General

Malware Config

Signatures

Files

• d4f57cd11a6a304822a950c087c17a8b29460dc499931a9fc6913be2b9291af9

  .exe windows x86

  99643b4fe031ae55f657bbdd5d0dddf7

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  ReleaseDC

  EndDialog

  GetParent

  LoadStringW

  PostMessageW

  LoadBitmapW

  InsertMenuItemW

  GetDlgItem

  SetFocus

  EnableWindow

  SetWindowTextW

  SystemParametersInfoW

  LoadImageW

  LoadCursorW

  WinHelpW

  GetDC

  SetCursor

  LoadIconW

  SetDlgItemTextW

  RegisterClipboardFormatW

  GetDlgItemTextA

  wsprintfW

  SetWindowLongW

  MessageBoxW

  SendDlgItemMessageW

  SendMessageW

  DialogBoxParamW

  GetWindowLongW

  certcli

  CAAddCACertificateType

  CASetCertTypeKeySpec

  CASetCertTypeFlags

  CAGetCertTypeFlags

  CACertTypeSetSecurity

  CAGetCertTypeKeySpec

  CAFreeCAProperty

  CAGetCertTypeProperty

  CAUpdateCA

  CAGetCertTypeExtensions

  CAGetCertTypePropertyEx

  CAEnumCertTypes

  CAEnumNextCertType

  CACertTypeGetSecurity

  CASetCertTypeProperty

  CAFindCertTypeByName

  CAUpdateCertType

  CACloseCA

  CAFreeCertTypeProperty

  CAGetCAProperty

  CACreateCertType

  CAFindByName

  CAFreeCertTypeExtensions

  CACloseCertType

  CAEnumCertTypesForCA

  CARemoveCACertificateType

  CASetCertTypeExtension

  kernel32

  GlobalAlloc

  GetModuleHandleA

  LoadLibraryW

  InterlockedIncrement

  CloseHandle

  GetModuleFileNameW

  GlobalFree

  GlobalUnlock

  GetLastError

  lstrlenW

  GetStartupInfoA

  FormatMessageW

  SetLastError

  GlobalLock

  CreateFileW

  GetDateFormatW

  WideCharToMultiByte

  SetUnhandledExceptionFilter

  GetEnvironmentStringsW

  GetTickCount

  IsBadReadPtr

  OutputDebugStringA

  FileTimeToSystemTime

  GetSystemTimeAsFileTime

  OutputDebugStringW

  GetSystemDefaultLangID

  FileTimeToLocalFileTime

  LocalReAlloc

  LocalFree

  DeleteCriticalSection

  QueryPerformanceCounter

  InterlockedDecrement

  InitializeCriticalSection

  lstrcmpiW

  GetComputerNameW

  RemoveDirectoryA

  lstrcpyW

  GetACP

  GetCurrentProcess

  GetSystemWindowsDirectoryW

  msvcrt

  mbstowcs

  vswprintf

  wcscat

  _except_handler3

  wcslen

  free

  ??2@YAPAXI@Z

  wcsstr

  _adjust_fdiv

  __dllonexit

  ??3@YAXPAX@Z

  __RTDynamicCast

  memmove

  _wcsicmp

  wcscmp

  _initterm

  malloc

  _purecall

  _wcsupr

  wcscpy

  ??1type_info@@UAE@XZ

  wcsrchr

  wcstoul

  ?terminate@@YAXXZ

  wcschr

  _onexit

  advapi32

  RegDeleteKeyW

  RegCreateKeyExW

  RegEnumKeyExW

  RegDeleteValueW

  RegCloseKey

  RegOpenKeyExW

  RegSetValueExW

  RegQueryValueExW

  comctl32

  CreatePropertySheetPageW

  PropertySheetW

  Sections

  .text

  Size: 47KB - Virtual size: 47KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 78KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ