General

Malware Config

Signatures

Files

• 7d68fe3251330739fdac268f37bc3fd193f95e741919ea2dfd214387f719b682

  .exe windows x86

  8199012cf939f8187acf706830b508b4

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CloseHandle

  CreateFileW

  SetStdHandle

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  GetStringTypeW

  MultiByteToWideChar

  LCMapStringW

  RtlUnwind

  LoadLibraryW

  OutputDebugStringW

  WriteConsoleW

  OutputDebugStringA

  IsValidCodePage

  GetCPInfo

  GetOEMCP

  lstrcpyA

  HeapFree

  GetCurrentProcess

  HeapSize

  HeapReAlloc

  LeaveCriticalSection

  EnterCriticalSection

  RaiseException

  WriteFile

  RtlCaptureContext

  SetLastError

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  DeleteCriticalSection

  GetFileType

  InitializeCriticalSectionAndSpinCount

  GetStdHandle

  SetHandleCount

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  ExitProcess

  EnumDateFormatsA

  LoadLibraryA

  GetProcAddress

  GetLastError

  lstrcatA

  HeapCreate

  Sleep

  GetACP

  WideCharToMultiByte

  GetModuleHandleW

  InterlockedDecrement

  InterlockedIncrement

  GetSystemTimeAsFileTime

  HeapAlloc

  LoadResource

  HeapQueryInformation

  FreeLibrary

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  FlushFileBuffers

  QueryPerformanceCounter

  GetModuleFileNameW

  EncodePointer

  DecodePointer

  IsBadReadPtr

  HeapValidate

  IsProcessorFeaturePresent

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  GetStartupInfoW

  HeapSetInformation

  lstrlenA

  GetCommandLineA

  user32

  IsWindow

  GetSystemMetrics

  SetWindowTextA

  FindWindowA

  CreateDialogParamW

  CopyRect

  SetMenuItemInfoA

  GetClassInfoA

  LoadIconA

  CreatePopupMenu

  DefWindowProcA

  EndDialog

  DestroyWindow

  InsertMenuItemA

  RegisterClassExA

  DrawTextA

  LoadStringA

  LoadBitmapA

  GetDlgItem

  DefFrameProcA

  IsWindowEnabled

  SetFocus

  GetWindowTextA

  SetWindowLongA

  CreateAcceleratorTableA

  GetWindowLongA

  CreateWindowExA

  LoadCursorA

  gdi32

  Pie

  LineTo

  CreateBitmap

  DeleteObject

  SelectObject

  Rectangle

  SetDCPenColor

  CreatePatternBrush

  CreatePen

  GetStockObject

  MoveToEx

  winspool.drv

  ClosePrinter

  OpenPrinterA

  DocumentPropertiesA

  comdlg32

  GetFileTitleA

  ReplaceTextA

  GetOpenFileNameA

  shell32

  SHGetPathFromIDListA

  ole32

  CoInitialize

  ws2_32

  WSAAsyncGetProtoByNumber

  psapi

  GetProcessMemoryInfo

  winmm

  mmioClose

  mmioCreateChunk

  mmioWrite

  mmioOpenA

  shlwapi

  StrChrA

  comctl32

  CreateToolbarEx

  dbghelp

  SymGetSymFromAddr

  EnumerateLoadedModules

  Sections

  .text

  Size: 185KB - Virtual size: 184KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 53KB - Virtual size: 52KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 9KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 138KB - Virtual size: 137KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ