General

Malware Config

Signatures

Files

• f44375846ca971063c06879dfa533817c39e12e64dfe94adc76ac76eacf41965

  .exe windows x86

  5e50c92a0ac90f6e1726fff2642ee29a

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegEnumKeyExA

  RegCreateKeyExA

  RegDeleteValueA

  RegCloseKey

  RegOpenKeyExA

  RegDeleteKeyA

  RegSetValueExA

  RegQueryInfoKeyA

  RegEnumValueA

  kernel32

  InitializeCriticalSection

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  InterlockedIncrement

  WideCharToMultiByte

  lstrlenW

  GetLastError

  CreateThread

  CreateSemaphoreA

  CloseHandle

  ReleaseSemaphore

  InterlockedDecrement

  WaitForMultipleObjects

  MultiByteToWideChar

  lstrlenA

  GetShortPathNameA

  GetModuleHandleA

  GetModuleFileNameA

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  lstrcmpiA

  lstrcpynA

  IsDBCSLeadByte

  GetCurrentThreadId

  GetCommandLineA

  GetProcAddress

  LoadLibraryA

  lstrcpyA

  lstrcatA

  WaitForSingleObject

  SetEvent

  GetStartupInfoA

  CreateEventA

  GetVersionExA

  user32

  GetMessageA

  DispatchMessageA

  PostThreadMessageA

  CharNextA

  ole32

  CoTaskMemAlloc

  CoRevokeClassObject

  CoRegisterClassObject

  CoInitialize

  CoTaskMemRealloc

  CoTaskMemFree

  CoInitializeEx

  CoCreateInstance

  CoUninitialize

  oleaut32

  VariantClear

  RegisterTypeLi

  VarUI4FromStr

  SysFreeString

  VariantInit

  SysAllocString

  LoadTypeLi

  msvcrt

  __p__commode

  __p__fmode

  __set_app_type

  _except_handler3

  _initterm

  _controlfp

  _onexit

  __dllonexit

  ??2@YAPAXI@Z

  free

  __getmainargs

  __setusermatherr

  malloc

  _adjust_fdiv

  realloc

  __CxxFrameHandler

  ??3@YAXPAX@Z

  _EH_prolog

  exit

  _XcptFilter

  _exit

  _acmdln

  Sections

  .text

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 824B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ