General

Malware Config

Signatures

Files

• 962b8f9f86a66ba2d0ec47103d669706b00e42a7388b150a925d169bf51c424b

  .exe windows x86

  bca2a4abd16f11c99866a4c22c229479

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CloseHandle

  CreateProcessW

  DeleteFileW

  GetLastError

  CopyFileW

  GetTimeFormatA

  InterlockedExchange

  GetVolumeInformationA

  SetLastError

  GetModuleFileNameW

  GetDiskFreeSpaceW

  FindNextChangeNotification

  FindCloseChangeNotification

  FindFirstChangeNotificationW

  LoadLibraryW

  ExitProcess

  GetCurrentProcessId

  GetFileTime

  GetModuleFileNameA

  MultiByteToWideChar

  WideCharToMultiByte

  CreateProcessA

  DeleteFileA

  Sleep

  GetCurrentThreadId

  GetTickCount

  FreeLibrary

  LoadLibraryA

  GetProcAddress

  GetLocalTime

  user32

  GetActiveWindow

  GetSysColorBrush

  GetClassInfoExA

  RegisterClassExA

  GetWindowTextLengthA

  GetWindowTextA

  GetKeyNameTextA

  KillTimer

  SetTimer

  GetScrollRange

  ShowScrollBar

  GetDlgItemInt

  SetDlgItemInt

  FrameRect

  RegisterHotKey

  CheckMenuItem

  CheckMenuRadioItem

  EndDeferWindowPos

  AppendMenuA

  CallWindowProcA

  GetMessageA

  GetWindowLongA

  CheckRadioButton

  SendDlgItemMessageA

  OffsetRect

  DestroyWindow

  LoadImageA

  DrawIcon

  SetForegroundWindow

  GetClipboardData

  IsClipboardFormatAvailable

  IsWindowEnabled

  GetClassNameA

  BeginDeferWindowPos

  DeferWindowPos

  EndDialog

  ole32

  CoUninitialize

  CoInitialize

  CoCreateInstance

  CoRevokeClassObject

  CoSuspendClassObjects

  OleCreate

  StgCreateDocfile

  OleSetContainedObject

  msvcrt

  _controlfp

  _except_handler3

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  __p___initenv

  _XcptFilter

  _exit

  strchr

  malloc

  calloc

  free

  realloc

  fopen

  fseek

  fputs

  fwrite

  fclose

  exit

  wcslen

  Sections

  .text

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 183KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ