General

Malware Config

Signatures

Files

• dacee3f82b160a1d77423f175dc4892af1cfc8e8d3cb3e6b238bc29ee93e5bce

  .exe windows x86

  b3900db14c645c8bdb3fa6b17f5dfc56

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  MessageBoxA

  LoadIconW

  ShowCursor

  GetScrollInfo

  kernel32

  GetProcAddress

  WaitForSingleObject

  ActivateActCtx

  CreateActCtxA

  CreateThread

  ExitProcess

  GetLocalTime

  GetModuleHandleA

  LoadLibraryA

  Sleep

  VirtualAlloc

  VirtualFree

  VirtualProtect

  InterlockedIncrement

  EnterCriticalSection

  FreeLibrary

  TlsSetValue

  DeleteFileA

  GetStdHandle

  comdlg32

  GetFileTitleW

  GetOpenFileNameW

  advapi32

  RegSetValueExW

  RegOpenKeyW

  gdi32

  SetTextAlign

  GetCurrentObject

  imagehlp

  BindImageEx

  shell32

  ShellExecuteExW

  DragQueryFileW

  ShellExecuteW

  comctl32

  ImageList_Add

  winspool.drv

  ClosePrinter

  DocumentPropertiesW

  OpenPrinterW

  gdiplus

  GdipCreateBitmapFromStream

  GdipAlloc

  GdipDisposeImage

  ole32

  OleDuplicateData

  CoTaskMemAlloc

  CreateILockBytesOnHGlobal

  CoCreateInstance

  shlwapi

  PathIsUNCW

  Sections

  .text

  Size: 937KB - Virtual size: 937KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 3KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ