General

Malware Config

Signatures

Files

• b7cd56a90803ce8cb3cf0f9009c0fc075e2433cf4cc2825c02a05c63170ce7c4

  .exe windows x86

  1f1d930abe1a56568e814bd882aabbd9

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  linkinfo

  ResolveLinkInfo

  ResolveLinkInfoA

  GetLinkInfoData

  DestroyLinkInfo

  GetCanonicalPathInfo

  GetCanonicalPathInfoW

  IsValidLinkInfo

  CreateLinkInfoW

  CompareLinkInfoReferents

  CompareLinkInfoVolumes

  GetCanonicalPathInfoA

  DisconnectLinkInfo

  msvcrt

  _setjmp3

  _wspawnve

  _strnicoll

  div

  _get_osfhandle

  vswprintf

  _sys_nerr

  _wfindnext

  _wtol

  _getdrive

  ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

  ?what@exception@@UBEPBDXZ

  _wutime

  __getmainargs

  ?terminate@@YAXXZ

  _getsystime

  _rotl

  __set_app_type

  __p__commode

  longjmp

  _strnicmp

  _mbsspn

  __p___argc

  _adj_fdivr_m64

  _wfullpath

  _ismbstrail

  _cprintf

  vsprintf

  _wcsncoll

  exit

  _set_sbh_threshold

  _mbsstr

  _ecvt

  user32

  GetWindowModuleFileName

  OpenDesktopA

  SetWindowPlacement

  IsCharAlphaNumericW

  GetWindowThreadProcessId

  GetDesktopWindow

  CascadeWindows

  UserRegisterWowHandlers

  RegisterUserApiHook

  DdeInitializeA

  IMPGetIMEA

  IsDialogMessageA

  SetDlgItemTextA

  SendMessageA

  DefMDIChildProcW

  SetWindowWord

  SetMenuContextHelpId

  EnumWindowStationsA

  RegisterSystemThread

  SetMessageQueue

  CreateAcceleratorTableW

  kernel32

  EndUpdateResourceW

  LoadLibraryW

  MultiByteToWideChar

  SetThreadIdealProcessor

  GetModuleHandleW

  GetLocaleInfoW

  SetSystemTimeAdjustment

  GetCurrentThread

  GetConsoleInputExeNameW

  GetCurrentProcess

  PrivCopyFileExW

  QueryPerformanceCounter

  RtlUnwind

  olecli32

  ErrQueryOutOfDate

  OleQueryProtocol

  SetNextNetDrive

  DibEnumFormat

  OleEnumObjects

  OleReconnect

  GetTaskVisibleWindow

  LeSetUpdateOptions

  OleQueryReleaseMethod

  PbCopyToClipboard

  GenEnumFormat

  LeCreateInvisible

  OleSavedClientDoc

  DibDraw

  OleSetLinkUpdateOptions

  LeObjectConvert

  BmQueryBounds

  LeRelease

  ErrCopyFromLink

  Sections

  .text

  Size: 382KB - Virtual size: 382KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 113KB - Virtual size: 113KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 157KB - Virtual size: 1.6MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 174KB - Virtual size: 174KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 844B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ