General

Malware Config

Signatures

Files

• e32ab7cabe965e4c4228c3ecb9a67dff169295bddb56d34789a34f7bdf8e4529

  .exe windows x86

  a98bd09a1094488d54c82496de9429da

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  oleaut32

  VariantClear

  VariantCopyInd

  SysStringLen

  SysAllocStringLen

  kernel32

  LocalFree

  GetCommandLineW

  GetLogicalDriveStringsW

  GetWindowsDirectoryW

  ExpandEnvironmentStringsW

  OpenEventW

  CopyFileW

  GetCurrentDirectoryW

  GetFullPathNameW

  GetExitCodeProcess

  GetModuleFileNameW

  lstrlenA

  RaiseException

  CreateMutexW

  LoadLibraryW

  FindNextFileW

  GetVolumeInformationW

  HeapFree

  GetPrivateProfileSectionW

  GetPrivateProfileStringW

  QueryDosDeviceW

  GetSystemTimeAsFileTime

  FreeLibrary

  SetFilePointer

  GetSystemDefaultUILanguage

  CreateFileW

  FormatMessageA

  RegisterWowExec

  HeapAlloc

  GetProcAddress

  DeleteFileW

  GetTickCount

  GetStartupInfoA

  WideCharToMultiByte

  ReadFile

  GetCurrentThreadId

  CreateDirectoryW

  FindClose

  CreateProcessW

  GetLastError

  IsValidLocale

  LocalReAlloc

  lstrcmpiW

  MultiByteToWideChar

  GetTempPathW

  GetPrivateProfileIntW

  InterlockedExchange

  SetLastError

  GetDriveTypeW

  LoadLibraryA

  Sleep

  GetDateFormatW

  lstrlenW

  LocalAlloc

  UnhandledExceptionFilter

  GetCurrentProcess

  lstrcmpW

  InterlockedIncrement

  GetVersionExA

  OpenMutexW

  TerminateProcess

  ExitThread

  CloseHandle

  ReleaseMutex

  GetFileAttributesW

  GetDiskFreeSpaceExW

  GetModuleHandleA

  DeviceIoControl

  InterlockedDecrement

  QueryPerformanceCounter

  GetTimeFormatW

  WriteFile

  GetSystemDirectoryW

  GlobalAlloc

  GetCurrentProcessId

  GlobalFree

  SetUnhandledExceptionFilter

  GetProcessHeap

  SetCurrentDirectoryW

  WaitForSingleObject

  FormatMessageW

  FindFirstFileW

  comctl32

  PropertySheetA

  msvcrt

  difftime

  _ismbcprint

  _mbsnbset

  user32

  IsRectEmpty

  GetWindowDC

  SetForegroundWindow

  SetFocus

  GetWindowInfo

  shlwapi

  PathIsRelativeW

  PathIsNetworkPathA

  StrCmpLogicalW

  shell32

  ShellExecuteA

  SHGetPathFromIDListA

  SHBrowseForFolderA

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 4KB - Virtual size: 37KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 168KB - Virtual size: 168KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 68KB - Virtual size: 68KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE