General

Malware Config

Signatures

Files

• 249ba989225747cf269f49e6c14b516031b5071bdbcb5b07843af6f920b2e1ab

  .exe windows x86

  9be26fcaff1cb675c35170b4cab62f48

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  DuplicateToken

  ImpersonateSelf

  kernel32

  GetFileAttributesExA

  ConnectNamedPipe

  FindResourceExA

  DuplicateHandle

  GetFileSizeEx

  user32

  CloseClipboard

  GetWindowThreadProcessId

  CharUpperA

  CopyImage

  ToAsciiEx

  DragObject

  GetUserObjectInformationW

  MessageBoxExA

  ReuseDDElParam

  SetWinEventHook

  NotifyWinEvent

  LoadMenuIndirectA

  CloseWindow

  GetSubMenu

  LockWindowUpdate

  GetMessageA

  GetFocus

  FindWindowA

  GetClipboardViewer

  MoveWindow

  CharLowerA

  SetWindowRgn

  GetSystemMenu

  GetClassInfoW

  MessageBoxW

  LoadCursorA

  EnumWindows

  GetClassNameA

  MapVirtualKeyExW

  GetWindowTextW

  DdeGetLastError

  SetWindowContextHelpId

  BringWindowToTop

  DispatchMessageA

  CreateMDIWindowA

  DispatchMessageW

  GetWindowTextA

  MessageBoxIndirectA

  IsCharLowerA

  SetMenuDefaultItem

  SetWindowTextA

  EndPaint

  GetTabbedTextExtentA

  GetUpdateRgn

  GetNextDlgTabItem

  GetSysColor

  GetMessageW

  GetCursor

  IsWindow

  IsCharAlphaNumericA

  GetClassNameW

  WaitForInputIdle

  CharNextW

  FlashWindow

  DrawTextW

  EnumClipboardFormats

  DdeDisconnect

  SendNotifyMessageW

  GetWindowLongA

  WaitMessage

  CharPrevW

  CreateDialogParamA

  GetWindowRect

  GetDoubleClickTime

  CharUpperW

  GetClipboardFormatNameW

  CountClipboardFormats

  IsCharLowerW

  GetMessageExtraInfo

  DrawStateW

  RegisterClassExW

  CharUpperBuffW

  TranslateMDISysAccel

  ChangeDisplaySettingsA

  OpenClipboard

  ReleaseDC

  GetMenu

  IsIconic

  AdjustWindowRect

  GetClassLongA

  GetWindowModuleFileNameA

  ScreenToClient

  DrawStateA

  EnumDisplaySettingsA

  CloseDesktop

  GetForegroundWindow

  ModifyMenuA

  ShowScrollBar

  UnregisterClassA

  LoadKeyboardLayoutA

  CharLowerBuffA

  DdeClientTransaction

  ShowOwnedPopups

  EnableScrollBar

  InsertMenuA

  DialogBoxIndirectParamW

  DialogBoxIndirectParamA

  UnhookWinEvent

  InvalidateRgn

  GetDlgItemInt

  SendMessageA

  DdeFreeStringHandle

  GetKeyboardLayout

  FindWindowW

  GetMenuState

  DefWindowProcW

  CallWindowProcA

  EndDialog

  GetUserObjectSecurity

  IsChild

  DestroyCursor

  GetWindowTextLengthA

  GetClipCursor

  MapVirtualKeyW

  TrackPopupMenu

  CreateDesktopW

  DestroyMenu

  GetMenuContextHelpId

  CheckDlgButton

  LoadCursorW

  SetUserObjectInformationW

  DrawTextExW

  wininet

  InternetFindNextFileW

  FtpRenameFileA

  InternetHangUp

  InternetQueryOptionW

  InternetErrorDlg

  InternetCreateUrlW

  InternetCreateUrlA

  FindCloseUrlCache

  FtpOpenFileW

  GopherOpenFileA

  HttpSendRequestA

  InternetGetLastResponseInfoA

  GopherGetAttributeA

  InternetGoOnline

  InternetLockRequestFile

  InternetAutodialHangup

  SetUrlCacheEntryInfoA

  CreateUrlCacheGroup

  InternetAutodial

  HttpQueryInfoW

  InternetAttemptConnect

  CommitUrlCacheEntryA

  HttpEndRequestW

  InternetSetCookieW

  InternetGetCookieA

  FtpRemoveDirectoryW

  FtpGetFileA

  GopherGetAttributeW

  UnlockUrlCacheEntryStream

  HttpSendRequestExA

  SetUrlCacheEntryInfoW

  UnlockUrlCacheEntryFile

  FtpSetCurrentDirectoryA

  InternetTimeToSystemTime

  InternetDial

  GopherFindFirstFileA

  RetrieveUrlCacheEntryStreamA

  HttpEndRequestA

  FtpCreateDirectoryW

  InternetQueryOptionA

  FtpGetFileW

  InternetSetCookieA

  GetUrlCacheEntryInfoExW

  HttpAddRequestHeadersA

  InternetGetConnectedState

  InternetTimeFromSystemTime

  FindNextUrlCacheEntryA

  InternetReadFile

  InternetOpenUrlA

  FtpPutFileW

  GopherCreateLocatorA

  InternetConfirmZoneCrossing

  InternetQueryDataAvailable

  RetrieveUrlCacheEntryFileW

  GopherOpenFileW

  GopherGetLocatorTypeW

  FindFirstUrlCacheEntryExA

  InternetSetFilePointer

  FindFirstUrlCacheEntryExW

  FtpSetCurrentDirectoryW

  InternetSetOptionA

  FtpFindFirstFileA

  InternetFindNextFileA

  InternetCanonicalizeUrlA

  GopherCreateLocatorW

  FtpDeleteFileA

  HttpSendRequestExW

  GetUrlCacheEntryInfoW

  InternetConnectW

  FtpFindFirstFileW

  HttpQueryInfoA

  ReadUrlCacheEntryStream

  msvcrt

  atof

  _yn

  _mbsdup

  _utime64

  _initterm

  __set_app_type

  _mkdir

  __p__commode

  __p__fmode

  __set_app_type

  wcschr

  _lseek

  _mbsspnp

  Sections

  .text

  Size: 104KB - Virtual size: 100KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 287KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 284KB - Virtual size: 281KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ