General

Malware Config

Signatures

Files

• 84d8b4bfce5db860645a70278bc4a49bf5e6bcb35d9d0e7bea74e873c9c33e2e

  .dll windows x86

  56cac011684e655fedaf72196347ec0d

  
  

  Code Sign

  6d:dc:d0:90:6a:13:74:79:bf:63:69:a0:fd:4f:39:23

  Certificate

  Issuer

  CN=fox,1.2.840.113549.1.9.1=#0c11666f78636f6e40666f78636f6e2e636f6d

  Not Before

  01-02-2002 20:00

  Not After

  01-02-2019 20:00

  Subject

  CN=fox,1.2.840.113549.1.9.1=#0c11666f78636f6e40666f78636f6e2e636f6d

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  HeapFree

  GetProcessHeap

  GetLastError

  ResumeThread

  WaitForSingleObject

  GetModuleHandleW

  GetModuleHandleExW

  GetProcAddress

  GetModuleFileNameW

  CreateToolhelp32Snapshot

  Process32FirstW

  Process32NextW

  CopyFileW

  GetEnvironmentVariableW

  GetTempFileNameW

  FormatMessageA

  LocalFree

  CloseHandle

  WaitNamedPipeW

  CreateNamedPipeW

  ConnectNamedPipe

  CreateFileW

  ReadFile

  WriteFile

  FreeLibrary

  LoadLibraryW

  VirtualAllocEx

  WriteProcessMemory

  lstrlenA

  HeapAlloc

  LoadLibraryA

  InterlockedIncrement

  InterlockedDecrement

  WideCharToMultiByte

  InterlockedCompareExchange

  InterlockedExchange

  MultiByteToWideChar

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  SetEndOfFile

  FindNextFileW

  GetVersion

  SetLastError

  GetModuleHandleA

  AreFileApisANSI

  TerminateProcess

  FindClose

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCurrentThreadId

  GetCommandLineA

  GetSystemTimeAsFileTime

  ExitProcess

  RaiseException

  RtlUnwind

  GetStringTypeW

  GetCPInfo

  LCMapStringA

  LCMapStringW

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  HeapCreate

  HeapDestroy

  VirtualFree

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  VirtualAlloc

  HeapReAlloc

  GetConsoleCP

  GetConsoleMode

  SetFilePointer

  FlushFileBuffers

  GetACP

  GetOEMCP

  IsValidCodePage

  InitializeCriticalSectionAndSpinCount

  HeapSize

  GetTimeFormatA

  GetDateFormatA

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  GetStringTypeA

  GetLocaleInfoW

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetStdHandle

  CreateFileA

  GetTimeZoneInformation

  CompareStringA

  CompareStringW

  SetEnvironmentVariableA

  FindFirstFileW

  GetCurrentProcess

  DeleteFileW

  CreateRemoteThread

  CreateThread

  Sleep

  OpenProcess

  wininet

  InternetErrorDlg

  InternetSetOptionW

  InternetQueryOptionW

  HttpQueryInfoW

  InternetReadFile

  HttpSendRequestW

  HttpOpenRequestW

  InternetConnectW

  InternetOpenW

  InternetCloseHandle

  crypt32

  CryptStringToBinaryA

  CryptBinaryToStringA

  user32

  PostMessageW

  GetParent

  EnumWindows

  CreateWindowExW

  DestroyWindow

  advapi32

  RegCloseKey

  RegQueryValueExW

  RegSetValueExW

  RegDeleteValueW

  RegCreateKeyExW

  ole32

  CoCreateGuid

  Exports

  Exports

  RunDllEntry

  Sections

  .text

  Size: 304KB - Virtual size: 303KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 60KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 22KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ