General

Malware Config

Signatures

Files

• 9ea0bfca9cd4abb8a9daa616f6d7623688e1905fd1aba79fb20d24cefc9aa7cf

  .exe windows x86

  7289f96427e6eccf29ace90a47df7ea5

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  SetForegroundWindow

  DispatchMessageA

  GetDC

  ReleaseDC

  DestroyWindow

  GetParent

  ShowWindow

  EnableWindow

  TranslateMessage

  LoadStringA

  EnableMenuItem

  RegisterClassA

  GetSubMenu

  SetTimer

  SetFocus

  BeginPaint

  KillTimer

  GetSystemMetrics

  GetWindowRect

  ReleaseCapture

  SetWindowLongA

  SetWindowTextA

  GetWindowLongA

  ScreenToClient

  LoadCursorA

  LoadIconA

  GetDesktopWindow

  EndDialog

  MoveWindow

  MessageBoxA

  DialogBoxParamA

  SendMessageA

  GetClientRect

  SetCursor

  kernel32

  CreateFileA

  GetStdHandle

  GetFileAttributesA

  WaitForSingleObject

  LockResource

  FindFirstFileW

  HeapDestroy

  FreeEnvironmentStringsA

  DeleteCriticalSection

  GetCurrentProcess

  GetLocaleInfoA

  LocalAlloc

  SetFilePointer

  WideCharToMultiByte

  InterlockedExchange

  WriteFile

  GetSystemTimeAsFileTime

  GetStringTypeW

  SetEvent

  LocalFree

  FormatMessageW

  InitializeCriticalSection

  LoadResource

  FindClose

  TlsGetValue

  FormatMessageA

  SetLastError

  GetEnvironmentVariableA

  FlushFileBuffers

  GetModuleFileNameA

  LoadLibraryExA

  UnhandledExceptionFilter

  LoadLibraryExW

  MultiByteToWideChar

  CreateEventW

  GetCurrentThread

  GetTickCount

  GetCommandLineA

  GetCurrentThreadId

  GetLastError

  GetVersion

  GetCurrentProcessId

  GetModuleHandleA

  ExitProcess

  VirtualAlloc

  GetOEMCP

  Sleep

  CreateProcessW

  HeapCreate

  SetStdHandle

  GetModuleHandleW

  GetACP

  CloseHandle

  ReadFile

  RaiseException

  InterlockedCompareExchange

  HeapSize

  SizeofResource

  VirtualQuery

  GlobalUnlock

  GetEnvironmentStringsW

  LCMapStringA

  lstrlenA

  LCMapStringW

  LeaveCriticalSection

  TlsSetValue

  GetFileType

  CreateEventA

  CreateFileW

  GetTimeZoneInformation

  GlobalLock

  FindNextFileA

  FindNextFileW

  CompareStringW

  GetProcessHeap

  GetProcAddress

  DeleteFileA

  GetFileSize

  GetStartupInfoA

  LoadLibraryA

  GetVersionExA

  TlsAlloc

  QueryPerformanceCounter

  FreeLibrary

  LoadLibraryW

  EnterCriticalSection

  HeapFree

  InterlockedIncrement

  SetEndOfFile

  GlobalAlloc

  WriteConsoleA

  TerminateProcess

  SetEnvironmentVariableA

  SetUnhandledExceptionFilter

  Sections

  .text

  Size: 711KB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ