General

Malware Config

Signatures

Files

• bf7114f025fff7dbc6b7aff8e4edb0dd8a7b53c3766429a3c5f10142609968f9_00490000 - Copy_SCY.exe

  .exe windows x86

  4c84d10323272583b9286a1186a7fe5a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  wsprintfW

  ReleaseDC

  DrawTextW

  SystemParametersInfoW

  GetDC

  GetForegroundWindow

  FillRect

  GetKeyboardLayoutList

  ntdll

  RtlGetLastWin32Error

  RtlInitUnicodeString

  _snwprintf

  NtClose

  NtOpenFile

  RtlTimeToTimeFields

  RtlFreeHeap

  winhttp

  WinHttpSendRequest

  WinHttpSetOption

  WinHttpReadData

  WinHttpCloseHandle

  WinHttpOpen

  WinHttpQueryDataAvailable

  WinHttpReceiveResponse

  WinHttpConnect

  WinHttpQueryHeaders

  WinHttpOpenRequest

  WinHttpCrackUrl

  kernel32

  PostQueuedCompletionStatus

  CreateToolhelp32Snapshot

  OpenMutexW

  HeapDestroy

  GetDiskFreeSpaceExW

  GetUserDefaultUILanguage

  LocalFree

  GetFileAttributesExW

  DeleteFileW

  SystemTimeToFileTime

  HeapCreate

  CreateFileW

  CreateIoCompletionPort

  GetCurrentProcess

  TerminateProcess

  InitializeCriticalSection

  CreateFileMappingW

  MapViewOfFile

  CompareFileTime

  LeaveCriticalSection

  GetFileSize

  DeleteCriticalSection

  OpenProcess

  GlobalFree

  CreateThread

  WaitForSingleObject

  LocalAlloc

  Wow64RevertWow64FsRedirection

  VirtualAlloc

  Wow64DisableWow64FsRedirection

  GetCommandLineW

  GetModuleFileNameW

  GetSystemInfo

  GetQueuedCompletionStatus

  SetFileAttributesW

  WriteFile

  Process32NextW

  MulDiv

  GetFileSizeEx

  MoveFileW

  MultiByteToWideChar

  ReadFile

  UnmapViewOfFile

  GetComputerNameW

  GetCurrentProcessId

  FindNextFileW

  GetTempPathW

  GetProcessHeap

  SetErrorMode

  EnterCriticalSection

  HeapAlloc

  FindFirstFileW

  SetFilePointerEx

  GetSystemDefaultUILanguage

  ExitProcess

  GlobalAlloc

  GetDriveTypeW

  GetNativeSystemInfo

  FindClose

  CloseHandle

  ReleaseMutex

  Sleep

  GetProcAddress

  Process32FirstW

  WideCharToMultiByte

  GetVolumeInformationW

  CreateMutexW

  GetSystemDirectoryW

  GetFileAttributesW

  GetWindowsDirectoryW

  advapi32

  RegQueryValueExW

  ImpersonateLoggedOnUser

  CryptAcquireContextW

  AllocateAndInitializeSid

  IsValidSid

  RegSetValueExW

  RegOpenKeyExW

  RegCreateKeyExW

  GetUserNameW

  OpenProcessToken

  RevertToSelf

  GetTokenInformation

  FreeSid

  CryptGenRandom

  CheckTokenMembership

  RegCloseKey

  ole32

  CreateStreamOnHGlobal

  mpr

  WNetCloseEnum

  WNetOpenEnumW

  WNetEnumResourceW

  shlwapi

  SHDeleteKeyW

  PathFindExtensionW

  SHDeleteValueW

  gdi32

  GetObjectW

  SetBkMode

  GetDeviceCaps

  GetStockObject

  DeleteDC

  GetDIBits

  SelectObject

  CreateCompatibleBitmap

  SetBkColor

  DeleteObject

  SetTextColor

  CreateCompatibleDC

  SetPixel

  CreateFontW

  crypt32

  CryptBinaryToStringW

  CryptStringToBinaryW

  winmm

  timeBeginPeriod

  timeGetTime

  shell32

  CommandLineToArgvW

  ShellExecuteExW

  Sections

  .text

  Size: 41KB - Virtual size: 44KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 62KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .s7bz

  Size: 26KB - Virtual size: 52KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .SCY

  Size: 6KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE