General

Malware Config

Signatures

Files

• f752eb7163aa7a5827aaf1aa2185e3de823ae5845c8545c8ffa3d25f0bead2d9

  .exe windows x86

  2de62f09667f51dd1554e93d53820b4a

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comdlg32

  PrintDlgW

  GetSaveFileNameA

  ReplaceTextW

  FindTextW

  PrintDlgExW

  GetSaveFileNameW

  kernel32

  VerifyVersionInfoW

  DisconnectNamedPipe

  HeapCreate

  ReleaseSemaphore

  CreateThread

  GetLongPathNameW

  CallNamedPipeW

  UnhandledExceptionFilter

  GetComputerNameW

  GetTickCount

  AreFileApisANSI

  CreateEventW

  WaitForMultipleObjects

  GlobalMemoryStatus

  LCMapStringW

  FindNextFileA

  CreateEventA

  GetFileAttributesExW

  IsValidLocale

  LockFile

  GlobalGetAtomNameA

  LocalReAlloc

  RaiseException

  ResetEvent

  IsBadReadPtr

  TerminateThread

  SetUnhandledExceptionFilter

  GetStartupInfoW

  OpenEventW

  SetFileAttributesW

  FindResourceW

  lstrcpyA

  HeapSize

  InitializeCriticalSection

  LockResource

  GetCommandLineA

  LocalLock

  OpenFileMappingW

  GlobalReAlloc

  lstrcpyW

  VirtualProtect

  WaitForSingleObject

  GetBinaryTypeA

  lstrlenA

  UnlockFile

  CreateDirectoryA

  SetFileAttributesA

  LocalFree

  GetSystemWindowsDirectoryW

  GlobalFlags

  GetACP

  CopyFileW

  AddAtomW

  VirtualQuery

  CreateSemaphoreA

  shlwapi

  PathIsUNCA

  user32

  RegisterClassA

  SetLastErrorEx

  DrawFocusRect

  GetDCEx

  DrawEdge

  DestroyAcceleratorTable

  ScrollWindow

  CloseDesktop

  EnumChildWindows

  RegisterWindowMessageA

  IsRectEmpty

  GetSysColorBrush

  GetSysColor

  SendMessageA

  MessageBoxExW

  DefDlgProcW

  SetWindowTextA

  GetWindowTextA

  CascadeWindows

  TranslateAcceleratorW

  CharUpperW

  CharToOemA

  PostThreadMessageA

  ModifyMenuW

  PostMessageW

  CreateAcceleratorTableW

  MapVirtualKeyExW

  ChildWindowFromPointEx

  OpenDesktopW

  SetScrollRange

  GetWindowLongW

  DeleteMenu

  GetKeyboardType

  EnumThreadWindows

  InSendMessageEx

  SendNotifyMessageW

  IsWindow

  IsDlgButtonChecked

  MessageBoxExA

  IsMenu

  GetMessageW

  VkKeyScanW

  DefWindowProcA

  GetIconInfo

  GetKeyboardLayout

  ShowCaret

  TranslateAcceleratorA

  GetClassInfoA

  GetWindowLongA

  MessageBoxA

  AppendMenuA

  IsIconic

  SendMessageTimeoutW

  EnumWindows

  GetMenuItemCount

  FindWindowA

  SetClassLongW

  CallWindowProcA

  GetDlgCtrlID

  RemoveMenu

  mouse_event

  GetLastActivePopup

  SetDlgItemTextW

  DialogBoxIndirectParamW

  LoadAcceleratorsW

  GetWindow

  GetWindowTextW

  GetSystemMenu

  CreateIconIndirect

  SetWindowLongW

  GetWindowTextLengthW

  AttachThreadInput

  InflateRect

  SendDlgItemMessageA

  GetTopWindow

  CharPrevW

  CreateIconFromResource

  DefFrameProcA

  KillTimer

  SendMessageW

  GetScrollRange

  RegisterHotKey

  SetUserObjectInformationW

  SetDlgItemTextA

  HiliteMenuItem

  GetWindowDC

  DrawAnimatedRects

  DialogBoxIndirectParamA

  BringWindowToTop

  CharLowerA

  GetClassNameW

  GetClassInfoExW

  GetKeyboardLayoutNameW

  CreateDialogIndirectParamW

  LoadCursorA

  CheckRadioButton

  GetMenuStringA

  ValidateRect

  GetUserObjectInformationW

  EqualRect

  SetCursorPos

  GetClassInfoExA

  HideCaret

  UnloadKeyboardLayout

  LoadImageA

  PostQuitMessage

  GetDoubleClickTime

  UnionRect

  SetActiveWindow

  GetDlgItem

  TabbedTextOutW

  GetDlgItemTextW

  GetPropW

  DrawStateA

  TileWindows

  DestroyWindow

  GetNextDlgGroupItem

  DeferWindowPos

  CharPrevA

  GetMessageTime

  MonitorFromRect

  ShowWindowAsync

  msvcrt

  _controlfp

  isspace

  free

  wcstoul

  getenv

  fclose

  iswxdigit

  srand

  __set_app_type

  malloc

  memset

  isalnum

  __p__fmode

  strspn

  fseek

  wcsncmp

  strcpy

  towupper

  wcscoll

  fputs

  putc

  wcstombs

  wcscat

  iswspace

  ftell

  __p__commode

  qsort

  _amsg_exit

  strrchr

  strchr

  mbstowcs

  exit

  _initterm

  _ismbblead

  vswprintf

  fgetc

  toupper

  iswprint

  _XcptFilter

  wcsncpy

  getc

  wcslen

  _exit

  setlocale

  _cexit

  __setusermatherr

  wcstod

  __getmainargs

  iswalpha

  Exports

  Exports

  ?ForwardControlItem@@YGK_KK:O

  Sections

  .itext

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .ips1

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ips2

  Size: 512B - Virtual size: 88B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .read

  Size: 1024B - Virtual size: 124KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .ips3

  Size: 1024B - Virtual size: 704B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ips4

  Size: 31KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 73KB - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ