General

Malware Config

Signatures

Files

• ddb3a371b0e16c281661b3f031341c631625a7a6f5d5e0413dde85f8b5a9ea1b

  .exe windows x86

  36118428c8ac89d167aa7b8812d90376

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegSetValueExA

  RegOpenKeyExA

  RegDeleteValueA

  RegCloseKey

  ws2_32

  gethostbyname

  recv

  send

  htons

  connect

  closesocket

  socket

  WSAGetLastError

  WSAStartup

  kernel32

  SetStdHandle

  LoadLibraryW

  GetModuleFileNameA

  CloseHandle

  GetLastError

  CreateEventW

  GlobalAlloc

  GlobalFree

  GetModuleHandleA

  SetLastError

  GetProcAddress

  WriteConsoleW

  HeapAlloc

  CreateThread

  Sleep

  GetStringTypeW

  MultiByteToWideChar

  LCMapStringW

  HeapSize

  LeaveCriticalSection

  EnterCriticalSection

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  DeleteCriticalSection

  GetFileType

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  ExitProcess

  CreateFileW

  HeapFree

  HeapReAlloc

  WideCharToMultiByte

  DecodePointer

  EncodePointer

  RtlUnwind

  RaiseException

  GetCommandLineA

  HeapSetInformation

  GetStartupInfoW

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  IsProcessorFeaturePresent

  HeapCreate

  GetCPInfo

  InterlockedIncrement

  InterlockedDecrement

  GetACP

  GetOEMCP

  IsValidCodePage

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetModuleHandleW

  GetCurrentThreadId

  WriteFile

  GetStdHandle

  GetModuleFileNameW

  FlushFileBuffers

  user32

  LoadIconA

  LoadCursorA

  RegisterClassExA

  RegisterHotKey

  GetClientRect

  GetDlgItem

  SetWindowPos

  PostQuitMessage

  CreateWindowExA

  MessageBoxA

  DefWindowProcA

  GetWindowTextLengthA

  DestroyWindow

  SendMessageA

  GetMessageA

  DispatchMessageA

  TranslateMessage

  ShowWindow

  UpdateWindow

  gdi32

  GetStockObject

  Sections

  .text

  Size: 38KB - Virtual size: 38KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 696B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ