General

Malware Config

Signatures

Files

• f2af7cd5e26a8b937e29f30fdbce846f7dc01616fe711c74da474e284185f68e

  .exe windows x86

  126b2c96751fd265fbadf841a480cefc

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  lstrcpynW

  lstrlenA

  lstrcpyW

  lstrcmpiW

  lstrcmpW

  lstrcatW

  _lwrite

  _lread

  _lopen

  _llseek

  _lcreat

  _lclose

  WriteProfileStringW

  WriteFile

  WideCharToMultiByte

  WaitForSingleObject

  WaitForMultipleObjects

  VirtualQuery

  VirtualFree

  VirtualAlloc

  UnmapViewOfFile

  UnhandledExceptionFilter

  TlsGetValue

  TerminateThread

  TerminateProcess

  SystemTimeToFileTime

  Sleep

  SizeofResource

  SetUnhandledExceptionFilter

  SetThreadPriority

  SetLastError

  SetHandleCount

  SetFileTime

  SetFilePointer

  SetFileAttributesW

  SetEvent

  SetErrorMode

  SetEndOfFile

  SetCurrentDirectoryW

  CloseHandle

  ResumeThread

  ResetEvent

  RemoveDirectoryW

  ReleaseSemaphore

  ReleaseMutex

  ReadFile

  RaiseException

  QueueUserWorkItem

  QueryPerformanceFrequency

  QueryPerformanceCounter

  ProcessIdToSessionId

  OutputDebugStringW

  OutputDebugStringA

  OpenThread

  OpenProcess

  OpenEventW

  MultiByteToWideChar

  MulDiv

  MoveFileW

  MapViewOfFile

  LockResource

  LocalFree

  LocalFileTimeToFileTime

  LocalAlloc

  LoadResource

  LoadLibraryW

  LoadLibraryA

  LeaveCriticalSection

  IsDebuggerPresent

  IsDBCSLeadByte

  InterlockedIncrement

  InterlockedExchange

  InterlockedDecrement

  InterlockedCompareExchange

  InitializeCriticalSection

  HeapFree

  HeapAlloc

  GlobalUnlock

  GlobalSize

  GlobalReAlloc

  GlobalMemoryStatus

  GlobalLock

  GlobalHandle

  GlobalFree

  GlobalAlloc

  GetVersionExW

  GetVersionExA

  GetVersion

  GetTimeZoneInformation

  GetTimeFormatW

  GetTickCount

  GetThreadPriority

  GetThreadLocale

  GetTempPathW

  GetTempFileNameW

  GetSystemTimeAsFileTime

  GetSystemTime

  GetSystemInfo

  GetSystemDirectoryA

  GetSystemDefaultLangID

  GetStringTypeExW

  GetStdHandle

  GetStartupInfoW

  GetProfileStringW

  GetProcessHeap

  GetProcAddress

  GetModuleHandleW

  GetModuleHandleA

  GetModuleFileNameW

  GetModuleFileNameA

  GetMailslotInfo

  GetLogicalDrives

  GetLocaleInfoW

  GetLocaleInfoA

  GetLocalTime

  GetLastError

  GetFullPathNameA

  GetFileTime

  GetFileSize

  GetFileInformationByHandle

  GetFileAttributesW

  GetFileAttributesExW

  GetExitCodeProcess

  GetDiskFreeSpaceW

  GetDateFormatW

  GetCurrentThreadId

  GetCurrentThread

  GetCurrentProcessId

  GetCurrentProcess

  GetCurrentDirectoryW

  GetComputerNameExA

  GetCommandLineW

  GetACP

  FreeLibrary

  FormatMessageW

  FormatMessageA

  FlushFileBuffers

  FindResourceW

  FindNextFileW

  FindFirstFileW

  FindFirstFileExW

  FindFirstFileA

  FindClose

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  FileTimeToDosDateTime

  FatalAppExitA

  ExitThread

  ExitProcess

  EnterCriticalSection

  DuplicateHandle

  DosDateTimeToFileTime

  DeleteFileW

  DeleteFileA

  DeleteCriticalSection

  DebugBreak

  CreateThread

  CreateSemaphoreW

  CreateProcessW

  CreateMutexA

  CreateMailslotA

  CreateFileW

  CreateFileMappingW

  CreateFileA

  CreateEventW

  CreateEventA

  CreateDirectoryW

  CopyFileW

  CompareStringW

  CompareFileTime

  lstrlenW

  advapi32

  ConvertSidToStringSidA

  CryptAcquireContextA

  CryptCreateHash

  CryptDestroyHash

  CryptGenRandom

  CryptGetHashParam

  CryptHashData

  CryptReleaseContext

  FreeSid

  IsValidSid

  LookupAccountNameA

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegEnumKeyExW

  RegEnumValueW

  RegOpenKeyA

  RegOpenKeyExA

  RegOpenKeyExW

  RegOpenKeyW

  RegQueryValueExA

  RegQueryValueExW

  RegQueryValueW

  RegSetValueExW

  RegSetValueW

  GetUserNameA

  gdi32

  SetGraphicsMode

  SetDIBitsToDevice

  SetDIBits

  SetBrushOrgEx

  SetBkMode

  SetBkColor

  SetBitmapBits

  SelectPalette

  SelectObject

  SelectClipRgn

  SelectClipPath

  SaveDC

  RoundRect

  RestoreDC

  Rectangle

  RectVisible

  RealizePalette

  PtVisible

  PolylineTo

  Polyline

  Polygon

  PolyPolygon

  PolyBezierTo

  PlayEnhMetaFileRecord

  PatBlt

  PaintRgn

  OffsetRgn

  MoveToEx

  ModifyWorldTransform

  MaskBlt

  LineTo

  LPtoDP

  IntersectClipRect

  GetWorldTransform

  GetWindowOrgEx

  GetWindowExtEx

  GetViewportOrgEx

  GetViewportExtEx

  GetTextMetricsW

  GetTextExtentPoint32W

  GetTextExtentExPointW

  GetTextColor

  GetTextCharset

  GetTextAlign

  GetSystemPaletteEntries

  GetStockObject

  GetPolyFillMode

  GetPixel

  GetPath

  GetPaletteEntries

  GetOutlineTextMetricsW

  GetObjectW

  SetMapMode

  GetNearestColor

  GetMetaFileBitsEx

  GetMapMode

  GetKerningPairsW

  GetGlyphOutlineW

  GetFontData

  GetEnhMetaFileW

  GetEnhMetaFileHeader

  GetDeviceCaps

  GetDIBits

  GetCurrentObject

  GetClipRgn

  GetClipBox

  GetCharWidthW

  GetBkMode

  GetBkColor

  GetBitmapBits

  GdiFlush

  FrameRgn

  FillRgn

  FillPath

  ExtTextOutW

  ExtCreatePen

  Escape

  EnumFontFamiliesW

  EnumFontFamiliesExW

  EnumEnhMetaFile

  EndPath

  EndPage

  EndDoc

  Ellipse

  DeleteObject

  DeleteMetaFile

  DeleteEnhMetaFile

  DeleteDC

  DPtoLP

  CreateSolidBrush

  CreateRectRgnIndirect

  CreateRectRgn

  CreatePolygonRgn

  CreatePen

  CreatePatternBrush

  CreatePalette

  CreateMetaFileW

  CreateHatchBrush

  CreateFontIndirectW

  CreateEnhMetaFileW

  CreateDIBitmap

  CreateDIBSection

  CreateDIBPatternBrushPt

  CreateCompatibleDC

  CreateBrushIndirect

  CreateBitmapIndirect

  CreateBitmap

  CombineRgn

  CloseMetaFile

  CloseFigure

  CloseEnhMetaFile

  BitBlt

  BeginPath

  SetPixel

  SetPixelV

  SetPolyFillMode

  SetRectRgn

  SetStretchBltMode

  SetTextAlign

  SetTextColor

  SetWinMetaFileBits

  StartDocW

  StartPage

  StretchBlt

  StretchDIBits

  StrokePath

  TextOutW

  TranslateCharsetInfo

  UnrealizeObject

  GetNearestPaletteIndex

  CreateCompatibleBitmap

  shell32

  ShellExecuteA

  ShellExecuteW

  CommandLineToArgvW

  DragAcceptFiles

  DragFinish

  SHGetSpecialFolderPathA

  SHBrowseForFolderW

  SHChangeNotify

  SHCreateDirectoryExW

  SHGetDesktopFolder

  SHGetFolderPathW

  SHGetMalloc

  DragQueryFileW

  comdlg32

  ChooseColorW

  CommDlgExtendedError

  GetOpenFileNameW

  GetSaveFileNameW

  PrintDlgW

  GetFileTitleW

  version

  GetFileVersionInfoW

  VerQueryValueW

  GetFileVersionInfoSizeW

  winmm

  waveOutPrepareHeader

  waveOutReset

  waveOutUnprepareHeader

  waveOutWrite

  waveOutOpen

  timeSetEvent

  mmioRead

  waveOutGetDevCapsW

  mmioOpenA

  mmioDescend

  mmioCreateChunk

  mmioClose

  mmioAscend

  timeKillEvent

  timeGetTime

  timeGetDevCaps

  mmioWrite

  mmioOpenW

  timeEndPeriod

  timeBeginPeriod

  waveOutClose

  msvfw32

  ICCompressorFree

  ICCompressorChoose

  rpcrt4

  UuidCreate

  imm32

  ImmSetCompositionWindow

  ImmSetCompositionFontW

  ImmSetCandidateWindow

  ImmReleaseContext

  ImmNotifyIME

  ImmGetVirtualKey

  ImmGetContext

  ImmGetCompositionStringW

  ws2_32

  WSAStartup

  WSACleanup

  shlwapi

  SHDeleteKeyW

  PathFileExistsW

  wininet

  InternetErrorDlg

  HttpAddRequestHeadersW

  ole32

  CoTaskMemFree

  CoTaskMemAlloc

  OleDraw

  ReleaseStgMedium

  StgCreateDocfile

  StgIsStorageFile

  StgOpenStorage

  CoInitialize

  CoFreeUnusedLibraries

  CoCreateInstance

  CoUninitialize

  oleaut32

  SysAllocString

  SysFreeString

  VariantClear

  Exports

  Exports

  DjInvolkerSrtgtyuh

  MM_InitWrapper_324d

  Plug1PlugExtensionCall

  Plug1PlugGetVersion

  Plug1PlugLoadExtension

  Plug1PlugMenuCall

  Plug1PlugNotifyStateChange

  Plug2PlugTerminate

  Plug2PlugUnloadExtension

  PlugPlugSetFlashPanelList

  PlugPlugSetup

  Sections

  .text

  Size: 203KB - Virtual size: 204KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 74KB - Virtual size: 76KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 17KB - Virtual size: 76KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 11KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 21KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ