General

Malware Config

Signatures

Files

• NDAPersonalData.rar

  .rar
• NDAPersonalData/desktop.ini

  .dll windows x64

  c06ad75dce0e6d9df61a58f133ad8cb8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  imm32

  ImmSetCandidateWindow

  ImmSetCompositionWindow

  ImmNotifyIME

  ImmGetOpenStatus

  ImmGetCompositionStringW

  ImmAssociateContextEx

  ImmGetDefaultIMEWnd

  ImmAssociateContext

  ImmReleaseContext

  ImmGetContext

  ImmGetVirtualKey

  shell32

  SHGetFileInfoW

  SHGetStockIconInfo

  Shell_NotifyIconGetRect

  Shell_NotifyIconW

  ShellExecuteW

  SHBrowseForFolderW

  SHGetKnownFolderIDList

  SHGetPathFromIDListW

  SHGetMalloc

  SHCreateItemFromParsingName

  SHCreateItemFromIDList

  ord727

  wtsapi32

  WTSFreeMemory

  WTSQuerySessionInformationW

  ole32

  OleFlushClipboard

  OleGetClipboard

  OleSetClipboard

  CoCreateInstance

  CoInitialize

  CoInitializeEx

  CoUninitialize

  DoDragDrop

  ReleaseStgMedium

  CoGetMalloc

  OleUninitialize

  OleInitialize

  RevokeDragDrop

  RegisterDragDrop

  CoCreateGuid

  CoLockObjectExternal

  OleIsCurrentClipboard

  CoTaskMemFree

  gdi32

  CreateRectRgn

  SelectClipRgn

  OffsetRgn

  DeleteObject

  CombineRgn

  BitBlt

  CreateCompatibleBitmap

  CreateCompatibleDC

  CreateDCW

  DeleteDC

  SelectObject

  ExtTextOutW

  SetWorldTransform

  GetBitmapBits

  SetTextAlign

  SetTextColor

  SetGraphicsMode

  SetBkMode

  GetCharABCWidthsI

  GetTextExtentPoint32W

  GetOutlineTextMetricsW

  GetGlyphOutlineW

  GetCharABCWidthsFloatW

  GetCharABCWidthsW

  GdiFlush

  CreateDIBSection

  GetTextFaceW

  GetTextMetricsW

  RemoveFontMemResourceEx

  AddFontMemResourceEx

  RemoveFontResourceExW

  AddFontResourceExW

  GetStockObject

  GetFontData

  EnumFontFamiliesExW

  CreateFontIndirectW

  SwapBuffers

  GetPixelFormat

  DescribePixelFormat

  SetPixelFormat

  ChoosePixelFormat

  CreateBitmap

  GetObjectW

  GetDeviceCaps

  user32

  TrackPopupMenu

  RemoveMenu

  ModifyMenuW

  AppendMenuW

  InsertMenuW

  DestroyMenu

  CreatePopupMenu

  CreateMenu

  DrawMenuBar

  SetMenu

  LoadIconW

  GetSysColor

  FindWindowA

  SetCaretPos

  ShowCaret

  HideCaret

  DestroyCaret

  CreateCaret

  IsWindowEnabled

  RegisterWindowMessageW

  GetCursorInfo

  GetIconInfo

  CreateIconIndirect

  CreateCursor

  LoadCursorW

  GetCursor

  SetCursorPos

  GetClipboardFormatNameW

  RegisterClipboardFormatW

  CloseTouchInputHandle

  GetTouchInputInfo

  GetAsyncKeyState

  GetMessageExtraInfo

  TrackMouseEvent

  SetMenuItemInfoW

  TrackPopupMenuEx

  GetMenu

  MapVirtualKeyW

  ToUnicode

  ToAscii

  GetKeyboardState

  GetKeyState

  IsZoomed

  PeekMessageW

  GetKeyboardLayout

  EnumDisplayMonitors

  GetMonitorInfoW

  MonitorFromWindow

  LoadImageW

  GetSysColorBrush

  ChildWindowFromPointEx

  WindowFromPoint

  GetCursorPos

  GetClientRect

  GetFocus

  RegisterClassExW

  GetClassInfoW

  UnregisterClassW

  GetMenuItemInfoW

  SystemParametersInfoW

  MessageBeep

  IsWindow

  GetDoubleClickTime

  GetAncestor

  MonitorFromPoint

  DestroyIcon

  DestroyCursor

  GetWindow

  GetWindowThreadProcessId

  SetParent

  GetParent

  GetDesktopWindow

  SetWindowLongPtrW

  GetWindowLongPtrW

  SetWindowLongW

  GetWindowLongW

  ScreenToClient

  ClientToScreen

  GetCaretBlinkTime

  SetCursor

  AdjustWindowRectEx

  GetWindowRect

  SetWindowTextW

  InvalidateRect

  SetWindowRgn

  GetUpdateRect

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  SetForegroundWindow

  GetForegroundWindow

  EnableMenuItem

  GetSystemMenu

  GetSystemMetrics

  ReleaseCapture

  SetCapture

  GetCapture

  IsTouchWindow

  UnregisterTouchWindow

  RegisterTouchWindow

  SetFocus

  IsIconic

  IsWindowVisible

  SetWindowPlacement

  GetWindowPlacement

  SetWindowPos

  MoveWindow

  FlashWindowEx

  SetLayeredWindowAttributes

  UpdateLayeredWindow

  ShowWindow

  DestroyWindow

  IsChild

  CreateWindowExW

  DefWindowProcW

  AttachThreadInput

  PostMessageW

  SendMessageW

  GetWindowTextW

  EnumWindows

  RealGetWindowClassW

  RegisterClassW

  EnumDisplayDevicesW

  ChangeWindowMessageFilterEx

  IsHungAppWindow

  SetClipboardViewer

  ChangeClipboardChain

  UpdateLayeredWindowIndirect

  GetKeyboardLayoutList

  advapi32

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  kernel32

  GlobalLock

  GlobalAlloc

  GlobalSize

  SetErrorMode

  GetCurrentProcessId

  ExpandEnvironmentStringsW

  CloseHandle

  CreateProcessW

  LoadLibraryA

  LoadLibraryW

  CheckRemoteDebuggerPresent

  OpenProcess

  GetUserDefaultLangID

  ExitProcess

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  IsDebuggerPresent

  QueryPerformanceCounter

  GetSystemTimeAsFileTime

  DisableThreadLibraryCalls

  GetCurrentThreadId

  GetLastError

  InitializeSListHead

  GlobalUnlock

  GetLocaleInfoW

  WTSGetActiveConsoleSessionId

  FormatMessageW

  GetProcAddress

  GetModuleHandleW

  Exports

  Exports

  gT_Activate_Size

  gT_Add_Default_Modules

  gT_Add_Module

  gT_Angle_Diff

  gT_Atan2

  gT_Attach_File

  gT_Attach_Stream

  gT_Bitmap_Convert

  gT_Bitmap_Copy

  gT_Bitmap_Done

  gT_Bitmap_Embolden

  gT_Bitmap_Init

  gT_Bitmap_New

  gT_CeilFix

  gT_Cos

  gT_DivFix

  gT_Done_Face

  gT_Done_FreeType

  gT_Done_Library

  gT_Done_Size

  gT_Face_GetCharVariantIndex

  gT_Face_GetCharVariantIsDefault

  gT_Face_GetCharsOfVariant

  gT_Face_GetVariantSelectors

  gT_Face_GetVariantsOfChar

  gT_Face_Properties

  gT_FloorFix

  gT_Get_Advance

  gT_Get_Advances

  gT_Get_CMap_Format

  gT_Get_CMap_Language_ID

  gT_Get_Char_Index

  gT_Get_Charmap_Index

  gT_Get_First_Char

  gT_Get_Font_Format

  gT_Get_Glyph_Name

  gT_Get_Kerning

  gT_Get_Module

  gT_Get_Name_Index

  gT_Get_Next_Char

  gT_Get_PS_Font_Info

  gT_Get_PS_Font_Private

  gT_Get_PS_Font_Value

  gT_Get_Postscript_Name

  gT_Get_Renderer

  gT_Get_Sfnt_LangTag

  gT_Get_Sfnt_Name

  gT_Get_Sfnt_Name_Count

  gT_Get_Sfnt_Table

  gT_Get_SubGlyph_Info

  gT_Get_Track_Kerning

  gT_Get_TrueType_Engine_Type

  gT_Get_X11_Font_Format

  gT_GlyphSlot_Embolden

  gT_GlyphSlot_Oblique

  gT_GlyphSlot_Own_Bitmap

  gT_Gzip_Uncompress

  gT_Has_PS_Glyph_Names

  gT_Init_FreeType

  gT_Library_SetLcdFilter

  gT_Library_SetLcdFilterWeights

  gT_Library_Version

  gT_List_Add

  gT_List_Finalize

  gT_List_Find

  gT_List_Insert

  gT_List_Iterate

  gT_List_Remove

  gT_List_Up

  gT_Load_Char

  gT_Load_Glyph

  gT_Load_Sfnt_Table

  gT_Matrix_Invert

  gT_Matrix_Multiply

  gT_MulDiv

  gT_MulFix

  gT_New_Face

  gT_New_Library

  gT_New_Memory_Face

  gT_New_Size

  gT_Open_Face

  gT_Outline_Check

  gT_Outline_Copy

  gT_Outline_Decompose

  gT_Outline_Done

  gT_Outline_Done_Internal

  gT_Outline_Embolden

  gT_Outline_EmboldenXY

  gT_Outline_Get_Bitmap

  gT_Outline_Get_CBox

  gT_Outline_Get_Orientation

  gT_Outline_New

  gT_Outline_New_Internal

  gT_Outline_Render

  gT_Outline_Reverse

  gT_Outline_Transform

  gT_Outline_Translate

  gT_Property_Get

  gT_Property_Set

  gT_Reference_Face

  gT_Reference_Library

  gT_Remove_Module

  gT_Render_Glyph

  gT_Request_Size

  gT_RoundFix

  gT_Select_Charmap

  gT_Select_Size

  gT_Set_Char_Size

  gT_Set_Charmap

  gT_Set_Debug_Hook

  gT_Set_Default_Properties

  gT_Set_Pixel_Sizes

  gT_Set_Renderer

  gT_Set_Transform

  gT_Sfnt_Table_Info

  gT_Sin

  gT_Stream_OpenGzip

  gT_Stream_OpenLZW

  gT_Tan

  gT_Vector_From_Polar

  gT_Vector_Length

  gT_Vector_Polarize

  gT_Vector_Rotate

  gT_Vector_Transform

  gT_Vector_Unit

  gT_New_Context

  gT_RunIns

  gt_plugin_instance

  init

  Sections

  .text

  Size: 967KB - Virtual size: 967KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 385KB - Virtual size: 384KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 58KB - Virtual size: 58KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .qtmetad

  Size: 512B - Virtual size: 127B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 840B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• NDAPersonalData/f1acdf0794d290dbd6ef4bdc77292a24.Lnk.vir

  .lnk