General

Malware Config

Signatures

Files

• 9e0a05e3a229689fba6aef9de7663538ca9f5839aeed562cd8b6b5bf69187737

  .exe windows x86

  8371e8260cc62526ae337cbe61b6f51e

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  MessageBoxA

  comdlg32

  GetOpenFileNameA

  GetSaveFileNameA

  shell32

  SHChangeNotify

  ExtractIconA

  SHGetFileInfoA

  ShellExecuteA

  ShellExecuteExA

  SHGetMalloc

  SHGetPathFromIDListA

  SHBrowseForFolderA

  ole32

  CoUninitialize

  CoFreeUnusedLibraries

  CoCreateInstance

  CLSIDFromProgID

  CoTaskMemFree

  CoDisconnectObject

  CoInitialize

  advapi32

  RegQueryValueExA

  RegDeleteKeyA

  RegCreateKeyExA

  RegCloseKey

  OpenThreadToken

  OpenProcessToken

  LookupPrivilegeValueA

  GetUserNameA

  GetTokenInformation

  FreeSid

  EqualSid

  AllocateAndInitializeSid

  RegEnumKeyExA

  RegEnumValueA

  AdjustTokenPrivileges

  RegSetValueExA

  RegDeleteValueA

  RegQueryInfoKeyA

  RegOpenKeyExA

  gdi32

  IntersectClipRect

  UnrealizeObject

  TextOutA

  StretchDIBits

  AddFontResourceA

  Arc

  BitBlt

  Chord

  CreateBitmap

  CreateBrushIndirect

  CreateCompatibleBitmap

  CreateCompatibleDC

  CreateDIBitmap

  CreateFontIndirectA

  CreatePalette

  CreatePenIndirect

  CreateRectRgn

  CreateSolidBrush

  DeleteDC

  DeleteObject

  Ellipse

  StretchBlt

  ExcludeClipRect

  ExtFloodFill

  GetBitmapBits

  GetClipBox

  GetCurrentPositionEx

  GetDIBits

  GetDeviceCaps

  GetObjectA

  GetPaletteEntries

  GetPixel

  GetStockObject

  GetSystemPaletteEntries

  GetTextExtentPoint32A

  GetTextExtentPointA

  GetTextMetricsA

  GetWindowOrgEx

  EnumFontsA

  LineDDA

  LineTo

  MoveToEx

  PatBlt

  Pie

  Polyline

  RealizePalette

  RectVisible

  Rectangle

  RemoveFontResourceA

  RestoreDC

  RoundRect

  SaveDC

  SelectObject

  SelectPalette

  SetBkColor

  SetBkMode

  SetPixel

  SetROP2

  SetStretchBltMode

  SetTextColor

  SetViewportOrgEx

  SetWindowOrgEx

  comctl32

  ord17

  ImageList_Create

  ImageList_Destroy

  ImageList_SetBkColor

  ImageList_BeginDrag

  ImageList_EndDrag

  ImageList_DragEnter

  ImageList_DragLeave

  ImageList_DragMove

  ImageList_SetDragCursorImage

  ImageList_DragShowNolock

  ImageList_GetDragImage

  ImageList_ReplaceIcon

  kernel32

  GetConsoleCP

  LoadLibraryA

  FlushFileBuffers

  SetFilePointer

  HeapSize

  SetStdHandle

  InitializeCriticalSectionAndSpinCount

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  GetConsoleScreenBufferInfo

  GetStdHandle

  Beep

  WriteConsoleOutputA

  WriteConsoleOutputCharacterA

  Sleep

  ReadConsoleInputA

  SetConsoleMode

  GetConsoleMode

  ExitThread

  CloseHandle

  GetLastError

  GetCommandLineA

  GetStartupInfoA

  EnterCriticalSection

  LeaveCriticalSection

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCPInfo

  InterlockedIncrement

  InterlockedDecrement

  GetACP

  GetOEMCP

  IsValidCodePage

  GetModuleHandleW

  GetProcAddress

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  GetCurrentThreadId

  GetModuleHandleA

  HeapFree

  CreateFileA

  HeapAlloc

  DeleteCriticalSection

  ExitProcess

  WriteFile

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  HeapCreate

  VirtualFree

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  RaiseException

  RtlUnwind

  LCMapStringA

  MultiByteToWideChar

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  GetLocaleInfoA

  VirtualAlloc

  HeapReAlloc

  Sections

  .text

  Size: 151KB - Virtual size: 151KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 109KB - Virtual size: 108KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ