General

Malware Config

Signatures

Files

• 5a72e52bdcc7e97e1ea0ef4a2d82c04cb91beaf1aa962d103d5c96578fe97136

  .exe windows x86

  c56a25fa4336eeb10723b3537ba4876d

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  advapi32

  RegCloseKey

  EqualSid

  AllocateAndInitializeSid

  GetTokenInformation

  OpenProcessToken

  AdjustTokenPrivileges

  LookupPrivilegeValueA

  FreeSid

  RegDeleteValueA

  RegOpenKeyExA

  RegSetValueExA

  RegQueryValueExA

  RegCreateKeyExA

  RegQueryInfoKeyA

  kernel32

  lstrcatA

  GetFileAttributesA

  GetShortPathNameA

  LocalAlloc

  GetLastError

  GetCurrentProcess

  GetPrivateProfileIntA

  lstrcmpiA

  lstrcpyA

  GetModuleFileNameA

  FreeLibrary

  GetPrivateProfileStringA

  lstrlenA

  GetSystemDirectoryA

  RemoveDirectoryA

  GetProcAddress

  FindNextFileA

  DeleteFileA

  SetFileAttributesA

  lstrcmpA

  FindFirstFileA

  _lclose

  _llseek

  _lopen

  WritePrivateProfileStringA

  GetWindowsDirectoryA

  LoadLibraryA

  FindClose

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  IsDBCSLeadByte

  ExitProcess

  CloseHandle

  GetStartupInfoA

  GetCommandLineA

  LoadResource

  FindResourceA

  CreateMutexA

  SetEvent

  CreateEventA

  SetCurrentDirectoryA

  CreateThread

  ResetEvent

  TerminateThread

  LocalFree

  FormatMessageA

  GetExitCodeProcess

  WaitForSingleObject

  CreateProcessA

  GetTempPathA

  FreeResource

  LockResource

  SizeofResource

  CreateFileA

  ReadFile

  WriteFile

  SetFilePointer

  SetFileTime

  LocalFileTimeToFileTime

  DosDateTimeToFileTime

  GetTempFileNameA

  GetSystemInfo

  GetDriveTypeA

  lstrcpynA

  GetVolumeInformationA

  GetCurrentDirectoryA

  LoadLibraryExA

  GetModuleHandleA

  CreateDirectoryA

  ExpandEnvironmentStringsA

  GetVersionExA

  GetDiskFreeSpaceA

  MulDiv

  gdi32

  GetDeviceCaps

  user32

  wsprintfA

  ExitWindowsEx

  CharNextA

  CharUpperA

  EndDialog

  GetDesktopWindow

  CharPrevA

  GetWindowLongA

  CallWindowProcA

  GetDlgItem

  SetForegroundWindow

  SetWindowTextA

  SendDlgItemMessageA

  SetWindowLongA

  EnableWindow

  SendMessageA

  LoadStringA

  MsgWaitForMultipleObjects

  PeekMessageA

  MessageBoxA

  SetWindowPos

  ReleaseDC

  GetDC

  GetWindowRect

  ShowWindow

  DialogBoxIndirectParamA

  SetDlgItemTextA

  MessageBeep

  GetDlgItemTextA

  DispatchMessageA

  comctl32

  ord17

  version

  GetFileVersionInfoA

  VerQueryValueA

  GetFileVersionInfoSizeA

  Sections

  .text

  Size: 36KB - Virtual size: 35KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 208KB - Virtual size: 212KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ