General

Malware Config

Signatures

Files

• 3ae607f66ef7b620500fe00dcce4e8aeee8314d316e99f355cb5d209aa4109ca

  .exe windows x86

  151d46b027f926b822d98fc6174e0b74

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  lstrcmpiA

  WideCharToMultiByte

  CreateFileA

  MapViewOfFile

  GetSystemTime

  SystemTimeToFileTime

  SetFileTime

  GetVersionExA

  InitializeCriticalSection

  DeleteCriticalSection

  HeapDestroy

  TlsGetValue

  GetFileSize

  CreateFileMappingA

  FlushViewOfFile

  UnmapViewOfFile

  MapViewOfFileEx

  lstrlenA

  IsDBCSLeadByte

  TlsFree

  TlsAlloc

  MultiByteToWideChar

  SetFileAttributesW

  GetFileAttributesW

  CopyFileW

  GetFileAttributesA

  EnterCriticalSection

  GetModuleFileNameA

  InitializeCriticalSectionAndSpinCount

  VirtualAlloc

  LCMapStringW

  GlobalFree

  GlobalLock

  GlobalAlloc

  SetErrorMode

  TerminateProcess

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  DeviceIoControl

  CloseHandle

  SetLastError

  HeapFree

  LocalFree

  LocalAlloc

  lstrcmpW

  ExpandEnvironmentStringsW

  SetUnhandledExceptionFilter

  Sleep

  DisableThreadLibraryCalls

  FreeLibrary

  GetLastError

  GetConsoleCP

  SuspendThread

  OpenSemaphoreA

  OutputDebugStringA

  SearchPathA

  DeleteFileA

  SetFileAttributesA

  GetTickCount

  UnhandledExceptionFilter

  LeaveCriticalSection

  RaiseException

  user32

  CheckRadioButton

  EnumChildWindows

  GetDlgItemInt

  IsDlgButtonChecked

  SetDlgItemTextA

  GetWindowPlacement

  IsIconic

  DrawEdge

  DrawFrameControl

  InflateRect

  CopyRect

  GetSysColorBrush

  UnregisterClassW

  OemToCharBuffA

  CharToOemBuffA

  CharNextA

  SwitchToThisWindow

  FindWindowW

  GetClassInfoW

  RegisterClassW

  DefWindowProcW

  GetForegroundWindow

  GetMonitorInfoW

  EqualRect

  GetAsyncKeyState

  EnableMenuItem

  ExitWindowsEx

  WinHelpW

  CloseDesktop

  DrawFocusRect

  InvalidateRect

  GetWindowTextA

  UpdateWindow

  ScreenToClient

  LookupIconIdFromDirectory

  CreateIconIndirect

  PrivateExtractIconsW

  GetSysColor

  GetLastActivePopup

  GetWindowThreadProcessId

  RemovePropW

  CopyIcon

  EnumWindows

  SetTimer

  GetWindow

  GetCursorPos

  MonitorFromPoint

  SetForegroundWindow

  MonitorFromWindow

  IsWindowEnabled

  SetPropW

  GetFocus

  SetFocus

  GetDC

  DrawTextW

  BeginDeferWindowPos

  DeferWindowPos

  LoadIconW

  GetKeyState

  GetWindowRect

  SetWindowPos

  DestroyWindow

  DestroyIcon

  SetCursor

  LoadCursorW

  GetShellWindow

  IsCharUpperW

  GetWindowLongW

  SetWindowLongW

  BeginPaint

  GetClientRect

  LoadImageW

  GetWindowTextW

  SetWindowTextW

  GetDlgItemTextW

  SetDlgItemTextW

  ShowWindow

  LoadStringW

  DefWindowProcA

  CreateWindowExW

  SetMenu

  TrackPopupMenuEx

  ShowCaret

  HideCaret

  NotifyWinEvent

  AdjustWindowRectEx

  AnimateWindow

  GetParent

  OpenIcon

  GetWindowModuleFileNameW

  AllowSetForegroundWindow

  UnregisterDeviceNotification

  DeleteMenu

  InsertMenuItemW

  CreatePopupMenu

  GetMenuItemInfoW

  CharLowerW

  RegisterClipboardFormatW

  GetProcessWindowStation

  TrackPopupMenu

  GetMenuItemCount

  InsertMenuW

  IsChild

  MoveWindow

  AdjustWindowRect

  EnableWindow

  SetRect

  DrawIcon

  gdi32

  SetLayout

  advapi32

  RegOpenKeyExW

  RegCloseKey

  RegEnumKeyExA

  RegQueryValueExW

  ole32

  CoUninitialize

  StringFromGUID2

  CoInitializeEx

  msvcrt

  strrchr

  wcslen

  strncmp

  bsearch

  qsort

  printf

  wcscat

  wcsrchr

  time

  strchr

  fflush

  memmove

  memset

  malloc

  atol

  wcscmp

  free

  atoi

  wcstok

  fwrite

  strtol

  wcsncpy

  swscanf

  realloc

  strncpy

  setupapi

  SetupDiCreateDeviceInfoList

  SetupDiCallClassInstaller

  SetupDiDestroyDeviceInfoList

  SetupDiGetClassDevsW

  rpcrt4

  RpcStringBindingComposeW

  RpcBindingFromStringBindingW

  RpcStringFreeW

  RpcBindingFree

  RpcBindingSetAuthInfoW

  RpcBindingSetOption

  Sections

  .text

  Size: 428KB - Virtual size: 427KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .idata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 101KB - Virtual size: 102KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE