General

Malware Config

Signatures

Files

• a88c20f42b3c3618675775631c750da9ab0a1a944a372fa71d85100d95f37d29

  .exe windows x86

  dcace838ebb5e28becbc5eaed2375b8c

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  LoadLibraryA

  InterlockedCompareExchange

  GetLogicalDrives

  GetVolumeInformationW

  FreeLibrary

  LoadLibraryW

  GetProcAddress

  DisableThreadLibraryCalls

  lstrcpyA

  lstrcpynW

  lstrlenA

  MultiByteToWideChar

  WideCharToMultiByte

  GetFullPathNameW

  SetLastError

  GetCurrentProcess

  SetErrorMode

  GetFileAttributesW

  lstrcmpiW

  lstrlenW

  lstrcpyW

  HeapFree

  HeapAlloc

  HeapDestroy

  GetSystemInfo

  HeapCreate

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  SetUnhandledExceptionFilter

  Sleep

  lstrcmpW

  OutputDebugStringA

  ExitProcess

  CreateFileW

  GetStartupInfoW

  GetDriveTypeW

  UnhandledExceptionFilter

  user32

  CharNextA

  CharNextW

  IsCharAlphaW

  CharPrevW

  CharUpperW

  IsWindow

  advapi32

  RegQueryValueW

  msvcrt

  _chdir

  printf

  setupapi

  SetupDiGetDeviceInterfaceDetailW

  Sections

  .text

  Size: 528KB - Virtual size: 524KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 52KB - Virtual size: 48KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 316KB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ