General

Malware Config

Signatures

Files

• 8943a25b17780a266cd8850798af9795cc965dbf4f039d1b5115217b4cd82350

  .exe windows x86

  c002d9cf9a7fc0e1c61458b3cc4b8e6a

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  htonl

  gethostbyaddr

  WSAStringToAddressA

  WSAIsBlocking

  WSAEnumProtocolsW

  WSAEnumNameSpaceProvidersA

  WSAGetQOSByName

  getservbyname

  WSADuplicateSocketA

  WSAGetLastError

  oleaut32

  VariantCopy

  LoadTypeLi

  VariantChangeType

  SetErrorInfo

  SysStringLen

  kernel32

  EndUpdateResourceA

  CreateNamedPipeW

  SetErrorMode

  GetVolumeInformationW

  DeleteCriticalSection

  SizeofResource

  FormatMessageA

  ExitProcess

  VirtualAllocEx

  GlobalAddAtomA

  FreeLibraryAndExitThread

  FindFirstFileExW

  SetSystemTime

  GetDriveTypeW

  GetPrivateProfileStringW

  SetFileAttributesA

  GetConsoleCursorInfo

  SetEndOfFile

  VirtualProtect

  OutputDebugStringW

  GetLogicalDriveStringsA

  ScrollConsoleScreenBufferA

  SetThreadLocale

  ReadConsoleOutputA

  GetHandleInformation

  EnumTimeFormatsW

  SetThreadPriorityBoost

  EnumCalendarInfoA

  GetFileInformationByHandle

  GetConsoleMode

  GetCurrentDirectoryW

  GetCommState

  user32

  PeekMessageW

  TrackPopupMenuEx

  CharLowerA

  MonitorFromPoint

  EnumDisplaySettingsW

  MonitorFromWindow

  WaitMessage

  GetDlgItemTextW

  InvertRect

  GetNextDlgTabItem

  LoadBitmapA

  RemovePropW

  GetActiveWindow

  WindowFromPoint

  OpenClipboard

  SetMenuItemInfoA

  RegisterClassA

  TileWindows

  IsCharLowerA

  CopyImage

  WinHelpA

  GetMonitorInfoA

  SendMessageCallbackW

  ClientToScreen

  IsCharUpperW

  ChangeMenuA

  EndPaint

  WindowFromDC

  CreateDialogParamA

  ModifyMenuW

  GetKeyboardType

  CreateMDIWindowW

  advapi32

  RegOpenKeyW

  RegCreateKeyW

  CryptCreateHash

  CryptGetUserKey

  CloseServiceHandle

  RevertToSelf

  AddAccessDeniedAce

  CryptDestroyKey

  GetLengthSid

  ImpersonateLoggedOnUser

  AdjustTokenPrivileges

  RegLoadKeyW

  AllocateAndInitializeSid

  SetSecurityDescriptorDacl

  RegNotifyChangeKeyValue

  OpenSCManagerW

  OpenEventLogW

  msvcrt

  _fstat

  _mbsupr

  time

  ftell

  calloc

  wcstok

  _ultow

  Sections

  .text

  Size: 306KB - Virtual size: 305KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 328KB - Virtual size: 328KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ