General

Malware Config

Signatures

Files

• 0545470832a04cf80da44a928419f9b771120af69d1c38ea7670767856bbc7e5

  .exe windows x86

  8246c74bb9b5d97048ffc1710831e38a

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  Sleep

  FlushFileBuffers

  GetModuleHandleW

  GetCommConfig

  QueueUserAPC

  WritePrivateProfileStructA

  SetFilePointerEx

  GetOEMCP

  GetLocaleInfoA

  TlsFree

  lstrcpyW

  SetThreadPriority

  MoveFileExW

  WaitNamedPipeA

  GetProcessPriorityBoost

  SetEnvironmentVariableW

  SetWaitableTimer

  ReplaceFileA

  GetEnvironmentVariableA

  SetTapeParameters

  GetVolumePathNameA

  HeapAlloc

  GetNumberFormatW

  LCMapStringA

  SetFileApisToANSI

  GetNumberFormatA

  GetComputerNameExW

  FreeEnvironmentStringsA

  Process32NextW

  GetPriorityClass

  GetVersionExA

  UpdateResourceA

  GetCurrentThreadId

  lstrcpynA

  GetTempFileNameA

  GetComputerNameExA

  _lwrite

  GetSystemDefaultLangID

  PurgeComm

  RtlUnwind

  WritePrivateProfileStringA

  FindFirstVolumeMountPointA

  GetVolumePathNameW

  FatalAppExitA

  SetFileApisToOEM

  RemoveDirectoryW

  GetStartupInfoA

  OutputDebugStringW

  MultiByteToWideChar

  VerifyVersionInfoW

  FatalAppExitW

  GetProcessAffinityMask

  DuplicateHandle

  GlobalCompact

  WaitForMultipleObjectsEx

  user32

  CreateCursor

  ReuseDDElParam

  DrawFrameControl

  SetCaretPos

  SetCursorPos

  MessageBoxA

  UnloadKeyboardLayout

  SetWindowsHookA

  IsClipboardFormatAvailable

  SetShellWindow

  CharLowerBuffA

  PostThreadMessageA

  DialogBoxParamA

  IsCharAlphaA

  CharPrevExA

  GetDlgItem

  LoadImageW

  GetMenuItemCount

  CascadeWindows

  SwitchDesktop

  UnhookWinEvent

  FlashWindow

  DdeConnect

  GetLastInputInfo

  SendMessageA

  GetMenuBarInfo

  InvalidateRgn

  CharPrevW

  EnableWindow

  WindowFromPoint

  PeekMessageW

  DdeQueryNextServer

  IsDialogMessageW

  GetMessageTime

  GetCursorPos

  GetMenuCheckMarkDimensions

  MonitorFromPoint

  EnumDesktopsW

  SetWindowContextHelpId

  DdeGetData

  GetThreadDesktop

  TranslateAcceleratorA

  DialogBoxIndirectParamW

  WinHelpA

  ClipCursor

  DdeQueryStringW

  EnumDisplayMonitors

  TabbedTextOutA

  SetClassWord

  GetShellWindow

  LockWindowUpdate

  CreateAcceleratorTableA

  IsCharAlphaNumericA

  GetAltTabInfoW

  DdeAddData

  DrawMenuBar

  GetKeyboardLayoutList

  ValidateRgn

  RegisterShellHookWindow

  GetWindowTextLengthA

  GetWindowModuleFileNameW

  DdeCreateDataHandle

  SetWindowsHookExW

  GetDlgItemTextA

  UnregisterDeviceNotification

  RegisterWindowMessageW

  GetCursorInfo

  IsDialogMessageA

  MessageBeep

  FrameRect

  SetPropA

  DdeSetUserHandle

  GetSubMenu

  SetLastErrorEx

  IMPGetIMEW

  SendDlgItemMessageW

  WaitMessage

  ToAscii

  DdeAccessData

  TrackPopupMenu

  IMPQueryIMEA

  GetAsyncKeyState

  SendMessageCallbackW

  CopyAcceleratorTableW

  MessageBoxIndirectA

  DlgDirListW

  DrawTextExA

  LockSetForegroundWindow

  SendInput

  ShowWindow

  GetDoubleClickTime

  IMPSetIMEW

  GetAncestor

  IsZoomed

  SetDlgItemTextW

  LockWorkStation

  GetInputState

  GetScrollRange

  MapVirtualKeyExA

  ToUnicode

  CharUpperBuffW

  CharUpperBuffA

  SendMessageCallbackA

  SetRect

  SetSysColors

  FindWindowExW

  DdeQueryStringA

  GetClassInfoA

  SetMenuContextHelpId

  MenuItemFromPoint

  RemovePropA

  FillRect

  TabbedTextOutW

  AttachThreadInput

  SetThreadDesktop

  CreateAcceleratorTableW

  GetQueueStatus

  BroadcastSystemMessageW

  IsDlgButtonChecked

  GetCapture

  GetUserObjectSecurity

  GetDlgItemInt

  FreeDDElParam

  DrawIconEx

  CheckMenuItem

  ValidateRect

  IsIconic

  ShowScrollBar

  OpenDesktopA

  SendMessageTimeoutW

  Sections

  .text

  Size: 201KB - Virtual size: 200KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 212KB - Virtual size: 4.0MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 183KB - Virtual size: 182KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ