General

Malware Config

Signatures

Files

• c679ba5f8e92bafed0398fc233c4c2f53ce8e1fc88709f13b965a37ce93fae60

  .exe windows x86

  a7676c60ddfa40516f60fb515f68ede5

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  __p__fmode

  ??2@YAPAXI@Z

  __CxxFrameHandler

  _purecall

  printf

  wcsstr

  toupper

  _CxxThrowException

  ?terminate@@YAXXZ

  _controlfp

  _except_handler3

  ??1type_info@@UAE@XZ

  __set_app_type

  ??3@YAXPAX@Z

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  __initenv

  exit

  _cexit

  _XcptFilter

  _exit

  _c_exit

  kernel32

  lstrcpyW

  GetModuleFileNameW

  lstrlenW

  lstrcatW

  ExitProcess

  SetEvent

  GetLastError

  CreateEventW

  GetCurrentThreadId

  GetCommandLineW

  GetModuleHandleA

  InterlockedIncrement

  InterlockedDecrement

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  wbemcomn

  ??1CUnk@@UAE@XZ

  ?QueryInterface@CUnk@@UAGJABU_GUID@@PAPAX@Z

  ?AddRef@CUnk@@UAGKXZ

  ?Release@CUnk@@UAGKXZ

  ?Initialize@CUnk@@UAEHXZ

  ??0CUnk@@QAE@PAVCLifeControl@@PAUIUnknown@@@Z

  ole32

  CoInitialize

  CoInitializeSecurity

  StringFromGUID2

  CoRevokeClassObject

  CoRegisterClassObject

  advapi32

  CreateServiceW

  RegSetValueExW

  RegCreateKeyW

  RegDeleteKeyW

  RegOpenKeyW

  SetServiceStatus

  RegisterServiceCtrlHandlerW

  StartServiceCtrlDispatcherW

  RegCloseKey

  OpenSCManagerW

  DeleteService

  OpenServiceW

  user32

  wsprintfW

  PostThreadMessageW

  SetTimer

  TranslateMessage

  DispatchMessageW

  PostQuitMessage

  GetMessageW

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 156B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .TOT

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE