General

Malware Config

Signatures

Files

• d3a367585148c562650c416f076ac1f58d11382331fd66a5208fc457a5ada6be

  .exe windows x86

  bfe18e300999cdb0b67e9c96ceec38ae

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetModuleFileNameA

  WaitForSingleObject

  GetStartupInfoA

  CloseHandle

  CreateThread

  GetSystemInfo

  GlobalMemoryStatusEx

  GetSystemDefaultUILanguage

  GetCurrentProcessId

  ExitThread

  Sleep

  LoadLibraryA

  GetProcAddress

  GetTickCount

  GetModuleHandleA

  user32

  wsprintfA

  advapi32

  RegCreateKeyExA

  RegSetValueExA

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  RegDeleteValueA

  RegDeleteKeyA

  ws2_32

  __WSAFDIsSet

  recv

  send

  socket

  connect

  gethostname

  inet_ntoa

  WSASocketA

  select

  setsockopt

  htons

  htonl

  sendto

  closesocket

  WSACleanup

  inet_addr

  gethostbyname

  WSAGetLastError

  WSAStartup

  msvcrt

  _controlfp

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  _onexit

  __dllonexit

  ??3@YAXPAX@Z

  atoi

  time

  localtime

  ??2@YAPAXI@Z

  _except_handler3

  strcpy

  strcat

  memset

  strlen

  rand

  sprintf

  printf

  fprintf

  _iob

  memcpy

  _local_unwind2

  _ftol

  free

  malloc

  strstr

  iphlpapi

  GetIfTable

  Sections

  .text

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ