General

Malware Config

Signatures

Files

• 88770b571ffbbc34154a4fa1c2a15617a6f642b5efdb81c1ae0d41cda4c704c9

  .exe windows x86

  17ea2031b558b58cf1716e4d07136d87

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ole32

  StringFromIID

  advapi32

  RegOpenKeyExA

  kernel32

  GetCommandLineA

  VirtualAlloc

  LoadLibraryExA

  FreeResource

  GetOEMCP

  ResetEvent

  GetLastError

  GetModuleHandleA

  GetProcAddress

  VirtualQuery

  LocalReAlloc

  GetFileType

  GlobalDeleteAtom

  MoveFileA

  WriteFile

  CompareStringA

  ExitProcess

  user32

  SetScrollInfo

  RegisterClassA

  SetTimer

  DestroyIcon

  ShowWindow

  SetWindowTextA

  DestroyCursor

  TranslateMessage

  GetCursor

  GetKeyboardLayoutNameA

  CharToOemA

  GetActiveWindow

  SetWindowPlacement

  GetKeyboardType

  MoveWindow

  GetFocus

  ReleaseCapture

  RemoveMenu

  GetMenuItemID

  GetMenuItemInfoA

  ClientToScreen

  EqualRect

  msvcrt

  log10

  exit

  sin

  rand

  _acmdln

  atan

  swprintf

  mbstowcs

  comdlg32

  ChooseColorA

  oleaut32

  SysFreeString

  VariantCopyInd

  SysReAllocStringLen

  SafeArrayUnaccessData

  OleLoadPicture

  VariantChangeType

  SysStringLen

  gdi32

  SetPixel

  CreateBrushIndirect

  shell32

  SHGetDiskFreeSpaceA

  SHGetSpecialFolderLocation

  DragQueryFileA

  Sections

  .text

  Size: 33KB - Virtual size: 33KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 229KB - Virtual size: 228KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ