General

Malware Config

Signatures

Files

• eb56d24d80edee73e794d2895f987ebc652baace0c25020ba39414a17941a6bd

  .exe windows x86

  390ea1e1a0a83ad4918d76109f91a97c

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  UnmapViewOfFile

  FindFirstFileA

  SetErrorMode

  GetFileAttributesA

  CreateDirectoryA

  GetTempFileNameA

  SetCurrentDirectoryW

  GetModuleFileNameW

  CloseHandle

  CreateThread

  LocalFree

  FormatMessageW

  LocalAlloc

  GetCurrentProcess

  GetProcAddress

  GetModuleHandleW

  GetLastError

  CreateMutexW

  GetVersionExW

  GetVersion

  LoadLibraryW

  DeleteCriticalSection

  WaitForSingleObject

  lstrlenW

  LeaveCriticalSection

  EnterCriticalSection

  GetFileAttributesW

  GetTempPathA

  GetCurrentDirectoryW

  InitializeCriticalSection

  lstrcpyW

  HeapFree

  HeapAlloc

  GetProcessHeap

  IsDBCSLeadByte

  CopyFileW

  CreateDirectoryW

  GetWindowsDirectoryW

  GetEnvironmentVariableW

  DeleteFileW

  SetFileAttributesW

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenA

  GetDriveTypeW

  ExpandEnvironmentStringsW

  FreeLibrary

  LoadLibraryExW

  DeviceIoControl

  CreateFileA

  TerminateProcess

  OpenProcess

  FindClose

  FindNextFileW

  FindFirstFileW

  CreateProcessW

  lstrcatW

  SetEvent

  CreateEventW

  ResetEvent

  WriteFile

  SetCommState

  GetCommState

  SetCommTimeouts

  ReadFile

  ExitThread

  WaitForMultipleObjects

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetModuleHandleA

  GetStartupInfoA

  SetLastError

  GetDiskFreeSpaceW

  OpenFileMappingA

  CreateFileMappingA

  MapViewOfFile

  GetVersionExA

  CreateEventA

  DebugBreak

  ExitProcess

  SetFilePointer

  DeleteFileA

  FileTimeToDosDateTime

  FileTimeToLocalFileTime

  GetSystemDirectoryW

  CreateFileW

  GetWindowsDirectoryA

  lstrcatA

  VirtualAlloc

  user32

  ReleaseDC

  LoadStringA

  GetDC

  SystemParametersInfoW

  wsprintfW

  GetParent

  PostMessageW

  DialogBoxParamW

  ShowWindow

  SetWindowPos

  ScreenToClient

  GetWindowRect

  GetWindowLongW

  EnumChildWindows

  LoadImageW

  RedrawWindow

  EnableWindow

  EndDialog

  GetDlgItem

  SendMessageA

  SetWindowLongW

  LoadIconW

  SetFocus

  SendDlgItemMessageW

  GetSysColor

  InvalidateRect

  SetWindowLongA

  GetWindowLongA

  IsWindow

  CopyRect

  GetClientRect

  MessageBoxA

  SetTimer

  FindWindowW

  RegisterClassExW

  LoadStringW

  MessageBoxW

  CreateWindowExW

  GetMessageW

  TranslateMessage

  DispatchMessageW

  CharLowerW

  SendMessageW

  SetForegroundWindow

  EnumThreadWindows

  PostQuitMessage

  DefWindowProcW

  ExitWindowsEx

  LoadCursorW

  gdi32

  GetDeviceCaps

  CreateFontIndirectW

  AddFontResourceW

  GetStockObject

  msvcrt

  _mbsrchr

  __lconv_init

  _mbschr

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _cexit

  _XcptFilter

  _exit

  _c_exit

  setlocale

  _mbsinc

  _controlfp

  wcsrchr

  wcschr

  wcscat

  wcscpy

  wcslen

  wcsncpy

  _ftol

  strtoul

  memmove

  towlower

  _wtoi

  iswspace

  free

  _wcsnicmp

  _wcsicmp

  _except_handler3

  wcsncmp

  comdlg32

  GetOpenFileNameW

  advapi32

  RegEnumKeyW

  LookupPrivilegeValueW

  OpenProcessToken

  LookupAccountSidW

  RegQueryValueW

  RegEnumKeyExW

  RegSetValueExW

  RegOpenKeyW

  RegOpenKeyExW

  AdjustTokenPrivileges

  RegQueryValueExW

  RegCloseKey

  AllocateAndInitializeSid

  EqualSid

  FreeSid

  GetTokenInformation

  shell32

  SHGetFileInfoW

  SHGetDesktopFolder

  SHGetPathFromIDListW

  SHGetSpecialFolderLocation

  SHBrowseForFolderW

  SHGetMalloc

  ole32

  OleUninitialize

  OleInitialize

  CoInitialize

  CoTaskMemAlloc

  CoTaskMemFree

  CoCreateInstance

  CLSIDFromString

  CoUninitialize

  shlwapi

  StrCmpIW

  PathAppendW

  PathIsRootW

  StrCpyNW

  StrCmpNIW

  StrCatW

  StrCpyW

  PathCombineW

  StrDupW

  PathIsDirectoryW

  SHGetValueW

  StrChrIW

  StrCmpW

  Sections

  .text

  Size: 141KB - Virtual size: 140KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ