General

Malware Config

Signatures

Files

• 1a973364de609793385448417bd991bcd912cffa3aaa88383c89707df1c48fb9

  .exe windows x86

  95e6f8741083e0c7d9a63d45e2472360

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ole32

  CoCreateInstance

  CLSIDFromString

  CoInitialize

  CoUninitialize

  oleaut32

  SysAllocString

  wininet

  DeleteUrlCacheEntry

  FindFirstUrlCacheEntryA

  FindNextUrlCacheEntryA

  kernel32

  ExitProcess

  ExpandEnvironmentStringsA

  GetCommandLineA

  GetCurrentProcessId

  GetCurrentThreadId

  GetExitCodeThread

  GetFileSize

  GetModuleFileNameA

  GetModuleHandleA

  CloseHandle

  GetProcAddress

  GetSystemDirectoryA

  GetTempPathA

  GetTickCount

  GetVersion

  GetVersionExA

  GetWindowsDirectoryA

  GlobalMemoryStatus

  CopyFileA

  InterlockedIncrement

  IsBadReadPtr

  IsBadWritePtr

  LoadLibraryA

  LocalAlloc

  LocalFree

  OpenMutexA

  CreateFileA

  ReadFile

  RtlUnwind

  SetFilePointer

  CreateMutexA

  Sleep

  TerminateProcess

  VirtualQuery

  CreateProcessA

  WaitForSingleObject

  WideCharToMultiByte

  WinExec

  WriteFile

  lstrlenA

  lstrlenW

  CreateThread

  DeleteFileA

  user32

  GetWindowTextA

  GetWindowRect

  FindWindowA

  GetWindow

  GetClassNameA

  SetFocus

  GetForegroundWindow

  LoadCursorA

  LoadIconA

  SetTimer

  RegisterClassA

  MessageBoxA

  GetMessageA

  GetWindowLongA

  SetWindowLongA

  CreateDesktopA

  SetThreadDesktop

  GetThreadDesktop

  TranslateMessage

  DispatchMessageA

  SendMessageA

  PostQuitMessage

  ShowWindow

  CreateWindowExA

  DestroyWindow

  MoveWindow

  DefWindowProcA

  CallWindowProcA

  gdi32

  GetStockObject

  SetBkColor

  SetTextColor

  CreateBrushIndirect

  CreateFontA

  advapi32

  RegCreateKeyExA

  RegCloseKey

  RegOpenKeyExA

  RegQueryValueExA

  RegSetValueExA

  GetSecurityInfo

  SetSecurityInfo

  SetEntriesInAclA

  crtdll

  __GetMainArgs

  _sleep

  _stricmp

  atoi

  exit

  memcpy

  memset

  printf

  raise

  rand

  signal

  sprintf

  srand

  sscanf

  strcat

  strchr

  strncmp

  vsprintf

  Sections

  .text

  Size: 27KB - Virtual size: 27KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 132KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .nanan

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ