General

Malware Config

Signatures

Files

• ce7422b4837b55f886c856225ab74d2c10fbbe2fe4df51f6595d0a5faefe0153

  .exe windows x86

  11ce69753f54b61bae622938a63d5f22

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  lstrcpynW

  lstrlenW

  GetDriveTypeW

  GetDriveTypeA

  GetModuleHandleW

  GetProcessHeap

  lstrcmpiW

  GetVersion

  GetCommandLineA

  CreateFileA

  GetFileAttributesW

  VirtualAllocEx

  lstrcmpW

  WaitForMultipleObjects

  UnhandledExceptionFilter

  TerminateProcess

  Sleep

  SetUnhandledExceptionFilter

  SetEvent

  ReleaseMutex

  QueryPerformanceCounter

  OpenProcess

  OpenEventW

  LoadLibraryA

  GetTickCount

  GetSystemTimeAsFileTime

  GetStartupInfoA

  GetProcAddress

  GetModuleHandleA

  GetLastError

  GetCurrentThreadId

  GetCurrentProcessId

  GetCurrentProcess

  GetCommandLineW

  CreateThread

  CreateMutexW

  CreateEventW

  lstrlenA

  CloseHandle

  user32

  wsprintfW

  LoadIconW

  EnableMenuItem

  GetMenu

  SendMessageW

  DestroyIcon

  GetDC

  WinHelpW

  ShowWindow

  SetWindowPos

  SetTimer

  SetThreadDesktop

  SetProcessWindowStation

  PostQuitMessage

  PostMessageW

  OpenWindowStationW

  OpenInputDesktop

  MessageBoxW

  MessageBeep

  LoadStringW

  KillTimer

  IsWindowVisible

  IsDlgButtonChecked

  GetWindowRect

  GetUserObjectSecurity

  GetThreadDesktop

  GetSystemMetrics

  GetProcessWindowStation

  GetDlgItem

  GetDesktopWindow

  EndDialog

  EnableWindow

  DialogBoxParamW

  CloseWindowStation

  CheckDlgButton

  IsIconic

  gdi32

  GetEnhMetaFileW

  GetEnhMetaFileA

  SaveDC

  FlattenPath

  CancelDC

  DeleteObject

  CreateHalftonePalette

  SetBkMode

  advapi32

  RegSetValueExW

  RegQueryValueExW

  RegQueryValueExA

  RegOpenKeyExW

  RegOpenKeyExA

  AllocateAndInitializeSid

  CheckTokenMembership

  DuplicateTokenEx

  FreeSid

  GetAce

  GetAclInformation

  RegOpenKeyA

  GetSecurityDescriptorDacl

  IsWellKnownSid

  OpenProcessToken

  RegCloseKey

  RegCreateKeyExW

  shell32

  ShellExecuteW

  ole32

  CoTaskMemFree

  CoInitialize

  CoCreateInstance

  winmm

  timeGetTime

  msvcrt

  wcschr

  wcscmp

  wcscpy

  _adjust_fdiv

  _XcptFilter

  __getmainargs

  __p__commode

  __p__fmode

  __set_app_type

  __setusermatherr

  _acmdln

  _c_exit

  _cexit

  _controlfp

  _except_handler3

  _exit

  _initterm

  _wcsicmp

  exit

  iswalpha

  Sections

  .text

  Size: 431KB - Virtual size: 430KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 596B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ