General

Malware Config

Signatures

Files

• f27a8d540cbeed2777c6fb0037ada80af9ec35fd984c8f9ee339851495294c72

  .exe windows x86

  469dbc2ab138196200578534ffefc2cf

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  LoadLibraryW

  OutputDebugStringW

  WriteConsoleW

  OutputDebugStringA

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  IsValidCodePage

  GetCPInfo

  GetOEMCP

  GetACP

  HeapFree

  HeapQueryInformation

  HeapSize

  HeapReAlloc

  LeaveCriticalSection

  EnterCriticalSection

  RaiseException

  WriteFile

  SetLastError

  TlsFree

  TlsGetValue

  TlsAlloc

  DeleteCriticalSection

  GetFileType

  InitializeCriticalSectionAndSpinCount

  GetStdHandle

  SetHandleCount

  GetEnvironmentStringsW

  WideCharToMultiByte

  RtlUnwind

  LCMapStringW

  MultiByteToWideChar

  GetStringTypeW

  SetStdHandle

  CreateFileW

  GetLastError

  GetSystemDirectoryA

  SetCurrentDirectoryA

  GlobalAlloc

  GlobalFree

  lstrcmpiA

  HeapCreate

  HeapAlloc

  Sleep

  _lcreat

  _lwrite

  _lclose

  SetLocalTime

  LocalFree

  lstrcpyA

  GetModuleHandleA

  FreeEnvironmentStringsW

  GetModuleFileNameA

  ExitProcess

  FlushFileBuffers

  GetModuleHandleW

  GetProcAddress

  InterlockedDecrement

  InterlockedIncrement

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  GetCurrentProcess

  GetLocalTime

  CloseHandle

  GetModuleFileNameW

  EncodePointer

  DecodePointer

  IsBadReadPtr

  TlsSetValue

  LoadLibraryA

  HeapValidate

  IsProcessorFeaturePresent

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  GetStartupInfoW

  HeapSetInformation

  GetCommandLineA

  user32

  CharNextA

  SendMessageA

  SendDlgItemMessageA

  DestroyWindow

  ShowWindow

  CreateDialogIndirectParamA

  GetDC

  FillRect

  ReleaseDC

  BroadcastSystemMessageA

  DefWindowProcA

  SetWindowsHookExA

  IsDlgButtonChecked

  CheckDlgButton

  EndDialog

  GetSysColorBrush

  RegisterClassExA

  CreateWindowExA

  GetClassNameA

  GetWindowTextA

  GetWindowLongA

  GetWindow

  WindowFromPoint

  GetDlgCtrlID

  GetWindowContextHelpId

  LoadStringA

  wvsprintfA

  LoadImageA

  InvalidateRect

  BeginPaint

  GetClientRect

  EndPaint

  SetWindowTextA

  KillTimer

  ExitWindowsEx

  GetParent

  GetAncestor

  DialogBoxParamA

  GetDlgItem

  CheckRadioButton

  GetDialogBaseUnits

  EnumDesktopsA

  MapVirtualKeyA

  GetKeyNameTextA

  PostQuitMessage

  MessageBoxA

  LoadBitmapA

  gdi32

  GetPaletteEntries

  CreateFontIndirectA

  DeleteDC

  CreateSolidBrush

  DeleteObject

  CreateCompatibleDC

  CreateCompatibleBitmap

  SelectObject

  GetObjectA

  SetDIBColorTable

  BitBlt

  GetStockObject

  SetDCPenColor

  Rectangle

  MoveToEx

  LineTo

  CreateDCA

  GetDeviceCaps

  GetDIBits

  CreateDIBSection

  GetCurrentObject

  comdlg32

  ChooseColorA

  ChooseFontA

  advapi32

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  odbc32

  ord26

  ord9

  ord31

  ord13

  ord43

  ord12

  ord72

  ord19

  ord41

  ord75

  ord24

  ord36

  iphlpapi

  IcmpCloseHandle

  IcmpCreateFile

  shlwapi

  StrChrA

  StrToIntExA

  StrDupA

  comctl32

  ord17

  secur32

  CompleteAuthToken

  AcceptSecurityContext

  opengl32

  glClear

  glClearColor

  oledlg

  ord3

  Sections

  .text

  Size: 129KB - Virtual size: 129KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 270KB - Virtual size: 269KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 39KB - Virtual size: 46KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ