General

Malware Config

Signatures

Files

• ac9897327901b6e866e307b059e605ac856e105c55b7cd8db48511c66bfc5ae5

  .exe windows x86

  6a3e81cd2953c3428d3ccd111547bb4c

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetFileTime

  CompareFileTime

  SearchPathW

  GetShortPathNameW

  GetFullPathNameW

  MoveFileW

  SetCurrentDirectoryW

  GetFileAttributesW

  CreateDirectoryW

  GetLastError

  SetFileAttributesW

  Sleep

  GetTickCount

  GetFileSize

  GetModuleFileNameW

  GetCurrentProcess

  CopyFileW

  ExitProcess

  GetWindowsDirectoryW

  GetTempPathW

  GetCommandLineW

  SetErrorMode

  lstrcpynA

  lstrlenW

  lstrcpynW

  GetDiskFreeSpaceW

  GlobalUnlock

  GlobalLock

  CreateThread

  LoadLibraryW

  CreateProcessW

  lstrcmpiA

  CloseHandle

  GetTempFileNameW

  lstrcatW

  LeaveCriticalSection

  EnterCriticalSection

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  OpenProcess

  lstrcpyW

  GetVersionExW

  GetSystemDirectoryW

  GetVersion

  lstrcpyA

  RemoveDirectoryW

  SetEvent

  GetCurrentThreadId

  UnmapViewOfFile

  CreateEventW

  MapViewOfFile

  CreateFileMappingW

  OutputDebugStringW

  OutputDebugStringA

  GetCurrentProcessId

  GetLocalTime

  GetEnvironmentVariableW

  InitializeCriticalSection

  SystemTimeToFileTime

  GetSystemTime

  GlobalReAlloc

  InitializeCriticalSectionAndSpinCount

  FlushFileBuffers

  lstrcmpiW

  lstrcmpW

  ExpandEnvironmentStringsW

  GlobalAlloc

  WaitForSingleObject

  GetExitCodeProcess

  GlobalFree

  GetModuleHandleW

  LoadLibraryExW

  FreeLibrary

  WritePrivateProfileStringW

  GetPrivateProfileStringW

  WideCharToMultiByte

  lstrlenA

  WriteFile

  ReadFile

  MultiByteToWideChar

  SetFilePointer

  FindClose

  FindNextFileW

  FindFirstFileW

  DeleteFileW

  CreateFileW

  MulDiv

  user32

  GetMessagePos

  CallWindowProcW

  IsWindowVisible

  LoadBitmapW

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  OpenClipboard

  TrackPopupMenu

  GetWindowRect

  AppendMenuW

  CreatePopupMenu

  GetSystemMetrics

  EndDialog

  EnableMenuItem

  GetSystemMenu

  SetClassLongW

  IsWindowEnabled

  SetWindowPos

  DialogBoxParamW

  GetClassInfoW

  CreateWindowExW

  SystemParametersInfoW

  RegisterClassW

  SetDlgItemTextW

  GetDlgItemTextW

  MessageBoxIndirectW

  CharNextA

  CharUpperW

  CharPrevW

  wvsprintfW

  DispatchMessageW

  PeekMessageW

  wsprintfA

  ScreenToClient

  IsDlgButtonChecked

  GetAsyncKeyState

  CheckDlgButton

  LoadCursorW

  SetCursor

  GetWindowLongW

  GetSysColor

  CharNextW

  ExitWindowsEx

  DestroyWindow

  CreateDialogParamW

  SetTimer

  SetWindowTextW

  PostQuitMessage

  SetForegroundWindow

  ShowWindow

  wsprintfW

  FindWindowExW

  IsWindow

  GetDlgItem

  SetWindowLongW

  LoadImageW

  GetDC

  EnableWindow

  InvalidateRect

  SendMessageW

  DefWindowProcW

  BeginPaint

  GetClientRect

  FillRect

  DrawTextW

  EndPaint

  SendMessageTimeoutW

  gdi32

  CreateFontIndirectW

  CreateBrushIndirect

  DeleteObject

  GetDeviceCaps

  SetBkColor

  SelectObject

  SetBkMode

  SetTextColor

  shell32

  SHFileOperationW

  SHGetFileInfoW

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHGetSpecialFolderLocation

  SHGetFolderPathW

  ShellExecuteW

  advapi32

  RegEnumValueW

  RegSetValueExW

  RegQueryValueExW

  RegOpenKeyExW

  RegEnumKeyW

  RegDeleteKeyW

  RegDeleteValueW

  RegCloseKey

  RegCreateKeyExW

  comctl32

  ImageList_AddMasked

  ImageList_Create

  ImageList_Destroy

  ord17

  ole32

  CoTaskMemFree

  OleInitialize

  CoCreateInstance

  OleUninitialize

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueW

  wininet

  InternetConnectW

  InternetOpenW

  InternetCloseHandle

  HttpQueryInfoA

  HttpSendRequestA

  HttpOpenRequestA

  shlwapi

  PathCombineW

  Sections

  .text

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 512B - Virtual size: 179KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 148KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 106KB - Virtual size: 108KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE