General

Malware Config

Signatures

Files

• ee86737efb47fdc453d04dd1360cf926f6cc19ce34d0f620298e20647f3fc7b2

  .exe windows x86

  e9e7ccaf3d7ad7661f7aff79337aa0d7

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetCommandLineW

  VirtualAlloc

  VirtualFree

  LoadLibraryA

  GetProcAddress

  HeapSize

  HeapReAlloc

  HeapDestroy

  GetVersionExA

  GetStartupInfoW

  GetModuleHandleA

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedExchange

  GetACP

  GetLocaleInfoA

  GetThreadLocale

  GetVersionExW

  RaiseException

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  FlushInstructionCache

  GetCurrentProcess

  GetCurrentThreadId

  SetLastError

  GetModuleFileNameW

  lstrlenW

  HeapFree

  HeapAlloc

  GetProcessHeap

  GetUserDefaultUILanguage

  SizeofResource

  LockResource

  LoadResource

  FindResourceW

  FindResourceExW

  GetLastError

  CreateMutexW

  CloseHandle

  CreateProcessW

  FormatMessageW

  GlobalFree

  GetSystemTimeAsFileTime

  FreeLibrary

  InterlockedIncrement

  InterlockedDecrement

  MultiByteToWideChar

  LoadLibraryExW

  lstrcmpiW

  lstrcpynW

  CreateEventW

  GetLocaleInfoW

  SetProcessWorkingSetSize

  GetTimeFormatW

  GetDateFormatW

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  DeleteFileW

  lstrcatW

  lstrcpyW

  MoveFileExW

  WriteFile

  CreateFileW

  GetTempFileNameW

  GetTempPathW

  GetSystemDefaultLangID

  LoadLibraryW

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetWindowsDirectoryA

  CreateFileA

  lstrcatA

  user32

  GetFocus

  GetKeyState

  DrawIcon

  EnableWindow

  IsWindowVisible

  SendNotifyMessageW

  SetScrollInfo

  GetScrollInfo

  SetScrollPos

  ScrollWindowEx

  ScrollWindow

  GetScrollPos

  SetFocus

  DestroyWindow

  GetDlgItem

  TrackMouseEvent

  IsWindowEnabled

  SetRect

  GetParent

  ScreenToClient

  UnregisterClassW

  SendMessageW

  SetWindowLongW

  SetWindowTextW

  UpdateWindow

  ShowWindow

  GetClassInfoExW

  wsprintfW

  LoadCursorW

  DefWindowProcW

  RegisterClassExW

  CreateWindowExW

  GetWindowLongW

  CallWindowProcW

  PostMessageW

  GetClientRect

  PostQuitMessage

  DispatchMessageW

  TranslateMessage

  GetMessageW

  RegisterWindowMessageW

  DestroyIcon

  IsWindow

  FindWindowExW

  SetForegroundWindow

  LoadImageW

  GetSystemMetrics

  LoadIconW

  CharNextW

  LoadStringW

  ReleaseDC

  GetDC

  SetTimer

  KillTimer

  BringWindowToTop

  DestroyMenu

  TrackPopupMenu

  SetMenuDefaultItem

  SetMenuItemInfoW

  AppendMenuW

  CreatePopupMenu

  GetCursorPos

  MsgWaitForMultipleObjectsEx

  PeekMessageW

  GetSysColor

  SystemParametersInfoW

  FillRect

  MapWindowPoints

  GetWindowRect

  GetAncestor

  IsIconic

  EndPaint

  BeginPaint

  GetWindowTextW

  GetWindowTextLengthW

  MoveWindow

  InvalidateRect

  DrawTextW

  gdi32

  DeleteObject

  GetDeviceCaps

  GetTextMetricsW

  SelectObject

  CreateFontIndirectW

  DPtoLP

  SetWindowOrgEx

  SetViewportOrgEx

  ModifyWorldTransform

  SetGraphicsMode

  SaveDC

  BitBlt

  CreateSolidBrush

  CreateCompatibleBitmap

  CreateCompatibleDC

  SetTextColor

  SetBkMode

  GetObjectA

  GetObjectW

  DeleteDC

  SetLayout

  CreateBitmap

  RestoreDC

  GetStockObject

  advapi32

  UnregisterTraceGuids

  GetTraceLoggerHandle

  GetTraceEnableLevel

  GetTraceEnableFlags

  RegCreateKeyExW

  RegSetValueExW

  RegCloseKey

  TraceMessage

  RegDeleteKeyW

  RegDeleteValueW

  RegOpenKeyExW

  RegQueryInfoKeyW

  RegEnumKeyExW

  RegQueryValueExW

  FreeSid

  CheckTokenMembership

  AllocateAndInitializeSid

  QueryServiceStatus

  CloseServiceHandle

  OpenServiceW

  OpenSCManagerW

  RegisterTraceGuidsW

  shell32

  ShellExecuteW

  Shell_NotifyIconW

  CommandLineToArgvW

  SHGetFolderPathW

  ole32

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoUninitialize

  CoInitialize

  CoTaskMemFree

  CoCreateInstance

  shlwapi

  StrCmpW

  Sections

  .text

  Size: 124KB - Virtual size: 124KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 832B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ