General

Malware Config

Signatures

Files

• 8a128f5122d32a4d6780644a13d3ac81cd85895ca025c5fb6e8bb12e94aa5f94

  .exe windows x86

  29c82575239d0cbda27caa574f73b609

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  nddeapi

  NDdeShareGetInfoA

  NDdeShareDelA

  NDdeShareSetInfoA

  modemui

  drvCommConfigDialogA

  InvokeControlPanel

  CountryRunOnce

  wtsapi32

  WTSSetSessionInformationW

  WTSVirtualChannelRead

  WTSLogoffSession

  WTSQuerySessionInformationA

  WTSEnumerateServersA

  WTSFreeMemory

  WTSEnumerateProcessesA

  WTSVirtualChannelOpen

  WTSVirtualChannelClose

  WTSWaitSystemEvent

  WTSRegisterSessionNotification

  WTSQueryUserToken

  WTSOpenServerW

  WTSUnRegisterSessionNotification

  WTSSetUserConfigW

  kernel32

  GetPrivateProfileSectionA

  ReadConsoleA

  FormatMessageA

  GetConsoleAliasW

  GetStringTypeA

  GetModuleHandleA

  GetCommandLineA

  SetEnvironmentVariableW

  GetAtomNameA

  WaitForSingleObject

  CompareStringA

  GetTickCount

  SetCurrentDirectoryW

  GetTimeFormatA

  WriteConsoleA

  GetPrivateProfileStructW

  GetTickCount

  ReadFile

  GetCurrentDirectoryA

  GetProcessId

  GetNumberFormatW

  VirtualAllocEx

  GetGeoInfoA

  SetFilePointer

  GetDateFormatA

  msimg32

  DllInitialize

  vSetDdrawflag

  AlphaBlend

  TransparentBlt

  shlwapi

  PathCommonPrefixA

  UrlUnescapeA

  UrlEscapeA

  UrlCompareA

  UrlGetPartA

  UrlGetLocationA

  UrlCombineA

  UrlIsA

  PathCompactPathA

  UrlIsNoHistoryW

  user32

  GetPropA

  DrawIcon

  GetCaretPos

  wsprintfA

  GetMessageA

  PeekMessageA

  IsWindow

  PostMessageA

  SetCursorPos

  IsZoomed

  DialogBoxParamA

  IsDialogMessageA

  DispatchMessageA

  LoadCursorA

  GetWindowLongA

  CreateWindowExA

  IsCharLowerW

  advapi32

  RegCloseKey

  RegEnumValueA

  OpenServiceA

  IsValidSecurityDescriptor

  ClearEventLogA

  IsValidAcl

  RegOpenKeyExA

  CreateProcessAsUserA

  RegEnumKeyA

  IsTextUnicode

  RegCreateKeyA

  ControlService

  CreateServiceA

  RegSaveKeyA

  RegDeleteKeyA

  IsValidSid

  RegFlushKey

  Sections

  .text

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 676KB - Virtual size: 675KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ