General

Malware Config

Signatures

Files

• cbe358e9d0b5d244b1da9126c7fbd72b4868ec81fb3067f2033901b334eb5545

  .exe windows x86

  56c2d2ac3baaec694c0d49e0454cdca8

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CompareStringA

  GetWindowsDirectoryA

  MoveFileA

  GetFileAttributesA

  GetModuleFileNameA

  Sleep

  DeleteFileA

  GetModuleHandleA

  GetStartupInfoA

  GetCommandLineA

  GetVersion

  ExitProcess

  HeapFree

  HeapAlloc

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  FreeEnvironmentStringsA

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStrings

  GetEnvironmentStringsW

  SetHandleCount

  GetStdHandle

  GetFileType

  DeleteCriticalSection

  GetCurrentThreadId

  TlsSetValue

  TlsAlloc

  SetLastError

  TlsGetValue

  GetLastError

  GetEnvironmentVariableA

  GetVersionExA

  HeapDestroy

  HeapCreate

  VirtualFree

  RtlUnwind

  WriteFile

  VirtualAlloc

  HeapReAlloc

  InitializeCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  CloseHandle

  ReadFile

  SetFilePointer

  FlushFileBuffers

  GetCPInfo

  GetACP

  GetOEMCP

  GetProcAddress

  LoadLibraryA

  SetStdHandle

  CreateFileA

  InterlockedDecrement

  InterlockedIncrement

  MultiByteToWideChar

  GetStringTypeA

  GetStringTypeW

  LCMapStringA

  LCMapStringW

  SetEndOfFile

  GetTimeZoneInformation

  CompareStringW

  SetEnvironmentVariableA

  FindClose

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetDriveTypeA

  FindFirstFileA

  GetFullPathNameA

  GetCurrentDirectoryA

  advapi32

  RegSetValueExA

  RegDeleteValueA

  RegCreateKeyExA

  Exports

  Exports

  NR_RegAddKey

  NR_RegAddKeyRaw

  NR_RegClose

  NR_RegDeleteEntry

  NR_RegDeleteKey

  NR_RegDeleteKeyRaw

  NR_RegEnumEntries

  NR_RegEnumSubkeys

  NR_RegFlush

  NR_RegGetEntry

  NR_RegGetEntryInfo

  NR_RegGetEntryString

  NR_RegGetKey

  NR_RegGetKeyRaw

  NR_RegGetUsername

  NR_RegIsWritable

  NR_RegOpen

  NR_RegSetBufferSize

  NR_RegSetEntry

  NR_RegSetEntryString

  NR_RegSetUsername

  NR_ShutdownRegistry

  NR_StartupRegistry

  VR_Close

  VR_CreateRegistry

  VR_Enum

  VR_EnumUninstall

  VR_GetDefaultDirectory

  VR_GetPath

  VR_GetRefCount

  VR_GetUninstallUserName

  VR_GetVersion

  VR_InRegistry

  VR_Install

  VR_Remove

  VR_SetDefaultDirectory

  VR_SetRefCount

  VR_SetRegDirectory

  VR_UninstallAddFileToList

  VR_UninstallCreateNode

  VR_UninstallDeleteFileFromList

  VR_UninstallDeleteSharedFilesKey

  VR_UninstallDestroy

  VR_UninstallEnumSharedFiles

  VR_UninstallFileExistsInList

  VR_ValidateComponent

  Sections

  .text

  Size: 47KB - Virtual size: 46KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 12KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 936B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .prdata

  Size: 80KB - Virtual size: 80KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE