General

Malware Config

Signatures

Files

• c4e023881263c0f3ddb8bd98fc6fb8968e46756a3190fc0b5b8df0b7af4cd3b6

  .exe windows x86

  bc84c86c324ef6bea32bca11dcd56923

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  ??2@YAPAXI@Z

  _except_handler3

  _c_exit

  _exit

  _XcptFilter

  _cexit

  exit

  _acmdln

  __getmainargs

  _initterm

  __setusermatherr

  _adjust_fdiv

  __p__commode

  _vsnwprintf

  __p__fmode

  __set_app_type

  _controlfp

  ??3@YAXPAX@Z

  kernel32

  EnterCriticalSection

  LoadLibraryExA

  SetEvent

  GetTempFileNameW

  GetTickCount

  GetTempPathW

  UnmapViewOfFile

  GetModuleHandleW

  CloseHandle

  CreateProcessW

  GetModuleFileNameW

  GetLastError

  SetLastError

  DeleteCriticalSection

  lstrcpynW

  CreateFileW

  GetCommandLineW

  SetUnhandledExceptionFilter

  InitializeCriticalSection

  CreateFileMappingW

  QueryPerformanceCounter

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  GetModuleHandleA

  GetStartupInfoA

  GetProcAddress

  LeaveCriticalSection

  LocalFree

  LoadLibraryW

  MapViewOfFile

  GetWindowsDirectoryW

  GlobalFree

  gdi32

  GetObjectW

  SetTextColor

  SetBkMode

  CreatePen

  SelectObject

  Polyline

  DeleteObject

  CreateFontIndirectW

  user32

  GetParent

  DialogBoxParamW

  SendMessageW

  LoadStringW

  SetDlgItemTextW

  GetSysColor

  DrawIconEx

  FillRect

  GetSysColorBrush

  SetWindowTextW

  EnableWindow

  GetDlgItem

  ShowWindow

  EndDialog

  GetWindowLongW

  MessageBoxW

  SetWindowLongW

  shlwapi

  ord414

  PathFindFileNameW

  PathRemoveFileSpecW

  PathAppendW

  PathQuoteSpacesW

  StrCmpW

  StrToIntW

  shell32

  ExtractIconExW

  CommandLineToArgvW

  dbghelp

  MiniDumpWriteDump

  MiniDumpReadDumpStream

  oleaut32

  SysStringLen

  SysAllocStringLen

  SysFreeString

  SysAllocString

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  shdocvw

  ord159

  sfc

  SfcIsFileProtected

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 30KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE