General

Malware Config

Signatures

Files

• 24d5f06eb344e99f32ca1fdbd712f9d6dcb4f3b88069273570f3807af1e2342d

  .exe windows x86

  c640ee3f4101bdd4ad01efbf12a3a3aa

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ole32

  CreateStreamOnHGlobal

  CoTaskMemFree

  kernel32

  _lread

  _lwrite

  lstrcatA

  lstrcmpA

  lstrcmpiA

  _lopen

  lstrcpynA

  lstrlenA

  lstrlenW

  _lcreat

  _lclose

  WriteFile

  WideCharToMultiByte

  UnmapViewOfFile

  Sleep

  SetFilePointer

  RtlMoveMemory

  CloseHandle

  RemoveDirectoryA

  ReadFile

  Process32Next

  Process32First

  OpenProcess

  MultiByteToWideChar

  MoveFileA

  MapViewOfFile

  LocalFree

  LocalAlloc

  LoadLibraryA

  GlobalMemoryStatus

  GlobalFree

  GlobalAlloc

  GetWindowsDirectoryA

  GetVolumeInformationA

  GetVersionExA

  GetTempPathA

  GetSystemDirectoryA

  GetStartupInfoA

  GetProcAddress

  GetPrivateProfileStringA

  GetPrivateProfileSectionNamesA

  GetPrivateProfileIntA

  GetModuleHandleA

  GetModuleFileNameA

  GetLogicalDrives

  GetLocaleInfoA

  GetLocalTime

  GetLastError

  GetFileSize

  GetFileAttributesA

  GetEnvironmentVariableA

  GetDriveTypeA

  GetDiskFreeSpaceA

  GetCurrentProcess

  GetCurrentDirectoryA

  GetComputerNameA

  FreeLibrary

  FindNextFileA

  FindFirstFileA

  FindClose

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  ExitProcess

  DeleteFileA

  CreateToolhelp32Snapshot

  CreateThread

  CreateProcessA

  CreateFileMappingA

  CreateFileA

  CreateDirectoryA

  CompareStringA

  lstrcpyA

  user32

  MessageBoxA

  GetMessageA

  GetDC

  DispatchMessageA

  CreateWindowExA

  wsprintfA

  ReleaseDC

  TranslateMessage

  SetTimer

  SetWindowLongA

  oleaut32

  SafeArrayCreateVector

  SafeArrayAccessData

  SafeArrayUnaccessData

  advapi32

  GetUserNameA

  LookupPrivilegeValueA

  OpenProcessToken

  RegCloseKey

  RegCreateKeyA

  RegEnumKeyExA

  RegEnumValueA

  RegOpenKeyA

  RegOpenKeyExA

  RegQueryValueExA

  RegSetValueExA

  AdjustTokenPrivileges

  shlwapi

  StrRChrA

  StrStrIA

  StrCmpNA

  StrChrA

  shell32

  ShellExecuteA

  wsock32

  gethostname

  connect

  closesocket

  bind

  accept

  WSAStartup

  getsockname

  htons

  socket

  shutdown

  send

  recv

  listen

  ws2_32

  WSAIoctl

  WSASocketA

  rasapi32

  RasEnumEntriesA

  RasGetEntryPropertiesA

  RasGetEntryDialParamsA

  gdi32

  GetDeviceCaps

  Sections

  .text

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 23KB - Virtual size: 205KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE