General

Malware Config

Signatures

Files

• 5097e0ad09c727c6efdfa68981247eb7877aa58d8119fe9ed21f003e19ca5453

  .exe windows x86

  52305f9d828ba19a40bc44228c241c26

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comdlg32

  GetFileTitleW

  shell32

  DragQueryFileW

  DragAcceptFiles

  ExtractIconW

  SHGetFileInfoW

  ShellExecuteW

  DragFinish

  ole32

  CoTaskMemFree

  CoUninitialize

  CoCreateInstance

  CoInitializeEx

  CoInitialize

  advapi32

  RegSetValueW

  RegSetValueExW

  RegCreateKeyW

  RegCreateKeyExW

  GetFileSecurityW

  SetFileSecurityW

  RegQueryValueW

  RegOpenKeyW

  RegEnumKeyW

  RegDeleteKeyW

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  gdi32

  CombineRgn

  SetRectRgn

  CreateRectRgnIndirect

  GetBkColor

  StretchDIBits

  CreateFontW

  GetCharWidthW

  PatBlt

  CreatePatternBrush

  DeleteDC

  ScaleWindowExtEx

  SetWindowExtEx

  SetViewportExtEx

  SetTextColor

  CreateFontIndirectW

  GetStockObject

  CreateSolidBrush

  GetDeviceCaps

  GetClipBox

  GetObjectW

  CreateBitmap

  CreateCompatibleBitmap

  CreateCompatibleDC

  SelectObject

  GetTextMetricsW

  GetTextExtentPoint32W

  SaveDC

  RestoreDC

  SetBkMode

  SetMapMode

  ExcludeClipRect

  IntersectClipRect

  DeleteObject

  SelectClipRgn

  SetBkColor

  BitBlt

  GetPixel

  CreateRectRgn

  PtVisible

  RectVisible

  TextOutW

  ExtTextOutW

  Escape

  SetViewportOrgEx

  OffsetViewportOrgEx

  ScaleViewportExtEx

  shlwapi

  PathStripToRootW

  PathFindFileNameW

  PathFindExtensionW

  PathRemoveFileSpecW

  PathIsUNCW

  kernel32

  GetEnvironmentStrings

  InterlockedIncrement

  InterlockedDecrement

  FreeEnvironmentStringsA

  GetCommandLineA

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  HeapAlloc

  HeapFree

  SetProcessPriorityBoost

  FindNextChangeNotification

  CreateTimerQueue

  GetProcessHeap

  GetProcessIoCounters

  CancelIo

  ClearCommBreak

  AreFileApisANSI

  GetProcessTimes

  GetMailslotInfo

  GetCommTimeouts

  GetLogicalDrives

  GetNamedPipeHandleStateA

  LocalUnlock

  GetTapeParameters

  FindFirstFileExW

  DisableThreadLibraryCalls

  SetStdHandle

  FreeResource

  EraseTape

  GetProcessPriorityBoost

  PrepareTape

  DecodePointer

  SetHandleInformation

  ResetEvent

  SetCommState

  GetModuleFileNameA

  EncodeSystemPointer

  GetModuleFileNameW

  CreateIoCompletionPort

  CreateMemoryResourceNotification

  GlobalUnlock

  GlobalDeleteAtom

  CancelWaitableTimer

  GetThreadContext

  IsProcessInJob

  GetWriteWatch

  FreeLibrary

  GetACP

  GetProcAddress

  LoadLibraryA

  CloseHandle

  WriteFile

  GetLastError

  CreateFileW

  SizeofResource

  LockResource

  LoadResource

  FindResourceW

  lstrcpyW

  GlobalLock

  GlobalAlloc

  LoadLibraryW

  GetModuleHandleW

  SetLastError

  MultiByteToWideChar

  WideCharToMultiByte

  MulDiv

  lstrlenW

  LocalFree

  FormatMessageW

  GlobalFree

  GetCurrentThreadId

  GetVersionExA

  lstrcmpW

  CompareStringW

  GetVersionExW

  GlobalFindAtomW

  GlobalAddAtomW

  GlobalGetAtomNameW

  GetCurrentProcessId

  GetModuleHandleA

  CompareStringA

  GetLocaleInfoW

  lstrcmpA

  EnumResourceLanguagesW

  ConvertDefaultLocale

  GetCurrentThread

  GetFileAttributesW

  SetFileTime

  GetFileTime

  GetTempFileNameW

  GetFullPathNameW

  GetDiskFreeSpaceW

  LocalAlloc

  LeaveCriticalSection

  TlsGetValue

  EnterCriticalSection

  GlobalReAlloc

  GlobalHandle

  InitializeCriticalSection

  TlsAlloc

  TlsSetValue

  LocalReAlloc

  DeleteCriticalSection

  TlsFree

  GlobalFlags

  lstrlenA

  GetThreadLocale

  FileTimeToSystemTime

  SystemTimeToFileTime

  WritePrivateProfileStringW

  MoveFileW

  DeleteFileW

  GetStringTypeExW

  lstrcmpiW

  ReadFile

  SetFilePointer

  FlushFileBuffers

  LockFile

  UnlockFile

  SetEndOfFile

  GetFileSize

  DuplicateHandle

  GetCurrentProcess

  FindClose

  FindFirstFileW

  GetVolumeInformationW

  GetShortPathNameW

  FileTimeToLocalFileTime

  LocalFileTimeToFileTime

  GetFileSizeEx

  SetErrorMode

  GetStartupInfoW

  RtlUnwind

  RaiseException

  SetEnvironmentVariableA

  CreateFileA

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  GetStringTypeW

  GetStringTypeA

  GetLocaleInfoA

  GetConsoleMode

  GetConsoleCP

  GetTimeZoneInformation

  InitializeCriticalSectionAndSpinCount

  VirtualAlloc

  LCMapStringW

  LCMapStringA

  IsValidCodePage

  GetOEMCP

  TerminateProcess

  GetCPInfo

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  VirtualFree

  HeapCreate

  GetStartupInfoA

  GetFileType

  SetHandleCount

  GetCommandLineW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStdHandle

  HeapSize

  ExitProcess

  Sleep

  HeapReAlloc

  Sections

  .text

  Size: 33KB - Virtual size: 32KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 15KB - Virtual size: 13.8MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 142KB - Virtual size: 141KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ