General

Malware Config

Signatures

Files

• c3f507f13b9b437cb5b9bce3e8172eab82f4b8e67b0e00cd55b2e28705008d65

  .exe windows x86

  1e03d117f63096a8bda81dae8d1f44b3

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  GetDesktopWindow

  DestroyWindow

  SetRect

  GetWindowRect

  EndDialog

  LoadBitmapA

  GetParent

  SetDlgItemTextA

  EnableWindow

  GetDlgItemTextA

  CharNextA

  IsWindowVisible

  DrawTextA

  ScreenToClient

  CreateDialogParamA

  GetWindowTextA

  SystemParametersInfoA

  PostQuitMessage

  LoadIconA

  SetClassLongA

  SendDlgItemMessageA

  CharPrevA

  SetWindowPos

  BeginPaint

  EndPaint

  LoadCursorA

  RegisterClassA

  GetClientRect

  GetDlgItem

  FillRect

  ole32

  OleInitialize

  OleUninitialize

  CoCreateInstance

  shlwapi

  PathFileExistsW

  PathRemoveBackslashA

  SHDeleteValueA

  gdi32

  GetClipRgn

  SetTextColor

  SelectObject

  CreatePen

  CreateRectRgn

  OffsetClipRgn

  IntersectClipRect

  GetStockObject

  GetNearestColor

  SetBkColor

  urlmon

  CreateURLMoniker

  kernel32

  GetFileAttributesA

  GetVersionExA

  FileTimeToSystemTime

  SetStdHandle

  GetEnvironmentVariableA

  InitializeCriticalSection

  FindFirstFileA

  LeaveCriticalSection

  FindClose

  lstrlenA

  FindVolumeClose

  FindNextFileA

  LoadLibraryA

  GetFileType

  CompareStringA

  VirtualAlloc

  SetConsoleCtrlHandler

  SetConsoleMode

  FileTimeToLocalFileTime

  LCMapStringA

  lstrcmpiA

  HeapCreate

  GetUserDefaultLCID

  GetShortPathNameA

  WideCharToMultiByte

  GetModuleFileNameA

  InterlockedExchange

  GetLocaleInfoA

  GetStringTypeA

  GetStdHandle

  GetProcessHeap

  SetVolumeLabelA

  GetFileTime

  GetVolumeInformationA

  LocalUnlock

  IsValidCodePage

  GetTimeZoneInformation

  GetLocaleInfoW

  GetStartupInfoA

  GetStringTypeW

  GetLocalTime

  GetFullPathNameA

  GetConsoleScreenBufferInfo

  GetModuleHandleExW

  IsValidLocale

  GetConsoleMode

  HeapFree

  CreateFileA

  VirtualFree

  EnumSystemLocalesA

  SetHandleCount

  ExitProcess

  SetEnvironmentVariableA

  GetCurrentProcess

  FlushFileBuffers

  HeapDestroy

  ReleaseMutex

  GetDriveTypeA

  GetDriveTypeA

  SetThreadPriorityBoost

  GetProcAddress

  CreateMutexA

  HeapAlloc

  LCMapStringW

  lstrcpynA

  GetModuleHandleA

  CompareStringW

  SetupComm

  GetSystemTime

  shell32

  ExtractIconExA

  SHGetSpecialFolderPathW

  ShellExecuteExA

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 5KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .text1

  Size: 117KB - Virtual size: 144KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  penxmes

  Size: - Virtual size: 4KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE