General

Malware Config

Signatures

Files

• 34d391af6ce72307f52ae65a8681cc9596039c25e4678387095de6fee0e8eddf

  .exe windows x86

  7d36becbbfbf2f1de297958375849b06

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  ShowScrollBar

  SetWindowTextW

  SetWindowLongW

  ShowWindow

  SetTimer

  SetMenuItemInfoW

  SetMenu

  TileWindows

  TrackPopupMenuEx

  TranslateAcceleratorA

  wsprintfA

  UpdateWindow

  UpdateLayeredWindow

  TranslateMessage

  TranslateMDISysAccel

  SetWindowLongA

  SetDebugErrorLevel

  SendMessageW

  RemoveMenu

  RegisterClassA

  CallWindowProcA

  PostQuitMessage

  PostMessageA

  OpenClipboard

  NotifyWinEvent

  ModifyMenuW

  MessageBoxW

  MapVirtualKeyA

  MapDialogRect

  LookupIconIdFromDirectory

  LockSetForegroundWindow

  LoadIconA

  LoadCursorA

  LoadBitmapA

  LoadAcceleratorsW

  LoadAcceleratorsA

  KillTimer

  IsZoomed

  IsWindowEnabled

  IsDlgButtonChecked

  InvalidateRect

  InsertMenuItemA

  GetWindowTextA

  GetWindowPlacement

  GetWindowLongA

  GetUserObjectInformationA

  GetTitleBarInfo

  GetSubMenu

  GetMenuItemInfoW

  GetMenuItemInfoA

  GetMenuItemCount

  GetKeyState

  GetGUIThreadInfo

  GetDlgItem

  GetClientRect

  GetClassInfoW

  GetClassInfoA

  GetCapture

  FlashWindowEx

  FindWindowA

  EndPaint

  EnableWindow

  EmptyClipboard

  DrawStateW

  DrawMenuBar

  DispatchMessageW

  DestroyWindow

  DestroyMenu

  DestroyIcon

  DestroyAcceleratorTable

  DdeGetLastError

  DdeConnectList

  CreateWindowExW

  CreateWindowExA

  CreateMenu

  CreateIconIndirect

  CreateAcceleratorTableA

  CheckMenuRadioItem

  CheckMenuItem

  CheckDlgButton

  CharUpperW

  CharUpperA

  CharPrevA

  CharLowerW

  TranslateAcceleratorW

  advapi32

  RegCreateKeyExA

  RegCloseKey

  RegDeleteKeyA

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  RegQueryValueExW

  RegSetValueExA

  RegSetValueExW

  GetUserNameW

  ole32

  RevokeDragDrop

  ReleaseStgMedium

  RegisterDragDrop

  OleUninitialize

  OleInitialize

  DoDragDrop

  CoUninitialize

  CoTaskMemFree

  CoTaskMemAlloc

  CoInitialize

  comdlg32

  PrintDlgA

  PageSetupDlgA

  GetFileTitleA

  kernel32

  ReadFile

  MultiByteToWideChar

  MapViewOfFile

  LocalFree

  LoadLibraryA

  InterlockedIncrement

  HeapAlloc

  GlobalUnlock

  GlobalSize

  GlobalLock

  GlobalFree

  GlobalAlloc

  GetWindowsDirectoryA

  GetVolumeInformationW

  GetVolumeInformationA

  GetVersionExA

  GetUserDefaultLangID

  GetTickCount

  GetTempPathW

  GetSystemTime

  GetStartupInfoA

  GetProcessHeap

  GetProcAddress

  GetModuleHandleA

  GetModuleFileNameA

  GetLogicalDriveStringsA

  GetLastError

  GetFullPathNameA

  RemoveDirectoryA

  GetExitCodeThread

  GetDriveTypeA

  GetDiskFreeSpaceA

  GetCurrentProcess

  FormatMessageA

  FindNextFileA

  FindNextChangeNotification

  FindFirstFileA

  FindFirstChangeNotificationA

  FindCloseChangeNotification

  FindClose

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  FileTimeToDosDateTime

  ExitThread

  ExitProcess

  DeviceIoControl

  DeleteFileA

  DeleteCriticalSection

  CreateFileA

  CreateDirectoryA

  CopyFileW

  CopyFileA

  CompareFileTime

  WaitForSingleObject

  WideCharToMultiByte

  lstrcatA

  SetEndOfFile

  SetEvent

  SetFilePointer

  SetLastError

  SetPriorityClass

  SystemTimeToFileTime

  UnmapViewOfFile

  VirtualAlloc

  VirtualProtect

  VirtualFree

  GetFileSize

  msvcrt

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  __getmainargs

  __p__commode

  __p__fmode

  __set_app_type

  __setusermatherr

  _adjust_fdiv

  _beginthreadex

  _controlfp

  _except_handler3

  _exit

  _initterm

  _onexit

  _purecall

  _wcsicmp

  exit

  malloc

  memcmp

  memcpy

  memmove

  memset

  rand

  srand

  strlen

  wcslen

  wcsncmp

  free

  shell32

  SHChangeNotify

  SHFileOperationA

  SHGetDesktopFolder

  SHGetFileInfoA

  SHGetMalloc

  SHGetPathFromIDListA

  SHGetSpecialFolderLocation

  SheChangeDirA

  ShellExecuteA

  SHBrowseForFolderA

  Sections

  .text

  Size: 25KB - Virtual size: 28KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 65KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 18KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ