General

Malware Config

Signatures

Files

• 7120cf1ad3fdcae7ba6956749a8988e8181837a05948b432cec6ae11229b1d12_payload.bin

  .exe windows x86

  c8681af63c4b3bc7041fe674efea6dd2

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetStringTypeA

  LCMapStringW

  LCMapStringA

  LoadLibraryA

  RtlUnwind

  InitializeCriticalSectionAndSpinCount

  MultiByteToWideChar

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetFileType

  SetHandleCount

  GetEnvironmentStringsW

  GetStringTypeW

  GetCommandLineW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  GetModuleFileNameA

  GetStdHandle

  WriteFile

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  HeapSize

  ExitProcess

  InterlockedDecrement

  GetCurrentThreadId

  SetLastError

  InterlockedIncrement

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  GetLocaleInfoA

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  CreateFileA

  FlushFileBuffers

  WideCharToMultiByte

  LocalAlloc

  LocalFree

  CreateProcessW

  GetVersion

  CloseHandle

  CreateEventW

  GetProcAddress

  GetLastError

  GetModuleFileNameW

  FormatMessageW

  Sleep

  LoadLibraryW

  GetModuleHandleW

  GetSystemWindowsDirectoryW

  FreeEnvironmentStringsW

  HeapReAlloc

  VirtualAlloc

  EnterCriticalSection

  HeapFree

  ExitThread

  ResumeThread

  CreateThread

  HeapAlloc

  GetCommandLineA

  GetStartupInfoA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  HeapCreate

  VirtualFree

  DeleteCriticalSection

  LeaveCriticalSection

  GetModuleHandleA

  user32

  DialogBoxIndirectParamW

  InflateRect

  SetWindowTextW

  CreateDesktopW

  DestroyWindow

  SetCursor

  TranslateAcceleratorW

  GetWindowRect

  SetActiveWindow

  GetMessageW

  PostQuitMessage

  TrackPopupMenu

  RegisterWindowMessageW

  PostMessageW

  GetKeyState

  SetForegroundWindow

  DialogBoxParamW

  LoadCursorW

  CallNextHookEx

  OpenDesktopW

  FindWindowW

  GetClientRect

  SetFocus

  GetDC

  TranslateMessage

  LoadAcceleratorsW

  ChildWindowFromPoint

  LoadIconW

  OffsetRect

  InvalidateRect

  BringWindowToTop

  SystemParametersInfoW

  ReleaseDC

  GetDlgItem

  EndDialog

  GetSysColor

  SetWindowPos

  GetCursorPos

  CheckDlgButton

  ShowWindow

  CreatePopupMenu

  GetSysColorBrush

  IsDlgButtonChecked

  SwitchDesktop

  SetThreadDesktop

  CreateWindowExW

  InsertMenuW

  SetWindowsHookExW

  MessageBoxW

  RegisterClassW

  GetSystemMetrics

  SendMessageW

  UnregisterHotKey

  DestroyMenu

  RegisterHotKey

  DefWindowProcW

  MoveWindow

  DispatchMessageW

  GetWindowPlacement

  gdi32

  StartPage

  GetDeviceCaps

  SetMapMode

  StartDocW

  EndDoc

  BitBlt

  SetTextColor

  DeleteDC

  CreateFontIndirectW

  StretchBlt

  SetBkMode

  DeleteObject

  SelectObject

  CreateCompatibleDC

  CreateCompatibleBitmap

  GetObjectW

  SetStretchBltMode

  GetStockObject

  EndPage

  comdlg32

  PrintDlgW

  advapi32

  RegCreateKeyW

  RegSetValueExW

  RegCloseKey

  GetSecurityDescriptorSacl

  RegOpenKeyExW

  SetSecurityInfo

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  RegDeleteValueW

  RegOpenKeyW

  RegQueryValueExW

  RegCreateKeyExW

  shell32

  ShellExecuteW

  Shell_NotifyIconW

  Sections

  .text

  Size: 64KB - Virtual size: 64KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 22KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 112KB - Virtual size: 111KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE