General

Malware Config

Signatures

Files

• c36ca3dd5bf2d289c35d8aba7763b25ae579186a030d4dce09b99eca7744956c

  .exe windows x86

  f736665ac33b6775ed4c156ddf9c52af

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wsock32

  WSACleanup

  WSAStartup

  closesocket

  connect

  gethostbyname

  htons

  inet_addr

  recv

  send

  socket

  kernel32

  ExitProcess

  FindFirstFileA

  FindNextFileA

  FreeLibrary

  GetCommandLineA

  GetCurrentProcess

  GetFileSize

  GetModuleFileNameA

  GetModuleHandleA

  CloseHandle

  GetProcAddress

  GetSystemDirectoryA

  GetTickCount

  GetWindowsDirectoryA

  CopyFileA

  IsBadReadPtr

  LoadLibraryA

  MapViewOfFile

  OpenMutexA

  OpenProcess

  Process32First

  Process32Next

  CreateFileA

  ReadFile

  CreateFileMappingA

  ReadProcessMemory

  ReleaseMutex

  RtlUnwind

  RtlZeroMemory

  SetCurrentDirectoryA

  SetEndOfFile

  SetFileAttributesA

  SetFilePointer

  SetThreadPriority

  CreateMutexA

  TerminateProcess

  UnmapViewOfFile

  VirtualProtect

  WriteFile

  CreateThread

  CreateToolhelp32Snapshot

  user32

  LoadCursorA

  SetTimer

  KillTimer

  RegisterClassA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  CreateWindowExA

  DefWindowProcA

  advapi32

  GetUserNameA

  RegCloseKey

  RegOpenKeyExA

  RegQueryValueExA

  RegSetValueExA

  crtdll

  __GetMainArgs

  _strcmpi

  toupper

  abort

  exit

  fclose

  feof

  fgets

  fopen

  fputc

  fputs

  fread

  free

  fseek

  ftell

  fwrite

  malloc

  memcmp

  memcpy

  memset

  raise

  rand

  signal

  srand

  strcat

  strchr

  strcmp

  strstr

  Sections

  .text

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 3KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE