General

Malware Config

Signatures

Files

• cd32a737fcba8198d43fed5a68348f983f7713f79574a710deb7759e5a1301eb.zip

  .zip

  Password: infected

• cd32a737fcba8198d43fed5a68348f983f7713f79574a710deb7759e5a1301eb.exe

  .exe windows x86

  Password: infected

  bbbb43fd5d8e3883f1b0c66d2541cfc5

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  clusapi

  ClusterOpenEnum

  oleaut32

  VariantCopy

  gdi32

  GetSystemPaletteEntries

  msvcrt

  _controlfp

  _except_handler3

  ?terminate@@YAXXZ

  __set_app_type

  __p__fmode

  __setusermatherr

  _amsg_exit

  _initterm

  _acmdln

  exit

  _ismbblead

  _XcptFilter

  _exit

  _cexit

  __getmainargs

  __p__commode

  crypt32

  CryptSIPRetrieveSubjectGuidForCatalogFile

  netapi32

  NetShareDel

  kernel32

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  GetCurrentProcess

  GetModuleHandleA

  SetUnhandledExceptionFilter

  GetStartupInfoA

  InterlockedCompareExchange

  InterlockedExchange

  GetProcessShutdownParameters

  GenerateConsoleCtrlEvent

  Sleep

  GetNumaAvailableMemoryNode

  UnhandledExceptionFilter

  QueryPerformanceCounter

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 115KB - Virtual size: 114KB

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 27KB - Virtual size: 27KB

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 552B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ