General

Malware Config

Signatures

Files

• 721bdb744338d2e4525c9bbeecbf2129a71c67a2795c083306438997515b366c

  .exe windows x86

  e58263e3d76981c7bc11645789a2638f

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  ord17

  version

  VerInstallFileA

  kernel32

  GetStartupInfoA

  ExitProcess

  GetCommandLineA

  GetModuleHandleA

  AddAtomA

  LockResource

  lstrcpyA

  FindResourceExA

  SetErrorMode

  LocalFree

  FormatMessageA

  OpenEventA

  FindResourceA

  SetEvent

  LoadResource

  RemoveDirectoryA

  GetAtomNameA

  GetShortPathNameA

  CreateDirectoryA

  lstrcpynA

  lstrlenA

  lstrcatA

  GetLastError

  GetFileAttributesA

  SetFileAttributesA

  GlobalLock

  GlobalAlloc

  GetPrivateProfileIntA

  GetPrivateProfileStringA

  CopyFileA

  DeleteFileA

  GetUserDefaultLangID

  GlobalUnlock

  GlobalFree

  GetModuleFileNameA

  RtlUnwind

  Sleep

  CloseHandle

  lstrlenW

  WideCharToMultiByte

  MultiByteToWideChar

  GetTempPathA

  WaitForSingleObject

  CreateProcessA

  CreateFileA

  GetTempFileNameA

  user32

  GetDC

  ReleaseDC

  PeekMessageA

  CreateDialogParamA

  EndPaint

  MessageBoxA

  GetWindowLongA

  EndDialog

  BeginPaint

  DispatchMessageA

  SetWindowLongA

  DialogBoxIndirectParamA

  DestroyWindow

  CreateDialogIndirectParamA

  SetDlgItemTextA

  GetClientRect

  GetWindowRect

  MoveWindow

  CharLowerA

  wsprintfA

  IsDialogMessageA

  TranslateMessage

  GetDlgItem

  LoadImageA

  SendMessageA

  CharUpperA

  CharNextA

  GetDesktopWindow

  gdi32

  BitBlt

  UnrealizeObject

  GetObjectA

  GetDeviceCaps

  CreateHalftonePalette

  CreatePalette

  GetSystemPaletteEntries

  GetDIBColorTable

  SelectPalette

  RealizePalette

  DeleteDC

  CreateCompatibleDC

  SelectObject

  advapi32

  RegOpenKeyA

  RegCloseKey

  RegOpenKeyExA

  RegQueryValueExA

  RegSetValueExA

  ole32

  CoInitialize

  CoFreeAllLibraries

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysAllocString

  SysAllocStringLen

  SysFreeString

  VariantClear

  SafeArrayGetElement

  SysStringLen

  SafeArrayGetLBound

  SafeArrayGetUBound

  Sections

  .text

  Size: 17KB - Virtual size: 16KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 179KB - Virtual size: 204KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE