General

Malware Config

Signatures

Files

• 05ee1eca0bc8ac75f287f6e4f9d813822147af9b4ff0f050e9574c884f8a5f36

  .exe windows x86

  5e46233797e9bb77162621d9494fcede

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_AGGRESIVE_WS_TRIM

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DEBUG_STRIPPED

  IMAGE_FILE_SYSTEM

  Imports

  kernel32

  GetOEMCP

  GetACP

  GetCPInfo

  RtlUnwind

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetFileType

  SetHandleCount

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  InterlockedDecrement

  GetCurrentThreadId

  SetLastError

  IsValidCodePage

  HeapSize

  IsProcessorFeaturePresent

  HeapReAlloc

  LCMapStringW

  MultiByteToWideChar

  GetStringTypeW

  LoadLibraryA

  GetProcAddress

  GetLastError

  lstrcatA

  Sleep

  LoadLibraryW

  InterlockedIncrement

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  WideCharToMultiByte

  GetCurrentProcess

  HeapCreate

  GetModuleFileNameW

  GetStdHandle

  HeapAlloc

  CreateFileA

  WriteFile

  TerminateProcess

  EncodePointer

  CreateDirectoryA

  GetModuleHandleW

  ExitProcess

  DecodePointer

  GetCommandLineA

  HeapSetInformation

  GetStartupInfoW

  HeapFree

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  user32

  GetSystemMetrics

  IsDlgButtonChecked

  DestroyMenu

  GetDlgItemTextA

  EnumDesktopsA

  SetWindowPos

  GetSysColor

  EndDialog

  SetScrollInfo

  SendMessageW

  EndPaint

  SetTimer

  PostQuitMessage

  FillRect

  DrawTextW

  KillTimer

  DeleteMenu

  GetFocus

  GetClientRect

  DrawTextExW

  BeginPaint

  wsprintfW

  OffsetRect

  MessageBoxA

  InvalidateRect

  GetWindowTextW

  gdi32

  SetWindowOrgEx

  GetWindowOrgEx

  SetViewportOrgEx

  SetTextColor

  CreateFontIndirectW

  SetBkColor

  SetBkMode

  DeleteObject

  SelectObject

  GetStockObject

  TextOutA

  comdlg32

  GetSaveFileNameA

  advapi32

  OpenProcessToken

  shell32

  SHGetFolderPathA

  ole32

  CoTaskMemAlloc

  CoTaskMemFree

  CoCreateInstance

  ws2_32

  shutdown

  send

  closesocket

  recv

  mpr

  WNetConnectionDialog

  avicap32

  capCreateCaptureWindowW

  shlwapi

  StrNCatA

  UrlUnescapeA

  comctl32

  ImageList_DrawIndirect

  secur32

  InitializeSecurityContextA

  uxtheme

  GetThemeSysFont

  Sections

  .text

  Size: 290KB - Virtual size: 289KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 11KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 78KB - Virtual size: 78KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ