General

Malware Config

Signatures

Files

• 3ed9b32f503de26cdcff6eff07e0b79dfe8d659c97531e9145bf54fbdbb02aa9

  .exe windows x86

  8ff2edbe801f7ff327bdf651991c705a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetEnvironmentVariableW

  GetFileAttributesA

  GetFileAttributesExA

  GetFileAttributesExW

  GetFileAttributesW

  GetFullPathNameA

  GetFullPathNameW

  GetLastError

  GetLocalTime

  GetModuleFileNameA

  GetModuleFileNameW

  GetStdHandle

  GetSystemTimeAsFileTime

  GetTickCount

  GetVersionExA

  GetVersionExW

  HeapAlloc

  HeapCreate

  HeapDestroy

  HeapFree

  HeapValidate

  InitializeCriticalSection

  InterlockedCompareExchange

  InterlockedDecrement

  InterlockedExchange

  InterlockedIncrement

  IsDBCSLeadByte

  IsDebuggerPresent

  LCMapStringA

  LCMapStringW

  LeaveCriticalSection

  LoadLibraryExA

  GetEnvironmentVariableA

  LocalAlloc

  LocalFree

  MoveFileExW

  MultiByteToWideChar

  OutputDebugStringA

  OutputDebugStringW

  QueryPerformanceCounter

  RaiseException

  ReleaseMutex

  ReleaseSemaphore

  ResetEvent

  SetErrorMode

  SetEvent

  SetFilePointer

  SetLastError

  SetUnhandledExceptionFilter

  Sleep

  SleepEx

  TerminateProcess

  TlsAlloc

  TlsFree

  TlsGetValue

  TlsSetValue

  UnhandledExceptionFilter

  VirtualAlloc

  VirtualFree

  VirtualProtect

  VirtualQuery

  WaitForSingleObject

  WaitForSingleObjectEx

  WideCharToMultiByte

  WriteFile

  GetCurrentThreadId

  GetCurrentProcessId

  GetCurrentProcess

  GetCurrentDirectoryW

  GetCurrentDirectoryA

  GetConsoleOutputCP

  GetCPInfo

  GetACP

  FreeLibrary

  FormatMessageW

  FormatMessageA

  EnterCriticalSection

  DeleteFileA

  DeleteCriticalSection

  DebugBreak

  CreateSemaphoreW

  CreateSemaphoreA

  CreateProcessW

  CreateProcessA

  CreateMutexW

  CreateMutexA

  CreateFileW

  CreateFileA

  CreateEventW

  CreateEventA

  CopyFileA

  CloseHandle

  GetModuleHandleA

  GetCommandLineW

  VirtualAllocEx

  lstrlenW

  GetProcessHeap

  GetDriveTypeW

  GetModuleHandleW

  LoadLibraryExW

  LoadLibraryA

  user32

  IsDlgButtonChecked

  LoadStringA

  LoadStringW

  GetActiveWindow

  IsCharAlphaA

  LoadBitmapA

  LoadIconW

  DestroyCursor

  IsWindowEnabled

  CharLowerW

  CountClipboardFormats

  GetForegroundWindow

  IsGUIThread

  IsMenu

  GetMenuCheckMarkDimensions

  GetMessagePos

  CloseWindow

  GetSysColor

  LoadIconA

  GetDialogBaseUnits

  GetClipboardViewer

  CharNextW

  IsCharUpperA

  CreateMenu

  ShowCaret

  DestroyIcon

  GetFocus

  GetParent

  GetKeyboardLayout

  IsWindowUnicode

  IsCharAlphaNumericW

  GetClipboardSequenceNumber

  GetKeyboardType

  UpdateWindow

  VkKeyScanW

  GetDC

  DrawMenuBar

  CharUpperA

  GetWindowTextLengthA

  gdi32

  DeleteDC

  CloseMetaFile

  AddFontResourceW

  EndPage

  FlattenPath

  BeginPath

  SetBkMode

  GetEnhMetaFileW

  GetStockObject

  GetPixelFormat

  GetEnhMetaFileA

  SelectObject

  UpdateColors

  DeleteColorSpace

  SaveDC

  WidenPath

  GetSystemPaletteUse

  EndPath

  GdiFlush

  SetTextAlign

  CreateMetaFileW

  CreateHalftonePalette

  GetFontLanguageInfo

  GetStretchBltMode

  GetTextCharacterExtra

  AbortDoc

  CreateCompatibleDC

  CloseEnhMetaFile

  GetMapMode

  advapi32

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  RegOpenKeyExA

  RegQueryValueExA

  winmm

  timeGetTime

  Sections

  .text

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 65KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 39KB - Virtual size: 39KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ