General

Malware Config

Signatures

Files

• eb77f808aebcff6fdbd5e0631a52adea6e51c680fd4cb851fef0d724b2f75bc3

  .exe windows x86

  d10109842c58e9656992fc92257ec4d7

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shell32

  DragAcceptFiles

  DragQueryFileA

  DragFinish

  user32

  SetRect

  SetWindowWord

  UpdateWindow

  GetWindowWord

  RegisterClassA

  CreateDialogIndirectParamA

  DialogBoxIndirectParamA

  CreateWindowExA

  InvalidateRect

  DestroyWindow

  ShowWindow

  CreateDialogParamA

  EnumChildWindows

  CallWindowProcA

  GetCursorPos

  SetCursorPos

  LoadCursorA

  SetCursor

  GetActiveWindow

  CharUpperA

  CharToOemA

  EnumWindows

  GetLastActivePopup

  PostMessageA

  GetPropA

  SetWindowsHookA

  LoadStringA

  DialogBoxParamA

  UnhookWindowsHook

  SetWindowTextA

  GetWindowTextA

  LoadIconA

  GetWindowLongA

  SetWindowLongA

  SendMessageA

  SetPropA

  GetDlgItem

  SendDlgItemMessageA

  CheckRadioButton

  EnableWindow

  OemToCharA

  SetActiveWindow

  GetDlgItemTextA

  SetFocus

  BringWindowToTop

  SetForegroundWindow

  EndDialog

  DestroyIcon

  RemovePropA

  GetSysColor

  GetClientRect

  BeginPaint

  EndPaint

  DefWindowProcA

  SetDlgItemTextA

  SetWindowPos

  wsprintfA

  MessageBoxA

  SystemParametersInfoA

  GetClassNameA

  IsWindow

  DispatchMessageA

  GetSystemMetrics

  GetWindowRect

  MoveWindow

  PeekMessageA

  TranslateMessage

  kernel32

  GetCurrentProcess

  HeapReAlloc

  GlobalSize

  TerminateProcess

  SetEnvironmentVariableA

  CompareStringW

  CompareStringA

  ReadFile

  SetEndOfFile

  GetLocaleInfoW

  FlushFileBuffers

  GetCurrentProcessId

  GetCurrentThreadId

  QueryPerformanceCounter

  IsBadCodePtr

  GetOEMCP

  VirtualQuery

  GetSystemInfo

  VirtualProtect

  LCMapStringW

  LCMapStringA

  GetTimeZoneInformation

  SetStdHandle

  VirtualAlloc

  GetStringTypeW

  GetStringTypeA

  IsValidCodePage

  IsValidLocale

  EnumSystemLocalesA

  GetLocaleInfoA

  GetUserDefaultLCID

  GetCPInfo

  SetUnhandledExceptionFilter

  HeapSize

  VirtualFree

  HeapCreate

  HeapDestroy

  GetFileType

  SetHandleCount

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  UnhandledExceptionFilter

  GetStdHandle

  WriteFile

  lstrcpyA

  lstrlenA

  WinExec

  GlobalDeleteAtom

  GlobalGetAtomNameA

  GetDriveTypeA

  GetVersionExA

  GetModuleFileNameA

  FreeLibrary

  GetACP

  GetProcAddress

  LoadLibraryA

  SetErrorMode

  FreeResource

  LockResource

  LoadResource

  SizeofResource

  FindResourceA

  GetTickCount

  CloseHandle

  GetFileSize

  CreateFileA

  GlobalAddAtomA

  GetVersion

  lstrcatA

  SetCurrentDirectoryA

  IsBadReadPtr

  LocalFree

  FormatMessageA

  GetLastError

  GlobalMemoryStatus

  GetLocalTime

  GetVolumeInformationA

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  MultiByteToWideChar

  DeleteFileA

  GlobalHandle

  GetPrivateProfileIntA

  GetPrivateProfileStringA

  ExitProcess

  FileTimeToSystemTime

  DosDateTimeToFileTime

  GetSystemTime

  SystemTimeToFileTime

  FileTimeToDosDateTime

  GetDateFormatA

  GetTimeFormatA

  WideCharToMultiByte

  IsBadWritePtr

  GetFullPathNameA

  GetShortPathNameA

  FindClose

  FindNextFileA

  FindFirstFileA

  FileTimeToLocalFileTime

  GetModuleHandleA

  GetStartupInfoA

  GetCommandLineA

  RtlUnwind

  RaiseException

  HeapCompact

  HeapFree

  HeapAlloc

  SetFilePointer

  GetSystemTimeAsFileTime

  GetCurrentDirectoryA

  gdi32

  MoveToEx

  LineTo

  SetTextColor

  SelectObject

  SetBkColor

  DeleteObject

  SetTextAlign

  GetBkColor

  GetTextExtentPoint32A

  ExtTextOutA

  CreateDCA

  GetDeviceCaps

  CreateFontIndirectA

  DeleteDC

  CreatePen

  comdlg32

  GetOpenFileNameA

  GetSaveFileNameA

  advapi32

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  RegSetValueExA

  RegEnumValueA

  RegCloseKey

  RegDeleteKeyA

  version

  VerQueryValueA

  GetFileVersionInfoSizeA

  GetFileVersionInfoA

  Sections

  .text

  Size: 148KB - Virtual size: 145KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 24KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 247KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 120KB - Virtual size: 119KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  �Z�

  Size: 236KB - Virtual size: 236KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE