General

Malware Config

Signatures

Files

• 7c650280d0aa9828feb81f87c811fd5f8e53a84c611aab59902b762ed7d09d0f

  .exe windows x86

  5967dae4063f30cb2895e822c30ab850

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CreateEventA

  GetCurrentThread

  GetThreadPriority

  SetEvent

  GetSystemInfo

  GetTempFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  GetDiskFreeSpaceA

  GetFileAttributesA

  GetCurrentProcess

  lstrcpyA

  GetModuleFileNameA

  GetModuleHandleA

  DeleteCriticalSection

  FreeLibrary

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  GlobalFree

  GetSystemDirectoryA

  lstrcmpA

  GetLocalTime

  WaitForSingleObject

  GlobalAlloc

  EnterCriticalSection

  LeaveCriticalSection

  lstrcpynA

  DisableThreadLibraryCalls

  CopyFileA

  DeleteFileA

  MoveFileA

  OpenFile

  ExpandEnvironmentStringsA

  VerSetConditionMask

  VerifyVersionInfoA

  CompareStringA

  lstrlenA

  GetProcessHeap

  HeapAlloc

  lstrcatA

  HeapFree

  GetUserDefaultLCID

  GetSystemDefaultLCID

  InitializeCriticalSection

  OutputDebugStringW

  GetSystemTimes

  OutputDebugStringA

  GlobalMemoryStatus

  DeviceIoControl

  GetVersionExA

  GetModuleHandleW

  GetEnvironmentStringsW

  GetStdHandle

  GetConsoleScreenBufferInfo

  LocalFree

  CreateFileA

  GetLastError

  WriteFile

  CreateThread

  CloseHandle

  user32

  wsprintfA

  FindWindowA

  DestroyWindow

  IsWindowUnicode

  FindWindowW

  wsprintfW

  CharNextA

  advapi32

  FreeSid

  RegCreateKeyA

  RegOpenKeyExA

  RegQueryValueExA

  EqualSid

  AllocateAndInitializeSid

  GetTokenInformation

  OpenProcessToken

  RegEnumValueA

  RegOpenKeyA

  RegSetValueExA

  RegCreateKeyExA

  ole32

  CoTaskMemFree

  CoTaskMemAlloc

  msvcrt

  toupper

  wcscpy

  wprintf

  fflush

  fopen

  free

  malloc

  wcscmp

  fwrite

  ftell

  fseek

  exit

  time

  rewind

  asctime

  fscanf

  remove

  fprintf

  fclose

  setlocale

  strlen

  printf

  wcslen

  shlwapi

  PathFindExtensionW

  SHDeleteKeyA

  rpcrt4

  RpcStringFreeW

  UuidToStringW

  UuidCreate

  Sections

  .text

  Size: 316KB - Virtual size: 312KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .xdata

  Size: 4KB - Virtual size: 341B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .BSS

  Size: 4KB - Virtual size: 419B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .INIT

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 52KB - Virtual size: 49KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE