General

Malware Config

Signatures

Files

• b1f8592b0dff906395f5ade6a8b0c44c617012069760562afc7b9f885ef3bbfa

  .exe windows x86

  18eabcfeac6d39c8df032425a835ed44

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  DeleteFileA

  DeleteFileW

  GetConsoleMode

  SetLastError

  FindAtomA

  OpenFileMappingA

  FindFirstFileA

  GetCommandLineA

  WriteFile

  CreateProcessA

  GetCPInfo

  ReadFile

  CopyFileW

  CopyFileExA

  GetFileSize

  CopyFileA

  Sleep

  advapi32

  RegCreateKeyExA

  RegQueryValueExA

  RegEnumKeyExA

  RegEnumKeyExW

  RegReplaceKeyA

  RegCreateKeyExW

  RegDeleteKeyW

  RegEnumValueW

  RegEnumValueA

  RegReplaceKeyW

  RegQueryInfoKeyA

  RegQueryValueExW

  RegDeleteKeyA

  RegFlushKey

  RegCreateKeyW

  RegEnumKeyW

  RegQueryInfoKeyW

  RegOpenKeyExA

  RegOpenKeyExW

  RegDeleteValueW

  RegDeleteValueA

  comctl32

  ImageList_DragEnter

  ImageList_DragShowNolock

  ImageList_GetImageRect

  ImageList_DrawIndirect

  ImageList_Replace

  InitCommonControls

  ImageList_GetDragImage

  ImageList_GetIconSize

  ImageList_Merge

  ImageList_EndDrag

  ImageList_Create

  ImageList_DragMove

  ImageList_GetImageCount

  ImageList_LoadImage

  ImageList_LoadImageW

  ImageList_GetImageInfo

  ImageList_GetIcon

  ImageList_Remove

  ImageList_DrawEx

  ImageList_Copy

  ImageList_AddIcon

  ImageList_LoadImageA

  gdi32

  BeginPath

  RestoreDC

  BitBlt

  GetBrushOrgEx

  ExtTextOutA

  DeleteDC

  GetClipBox

  GetCurrentPositionEx

  ExcludeClipRect

  CopyMetaFileA

  AddFontMemResourceEx

  CloseFigure

  GetPixel

  SetTextColor

  GetDCOrgEx

  CancelDC

  AddFontResourceA

  AbortPath

  AddFontResourceTracking

  CreateSolidBrush

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 5.0MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 395B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ