolume

  auxGetVolume

  midiInPrepareHeader

  waveInPrepareHeader

  OpenDriver

  waveOutWrite

  waveInOpen

  mmioRenameA

  waveInGetNumDevs

  joySetThreshold

  GetDriverModuleHandle

  timeSetEvent

  DrvGetModuleHandle

  CloseDriver

  SendDriverMessage

  mciSendCommandA

  mixerGetDevCapsA

  mmioFlush

  joyGetPos

  joyGetDevCapsA

  mixerGetLineControlsW

  waveInAddBuffer

  mciGetDeviceIDFromElementIDA

  midiOutUnprepareHeader

  waveOutGetErrorTextW

  waveInMessage

  mmioRead

  midiInGetDevCapsW

  midiInStop

  mixerSetControlDetails

  mmioWrite

  waveOutGetID

  waveInReset

  mmioAdvance

  midiOutGetDevCapsA

  mmioSendMessage

  midiStreamRestart

  waveOutGetPlaybackRate

  mixerGetLineInfoW

  waveInGetErrorTextA

  waveInGetDevCapsW

  midiStreamPosition

  sndPlaySoundW

  auxGetNumDevs

  mmioDescend

  mmioOpenA

  midiOutGetID

  waveInClose

  mciGetErrorStringA

  waveInStart

  mixerOpen

  mixerGetLineControlsA

  waveOutPause

  mixerGetLineInfoA

  midiOutClose

  midiStreamPause

  mixerGetControlDetailsA

  mmioRenameW

  waveOutReset

  PlaySoundA

  mmioAscend

  mixerClose

  waveOutGetPosition

  waveInStop

  mciGetYieldProc

  midiInReset

  mmioInstallIOProcA

  waveInUnprepareHeader

  midiOutGetNumDevs

  mmioSetInfo

  waveInGetErrorTextW

  sndPlaySoundA

  midiInUnprepareHeader

  timeBeginPeriod

  timeGetSystemTime

  midiOutCacheDrumPatches

  midiStreamProperty

  waveOutRestart

  timeGetTime

  midiStreamStop

  mciGetErrorStringW

  mmioSeek

  joyGetPosEx

  midiInAddBuffer

  joySetCapture

  midiStreamOpen

  midiOutGetVolume

  gdi32

  CreateFontIndirectW

  PatBlt

  GetEnhMetaFilePaletteEntries

  GetWinMetaFileBits

  GetRgnBox

  GetDeviceCaps

  CreateFontA

  GetEnhMetaFileBits

  DeleteObject

  Ellipse

  OffsetViewportOrgEx

  SetTextCharacterExtra

  DeleteEnhMetaFile

  EnumFontFamiliesExW

  SetWinMetaFileBits

  GetCharWidthA

  Rectangle

  OffsetRgn

  CreatePen

  CloseEnhMetaFile

  IntersectClipRect

  CreateBitmap

  GetObjectA

  SetStretchBltMode

  CreateEllipticRgn

  DeleteDC

  CopyEnhMetaFileW

  GetNearestPaletteIndex

  ScaleWindowExtEx

  CombineRgn

  GetClipBox

  GetClipRgn

  SetWorldTransform

  SetPolyFillMode

  GetGlyphOutlineW

  SetViewportOrgEx

  CreatePenIndirect

  SetTextAlign

  CreateCompatibleDC

  GetObjectW

  GetBrushOrgEx

  GetWindowOrgEx

  GetTextFaceA

  PolyBezierTo

  CreateDIBSection

  ExtCreatePen

  CreateRoundRectRgn

  CreateDCW

  CreateDIBPatternBrushPt

  CreateDCA

  SelectPalette

  SetDIBColorTable

  GetSystemPaletteEntries

  StretchBlt

  TextOutA

  GetTextCharsetInfo

  LPtoDP

  ExtFloodFill

  SetROP2

  StartDocA

  SaveDC

  imagehlp

  SymInitialize

  SymGetLineNext

  SearchTreeForFile

  SymLoadModule

  SymUnloadModule

  SymSetSearchPath

  MapDebugInformation

  SymGetSymFromName

  ImagehlpApiVersionEx

  ImageEnumerateCertificates

  SymGetModuleInfo

  UnmapDebugInformation

  ImageGetDigestStream

  FindDebugInfoFile

  SymGetSearchPath

  UnDecorateSymbolName

  SymGetSymPrev

  ImagehlpApiVersion

  SymRegisterCallback

  SymFunctionTableAccess

  ImageUnload

  SymEnumerateModules

  RemovePrivateCvSymbolic

  SymCleanup

  FindExecutableImage

  MapFileAndCheckSumA

  SymGetSymFromAddr

  SymSetOptions

  GetTimestampForLoadedLibrary

  RemoveRelocations

  SymGetLineFromName

  ImageGetCertificateData

  rasapi32

  RasGetEntryPropertiesA

  RasRenameEntryA

  RasGetConnectStatusW

  RasGetErrorStringA

  RasEditPhonebookEntryW

  RasCreatePhonebookEntryW

  RasValidateEntryNameW

  RasGetErrorStringW

  RasCreatePhonebookEntryA

  RasGetCountryInfoW

  RasGetEntryPropertiesW

  RasEnumEntriesW

  RasHangUpW

  RasEnumDevicesA

  RasDialW

  mpr

  WNetGetConnectionA

  WNetAddConnection2W

  WNetAddConnection3A

  WNetCancelConnection2A

  WNetGetLastErrorW

  WNetGetUserA

  WNetGetConnectionW

  WNetGetUserW

  WNetGetNetworkInformationW

  WNetAddConnection3W

  MultinetGetConnectionPerformanceW

  WNetEnumResourceA

  WNetDisconnectDialog1W

  WNetCancelConnectionA

  imm32

  ImmSetCompositionFontA

  ImmGetDescriptionA

  ImmGetConversionListW

  ImmSetCandidateWindow

  ImmGetCandidateListCountW

  ImmGetStatusWindowPos

  ImmIsIME

  ImmReleaseContext

  ImmGetCandidateWindow

  ImmGetCandidateListCountA

  ImmGetDefaultIMEWnd

  ImmDestroyContext

  ImmGetDescriptionW

  ImmGetCompositionStringW

  ImmSetOpenStatus

  ImmCreateContext

  ImmGetGuideLineW

  ImmSimulateHotKey

  ImmInstallIMEW

  ImmGetCompositionWindow

  ImmSetConversionStatus

  ImmNotifyIME

  Sections

  .text

  Size: 120KB - Virtual size: 117KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 129KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 32KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ