General

Malware Config

Signatures

Files

• 14380587d38d14df287f13e5178d5de85f7c347d3650070b9590d4203b7dd6e1

  .exe windows x86

  c24d29a96009a65186b60b97d0ff5aa5

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _except_handler3

  _controlfp

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _cexit

  _XcptFilter

  _exit

  _c_exit

  ??2@YAPAXI@Z

  remove

  _close

  _write

  _locking

  _lseek

  _read

  _sopen

  _errno

  ??3@YAXPAX@Z

  kernel32

  GetStartupInfoA

  GetModuleHandleA

  GetProfileIntA

  LoadLibraryA

  FreeLibrary

  GetProcAddress

  lstrcatA

  GetTempPathA

  GlobalUnlock

  GetLastError

  GlobalLock

  GlobalFlags

  GlobalFree

  GlobalAlloc

  GetVersion

  GlobalSize

  lstrcmpA

  gdi32

  GetStockObject

  user32

  CreateWindowExA

  GetSystemMenu

  ChangeMenuA

  DefWindowProcA

  PostQuitMessage

  RegisterClassA

  DdeNameService

  DdeGetData

  DdeCmpStringHandles

  DdePostAdvise

  LoadCursorA

  LoadIconA

  ShowWindow

  GetMessageA

  DispatchMessageA

  TranslateMessage

  PostMessageA

  RegisterWindowMessageA

  DdeCreateDataHandle

  wsprintfA

  DdeCreateStringHandleA

  DdeFreeStringHandle

  DdeGetLastError

  DdeInitializeA

  DdeUninitialize

  DdeDisconnect

  PeekMessageA

  Sections

  .text

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 512B - Virtual size: 120B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ