General

Malware Config

Signatures

Files

• 2d19824897a121847e05baf8f1f35f0010d815e07ec719625dd9fc7f7859fa68

  .exe windows x86

  bec4674eee449b66b520fd5ef371df7c

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  GetWindowRect

  BringWindowToTop

  WindowFromPoint

  FindWindowA

  CreateDialogParamA

  ShowWindow

  GetDlgItemInt

  GetDesktopWindow

  IsChild

  BeginDeferWindowPos

  GetClipboardData

  DefDlgProcA

  GetWindowTextLengthA

  gdi32

  CreateFontA

  DeleteObject

  ExtFloodFill

  CreateDiscardableBitmap

  GetAspectRatioFilterEx

  Chord

  GetBitmapDimensionEx

  AbortDoc

  FillRgn

  BitBlt

  advapi32

  ClearEventLogA

  ReadEventLogW

  PrivilegeCheck

  RegNotifyChangeKeyValue

  RegUnLoadKeyA

  RegCreateKeyExA

  RegOpenKeyExA

  RegReplaceKeyA

  RegDeleteKeyA

  RegOpenKeyA

  RegisterEventSourceA

  kernel32

  GetStringTypeW

  SetLocaleInfoA

  WaitForSingleObject

  HeapValidate

  HeapDestroy

  HeapAlloc

  GlobalSize

  GetStartupInfoA

  GetProcAddress

  PulseEvent

  VirtualAllocEx

  GetModuleHandleA

  WritePrivateProfileSectionA

  MultiByteToWideChar

  VirtualUnlock

  LocalFree

  winspool.drv

  DeletePrinterDriverA

  DeletePrinterConnectionW

  GetJobA

  DeletePrinterDriverExW

  GetPrinterDriverA

  AddPrintProcessorW

  DeletePrinter

  GetPrinterDriverW

  AddPrintProcessorA

  netapi32

  NetServerTransportDel

  NetConfigGetAll

  NetGetJoinableOUs

  NetErrorLogClear

  NetGroupAdd

  NetFileGetInfo

  Netbios

  NetGetAnyDCName

  NetFileEnum

  NetConfigSet

  msvcrt

  _adjust_fdiv

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  __mb_cur_max

  _isctype

  _pctype

  __setusermatherr

  __p__commode

  __p__fmode

  _controlfp

  _except_handler3

  __set_app_type

  Sections

  .text

  Size: 18KB - Virtual size: 18KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 101KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .uvyorx

  Size: 318KB - Virtual size: 318KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ