General

Malware Config

Signatures

Files

• e14f055415d3dd999146f86ffd05017c94a7745a1144aec71b00ed53413b373a

  .exe windows x86

  7d0fcf3f218e088484aca97d2225c5ae

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CloseHandle

  WriteFile

  CreateFileA

  lstrlenA

  FreeLibrary

  EnumResourceNamesA

  LoadLibraryExA

  LockResource

  LoadResource

  FindResourceA

  SetFilePointer

  ReadFile

  SetFileTime

  DeleteFileA

  GetFileTime

  GetFileSize

  GetModuleHandleA

  SetFileAttributesA

  GetFileAttributesA

  FindClose

  FindNextFileA

  Sleep

  lstrcpynA

  lstrcatA

  FindFirstFileA

  GetDriveTypeA

  GetCurrentThreadId

  GetSystemDirectoryA

  SetThreadPriority

  CreateThread

  GetWindowsDirectoryA

  CreateEventA

  OpenEventA

  WaitForSingleObject

  CreateProcessA

  GetCommandLineA

  MoveFileExA

  GetTempPathA

  GetModuleFileNameA

  GetStringTypeW

  GetStringTypeA

  LCMapStringW

  LCMapStringA

  MultiByteToWideChar

  FlushFileBuffers

  SetStdHandle

  LoadLibraryA

  GetProcAddress

  GetOEMCP

  RtlUnwind

  HeapAlloc

  HeapFree

  GetVersion

  ExitProcess

  HeapDestroy

  HeapCreate

  VirtualFree

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  VirtualAlloc

  HeapReAlloc

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  FreeEnvironmentStringsA

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStrings

  GetEnvironmentStringsW

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  TlsSetValue

  TlsAlloc

  SetLastError

  TlsGetValue

  GetLastError

  InterlockedDecrement

  InterlockedIncrement

  GetCPInfo

  GetACP

  user32

  DispatchMessageA

  GetInputState

  PostThreadMessageA

  GetMessageA

  TranslateMessage

  shell32

  ShellExecuteA

  mpr

  WNetEnumResourceA

  WNetOpenEnumA

  WNetCloseEnum

  wininet

  HttpQueryInfoA

  InternetOpenUrlA

  InternetCloseHandle

  InternetOpenA

  InternetGetConnectedState

  InternetReadFile

  winmm

  timeGetTime

  Sections

  .text

  Size: 49KB - Virtual size: 49KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 241KB - Virtual size: 244KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE