General

Malware Config

Signatures

Files

• cd5dd3586796b509099dc59fd75bbc1be018fdeb06fc1649876c828904570599

  .exe windows x86

  469f4442a4c3034fa3c2aa9fd206febd

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  RtlFillMemory

  DeleteCriticalSection

  WriteFile

  GetStdHandle

  GetLogicalDrives

  TransmitCommChar

  WriteConsoleInputA

  GetFileAttributesW

  InterlockedExchange

  GetVersion

  GetModuleHandleA

  OpenMutexA

  CloseHandle

  GetCurrentProcessId

  SetConsoleActiveScreenBuffer

  RtlUnwind

  TlsSetValue

  GetLastError

  CreateDirectoryExA

  InterlockedDecrement

  GetTimeZoneInformation

  FormatMessageW

  FreeLibrary

  GetSystemTime

  GetSystemDefaultLCID

  GetTempFileNameW

  CommConfigDialogA

  GetOEMCP

  EnumResourceTypesA

  GetNumberFormatA

  CopyFileExA

  SetLastError

  FlushFileBuffers

  GetStartupInfoA

  EnumResourceLanguagesA

  RaiseException

  GetSystemTimeAdjustment

  SetComputerNameW

  QueryPerformanceCounter

  SetHandleCount

  HeapCreate

  GetFileAttributesExA

  CreateWaitableTimerW

  GetModuleFileNameA

  ExitProcess

  TlsFree

  VirtualProtectEx

  GetCurrentProcess

  FileTimeToDosDateTime

  GlobalFindAtomW

  GetEnvironmentStringsW

  EnumSystemLocalesA

  CreateMutexA

  MultiByteToWideChar

  HeapFree

  HeapAlloc

  GetDriveTypeW

  GetStringTypeA

  ReadFile

  HeapDestroy

  GetFileType

  TlsAlloc

  CompareStringA

  SetStdHandle

  VirtualQuery

  LCMapStringW

  ReadConsoleA

  FreeEnvironmentStringsA

  SetFilePointer

  TlsGetValue

  WideCharToMultiByte

  WriteFileEx

  VirtualAlloc

  GetFullPathNameW

  FreeEnvironmentStringsW

  LoadLibraryA

  InterlockedIncrement

  InitializeCriticalSection

  LeaveCriticalSection

  GetLocalTime

  UnhandledExceptionFilter

  FlushViewOfFile

  FlushConsoleInputBuffer

  GetSystemDirectoryA

  GetCurrentThread

  WritePrivateProfileStringW

  IsBadWritePtr

  GetStringTypeW

  GetCurrentThreadId

  LCMapStringA

  CreateThread

  SetConsoleCursorPosition

  OpenMutexW

  WriteConsoleA

  CreateEventW

  GetCommandLineA

  GetPrivateProfileIntW

  GetTickCount

  GetVersionExA

  SetEnvironmentVariableA

  GetCPInfo

  GetProcAddress

  CompareStringW

  TerminateProcess

  GetConsoleCP

  WaitForMultipleObjects

  VirtualFree

  HeapReAlloc

  GetACP

  EnterCriticalSection

  GlobalAddAtomW

  SetThreadContext

  CreateFileMappingA

  GetEnvironmentStrings

  GetSystemTimeAsFileTime

  LocalLock

  user32

  CallMsgFilterA

  IsCharLowerW

  GetWindowWord

  GetWindowRgn

  SetDoubleClickTime

  VkKeyScanExW

  GetUpdateRect

  CopyImage

  GetWindowTextA

  GetClipboardData

  CallNextHookEx

  GetClassInfoA

  SetPropW

  EnumClipboardFormats

  GetCapture

  OpenDesktopW

  SetWindowsHookW

  SetMenuItemBitmaps

  LoadIconW

  DefWindowProcW

  CreateIconFromResource

  GetWindowDC

  GetMessageTime

  RegisterWindowMessageA

  GetClipboardSequenceNumber

  LoadImageA

  SetClassLongW

  DefFrameProcW

  SetPropA

  SubtractRect

  BeginDeferWindowPos

  EnableScrollBar

  SetRectEmpty

  DdeQueryStringA

  SetDeskWallpaper

  GetCaretBlinkTime

  ShowCaret

  InvalidateRgn

  WINNLSGetIMEHotkey

  LoadAcceleratorsW

  EnumDesktopsA

  RegisterClassExA

  EnumDisplayDevicesA

  SetWindowTextA

  AnyPopup

  DestroyCursor

  WinHelpA

  GetWindowLongW

  DrawEdge

  LoadStringW

  OffsetRect

  GetClassInfoExW

  CloseDesktop

  OpenInputDesktop

  DdeGetLastError

  ImpersonateDdeClientWindow

  OemToCharBuffA

  RegisterClassA

  GetTabbedTextExtentW

  CreateWindowStationA

  GetWindowTextLengthA

  GetKeyNameTextW

  AttachThreadInput

  RegisterClipboardFormatW

  CopyAcceleratorTableA

  CreateIconFromResourceEx

  MonitorFromWindow

  ToAscii

  EnumWindowStationsA

  OemToCharBuffW

  SendDlgItemMessageW

  ChangeMenuW

  SetWindowRgn

  SetTimer

  CopyIcon

  CharNextExA

  RegisterHotKey

  GetGUIThreadInfo

  DragDetect

  DialogBoxIndirectParamW

  DdeAddData

  CharLowerBuffW

  LoadMenuW

  ShowWindow

  GetMessageA

  ShowScrollBar

  DrawMenuBar

  EnumWindowStationsW

  EndDeferWindowPos

  CreateIconIndirect

  GetDlgItem

  LoadBitmapA

  InsertMenuW

  SetParent

  VkKeyScanA

  advapi32

  CryptExportKey

  InitiateSystemShutdownA

  CryptAcquireContextW

  CreateServiceW

  RegQueryInfoKeyA

  LogonUserW

  RegCreateKeyExW

  RegEnumValueA

  LookupPrivilegeDisplayNameA

  RegConnectRegistryA

  RegEnumKeyA

  GetUserNameA

  LookupSecurityDescriptorPartsA

  RegCloseKey

  RegEnumKeyW

  RegQueryValueA

  CryptGetDefaultProviderA

  LookupAccountNameW

  RevertToSelf

  CryptAcquireContextA

  CreateServiceA

  LogonUserA

  ReportEventW

  shell32

  SHAppBarMessage

  DragQueryFile

  comctl32

  ImageList_DragLeave

  ImageList_SetBkColor

  ImageList_DragShowNolock

  ImageList_Replace

  ImageList_DrawIndirect

  ImageList_DrawEx

  ImageList_SetDragCursorImage

  CreateMappedBitmap

  _TrackMouseEvent

  DrawInsert

  ImageList_Add

  CreateStatusWindowA

  ImageList_Copy

  ImageList_Merge

  ImageList_SetOverlayImage

  ImageList_GetBkColor

  ImageList_Draw

  ImageList_AddMasked

  ImageList_GetImageCount

  ImageList_GetImageRect

  DestroyPropertySheetPage

  InitCommonControlsEx

  CreatePropertySheetPageW

  ImageList_Duplicate

  gdi32

  EnumFontFamiliesA

  Sections

  .text

  Size: 148KB - Virtual size: 146KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 388KB - Virtual size: 384KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 140KB - Virtual size: 138KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 24KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ