General

Malware Config

Signatures

Files

• 84de2272532b862b12c3147d9446148b069c374bf2946138688c0303e768f816

  .exe windows x86

  6488cbf8fa571da2f04ca652cc1a6ea8

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  CopyAcceleratorTableW

  CopyRect

  ClientToScreen

  CheckMenuItem

  CharUpperW

  CreateDialogIndirectParamW

  CreateWindowExW

  DefMDIChildProcA

  DestroyMenu

  DestroyWindow

  DispatchMessageW

  DrawTextExW

  CharNextW

  CallWindowProcW

  CallNextHookEx

  BeginPaint

  IsWindowEnabled

  DrawTextW

  EnableMenuItem

  EnableWindow

  EndDialog

  EndPaint

  EqualRect

  WinHelpW

  ValidateRect

  UpdateWindow

  UnregisterClassW

  UnregisterClassA

  UnhookWindowsHookEx

  TranslateMessage

  TabbedTextOutW

  SystemParametersInfoA

  ShowWindow

  SetWindowsHookExW

  SetWindowTextW

  SetWindowLongW

  SetWindowContextHelpId

  SetRect

  SetPropW

  SetMenuItemBitmaps

  SetForegroundWindow

  SetFocus

  SetCursor

  SetCapture

  SetActiveWindow

  SendMessageW

  SendDlgItemMessageW

  SendDlgItemMessageA

  ScreenToClient

  RemovePropW

  ReleaseDC

  ReleaseCapture

  RegisterWindowMessageW

  RegisterClipboardFormatW

  RegisterClassW

  PtInRect

  PostThreadMessageW

  PostQuitMessage

  PostMessageW

  PeekMessageW

  OffsetRect

  MoveWindow

  ModifyMenuW

  MessageBoxW

  MessageBeep

  MapWindowPoints

  MapDialogRect

  LoadImageW

  LoadIconW

  LoadCursorW

  LoadBitmapW

  IsWindowVisible

  AdjustWindowRectEx

  IsWindow

  IsRectEmpty

  IsIconic

  IsDialogMessageW

  IsChild

  InvalidateRgn

  InvalidateRect

  IntersectRect

  GrayStringW

  GetWindowThreadProcessId

  GetWindowTextW

  GetWindowTextLengthW

  GetWindowRect

  GetWindowPlacement

  GetWindowLongW

  GetWindow

  GetTopWindow

  GetSystemMetrics

  GetSysColorBrush

  GetSysColor

  GetSubMenu

  GetPropW

  GetParent

  GetNextDlgTabItem

  GetNextDlgGroupItem

  GetMessageW

  GetMessageTime

  GetMessagePos

  GetMenuState

  GetMenuItemID

  GetMenuItemCount

  GetMenuCheckMarkDimensions

  GetMenu

  GetLastActivePopup

  GetKeyState

  GetForegroundWindow

  GetFocus

  GetDlgItem

  GetDlgCtrlID

  GetDesktopWindow

  GetDC

  GetCursorPos

  GetClientRect

  GetClassNameW

  GetClassInfoW

  GetClassInfoExW

  GetCapture

  GetActiveWindow

  gdi32

  SetWindowExtEx

  SetViewportOrgEx

  SetTextColor

  SetMapMode

  SetBkMode

  SetBkColor

  ScaleWindowExtEx

  ScaleViewportExtEx

  SaveDC

  RestoreDC

  RectVisible

  PtVisible

  OffsetViewportOrgEx

  GetWindowExtEx

  GetViewportExtEx

  GetTextColor

  GetStockObject

  GetRgnBox

  GetObjectW

  GetMapMode

  GetDeviceCaps

  ExtTextOutW

  ExtSelectClipRgn

  CreateSolidBrush

  CreateRectRgnIndirect

  CreateFontIndirectW

  CreateCompatibleDC

  StretchBlt

  winspool.drv

  DocumentPropertiesW

  OpenPrinterW

  ClosePrinter

  oledlg

  OleUIBusyW

  shlwapi

  PathFindExtensionW

  PathStripToRootW

  PathIsUNCW

  PathFindFileNameW

  oleaut32

  SysAllocStringLen

  SysFreeString

  SysStringLen

  SystemTimeToVariantTime

  VariantChangeType

  VariantClear

  VariantCopy

  VariantInit

  VariantTimeToSystemTime

  SafeArrayDestroy

  OleCreateFontIndirect

  SysAllocString

  comctl32

  InitCommonControlsEx

  ole32

  OleFlushClipboard

  OleInitialize

  OleIsCurrentClipboard

  StgCreateDocfileOnILockBytes

  StgOpenStorageOnILockBytes

  CLSIDFromProgID

  CoFreeUnusedLibraries

  CLSIDFromString

  HMENU_UserMarshal

  CreateILockBytesOnHGlobal

  CoUninitialize

  CoTaskMemFree

  CoTaskMemAlloc

  CoRevokeClassObject

  CoRegisterMessageFilter

  CoGetClassObject

  comdlg32

  GetFileTitleW

  FindTextA

  kernel32

  MulDiv

  LockResource

  LockFile

  LocalReAlloc

  LocalAlloc

  LoadResource

  LoadLibraryW

  LoadLibraryA

  LeaveCriticalSection

  LCMapStringW

  LCMapStringA

  IsValidLocale

  IsValidCodePage

  IsDebuggerPresent

  IsDBCSLeadByteEx

  InterlockedIncrement

  InterlockedExchange

  InterlockedDecrement

  InitializeCriticalSection

  HeapSize

  HeapReAlloc

  HeapFree

  HeapDestroy

  HeapCreate

  HeapAlloc

  GlobalUnlock

  GlobalReAlloc

  GlobalLock

  GlobalHandle

  GlobalFree

  GlobalFlags

  GlobalFindAtomW

  GlobalDeleteAtom

  GlobalAlloc

  GlobalAddAtomW

  GetVolumeInformationW

  GetVersionExA

  GetVersion

  GetUserDefaultLCID

  GetTimeZoneInformation

  MultiByteToWideChar

  lstrlenW

  GetSystemTimeAsFileTime

  GetSystemInfo

  GetStringTypeW

  GetStringTypeA

  GetStdHandle

  GetStartupInfoA

  GetProcessHeap

  GetProcAddress

  GetOEMCP

  GetModuleHandleW

  GetModuleHandleA

  GetModuleFileNameW

  GetModuleFileNameA

  GetLocaleInfoW

  GetLocaleInfoA

  GetLastError

  GetFullPathNameW

  GetFileType

  GetFileTime

  GetFileSize

  GetFileAttributesW

  GetEnvironmentStringsW

  GetEnvironmentStringsA

  GetCurrentThreadId

  GetCurrentThread

  GetCurrentProcessId

  GetCurrentProcess

  GetConsoleOutputCP

  GetConsoleMode

  GetConsoleCP

  GetCommandLineA

  GetCPInfo

  GetACP

  FreeResource

  FreeEnvironmentStringsW

  FreeEnvironmentStringsA

  FlushFileBuffers

  FindFirstFileW

  FindClose

  Process32Next

  RaiseException

  ReadFile

  RtlUnwind

  SetEndOfFile

  SetEnvironmentVariableA

  SetErrorMode

  SetFilePointer

  SetHandleCount

  SetLastError

  SetStdHandle

  SizeofResource

  TerminateProcess

  TlsAlloc

  TlsFree

  UnhandledExceptionFilter

  VirtualAlloc

  VirtualFree

  VirtualProtect

  VirtualQuery

  WideCharToMultiByte

  WriteConsoleA

  WriteConsoleW

  WriteFile

  WritePrivateProfileStringW

  lstrcmpA

  lstrcmpW

  GetTickCount

  lstrlenA

  FileTimeToSystemTime

  ExitProcess

  EnumSystemLocalesA

  EnumResourceLanguagesW

  EnterCriticalSection

  DuplicateHandle

  DeleteCriticalSection

  CreateFileW

  CreateFileA

  CreateDirectoryW

  ConvertDefaultLocale

  GetThreadLocale

  CloseHandle

  shell32

  ShellExecuteW

  SHGetFolderPathW

  wininet

  HttpOpenRequestW

  InternetCloseHandle

  InternetGetLastResponseInfoW

  InternetOpenW

  InternetReadFile

  HttpSendRequestW

  advapi32

  RegSetValueExW

  RegQueryValueW

  RegQueryValueExW

  RegOpenKeyW

  RegOpenKeyExW

  RegEnumKeyW

  RegDeleteValueW

  RegDeleteKeyW

  RegCreateKeyExW

  Exports

  Exports

  DeleteConfigFiles

  Sections

  .text

  Size: 103KB - Virtual size: 104KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 139KB - Virtual size: 140KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 13KB - Virtual size: 112KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 9KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 21KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ