General

Malware Config

Signatures

Files

• c4b9b6a2728d4022be29407e9e08c1a97eca3063e2230c3ea2846530275fb7ea

  .zip
• 60c40af102c485d0464236fe672d302b.exe

  .exe windows x86

  53c7ad17fd9c4c8d178e1bafa64f8569

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualAlloc

  CloseHandle

  lstrcpyA

  FlushFileBuffers

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  SetStdHandle

  GetLocaleInfoA

  GetStringTypeW

  GetStringTypeA

  LCMapStringW

  LCMapStringA

  InitializeCriticalSectionAndSpinCount

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  RtlUnwind

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetFileType

  SetHandleCount

  GetEnvironmentStringsW

  GlobalUnlock

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  WaitForSingleObject

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  HeapSize

  GetStdHandle

  WriteFile

  ExitProcess

  Sleep

  HeapReAlloc

  HeapCreate

  GetStartupInfoA

  GetCommandLineA

  IsDebuggerPresent

  TerminateProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  VirtualQuery

  GetSystemInfo

  GetModuleHandleW

  VirtualProtect

  VirtualFree

  IsProcessorFeaturePresent

  HeapAlloc

  GetProcessHeap

  HeapFree

  InterlockedCompareExchange

  ReadFile

  CreateEventA

  IsDBCSLeadByte

  GlobalAlloc

  SizeofResource

  WideCharToMultiByte

  InitializeCriticalSection

  InterlockedDecrement

  InterlockedIncrement

  FreeLibrary

  lstrlenA

  CreateThread

  GlobalLock

  GetFileSize

  CreateFileA

  GetVersionExA

  DeleteCriticalSection

  LoadLibraryExA

  GetModuleFileNameA

  LoadLibraryA

  GetProcAddress

  lstrcmpiA

  GetLastError

  lstrlenW

  MultiByteToWideChar

  GetModuleHandleA

  LockResource

  SetLastError

  ExitThread

  GetCurrentProcess

  LoadResource

  FindResourceA

  GetCurrentThreadId

  EnterCriticalSection

  RaiseException

  FlushInstructionCache

  LeaveCriticalSection

  FreeEnvironmentStringsW

  user32

  ShowWindow

  PostMessageA

  IsWindowVisible

  SetWindowPos

  DefWindowProcA

  MessageBoxA

  EndPaint

  ScreenToClient

  InsertMenuItemA

  DdeCreateStringHandleW

  CallWindowProcA

  LoadCursorA

  CreateWindowExA

  InvalidateRect

  GetParent

  SendMessageA

  SetWindowLongA

  GetClientRect

  LoadStringA

  GetClassInfoExA

  RegisterClassExA

  GetTopWindow

  CopyImage

  GetWindowRect

  DestroyWindow

  MapWindowPoints

  MonitorFromWindow

  GetMonitorInfoA

  SetMenuItemInfoA

  DestroyMenu

  LoadImageA

  GetSystemMetrics

  SetMenuDefaultItem

  DispatchMessageA

  GetFocus

  GetMenuCheckMarkDimensions

  ShowCaret

  BeginPaint

  GetWindowLongA

  GetDlgItem

  GetWindow

  TranslateAcceleratorA

  RemoveMenu

  IsWindow

  EnumWindows

  GetScrollRange

  InflateRect

  SetWindowContextHelpId

  GetMenu

  OffsetRect

  SetRect

  GetCursorPos

  SetMenu

  GetSysColorBrush

  FrameRect

  BeginDeferWindowPos

  SetCaretPos

  SetWindowTextA

  GetScrollPos

  LoadCursorFromFileA

  LoadBitmapA

  RedrawWindow

  GetMessageA

  MonitorFromPoint

  PostQuitMessage

  LoadMenuA

  MessageBeep

  CharNextA

  SetFocus

  PtInRect

  TranslateMessage

  TrackPopupMenuEx

  CheckMenuRadioItem

  PeekMessageA

  GetMenuItemInfoA

  LoadStringW

  LoadAcceleratorsA

  CreatePopupMenu

  AppendMenuA

  GetMenuItemCount

  UnregisterClassA

  gdi32

  SetBrushOrgEx

  SetAbortProc

  BitBlt

  DeleteDC

  SetBkColor

  SelectObject

  CreateCompatibleDC

  CreateCompatibleBitmap

  ExtTextOutA

  DeleteObject

  GetObjectA

  GetStockObject

  CreateFontA

  advapi32

  RegOpenKeyExA

  RegOpenKeyExW

  AllocateAndInitializeSid

  GetUserNameW

  RegCloseKey

  RegDeleteValueA

  RegQueryInfoKeyA

  RegCreateKeyExA

  RegEnumKeyExA

  RegDeleteKeyA

  RegSetValueExA

  shell32

  SHGetPathFromIDListA

  ole32

  CoUninitialize

  CoInitialize

  CoTaskMemFree

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoCreateInstance

  CoInitializeEx

  CoCreateGuid

  StringFromGUID2

  CreateStreamOnHGlobal

  oleaut32

  UnRegisterTypeLi

  VarUI4FromStr

  odbc32

  ord41

  comctl32

  CreatePropertySheetPageA

  InitCommonControlsEx

  ImageList_LoadImageA

  DestroyPropertySheetPage

  ord6

  PropertySheetA

  msimg32

  GradientFill

  ws2_32

  WSALookupServiceEnd

  netapi32

  NetApiBufferFree

  NetUserGetInfo

  userenv

  CreateEnvironmentBlock

  msi

  ord178

  winmm

  mmioAscend

  mixerGetLineInfoA

  mixerOpen

  pdh

  PdhBrowseCountersA

  imm32

  ImmReleaseContext

  ImmSetCandidateWindow

  ImmSetCompositionFontW

  setupapi

  SetupDiGetClassDevsA

  SetupRemoveFromSourceListA

  SetupQueueRenameA

  Sections

  .text

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 49KB - Virtual size: 48KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 149KB - Virtual size: 149KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ