General

Malware Config

Signatures

Files

• dd6ed56287cd25d770aa1de2976a31b2d1065b18b661a0986ab6af4289230a09

  .exe windows x86

  b7c1613cf322287c6271cde96dd4aec4

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetStringTypeW

  LCMapStringW

  WriteConsoleW

  SetStdHandle

  HeapSize

  RtlUnwind

  MultiByteToWideChar

  LoadLibraryW

  Sleep

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  LeaveCriticalSection

  EnterCriticalSection

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  InterlockedDecrement

  GetCurrentThreadId

  SetLastError

  SystemTimeToTzSpecificLocalTime

  HeapReAlloc

  TlsSetValue

  TlsGetValue

  TlsAlloc

  DeleteCriticalSection

  GetFileType

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  HeapCreate

  GetModuleFileNameW

  GetStdHandle

  WriteFile

  ExitProcess

  GetModuleHandleW

  IsProcessorFeaturePresent

  TerminateProcess

  EncodePointer

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  DecodePointer

  CreateFileW

  lstrcpyA

  lstrcpyW

  GlobalReAlloc

  CloseHandle

  GetFileTime

  lstrcatW

  GetSystemInfo

  LoadLibraryA

  GetPrivateProfileStringA

  GlobalFree

  EnumSystemCodePagesW

  GetProcAddress

  GetLastError

  lstrlenW

  lstrcatA

  FileTimeToSystemTime

  GetConsoleWindow

  WideCharToMultiByte

  GlobalAlloc

  SetFileTime

  FormatMessageA

  GetCurrentProcess

  GetDateFormatW

  FreeLibrary

  GetLocaleInfoA

  HeapFree

  RaiseException

  GetStartupInfoW

  HeapSetInformation

  GetCommandLineA

  TlsFree

  HeapAlloc

  GetFileSize

  InterlockedIncrement

  FlushFileBuffers

  user32

  SetDlgItemTextA

  SetWindowTextW

  GetDlgItemTextA

  EnableWindow

  UpdateWindow

  SendMessageW

  SetDlgItemTextW

  LoadImageA

  DefWindowProcW

  MessageBoxW

  DispatchMessageA

  PostMessageA

  IsWindow

  CreatePopupMenu

  ShowWindow

  LoadAcceleratorsA

  CheckMenuItem

  GetWindow

  SetWindowTextA

  wsprintfA

  CheckDlgButton

  GetCursorPos

  SetWindowPos

  EndPaint

  DestroyWindow

  GetMessageA

  GetSystemMenu

  SetTimer

  GetWindowRect

  PostQuitMessage

  DefWindowProcA

  IsIconic

  FillRect

  GetMenuItemID

  IsChild

  KillTimer

  GetPropA

  GetSubMenu

  EnumDisplaySettingsA

  SendDlgItemMessageA

  MenuItemFromPoint

  FindWindowW

  GetClientRect

  SendMessageA

  BeginPaint

  SetScrollRange

  GetDC

  TranslateMessage

  GetMenu

  MessageBoxA

  InvalidateRect

  GetWindowLongA

  CreateWindowExA

  SetScrollPos

  ReleaseDC

  EnableMenuItem

  TranslateAcceleratorA

  GetDlgItem

  gdi32

  StretchBlt

  MoveToEx

  BitBlt

  LineTo

  SetTextColor

  GetOutlineTextMetricsA

  DeleteDC

  CreateDIBSection

  CreateFontIndirectW

  TextOutA

  CreateFontIndirectA

  SetBkColor

  CreateDCA

  SetBkMode

  DeleteObject

  SelectObject

  CreateCompatibleDC

  CreatePen

  GetTextMetricsA

  GetObjectA

  TextOutW

  GetStockObject

  CreateICW

  comdlg32

  GetOpenFileNameA

  ChooseFontA

  advapi32

  SetEntriesInAclA

  OpenProcessToken

  oleaut32

  SysAllocString

  VariantClear

  SafeArrayAccessData

  SafeArrayDestroy

  SafeArrayCreate

  VariantInit

  SafeArrayUnaccessData

  SafeArrayPutElement

  RegisterActiveObject

  netapi32

  NetUserEnum

  NetApiBufferFree

  mpr

  WNetAddConnection2A

  msimg32

  GradientFill

  version

  GetFileVersionInfoSizeA

  GetFileVersionInfoA

  VerQueryValueA

  shlwapi

  PathFindExtensionW

  SHDeleteKeyA

  SHDeleteValueA

  comctl32

  ord17

  gdiplus

  GdipDeleteStringFormat

  GdipCreateStringFormat

  GdipFillRectangleI

  GdipCreateFontFamilyFromName

  GdipDrawString

  GdipCreateFont

  GdipDisposeImage

  GdipAlloc

  GdipCreateSolidFill

  GdipDeleteFontFamily

  GdipSetStringFormatAlign

  GdipGetImageGraphicsContext

  GdipDeleteGraphics

  GdipCreateBitmapFromScan0

  GdipDeleteFont

  GdipSetStringFormatLineAlign

  GdipCloneBrush

  GdipFree

  GdipDeleteBrush

  imm32

  ImmGetCompositionStringA

  Sections

  .text

  Size: 83KB - Virtual size: 82KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 17KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ