General

Malware Config

Signatures

Files

• 16dd8e8144501c890b4b3a68983a78e4fe7578097cbdc68d9d7fbbd105e3374f

  .exe windows x86

  e9e3923fa6b5c81cfcfc4413e09333bb

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  memset

  strncpy

  memcpy

  fopen

  fseek

  fclose

  memmove

  _CIsqrt

  _CIlog

  floor

  ceil

  _CIexp

  fabs

  malloc

  free

  strlen

  kernel32

  GetModuleHandleA

  HeapCreate

  HeapDestroy

  ExitProcess

  Sleep

  FreeLibrary

  HeapAlloc

  HeapFree

  CloseHandle

  InitializeCriticalSection

  ReadFile

  GetLastError

  LoadLibraryA

  GetProcAddress

  HeapReAlloc

  TlsAlloc

  GetVersionExA

  GetLogicalDriveStringsA

  user32

  DestroyIcon

  FillRect

  gdi32

  GetObjectType

  DeleteObject

  GetObjectA

  CreateCompatibleDC

  GetDIBits

  DeleteDC

  CreateDIBSection

  SelectObject

  BitBlt

  CreateBitmap

  SetPixel

  GetStockObject

  wsock32

  closesocket

  WSACleanup

  WSAStartup

  winmm

  mciSendCommandA

  Sections

  .code
  
  

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 512B - Virtual size: 216B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .
  
  ta

  Size: 2KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  
  
  src

  Size: 123KB - Virtual size: 151KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  glrkxuo

  Size: - Virtual size: 32KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE