General

Malware Config

Signatures

Files

• b438b811cc0eda7fcaf40e9c607211637e8979868234cea1b0210668d24c63d9

  .exe windows x86

  0bb45c02d9f6fa50afd81b516a809e40

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  FreeLibraryAndExitThread

  AllocConsole

  VirtualAlloc

  LocalSize

  SetCommTimeouts

  GetDiskFreeSpaceExW

  FindFirstFileW

  CloseHandle

  CreatePipe

  ReleaseMutex

  BackupRead

  WriteFileEx

  HeapDestroy

  SetLastError

  EnumCalendarInfoA

  lstrcmpW

  GetModuleHandleW

  GetPrivateProfileStringA

  FindAtomW

  EnumDateFormatsW

  GetComputerNameW

  GetLocaleInfoA

  GetVersionExA

  GetComputerNameA

  SetEnvironmentVariableW

  GlobalSize

  CreateFileMappingW

  CreateSemaphoreA

  GlobalGetAtomNameW

  CreateMutexA

  SuspendThread

  UnlockFile

  SetEndOfFile

  GetNumberFormatW

  SetHandleCount

  _llseek

  GetProcessVersion

  SetThreadPriorityBoost

  SetTapeParameters

  FindClose

  GetSystemTime

  RaiseException

  GetStringTypeExA

  TlsFree

  lstrcmpiW

  SetHandleInformation

  OpenEventW

  GetProcessHeap

  GetNumberFormatA

  SwitchToFiber

  SetFilePointer

  GlobalHandle

  ExitProcess

  advapi32

  RegRestoreKeyA

  RegSetValueW

  CopySid

  GetSecurityDescriptorGroup

  RegEnumKeyExA

  user32

  GetMessageW

  GetClassInfoW

  DrawCaption

  SetWinEventHook

  MonitorFromPoint

  UnhookWinEvent

  ScreenToClient

  gdi32

  ChoosePixelFormat

  CloseEnhMetaFile

  RectInRegion

  CreateICW

  SetMetaFileBitsEx

  GetObjectA

  Sections

  .text

  Size: 37KB - Virtual size: 347KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 385KB - Virtual size: 384KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ