General

Malware Config

Signatures

Files

• 8ebef10661973654d41d225ecf491417cb6624a90d3d1dc94408bab0fc1a6bfa

  .exe windows x86

  13a63416921b5dbb66a9f9bd6f389f57

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  kernel32

  GetVersionExW

  LocalFree

  lstrcpynW

  FormatMessageW

  GetLocaleInfoW

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  lstrlenW

  lstrcpyW

  GlobalFree

  SetLastError

  WideCharToMultiByte

  GetProcAddress

  GetModuleHandleA

  LocalAlloc

  LeaveCriticalSection

  GlobalReAlloc

  GlobalHandle

  EnterCriticalSection

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedDecrement

  CloseHandle

  GetCurrentThreadId

  lstrcatW

  GetModuleFileNameW

  GetModuleHandleW

  SetErrorMode

  InterlockedIncrement

  GetVersion

  lstrcmpW

  GlobalFlags

  GetVersionExA

  FreeLibrary

  LoadLibraryA

  GlobalDeleteAtom

  GlobalFindAtomW

  GlobalAddAtomW

  ReadFile

  WriteFile

  SetFilePointer

  FlushFileBuffers

  GetCurrentProcess

  ExitProcess

  RtlUnwind

  GetSystemTimeAsFileTime

  GetCommandLineA

  user32

  PeekMessageW

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExW

  ole32

  StgOpenStorageEx

  oleaut32

  GetActiveObject

  SafeArrayGetRecordInfo

  VarI2FromUI8

  VariantInit

  Sections

  .text

  Size: 56KB - Virtual size: 116KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 92KB - Virtual size: 92KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 308B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ