General

Malware Config

Signatures

Files

• 84f7ee2c9b64264fa7604dcd35bbb6f09e8fb1055723962f8b30c3470eb72558

  .exe windows x86

  de3127d843a4d52243475a05165e799e

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetVersionExA

  WideCharToMultiByte

  ExitProcess

  GetSystemTime

  lstrcpyW

  GetUserDefaultLCID

  CopyFileA

  FindNextFileA

  InterlockedIncrement

  GetCurrentDirectoryA

  GetPrivateProfileStringA

  SetErrorMode

  GetCurrentThread

  EnumResourceLanguagesA

  SuspendThread

  SetEvent

  ResumeThread

  SetThreadPriority

  GetTempPathA

  SearchPathA

  LocalLock

  LocalUnlock

  GetDiskFreeSpaceA

  GetTempFileNameA

  GlobalFlags

  VirtualProtect

  GetProfileIntA

  FreeResource

  GlobalFindAtomA

  GlobalDeleteAtom

  lstrcatA

  lstrcmpW

  WaitForMultipleObjects

  CreateEventA

  ReleaseMutex

  ReleaseSemaphore

  CreateSemaphoreA

  WaitForSingleObject

  TlsFree

  TlsAlloc

  TlsGetValue

  RaiseException

  GetCPInfo

  GetFileTime

  GetFileAttributesA

  SetFileAttributesA

  SystemTimeToFileTime

  LocalFileTimeToFileTime

  FileTimeToLocalFileTime

  FileTimeToSystemTime

  GlobalFree

  GlobalUnlock

  GlobalReAlloc

  GetThreadLocale

  GlobalLock

  GetModuleFileNameA

  GetShortPathNameA

  FindFirstFileA

  FindClose

  CloseHandle

  DuplicateHandle

  GetFileSize

  UnlockFile

  FlushFileBuffers

  SetFilePointer

  WriteFile

  ReadFile

  DeleteFileA

  MoveFileA

  lstrcpynA

  GetStringTypeExW

  GetStringTypeExA

  GetEnvironmentVariableW

  CompareStringA

  lstrcmpiW

  FindResourceExA

  FindResourceA

  LoadResource

  DeleteCriticalSection

  InitializeCriticalSection

  GetLastError

  lstrcpyA

  lstrcmpA

  lstrlenA

  UnhandledExceptionFilter

  LocalReAlloc

  lstrcpynW

  LocalFree

  lstrcatW

  LocalAlloc

  ExpandEnvironmentStringsW

  CopyFileW

  FreeLibrary

  SetLastError

  WriteConsoleW

  GetFileType

  GetStdHandle

  MultiByteToWideChar

  GetModuleHandleW

  GetCommandLineW

  FindNextFileW

  QueryPerformanceCounter

  GetModuleHandleA

  GetFileAttributesW

  lstrlenW

  DisableThreadLibraryCalls

  GetLocaleInfoA

  GetACP

  InterlockedExchange

  InterlockedDecrement

  CreateThread

  HeapSize

  HeapFree

  HeapAlloc

  lstrcmpiA

  GetWindowsDirectoryA

  GlobalAlloc

  CreateFileA

  user32

  SetWindowContextHelpId

  CountClipboardFormats

  WindowFromDC

  CopyAcceleratorTableA

  RegisterClipboardFormatA

  InsertMenuA

  ShowOwnedPopups

  ValidateRect

  RemoveMenu

  IsClipboardFormatAvailable

  SetWindowRgn

  DrawIcon

  FindWindowA

  SetCursorPos

  DestroyCursor

  SetMenuItemBitmaps

  ModifyMenuA

  GetMenuState

  CharNextA

  CheckMenuItem

  GetMenuCheckMarkDimensions

  ScrollWindowEx

  IsDlgButtonChecked

  SetDlgItemInt

  GetDlgItemTextA

  GetDlgItemInt

  CheckRadioButton

  CheckDlgButton

  SetWindowTextA

  GetSysColorBrush

  GetMenuStringA

  GetMenuItemInfoA

  BeginPaint

  TabbedTextOutA

  MapDialogRect

  GetNextDlgTabItem

  EndDialog

  DrawFocusRect

  MapVirtualKeyA

  GetKeyNameTextA

  GrayStringA

  DrawTextExA

  DrawTextA

  GetTabbedTextExtentA

  LockWindowUpdate

  GetSystemMenu

  AppendMenuA

  DeleteMenu

  IsRectEmpty

  GetDC

  ReleaseDC

  SetTimer

  RedrawWindow

  DrawMenuBar

  DefMDIChildProcA

  DefFrameProcA

  GetCursorPos

  GetWindowThreadProcessId

  WindowFromPoint

  SetCapture

  ClientToScreen

  LoadCursorA

  LoadMenuA

  GetSystemMetrics

  GetActiveWindow

  ReleaseCapture

  InvalidateRect

  InsertMenuItemA

  CreatePopupMenu

  BringWindowToTop

  SetMenu

  ShowWindow

  GetDesktopWindow

  IsWindowEnabled

  TranslateAcceleratorA

  LoadAcceleratorsA

  WinHelpA

  CreateWindowExA

  SetWindowsHookExA

  GetClassLongA

  GetClassInfoExA

  GetClassNameA

  SetPropA

  GetFocus

  IsWindow

  SetFocus

  IsChild

  GetWindowTextLengthA

  GetWindowTextA

  GetForegroundWindow

  GetLastActivePopup

  SetActiveWindow

  EndDeferWindowPos

  GetDlgItem

  MapWindowPoints

  TrackPopupMenuEx

  SetScrollRange

  GetScrollRange

  SetScrollPos

  GetScrollPos

  EnableWindow

  ShowScrollBar

  IsWindowVisible

  GetClientRect

  GetSubMenu

  GetMenuItemID

  GetMenuItemCount

  GetSysColor

  AdjustWindowRectEx

  GetParent

  ScreenToClient

  GetScrollInfo

  SetScrollInfo

  RegisterClassA

  SetWindowPlacement

  GetDlgCtrlID

  DefWindowProcA

  CallWindowProcA

  GetWindowLongA

  SetWindowLongA

  OffsetRect

  IntersectRect

  SystemParametersInfoA

  IsIconic

  GetWindowRect

  CopyRect

  PtInRect

  GetWindow

  LoadStringW

  ClipCursor

  DrawEdge

  EnumChildWindows

  wsprintfA

  UnregisterClassA

  CharUpperW

  DestroyMenu

  CharLowerA

  DialogBoxParamA

  CharUpperA

  MsgWaitForMultipleObjects

  LoadStringA

  SetDlgItemTextA

  LoadImageA

  DestroyIcon

  SetWindowPos

  CreateDialogParamA

  CharPrevA

  EnableMenuItem

  advapi32

  RegSetValueExA

  RegUnLoadKeyW

  RegOpenKeyExW

  RegQueryValueExW

  RegLoadKeyW

  RegSaveKeyW

  RegQueryValueExA

  RegCloseKey

  RegEnumValueA

  RegDeleteKeyA

  GetFileSecurityW

  ole32

  CoTaskMemAlloc

  CoCreateInstance

  CoTaskMemFree

  version

  VerQueryValueA

  GetFileVersionInfoA

  GetFileVersionInfoSizeA

  msvcrt

  strchr

  ldexp

  memmove

  fprintf

  malloc

  free

  vfwprintf

  vswprintf

  strtod

  fgetwc

  fflush

  wcscpy

  exit

  _chdir

  atol

  fwprintf

  shlwapi

  PathFindExtensionA

  PathRemoveExtensionA

  PathFindFileNameA

  UrlUnescapeA

  PathIsUNCA

  PathStripToRootA

  Sections

  .text

  Size: 180KB - Virtual size: 176KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .idata

  Size: 12KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 32KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 92KB - Virtual size: 2.6MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ