General

Malware Config

Signatures

Files

• 9de4fa16f9f8244af7abd3c29f8e8eb74dcfa13ecc3b939726eb83e8d9f247bc

  .exe windows x86

  a88f2fe31ccfd3b1d15c68747bdc7f79

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetLastError

  GetVersion

  ExitProcess

  HeapAlloc

  GetProcessHeap

  VirtualAlloc

  Sleep

  VirtualFree

  UnmapViewOfFile

  IsValidCodePage

  CreateProcessA

  InterlockedExchange

  GetACP

  CloseHandle

  ReadFile

  SetFilePointer

  MapViewOfFile

  InterlockedCompareExchange

  HeapSize

  WideCharToMultiByte

  GetCommandLineW

  SizeofResource

  lstrlenW

  GetEnvironmentStringsW

  LCMapStringA

  GetConsoleCP

  lstrlenA

  GetSystemInfo

  LCMapStringW

  LeaveCriticalSection

  CreateFileA

  TlsSetValue

  GetFileType

  CreateEventA

  CreateFileW

  GlobalLock

  DuplicateHandle

  FindFirstFileW

  CreateFileMappingA

  CompareStringA

  FindFirstFileA

  CompareStringW

  GetProcAddress

  DeleteFileW

  DeleteFileA

  GetFileSize

  GetStartupInfoA

  FreeLibrary

  GetCurrentThreadId

  GetVersionExA

  TlsAlloc

  QueryPerformanceCounter

  GetOEMCP

  lstrcmpiA

  SetHandleCount

  EnterCriticalSection

  HeapFree

  WriteConsoleW

  GlobalAlloc

  WriteConsoleA

  TerminateProcess

  MulDiv

  SetUnhandledExceptionFilter

  CreateThread

  MultiByteToWideChar

  TlsGetValue

  UnhandledExceptionFilter

  lstrcmpiW

  GetModuleFileNameA

  FlushFileBuffers

  IsDebuggerPresent

  GetModuleFileNameW

  SetLastError

  FormatMessageA

  InterlockedDecrement

  FindClose

  InitializeCriticalSection

  LocalFree

  GetExitCodeProcess

  GetStringTypeW

  HeapReAlloc

  WriteFile

  GetStringTypeA

  LoadLibraryW

  GetCPInfo

  GetTempPathA

  FreeEnvironmentStringsW

  SetErrorMode

  LocalAlloc

  GetLocaleInfoA

  GetConsoleMode

  GetCurrentProcess

  DeleteCriticalSection

  FreeEnvironmentStringsA

  HeapDestroy

  GetDriveTypeA

  WaitForSingleObject

  GetCurrentThread

  GetCommandLineA

  GetModuleHandleA

  GetTickCount

  LoadLibraryA

  GetCurrentProcessId

  user32

  LoadIconA

  CheckMenuItem

  SetWindowLongA

  GetWindowRect

  SetFocus

  DispatchMessageA

  RegisterClassA

  EnableMenuItem

  GetWindow

  EnableWindow

  ShowWindow

  UpdateWindow

  SendMessageA

  GetDC

  SystemParametersInfoA

  IsWindowVisible

  InvalidateRect

  GetClientRect

  SetCursor

  MoveWindow

  gdi32

  GetStockObject

  DeleteDC

  GetDeviceCaps

  DeleteObject

  CreateCompatibleDC

  Sections

  .text

  Size: 527KB - Virtual size: 850KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ