General

Malware Config

Signatures

Files

• 70bb37aed4406a1fd15a466095198b562da388a9525e5f6bc6c899ab2b9e9eb8

  .exe windows x86

  e06867b2504a82a82eada9ce2dfd8c7f

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  AppendMenuA

  EndPaint

  DrawTextA

  FillRect

  GetClientRect

  BeginPaint

  DefWindowProcA

  SendMessageA

  InvalidateRect

  EnableWindow

  GetDC

  LoadImageA

  SetWindowLongA

  GetDlgItem

  IsWindow

  ExitWindowsEx

  EndDialog

  ScreenToClient

  GetWindowRect

  EnableMenuItem

  GetSystemMenu

  SetClassLongA

  IsWindowEnabled

  SetWindowPos

  GetSysColor

  GetWindowLongA

  SetCursor

  LoadCursorA

  CheckDlgButton

  GetMessagePos

  LoadBitmapA

  CallWindowProcA

  IsWindowVisible

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  RegisterClassA

  TrackPopupMenu

  ShowWindow

  CreatePopupMenu

  GetSystemMetrics

  SetDlgItemTextA

  GetDlgItemTextA

  MessageBoxIndirectA

  CharPrevA

  DispatchMessageA

  PeekMessageA

  DestroyWindow

  CreateDialogParamA

  SetTimer

  SetWindowTextA

  PostQuitMessage

  SetForegroundWindow

  wsprintfA

  SendMessageTimeoutA

  FindWindowExA

  SystemParametersInfoA

  CreateWindowExA

  GetClassInfoA

  DialogBoxParamA

  CharNextA

  OpenClipboard

  wininet

  InternetSetCookieA

  GetUrlCacheEntryInfoA

  GopherFindFirstFileA

  InternetOpenUrlW

  FtpDeleteFileA

  InternetAutodial

  DeleteUrlCacheEntry

  dbghelp

  SymEnumSym

  SymEnumerateModules

  SymLoadModuleEx

  SymFindFileInPath

  SymEnumerateSymbolsW

  SymGetLineNext64

  SymInitialize

  kernel32

  SetCriticalSectionSpinCount

  CreateFileA

  SetStdHandle

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  SetEnvironmentVariableA

  CompareStringW

  CompareStringA

  SetFilePointer

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  LCMapStringW

  LCMapStringA

  GetStringTypeW

  MultiByteToWideChar

  GetStringTypeA

  GetLocaleInfoA

  HeapSize

  LoadLibraryA

  RtlUnwind

  InitializeCriticalSectionAndSpinCount

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetFileType

  SetHandleCount

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  GetModuleFileNameA

  GetStdHandle

  WriteFile

  HeapReAlloc

  VirtualAlloc

  HeapAlloc

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  VirtualFree

  HeapCreate

  GetTimeZoneInformation

  WideCharToMultiByte

  InterlockedDecrement

  GetCurrentThreadId

  SetLastError

  InterlockedIncrement

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  GetProcAddress

  GetModuleHandleW

  Sleep

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetStartupInfoA

  GetCommandLineA

  CloseHandle

  OpenMutexA

  GetLastError

  CreateMutexA

  FindFirstFileA

  ExitProcess

  OpenWaitableTimerA

  lstrcpynW

  FindFirstVolumeMountPointA

  GetCurrencyFormatW

  GetConsoleTitleA

  GetFileSizeEx

  FindFirstVolumeA

  FindNextVolumeA

  GetCPInfoExA

  GetLongPathNameW

  GetLongPathNameA

  HeapFree

  GetSystemTimeAsFileTime

  Sections

  .text

  Size: 67KB - Virtual size: 67KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 98KB - Virtual size: 97KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ