General

Malware Config

Signatures

Files

• d4bf4aa1811c33145d8fd41966f28fd5cdae2f88

  .exe windows x86

  851e92612b8d3befc2a290b7455421b6

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetStringTypeW

  HeapAlloc

  GetProcAddress

  VirtualProtect

  OpenEventW

  WaitForSingleObject

  DuplicateHandle

  GlobalHandle

  SetLastError

  FlushFileBuffers

  GetCurrentDirectoryW

  LocalAlloc

  GlobalLock

  CreateEventW

  HeapFree

  FindResourceA

  RaiseException

  SetThreadPriority

  GetStartupInfoW

  InterlockedExchange

  LCMapStringW

  GetPrivateProfileStringW

  GlobalFlags

  SetHandleCount

  HeapDestroy

  DisconnectNamedPipe

  SearchPathW

  lstrcmpiW

  GetLastError

  VirtualFree

  lstrcmpW

  GetCommandLineW

  GetFileSizeEx

  UnhandledExceptionFilter

  HeapQueryInformation

  GetFileAttributesW

  ReadFile

  GetConsoleOutputCP

  GetWindowsDirectoryW

  GetOverlappedResult

  CreateDirectoryW

  EnterCriticalSection

  lstrcpyW

  GetFileAttributesExW

  LoadResource

  GetVersion

  FreeEnvironmentStringsW

  GetConsoleTitleA

  GetTickCount

  TerminateProcess

  GlobalFindAtomW

  GetTempFileNameW

  lstrcmpA

  GetLocaleInfoW

  GetProfileIntW

  PeekNamedPipe

  LoadLibraryA

  GetCPInfo

  GetCurrentThreadId

  GlobalAlloc

  FindFirstFileW

  SetFilePointer

  GetUserDefaultUILanguage

  IsDebuggerPresent

  FreeLibrary

  ExitProcess

  GetOEMCP

  CompareStringW

  FreeResource

  CreateFileW

  LocalFree

  user32

  CreateWindowExW

  SetCursor

  DestroyCursor

  GetUpdateRect

  ClientToScreen

  ValidateRect

  BeginPaint

  ExitWindowsEx

  GetParent

  SendDlgItemMessageW

  GetSysColorBrush

  SystemParametersInfoW

  GetSystemMenu

  MapWindowPoints

  ShowOwnedPopups

  GetDoubleClickTime

  GetPropW

  EndDeferWindowPos

  DefMDIChildProcW

  TrackPopupMenu

  TabbedTextOutW

  GetMessageW

  SetRectEmpty

  RegisterWindowMessageW

  SetRect

  GetMenuDefaultItem

  IsChild

  PeekMessageW

  SetClipboardData

  EqualRect

  ToUnicodeEx

  GetNextDlgGroupItem

  FrameRect

  GetWindowLongW

  UnregisterClassW

  PostThreadMessageW

  GetFocus

  UnregisterClassA

  CopyAcceleratorTableW

  UnhookWindowsHookEx

  SetActiveWindow

  DrawTextExW

  gdi32

  OffsetRgn

  GetBoundsRect

  ScaleViewportExtEx

  GetWindowOrgEx

  Escape

  RectVisible

  Rectangle

  GetStockObject

  StretchDIBits

  RestoreDC

  Polygon

  SetTextAlign

  GetClipBox

  CombineRgn

  DeleteObject

  GetTextCharsetInfo

  SetDIBColorTable

  Ellipse

  SelectPalette

  SetWindowOrgEx

  SetTextColor

  SetWindowExtEx

  SetROP2

  SetBkColor

  EnumFontFamiliesExW

  ExcludeClipRect

  GetLayout

  ExtFloodFill

  SetPixelV

  LPtoDP

  SetPixel

  SetBkMode

  SetMapMode

  GetBkMode

  advapi32

  RegEnumKeyW

  GetSecurityDescriptorSacl

  RegQueryValueW

  OpenProcessToken

  RegSetValueExW

  RegDeleteValueW

  InitializeSecurityDescriptor

  CheckTokenMembership

  AdjustTokenPrivileges

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  RegEnumKeyExW

  FreeSid

  RegDeleteKeyW

  RegCreateKeyExW

  RegEnumValueW

  SetSecurityDescriptorSacl

  LookupPrivilegeValueW

  SetSecurityDescriptorDacl

  RegCloseKey

  RegOpenKeyExW

  AllocateAndInitializeSid

  GetTokenInformation

  RegQueryValueExW

  shell32

  SHGetSpecialFolderPathW

  SHGetDiskFreeSpaceExW

  SHChangeNotify

  DragFinish

  SHAppBarMessage

  SHBrowseForFolderW

  DragQueryFileW

  SHGetPathFromIDListW

  DuplicateIcon

  SHGetFolderPathW

  SHGetFolderLocation

  SHGetFileInfoW

  ShellExecuteW

  Shell_NotifyIconW

  SHGetDesktopFolder

  SHGetSpecialFolderLocation

  ShellExecuteExW

  ole32

  OleDestroyMenuDescriptor

  IsAccelerator

  OleGetClipboard

  OleInitialize

  OleFlushClipboard

  RevokeDragDrop

  OleLockRunning

  OleDuplicateData

  DoDragDrop

  OleCreateMenuDescriptor

  OleTranslateAccelerator

  OleIsCurrentClipboard

  CoRevokeClassObject

  CoInitializeEx

  CLSIDFromString

  CreateStreamOnHGlobal

  CoLockObjectExternal

  CoRegisterMessageFilter

  CoFreeUnusedLibraries

  CoInitialize

  CoCreateInstance

  OleUninitialize

  CoCreateGuid

  ReleaseStgMedium

  CoUninitialize

  CoTaskMemAlloc

  RegisterDragDrop

  CoTaskMemFree

  oleaut32

  SystemTimeToVariantTime

  SysStringLen

  VariantClear

  SysFreeString

  SysAllocStringLen

  VariantTimeToSystemTime

  SysAllocString

  VariantChangeType

  VarBstrFromDate

  VariantInit

  VarBstrCmp

  VarBstrCat

  SysStringByteLen

  SysAllocStringByteLen

  shlwapi

  PathStripToRootW

  PathIsUNCW

  PathFindExtensionW

  PathFindFileNameW

  ord215

  PathRemoveFileSpecW

  winmm

  PlaySoundW

  msimg32

  TransparentBlt

  AlphaBlend

  mpr

  WNetAddConnection3W

  imm32

  ImmReleaseContext

  ImmGetOpenStatus

  ImmGetContext

  oledlg

  OleUIBusyW

  gdiplus

  GdipDeleteGraphics

  GdipGetImagePaletteSize

  GdipDrawImageI

  GdipCreateBitmapFromScan0

  GdipAlloc

  GdipBitmapLockBits

  GdiplusStartup

  GdipCloneImage

  GdipGetImageHeight

  GdipBitmapUnlockBits

  GdipCreateBitmapFromStream

  GdipGetImagePalette

  GdipDisposeImage

  GdipFree

  GdipCreateBitmapFromHBITMAP

  GdipGetImageGraphicsContext

  GdipGetImagePixelFormat

  GdipDrawImageRectI

  GdipGetImageWidth

  GdipCreateFromHDC

  GdipSetInterpolationMode

  GdiplusShutdown

  oleacc

  CreateStdAccessibleObject

  LresultFromObject

  AccessibleObjectFromWindow

  Exports

  Exports

  MyCopyMemory

  Sections

  .text

  Size: 170KB - Virtual size: 169KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .ffc

  Size: - Virtual size: 150KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 20B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .qqw

  Size: 286KB - Virtual size: 285KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .vvw

  Size: 163KB - Virtual size: 163KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ddw

  Size: 204KB - Virtual size: 204KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 712B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ