General

Malware Config

Signatures

Files

• 629493ed1145a6186e1424958150afe797ff8905aa619a2716f6aaddceebfb4c

  .exe windows x86

  6f8b48a84e625cdff02b09394ada6b99

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

  Imports

  kernel32

  GetEnvironmentVariableW

  lstrlenA

  MultiByteToWideChar

  GetFileAttributesW

  GetModuleFileNameW

  GetDiskFreeSpaceExW

  WritePrivateProfileStringA

  CreateThread

  OutputDebugStringW

  Sleep

  WaitNamedPipeW

  GetCurrentProcessId

  SetUnhandledExceptionFilter

  LoadLibraryW

  GetProcAddress

  CreateProcessW

  GetLocalTime

  GetCurrentThreadId

  lstrcpyW

  GetCurrentProcess

  OutputDebugStringA

  FreeLibrary

  lstrcmpiW

  RaiseException

  LoadLibraryExW

  GetModuleHandleW

  InterlockedDecrement

  InterlockedIncrement

  SetErrorMode

  SetPriorityClass

  FlushInstructionCache

  CopyFileW

  WaitForSingleObjectEx

  GetExitCodeProcess

  RemoveDirectoryW

  SetFileAttributesW

  MoveFileExW

  MoveFileW

  GetFullPathNameW

  CreateToolhelp32Snapshot

  Process32FirstW

  OpenProcess

  Process32NextW

  TerminateProcess

  DuplicateHandle

  CreateRemoteThread

  Module32FirstW

  DeleteFileW

  GetPrivateProfileSectionW

  FindFirstFileA

  FindNextFileA

  ExitProcess

  GetLogicalDrives

  GetDriveTypeW

  WaitForSingleObject

  QueryPerformanceCounter

  GetCommandLineW

  InitializeCriticalSectionAndSpinCount

  InterlockedExchange

  GetStringTypeW

  GetStringTypeA

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetTimeZoneInformation

  GetDateFormatA

  GetTimeFormatA

  LCMapStringW

  LCMapStringA

  RtlUnwind

  GetConsoleMode

  GetConsoleCP

  GetStartupInfoA

  GetFileType

  SetHandleCount

  GetModuleFileNameA

  GetStdHandle

  HeapCreate

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  GetUserDefaultLCID

  IsValidCodePage

  GetOEMCP

  GetACP

  GetStartupInfoW

  GetCPInfo

  GetSystemTimeAsFileTime

  ExitThread

  IsDebuggerPresent

  UnhandledExceptionFilter

  IsProcessorFeaturePresent

  LoadLibraryA

  InterlockedCompareExchange

  GetProcessHeap

  HeapSize

  HeapReAlloc

  HeapFree

  HeapAlloc

  InitializeCriticalSection

  SetEvent

  Module32NextW

  CreateEventW

  WideCharToMultiByte

  FlushFileBuffers

  SetFilePointer

  ReadFile

  FindClose

  FindNextFileW

  FindFirstFileW

  WriteFile

  GetFileSize

  CreateDirectoryW

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  VirtualFree

  VirtualAlloc

  LocalAlloc

  LocalFree

  GetVersionExW

  SetLastError

  CreateFileMappingW

  UnmapViewOfFile

  MapViewOfFile

  FindResourceExW

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  GetUserDefaultLangID

  lstrlenW

  CloseHandle

  DeviceIoControl

  GetLastError

  HeapDestroy

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  CompareStringA

  SetEndOfFile

  CreateFileA

  SetEnvironmentVariableW

  SetEnvironmentVariableA

  CompareStringW

  GetLocaleInfoW

  GetModuleHandleA

  SetStdHandle

  CreateFileW

  GetTickCount

  GetVersion

  user32

  CheckRadioButton

  MoveWindow

  ExitWindowsEx

  LoadIconW

  GetDesktopWindow

  GetWindowTextLengthW

  GetWindowTextW

  FindWindowW

  DestroyWindow

  GetActiveWindow

  DefWindowProcW

  CharNextW

  wsprintfW

  SetWindowLongW

  EndDialog

  MessageBoxW

  DialogBoxParamW

  GetDlgItemTextW

  PostMessageW

  EndPaint

  ReleaseDC

  GetDC

  BeginPaint

  GetWindow

  GetWindowLongW

  SystemParametersInfoW

  GetWindowRect

  GetParent

  GetClientRect

  MapWindowPoints

  SetWindowPos

  GetSystemMetrics

  LoadImageW

  LoadBitmapW

  GetDlgItem

  EnableWindow

  SetDlgItemTextW

  SetWindowTextW

  ShowWindow

  SendMessageW

  SetFocus

  UnregisterClassA

  gdi32

  BitBlt

  SelectObject

  CreateCompatibleDC

  GetDIBits

  DeleteObject

  DeleteDC

  advapi32

  RegQueryInfoKeyW

  RegSetValueExW

  CheckTokenMembership

  RegEnumValueW

  AdjustTokenPrivileges

  LookupPrivilegeValueW

  CreateProcessAsUserW

  OpenProcessToken

  RegLoadKeyW

  DeleteService

  ControlService

  StartServiceW

  OpenServiceW

  CloseServiceHandle

  CreateServiceW

  OpenSCManagerW

  RegQueryValueExW

  RegEnumKeyExW

  RegDeleteKeyW

  RegEnumKeyW

  RegDeleteValueW

  RegCreateKeyExW

  GetSecurityDescriptorSacl

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  SetEntriesInAclW

  AllocateAndInitializeSid

  SetSecurityDescriptorSacl

  SetSecurityDescriptorDacl

  InitializeSecurityDescriptor

  FreeSid

  RegCloseKey

  RegOpenKeyExW

  shell32

  Shell_NotifyIconW

  ShellExecuteW

  SHGetMalloc

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHGetSpecialFolderPathW

  ole32

  CoInitialize

  StringFromGUID2

  CoTaskMemFree

  CoUninitialize

  CoCreateGuid

  CoCreateInstance

  CoTaskMemAlloc

  CoTaskMemRealloc

  oleaut32

  VarUI4FromStr

  comctl32

  ord17

  InitCommonControlsEx

  urlmon

  URLDownloadToFileW

  version

  VerQueryValueW

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  Sections

  .text

  Size: 645KB - Virtual size: 645KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 99KB - Virtual size: 98KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 10KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 293KB - Virtual size: 293KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ