General

Malware Config

Signatures

Files

• ef874fec785e4327acf288f10d836c60efb0cdaa553b16d4991118778ccc2f79

  .exe windows x86

  7e5d39c8e0b3a087afb9b2f2b9c21140

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  BackupRead

  CloseHandle

  CreateConsoleScreenBuffer

  DisconnectNamedPipe

  ExitProcess

  FindFirstVolumeA

  FindVolumeMountPointClose

  GetACP

  GetAtomNameA

  GetCommandLineA

  GetCurrentThread

  GetDiskFreeSpaceW

  GetFileSizeEx

  GetModuleHandleA

  GetModuleHandleW

  GetOEMCP

  GetProcessVersion

  GetStartupInfoA

  GetTickCount

  GetVersionExA

  GlobalGetAtomNameW

  HeapAlloc

  HeapCreate

  IsBadWritePtr

  LoadLibraryExA

  MoveFileExA

  ReadFileScatter

  SetEnvironmentVariableA

  SetEnvironmentVariableW

  SetHandleInformation

  SetLastError

  SetTimeZoneInformation

  WriteFile

  user32

  ShowWindow

  SendMessageTimeoutA

  ReleaseDC

  OpenClipboard

  MoveWindow

  MessageBoxA

  InflateRect

  GetParent

  GetMenuItemID

  GetFocus

  GetDoubleClickTime

  FrameRect

  DrawFrameControl

  DrawEdge

  DialogBoxParamA

  DefWindowProcA

  CreateDialogParamA

  CheckMenuItem

  BeginDeferWindowPos

  OffsetRect

  msi

  MsiSummaryInfoSetPropertyW

  MsiSummaryInfoPersist

  MsiSourceListClearAllA

  MsiRecordSetStreamW

  MsiProvideComponentA

  MsiProcessAdvertiseScriptW

  MsiLocateComponentW

  MsiGetShortcutTargetA

  MsiGetFeatureUsageA

  MsiEnumPatchesW

  MsiEnumComponentQualifiersA

  MsiEnumClientsW

  MsiApplyPatchW

  MsiAdvertiseProductExA

  MsiVerifyPackageA

  oleacc

  GetStateTextA

  AccessibleObjectFromEvent

  oledlg

  OleUIInsertObjectA

  OleUIAddVerbMenuA

  OleUICanConvertOrActivateAs

  OleUIChangeIconA

  OleUIConvertA

  odbc32

  SQLColAttributesA

  SQLBindParam

  PostODBCError

  SQLColumnsA

  SQLDisconnect

  SQLDriverConnectA

  SQLErrorA

  SQLFreeConnect

  SQLGetCursorNameA

  SQLGetData

  SQLGetDiagFieldW

  SQLGetStmtAttrA

  SQLMoreResults

  SQLNativeSqlA

  SQLPrimaryKeysA

  SQLSetCursorNameA

  SQLSetEnvAttr

  SQLTablePrivilegesA

  Sections

  .text

  Size: 47KB - Virtual size: 48KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ