General

Malware Config

Signatures

Files

• 8fbe163a140f19e8222b1cf8fa38e11edfce42545f5d52a760b9629a22b025ca

  .exe windows x86

  19226140f53ecd50c9e019719f572b10

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegDeleteKeyW

  RegDeleteValueW

  RegCloseKey

  RegCreateKeyExW

  RegOpenKeyExW

  RegSetValueExW

  RegQueryInfoKeyW

  RegEnumKeyExW

  RegQueryValueExW

  kernel32

  CloseHandle

  WaitForSingleObject

  lstrlenW

  RaiseException

  InitializeCriticalSection

  DeleteCriticalSection

  GetLastError

  lstrcmpiW

  GetModuleFileNameW

  Sleep

  CreateThread

  CreateEventW

  GetModuleHandleW

  GetCurrentThreadId

  InterlockedIncrement

  InterlockedDecrement

  SetEvent

  FreeLibrary

  MultiByteToWideChar

  SizeofResource

  LoadResource

  FindResourceW

  LoadLibraryExW

  GetCommandLineW

  HeapSetInformation

  LocalFree

  LockResource

  FindResourceExW

  FormatMessageW

  HeapFree

  HeapAlloc

  GetProcessHeap

  ExpandEnvironmentStringsW

  CompareStringW

  GetVersionExA

  InterlockedExchange

  EnterCriticalSection

  HeapDestroy

  HeapReAlloc

  HeapSize

  OutputDebugStringA

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetModuleHandleA

  SetUnhandledExceptionFilter

  GetStartupInfoW

  InterlockedCompareExchange

  LeaveCriticalSection

  user32

  UnregisterClassA

  MessageBoxW

  CharNextW

  PostThreadMessageW

  GetMessageW

  TranslateMessage

  DispatchMessageW

  CharUpperW

  msvcrt

  _amsg_exit

  ??3@YAXPAX@Z

  ??_V@YAXPAX@Z

  malloc

  free

  memcpy_s

  wcscpy_s

  wcsncpy_s

  wcscat_s

  _purecall

  _controlfp

  ?terminate@@YAXXZ

  _onexit

  _lock

  __dllonexit

  _unlock

  _errno

  realloc

  _except_handler4_common

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _wcmdln

  _initterm

  exit

  _XcptFilter

  _exit

  _cexit

  __wgetmainargs

  wcsstr

  memmove_s

  ??2@YAPAXI@Z

  memset

  ??_U@YAPAXI@Z

  oleaut32

  SysStringLen

  SysAllocString

  LoadTypeLi

  UnRegisterTypeLi

  RegisterTypeLi

  VarUI4FromStr

  SysFreeString

  ole32

  CoCreateInstance

  StringFromGUID2

  CoTaskMemFree

  CoRegisterClassObject

  CoRevokeClassObject

  CoTaskMemRealloc

  CoTaskMemAlloc

  CoUninitialize

  CoInitialize

  shell32

  ShellExecuteW

  setupapi

  SetupDiDestroyDeviceInfoList

  SetupDiGetDeviceInterfaceDetailW

  SetupDiGetDeviceInterfaceAlias

  SetupDiCreateDeviceInfoList

  SetupDiOpenDeviceInterfaceW

  Sections

  .text

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 27KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 19KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE