General

Malware Config

Signatures

Files

• 8cd8efad8c6d62328a95a2be9b7bf3977ffcc066dc8f82010bdd56a6d0d6d11f

  .exe windows x86

  a8af0ff9e88c5836cdd98b5ce699e390

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_BIND

  IMAGE_DLLCHARACTERISTICS_APPCONTAINER

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetFilePointer

  RaiseException

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  LCMapStringW

  WideCharToMultiByte

  DeleteCriticalSection

  GetFileType

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetConsoleCP

  SetLastError

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  IsValidCodePage

  Sleep

  GetACP

  InterlockedDecrement

  InterlockedIncrement

  GetCPInfo

  GetModuleFileNameW

  GetStdHandle

  WriteFile

  ExitProcess

  GetModuleHandleW

  GetProcAddress

  GetConsoleMode

  LoadLibraryW

  GetStringTypeW

  HeapReAlloc

  FlushFileBuffers

  RtlUnwind

  HeapSize

  SetStdHandle

  WriteConsoleW

  IsProcessorFeaturePresent

  CloseHandle

  lstrcpyA

  GetCurrentDirectoryA

  GetPrivateProfileSectionA

  LoadLibraryA

  GetLocalTime

  GetPrivateProfileStringA

  GetLastError

  MultiByteToWideChar

  MulDiv

  GetCurrentThreadId

  HeapCreate

  GetCommandLineA

  HeapAlloc

  GetCurrentProcess

  TerminateProcess

  EncodePointer

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  DecodePointer

  GetStartupInfoW

  HeapSetInformation

  LeaveCriticalSection

  EnterCriticalSection

  HeapFree

  FreeLibrary

  GetOEMCP

  CreateFileW

  user32

  LoadCursorA

  FindWindowA

  GetKeyboardLayoutList

  CharToOemA

  RegisterClassA

  MoveWindow

  GetDlgItemTextA

  UpdateWindow

  LoadImageA

  ReleaseCapture

  AdjustWindowRectEx

  DispatchMessageA

  DialogBoxParamA

  SetDlgItemTextA

  CallWindowProcA

  GetDialogBaseUnits

  EndPaint

  DestroyWindow

  GetMessageA

  GetWindowRect

  RegisterClassExA

  MonitorFromPoint

  PostQuitMessage

  GetWindowDC

  IsIconic

  FillRect

  GetKeyState

  SetForegroundWindow

  GetParent

  IsWindowEnabled

  GetClientRect

  SetFocus

  SendMessageA

  BeginPaint

  GetMonitorInfoA

  GetDC

  TranslateMessage

  GetMenu

  TrackPopupMenuEx

  MapVirtualKeyA

  SetWindowLongA

  MessageBoxA

  InvalidateRect

  GetWindowLongA

  CreateWindowExA

  ReleaseDC

  GetDlgItem

  DefWindowProcA

  GetCursorPos

  ShowWindow

  CreatePopupMenu

  EnumDesktopsA

  gdi32

  BitBlt

  GetGlyphOutlineA

  LineTo

  SetTextColor

  GetOutlineTextMetricsA

  DeleteDC

  GetDeviceCaps

  CreateFontIndirectA

  SetBkColor

  SetBkMode

  DeleteObject

  SelectObject

  CreateCompatibleDC

  SetMapMode

  CreateCompatibleBitmap

  CreateBrushIndirect

  Ellipse

  SetPolyFillMode

  SetStretchBltMode

  CreatePen

  GetTextMetricsA

  GetFontData

  GetObjectA

  GetStockObject

  CreateSolidBrush

  TextOutA

  MoveToEx

  comdlg32

  ChooseFontA

  shell32

  SHGetSpecialFolderLocation

  SHGetPathFromIDListA

  SHGetMalloc

  ole32

  PropVariantCopy

  StgCreatePropSetStg

  PropVariantClear

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysAllocString

  OleLoadPicture

  ws2_32

  inet_addr

  netapi32

  NetApiBufferFree

  NetUserEnum

  winmm

  mciSendCommandA

  gdiplus

  GdipFree

  GdipLoadImageFromFile

  GdipCloneImage

  GdipDisposeImage

  GdipAlloc

  authz

  AuthzInitializeResourceManager

  Sections

  .text

  Size: 55KB - Virtual size: 55KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 39KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 198KB - Virtual size: 205KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 82KB - Virtual size: 81KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ