General

Malware Config

Signatures

Files

• 1e1b8385a9beb78f02f6fa4fa9ca45b494ab0c6fd3aab8f5a8655627e97f0486

  .exe windows x86

  0a3e7079887d283a624da0059ea794a5

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  uniansi

  RegOpenKeyExW

  RegEnumKeyExW

  RegQueryInfoKeyW

  RegSetValueExW

  PostThreadMessageW

  RegCreateKeyExW

  RegEnumValueW

  DispatchMessageW

  lstrcpynW

  CharNextW

  CreateEventW

  lstrlenW

  PeekMessageW

  wsprintfW

  LoadStringW

  lstrcpyW

  LoadLibraryW

  RegDeleteValueW

  CreateMutexW

  lstrcatW

  FindWindowW

  FormatMessageW

  CompareStringW

  RegDeleteKeyW

  GetShortPathNameW

  GetModuleFileNameW

  LoadLibraryExW

  lstrcmpiW

  kernel32

  EnterCriticalSection

  LoadLibraryA

  GetProcAddress

  GetModuleHandleA

  GetStartupInfoA

  InterlockedExchange

  LeaveCriticalSection

  HeapFree

  GetProcessHeap

  HeapAlloc

  SetLastError

  GetUserDefaultLangID

  WideCharToMultiByte

  InterlockedIncrement

  InitializeCriticalSection

  DeleteCriticalSection

  HeapDestroy

  FreeLibrary

  MultiByteToWideChar

  lstrlenA

  SizeofResource

  LoadResource

  FindResourceW

  GetLastError

  SetEvent

  InterlockedDecrement

  CloseHandle

  WaitForSingleObject

  CreateThread

  Sleep

  GetCurrentThreadId

  GetCommandLineW

  ole32

  CoRevokeClassObject

  CoRegisterClassObject

  CoInitialize

  CoCreateInstance

  CoTaskMemRealloc

  CoUninitialize

  CoTaskMemAlloc

  CoTaskMemFree

  oleaut32

  RegisterTypeLi

  LoadTypeLi

  VarUI4FromStr

  SysFreeString

  SysAllocString

  comctl32

  InitCommonControlsEx

  msvcrt

  __p__commode

  __dllonexit

  _except_handler3

  __setusermatherr

  _initterm

  _adjust_fdiv

  _acmdln

  exit

  __getmainargs

  _exit

  memcmp

  _XcptFilter

  memcpy

  realloc

  memset

  _onexit

  __p__fmode

  __set_app_type

  malloc

  free

  _controlfp

  advapi32

  RegCloseKey

  gdi32

  DeleteObject

  user32

  MsgWaitForMultipleObjects

  MessageBoxW

  TranslateMessage

  ShowWindow

  BringWindowToTop

  SetForegroundWindow

  Sections

  .text

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 6KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 73KB - Virtual size: 76KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE