General

Malware Config

Signatures

Files

• 28fb212451001f5bc0f1d5467356705aea7ebc24fa4dc873b5956b981497e5b0

  .exe windows x86

  5fca7f0fc8c16d55fed0e805fc0ad295

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  ord17

  kernel32

  GetSystemInfo

  CreateFileMappingA

  VirtualQuery

  CompareStringA

  CreateDirectoryA

  GetFileSize

  LoadLibraryExA

  CompareStringW

  GlobalSize

  FreeResource

  VirtualFree

  GetCurrentProcess

  HeapDestroy

  DuplicateHandle

  GetThreadContext

  VirtualProtectEx

  WriteProcessMemory

  FlushInstructionCache

  SetThreadContext

  ResumeThread

  GetLastError

  MapViewOfFile

  DeleteFileA

  RemoveDirectoryA

  MultiByteToWideChar

  WideCharToMultiByte

  lstrlenW

  CreateProcessA

  CloseHandle

  Sleep

  lstrlenA

  UnmapViewOfFile

  IsBadReadPtr

  ReadFile

  FindFirstFileA

  FindClose

  lstrcmpiA

  lstrcpynA

  WriteFile

  GetDriveTypeA

  SetFilePointer

  GetFileAttributesA

  GetPrivateProfileIntA

  CreateEventA

  QueryPerformanceFrequency

  lstrcatA

  ReleaseMutex

  GetSystemDefaultLangID

  CreateMutexA

  SetErrorMode

  GetSystemDirectoryA

  MulDiv

  GetPrivateProfileStringA

  GetPrivateProfileSectionNamesA

  FlushFileBuffers

  SetStdHandle

  LoadLibraryA

  FreeLibrary

  GetDiskFreeSpaceA

  GetTickCount

  FindResourceExA

  GetWindowsDirectoryA

  InterlockedDecrement

  LocalFree

  InterlockedIncrement

  FormatMessageA

  GetTempPathA

  GetVersionExA

  CreateFileA

  GlobalFree

  FindResourceA

  LoadResource

  SizeofResource

  GlobalAlloc

  LockResource

  GlobalLock

  GlobalUnlock

  WaitForSingleObject

  SetLastError

  ExitProcess

  lstrcpyA

  GetModuleFileNameA

  GetModuleHandleA

  GetProcAddress

  HeapCreate

  IsBadCodePtr

  GetFileType

  GetStdHandle

  SetHandleCount

  GetEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  FreeEnvironmentStringsA

  GetEnvironmentVariableA

  TlsGetValue

  TlsAlloc

  TlsSetValue

  GetCurrentThreadId

  GetOEMCP

  GetACP

  GetCPInfo

  GetCommandLineA

  GetStartupInfoA

  RaiseException

  HeapAlloc

  HeapFree

  RtlUnwind

  UnhandledExceptionFilter

  GetStringTypeW

  GetStringTypeA

  SetUnhandledExceptionFilter

  HeapSize

  LCMapStringW

  LCMapStringA

  IsBadWritePtr

  HeapReAlloc

  SearchPathA

  FindNextFileA

  GetTempFileNameA

  GetExitCodeProcess

  OpenProcess

  CompareFileTime

  GetProcessTimes

  TerminateProcess

  GetLocalTime

  InitializeCriticalSection

  GetCurrentProcessId

  GetVersion

  LeaveCriticalSection

  EnterCriticalSection

  GetCurrentThread

  VirtualProtect

  ResetEvent

  SetEvent

  QueryPerformanceCounter

  SystemTimeToFileTime

  lstrcmpA

  MoveFileExA

  InterlockedExchange

  DeleteCriticalSection

  VirtualAlloc

  user32

  WaitForInputIdle

  CharUpperA

  wsprintfA

  MessageBoxA

  DialogBoxIndirectParamA

  SetDlgItemTextA

  SetWindowLongA

  SetFocus

  BeginPaint

  EndPaint

  LoadStringA

  FillRect

  ScreenToClient

  SendDlgItemMessageA

  GetMessageA

  DefWindowProcA

  GetParent

  GetWindow

  SystemParametersInfoA

  MsgWaitForMultipleObjects

  GetWindowDC

  UpdateWindow

  InvalidateRect

  DrawIcon

  MapDialogRect

  GetClassNameA

  CallWindowProcA

  DrawFocusRect

  InflateRect

  DrawTextA

  GetWindowTextA

  CopyRect

  EnumChildWindows

  CreateWindowExA

  RegisterClassExA

  IntersectRect

  GetDlgItemTextA

  MapWindowPoints

  SetWindowPos

  GetPropA

  EnableMenuItem

  SetPropA

  RemovePropA

  ShowWindow

  IsWindow

  GetSysColor

  LoadImageA

  CreateDialogParamA

  GetDC

  ReleaseDC

  SetActiveWindow

  PeekMessageA

  IsDialogMessageA

  TranslateMessage

  DispatchMessageA

  DestroyWindow

  CreateDialogIndirectParamA

  SetForegroundWindow

  GetDesktopWindow

  GetClientRect

  EnableWindow

  IsWindowEnabled

  GetWindowLongA

  GetWindowRect

  MoveWindow

  EndDialog

  LoadIconA

  GetDlgItem

  SendMessageA

  SetWindowTextA

  gdi32

  SetBkMode

  SetTextColor

  TextOutA

  RestoreDC

  CreateFontIndirectA

  SetBkColor

  CreateRectRgn

  DeleteObject

  CreateSolidBrush

  GetDIBColorTable

  GetSystemPaletteEntries

  CreatePalette

  CreateHalftonePalette

  GetDeviceCaps

  GetObjectA

  CreateCompatibleDC

  UnrealizeObject

  SelectPalette

  RealizePalette

  SelectObject

  BitBlt

  DeleteDC

  CreateDIBitmap

  CreateCompatibleBitmap

  CreateDCA

  GetStockObject

  GetTextExtentPoint32A

  CreatePatternBrush

  DeleteMetaFile

  SetMetaFileBitsEx

  SetStretchBltMode

  SelectClipRgn

  SetPixel

  PatBlt

  PlayMetaFile

  StretchBlt

  CreateBitmap

  SetViewportExtEx

  SetViewportOrgEx

  SetWindowExtEx

  SetWindowOrgEx

  SetMapMode

  SaveDC

  advapi32

  OpenProcessToken

  InitializeSecurityDescriptor

  SetSecurityDescriptorOwner

  SetSecurityDescriptorGroup

  SetSecurityDescriptorDacl

  RegCloseKey

  RegQueryValueExA

  RegOpenKeyExA

  RegDeleteKeyA

  RegEnumKeyExA

  RegEnumKeyA

  RegOpenKeyA

  FreeSid

  EqualSid

  AllocateAndInitializeSid

  GetTokenInformation

  OpenThreadToken

  ole32

  CoInitializeSecurity

  CoInitialize

  CoUninitialize

  oleaut32

  VariantChangeType

  VariantClear

  SysStringLen

  SysReAllocStringLen

  SysAllocStringLen

  SysAllocString

  SysFreeString

  GetErrorInfo

  lz32

  LZOpenFileA

  LZCopy

  LZClose

  rpcrt4

  UuidCreate

  RpcStringFreeA

  UuidToStringA

  version

  GetFileVersionInfoA

  VerQueryValueA

  GetFileVersionInfoSizeA

  shell32

  SHGetSpecialFolderLocation

  ShellExecuteExA

  SHGetMalloc

  SHGetPathFromIDListA

  Sections

  .text

  Size: 288KB - Virtual size: 284KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 40KB - Virtual size: 39KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 24KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 56KB - Virtual size: 56KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  smffmax

  Size: - Virtual size: 4KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE