General

Malware Config

Signatures

Files

• 14e1652773367a77c4ff8d97cffc7bdefcde45ba7eeed1f4b2156de233d4baf1

  .exe windows x86

  6ee759f7627fafcb00c176d149b65ed3

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdi32

  SetTextColor

  SetBkMode

  SelectObject

  DeleteObject

  CreateSolidBrush

  CreateFontA

  user32

  DefWindowProcA

  SendMessageA

  PostQuitMessage

  SetWindowTextA

  TranslateMessage

  MoveWindow

  MessageBoxW

  MessageBoxA

  LoadIconA

  LoadCursorA

  GetSystemMetrics

  GetMessageA

  GetClientRect

  EndPaint

  EndMenu

  EndDialog

  EmptyClipboard

  DrawTextA

  DrawIcon

  SetTimer

  DispatchMessageA

  CreateWindowExA

  CallWindowProcA

  BeginPaint

  RegisterClassExA

  DrawEdge

  GetParent

  GetWindowLongA

  GetWindowTextA

  InvalidateRect

  ReleaseCapture

  SetCapture

  SetClassLongA

  SetWindowLongA

  ShowWindow

  UpdateWindow

  kernel32

  VirtualFree

  VirtualAlloc

  TlsAlloc

  RtlMoveMemory

  LoadLibraryA

  IsBadStringPtrW

  GlobalFree

  GlobalAlloc

  GetModuleHandleA

  GetModuleFileNameA

  GetCurrentProcess

  GetCommandLineA

  GetACP

  ExitProcess

  VirtualProtect

  comctl32

  InitCommonControls

  CreateStatusWindowA

  Sections

  .text

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ