General

Malware Config

Signatures

Files

• 8406630828145eecabfe5d32077ddda658e499008773c20766e0d114dbe0f8da

  .exe windows x86

  4253a88aa2248be43debb62b687d8ef4

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  memset

  memcpy

  log10

  fopen

  fseek

  fclose

  sprintf

  fabs

  ceil

  malloc

  floor

  free

  _CItanh

  _CIatan2

  _CIexp

  longjmp

  _setjmp3

  strlen

  exit

  __p__iob

  fprintf

  fwrite

  fflush

  ferror

  getenv

  sscanf

  memmove

  kernel32

  GetModuleHandleA

  HeapCreate

  HeapDestroy

  ExitProcess

  Sleep

  FreeLibrary

  HeapAlloc

  HeapFree

  LoadLibraryA

  GetProcAddress

  InitializeCriticalSection

  TlsAlloc

  GetVersionExA

  DeleteFileA

  EnterCriticalSection

  HeapReAlloc

  LeaveCriticalSection

  TlsGetValue

  TlsSetValue

  DeleteCriticalSection

  InterlockedCompareExchange

  InterlockedExchange

  WaitForMultipleObjects

  CloseHandle

  GetCurrentThreadId

  GetCurrentProcess

  GetCurrentThread

  DuplicateHandle

  CreateSemaphoreA

  CreateThread

  ReleaseSemaphore

  user32

  GetWindow

  SetActiveWindow

  RemovePropA

  SendMessageA

  DestroyWindow

  UnregisterClassA

  DestroyAcceleratorTable

  LoadIconA

  LoadCursorA

  SetCursorPos

  LoadImageA

  SetCursor

  GetWindowLongA

  GetParent

  MapWindowPoints

  MoveWindow

  SystemParametersInfoA

  GetWindowRect

  GetSystemMetrics

  GetKeyState

  SetCapture

  PostMessageA

  GetCursorPos

  ReleaseCapture

  DestroyIcon

  FillRect

  BeginPaint

  EndPaint

  DefWindowProcA

  RegisterClassExA

  CreateWindowExA

  gdi32

  DeleteObject

  GetStockObject

  GetObjectType

  GetObjectA

  CreateCompatibleDC

  GetDIBits

  DeleteDC

  CreateDIBSection

  SelectObject

  BitBlt

  CreateBitmap

  SetPixel

  comctl32

  InitCommonControlsEx

  wsock32

  closesocket

  WSACleanup

  WSAStartup

  ole32

  CoUninitialize

  CoInitialize

  RevokeDragDrop

  Sections

  .code

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .teXT

  Size: 44KB - Virtual size: 43KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ