General

Malware Config

Signatures

Files

• d83c7bd90c8bb1fceb49459564e5314741cd28afa91277794ed854457863a7b2

  .exe windows x86

  9aed094b225fe325567eea7e389162fd

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_NO_BIND

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetFileSize

  CreateFileA

  GetSystemDirectoryA

  GetVersionExA

  HeapCreate

  SetStdHandle

  WriteConsoleW

  SetFilePointer

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  HeapReAlloc

  LoadLibraryW

  CreateFileMappingA

  HeapSize

  GetStringTypeW

  LCMapStringW

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  CloseHandle

  MapViewOfFileEx

  UnmapViewOfFile

  GlobalLock

  GlobalUnlock

  GetModuleFileNameA

  HeapAlloc

  GlobalAlloc

  ReadFile

  GetProcAddress

  GlobalMemoryStatus

  GetSystemInfo

  LocalAlloc

  Sleep

  ReadConsoleA

  GetLastError

  GetModuleHandleA

  LoadLibraryA

  QueryPerformanceCounter

  DeleteCriticalSection

  GetFileType

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetEnvironmentStringsW

  WideCharToMultiByte

  FreeEnvironmentStringsW

  GetModuleFileNameW

  GetStdHandle

  WriteFile

  ExitProcess

  LeaveCriticalSection

  EnterCriticalSection

  GetCurrentProcess

  TerminateProcess

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  CreateFileW

  GetCurrentThreadId

  SetLastError

  GetModuleHandleW

  TlsFree

  DecodePointer

  TlsSetValue

  TlsGetValue

  TlsAlloc

  EncodePointer

  IsValidCodePage

  GetOEMCP

  GetACP

  InterlockedDecrement

  InterlockedIncrement

  GetCPInfo

  IsProcessorFeaturePresent

  GetStartupInfoW

  HeapSetInformation

  GetCommandLineA

  RaiseException

  RtlUnwind

  MultiByteToWideChar

  HeapFree

  user32

  IsWindow

  DestroyWindow

  UnregisterClassA

  SendMessageW

  DefWindowProcA

  EnumWindows

  WindowFromDC

  GetForegroundWindow

  RegisterClipboardFormatA

  SendDlgItemMessageW

  SendMessageA

  MessageBoxA

  ReleaseDC

  GetDC

  SetWindowTextA

  GetSystemMetrics

  DrawFrameControl

  OffsetRect

  GetDlgItem

  PostQuitMessage

  CreateWindowExA

  IsWindowEnabled

  gdi32

  CreateCompatibleDC

  CreateCompatibleBitmap

  EnumICMProfilesA

  SelectObject

  DeleteDC

  GetObjectA

  SetTextColor

  SetBkColor

  BitBlt

  DeleteObject

  CheckColorsInGamut

  comdlg32

  GetSaveFileNameW

  advapi32

  ControlService

  CloseServiceHandle

  CredEnumerateA

  OpenServiceA

  shell32

  SHGetFolderPathA

  ole32

  CreateStreamOnHGlobal

  CoTaskMemAlloc

  CoTaskMemFree

  ReleaseStgMedium

  oleaut32

  SysAllocString

  OleSavePictureFile

  OleLoadPicture

  SysFreeString

  ws2_32

  WSCDeinstallProvider

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  shlwapi

  PathFindExtensionA

  PathFindFileNameA

  StrRetToStrA

  SHCreateShellPalette

  PathFileExistsA

  StrChrA

  PathCompactPathA

  rpcrt4

  UuidCreate

  RpcStringFreeA

  UuidToStringW

  UuidToStringA

  opengl32

  wglGetCurrentDC

  oleacc

  GetRoleTextA

  setupapi

  SetupDiEnumDeviceInterfaces

  SetupDiGetClassDevsA

  SetupDiDestroyDeviceInfoList

  sensapi

  IsNetworkAlive

  Sections

  .text

  Size: 88KB - Virtual size: 87KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 65KB - Virtual size: 73KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ