General

Malware Config

Signatures

Files

• 2992f676851f6952a2d320102af62a190efb24a9a9946c1f777f69f389e5afe1

  .exe windows x86

  1555a62259bb5ed7cced1fb4eb6cd0c2

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetStdHandle

  SetErrorMode

  GetTimeZoneInformation

  GlobalDeleteAtom

  CreateProcessW

  FreeResource

  RaiseException

  OutputDebugStringW

  GlobalFree

  FreeLibrary

  lstrcmpW

  GetModuleHandleW

  CreateThread

  GetPrivateProfileStringW

  GetCurrentDirectoryA

  GlobalFlags

  IsDebuggerPresent

  GetProcAddress

  SetUnhandledExceptionFilter

  LeaveCriticalSection

  GetWindowsDirectoryW

  GetACP

  MulDiv

  GetCommandLineA

  WritePrivateProfileStringW

  EnumUILanguagesW

  FreeEnvironmentStringsA

  GetVolumeInformationW

  GetCurrentProcessId

  CreateFileW

  GetSystemDirectoryA

  VirtualProtectEx

  HeapCreate

  GetCurrentThread

  GetProcessHeap

  FileTimeToSystemTime

  GetSystemTimeAsFileTime

  TlsGetValue

  CompareStringA

  GetPrivateProfileIntW

  FreeEnvironmentStringsW

  LCMapStringW

  LoadResource

  HeapAlloc

  ConvertDefaultLocale

  LocalAlloc

  GetModuleFileNameA

  EnterCriticalSection

  SuspendThread

  GetStartupInfoA

  GetCurrentThreadId

  GetEnvironmentStringsW

  LockResource

  GetSystemDefaultLangID

  RtlUnwind

  GetFileType

  VirtualQuery

  FormatMessageW

  SizeofResource

  WaitForMultipleObjects

  GetStringTypeW

  GetTimeFormatW

  DuplicateHandle

  LocalReAlloc

  FindResourceExW

  FindClose

  GetThreadLocale

  ReadFile

  FileTimeToLocalFileTime

  TerminateProcess

  GlobalUnlock

  GetConsoleCP

  GetStringTypeA

  SetHandleCount

  lstrlenA

  GetFileTime

  SetThreadPriority

  GetLocalTime

  GetLocaleInfoA

  WaitForSingleObject

  SetFilePointer

  GetModuleFileNameW

  ResetEvent

  DeviceIoControl

  GlobalReAlloc

  TlsFree

  GetFileSize

  GlobalHandle

  GetFullPathNameW

  lstrlenW

  InitializeCriticalSection

  FindNextFileW

  FindFirstFileW

  GlobalAlloc

  GetUserDefaultUILanguage

  GlobalAddAtomW

  UnlockFile

  GlobalLock

  CompareStringW

  DeleteCriticalSection

  lstrcmpA

  ExitProcess

  VirtualAlloc

  HeapDestroy

  UnhandledExceptionFilter

  SetEndOfFile

  GetEnvironmentStrings

  lstrcpynW

  CreateEventW

  GetSystemInfo

  GetModuleHandleA

  GetLastError

  FlushFileBuffers

  InterlockedIncrement

  GetStartupInfoW

  CreateFileA

  MultiByteToWideChar

  GetDateFormatW

  GetOEMCP

  InterlockedDecrement

  GetTickCount

  LocalFree

  Sleep

  GetConsoleOutputCP

  GetFileAttributesW

  FindResourceW

  HeapFree

  TlsAlloc

  CloseHandle

  ResumeThread

  GetCommandLineW

  GetCurrentProcess

  SetLastError

  GetVersionExW

  InterlockedExchange

  GetVersion

  TlsSetValue

  SetStdHandle

  VirtualFree

  HeapReAlloc

  LCMapStringA

  WideCharToMultiByte

  WriteFile

  SetEnvironmentVariableA

  GetDriveTypeA

  QueryPerformanceCounter

  HeapSize

  VirtualProtect

  LoadLibraryA

  WriteConsoleW

  lstrcatA

  GetVersionExA

  GetCPInfo

  LoadLibraryW

  user32

  GetPropW

  PostQuitMessage

  GetWindowPlacement

  GetMenuState

  RegisterClipboardFormatW

  CopyRect

  GetClientRect

  GetFocus

  CopyAcceleratorTableW

  MapWindowPoints

  SetCursor

  IsDialogMessageW

  CharNextW

  GetWindowThreadProcessId

  RedrawWindow

  DefWindowProcW

  RegisterClassW

  TrackMouseEvent

  WinHelpW

  UnhookWindowsHookEx

  ModifyMenuW

  SetWindowsHookExW

  GetTopWindow

  GetDlgCtrlID

  RegisterWindowMessageW

  MessageBoxW

  GetActiveWindow

  GetKeyState

  TabbedTextOutW

  ExitWindowsEx

  CallWindowProcW

  RemovePropW

  SetWindowContextHelpId

  OffsetRect

  GetClassInfoW

  GetMessageTime

  SetWindowLongW

  EnableWindow

  LoadMenuW

  GetDlgItem

  DrawTextW

  EnableMenuItem

  GetMessageW

  GetNextDlgGroupItem

  DestroyMenu

  CallNextHookEx

  CharUpperW

  KillTimer

  UnregisterClassA

  GetWindowRect

  IsChild

  InvalidateRgn

  SetTimer

  SetPropW

  ScreenToClient

  GetSysColorBrush

  GetWindow

  SetWindowTextW

  PtInRect

  EndPaint

  ReleaseCapture

  SetActiveWindow

  EndDialog

  SendDlgItemMessageW

  GetWindowTextLengthW

  SetWindowPlacement

  MoveWindow

  GetMenuItemID

  GetWindowLongW

  GetForegroundWindow

  TranslateMessage

  CreateDialogIndirectParamW

  GetWindowDC

  GetCapture

  InsertMenuW

  SetMenuItemBitmaps

  LoadBitmapW

  SetWindowPos

  MapDialogRect

  ShowWindow

  UpdateWindow

  GetParent

  GetSystemMetrics

  RemoveMenu

  ValidateRect

  WindowFromPoint

  IsRectEmpty

  SetRectEmpty

  UnregisterClassW

  FindWindowW

  AllowSetForegroundWindow

  SetRect

  ClientToScreen

  MsgWaitForMultipleObjects

  SetFocus

  MessageBeep

  DestroyWindow

  GetMenu

  LoadMenuIndirectW

  GetSubMenu

  GetClassLongW

  GetClassNameW

  GetWindowTextW

  IsIconic

  ReleaseDC

  AppendMenuW

  IntersectRect

  GetSysColor

  GetNextDlgTabItem

  SendDlgItemMessageA

  PostMessageW

  InflateRect

  GetMenuItemCount

  DrawTextExW

  SetCursorPos

  BeginPaint

  LoadIconW

  LoadCursorW

  SetForegroundWindow

  GetClassInfoExW

  SetMenuDefaultItem

  DispatchMessageW

  IsWindow

  IsWindowVisible

  GetDC

  EqualRect

  GetWindowInfo

  InvalidateRect

  SetCapture

  CreateWindowExW

  GrayStringW

  DrawFocusRect

  PeekMessageW

  GetMenuCheckMarkDimensions

  CheckMenuItem

  AdjustWindowRectEx

  PostThreadMessageW

  SystemParametersInfoA

  SendMessageW

  IsWindowEnabled

  TrackPopupMenu

  GetCursorPos

  GetSystemMenu

  GetMessagePos

  GetDesktopWindow

  GetLastActivePopup

  gdi32

  GetPixel

  SetBkColor

  GetRgnBox

  SaveDC

  BitBlt

  CreateRectRgnIndirect

  CreatePen

  SetWindowExtEx

  SetViewportOrgEx

  RestoreDC

  ScaleWindowExtEx

  TextOutW

  ExcludeClipRect

  SetViewportExtEx

  MoveToEx

  CreateCompatibleDC

  PtVisible

  GetClipBox

  GetMapMode

  GetDeviceCaps

  CreateFontIndirectW

  GetStockObject

  SelectObject

  StretchBlt

  OffsetViewportOrgEx

  LineTo

  DeleteDC

  GetObjectW

  StretchDIBits

  GetBkColor

  DPtoLP

  CreateCompatibleBitmap

  GetWindowExtEx

  GetTextColor

  SelectPalette

  CreateBitmap

  SetMapMode

  GetViewportExtEx

  ExtSelectClipRgn

  CreateSolidBrush

  SetPixel

  ScaleViewportExtEx

  SetBkMode

  PatBlt

  SetTextColor

  Polyline

  RectVisible

  CreateBitmapIndirect

  ExtTextOutW

  DeleteObject

  GetTextExtentPoint32W

  Escape

  SetStretchBltMode

  comdlg32

  GetFileTitleW

  advapi32

  LookupPrivilegeValueW

  RegOpenKeyExW

  OpenServiceW

  RegCreateKeyW

  CloseServiceHandle

  RegOpenKeyW

  RegCreateKeyExW

  RegSetValueExW

  AdjustTokenPrivileges

  OpenSCManagerW

  RegDeleteValueW

  RegQueryValueW

  RegCloseKey

  RegNotifyChangeKeyValue

  RegQueryValueExW

  RegDeleteKeyW

  StartServiceW

  RegEnumKeyW

  OpenProcessToken

  RegEnumKeyExW

  shell32

  ShellExecuteW

  Shell_NotifyIconW

  SHGetFolderPathW

  ole32

  CoCreateInstance

  CoRevokeClassObject

  OleUninitialize

  PropVariantClear

  StgOpenStorageOnILockBytes

  OleInitialize

  OleIsCurrentClipboard

  CreateStreamOnHGlobal

  CoFreeUnusedLibraries

  CoUninitialize

  CoGetClassObject

  CreateILockBytesOnHGlobal

  StgCreateDocfileOnILockBytes

  CLSIDFromProgID

  CoRegisterMessageFilter

  CoTaskMemFree

  CoTaskMemAlloc

  OleFlushClipboard

  CLSIDFromString

  CoInitialize

  oleaut32

  SystemTimeToVariantTime

  VariantChangeType

  SysAllocStringLen

  VariantTimeToSystemTime

  VariantInit

  SysStringLen

  SafeArrayDestroy

  VariantCopy

  SysAllocString

  VariantClear

  SysFreeString

  OleCreateFontIndirect

  shlwapi

  PathFindExtensionW

  PathStripToRootW

  PathIsUNCW

  PathFindFileNameW

  winmm

  waveInOpen

  waveInStop

  waveInPrepareHeader

  waveInStart

  waveInAddBuffer

  waveInReset

  waveInGetDevCapsW

  waveInClose

  waveInUnprepareHeader

  waveInGetNumDevs

  PlaySoundW

  rpcrt4

  UuidCreate

  setupapi

  SetupDiEnumDeviceInterfaces

  SetupDiDestroyDeviceInfoList

  SetupDiGetDeviceInterfaceDetailW

  SetupDiGetClassDevsW

  gdiplus

  GdipCreateBitmapFromGraphics

  GdipAlloc

  GdipCloneBrush

  GdipCreateBitmapFromHBITMAP

  GdipGetImageWidth

  GdipDeleteBrush

  GdipDrawImageRectI

  GdipDeleteFontFamily

  GdiplusStartup

  GdipDeleteGraphics

  GdipCreateBitmapFromScan0

  GdipCreateFont

  GdipGetImageHeight

  GdipCloneImage

  GdipCreateFontFamilyFromName

  GdipGetImageBounds

  GdipFillRectangleI

  GdipFlush

  GdipImageRotateFlip

  GdipDrawImageRect

  GdipGetImageGraphicsContext

  GdipGetFontSize

  GdipCreateHBITMAPFromBitmap

  GdipCreateSolidFill

  GdipDeleteFont

  GdipDrawImageI

  GdipGetGenericFontFamilySansSerif

  GdipMeasureString

  GdipCreateBitmapFromResource

  GdipCreateBitmapFromStream

  GdipDisposeImage

  GdipFree

  GdipDrawImagePointRectI

  GdipFillRectangle

  GdipSetTextRenderingHint

  GdipDrawImageRectRect

  GdipCreateFromHDC

  GdipDrawString

  msvcrt

  fopen

  fclose

  fread

  exit

  oleacc

  ObjectFromLresult

  esent

  JetTerm

  JetIdle

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .55

  Size: - Virtual size: 183KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 824B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .aa

  Size: 516KB - Virtual size: 516KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bb

  Size: 512B - Virtual size: 29B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .cc

  Size: 45KB - Virtual size: 45KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .zf

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ass

  Size: 45KB - Virtual size: 45KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .asshole

  Size: 213KB - Virtual size: 212KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 320B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ