General

Malware Config

Signatures

Files

• 42e18100bc58d37f07f0c678a2a425dc4c1988f6a86cff80c456301789d58282.zip

  .zip

  Password: infected

• 42e18100bc58d37f07f0c678a2a425dc4c1988f6a86cff80c456301789d58282.exe

  .exe windows x86

  Password: infected

  ae274c29ca15928cb1e23f2e712ba155

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  PulseEvent

  ReadConsoleInputW

  GetFirmwareEnvironmentVariableW

  GetCPInfoExW

  CreateEventW

  CopyFileExA

  GetProcAddress

  GlobalAlloc

  SetDefaultCommConfigA

  OpenWaitableTimerW

  GetFileAttributesW

  EnumResourceTypesW

  WriteFileGather

  GetModuleHandleW

  InterlockedCompareExchange

  UnhandledExceptionFilter

  LocalFlags

  GlobalLock

  GetConsoleAliasW

  WritePrivateProfileSectionA

  FindFirstVolumeMountPointA

  SetLastError

  SleepEx

  AddAtomA

  lstrcmpA

  SetCalendarInfoA

  GetSystemWindowsDirectoryA

  EnumTimeFormatsW

  GetSystemDirectoryW

  AddAtomW

  GetExitCodeThread

  _llseek

  FindNextFileW

  CopyFileA

  GetShortPathNameW

  EnumCalendarInfoA

  EnumCalendarInfoExA

  AddRefActCtx

  SetStdHandle

  WriteConsoleW

  GetCurrentThreadId

  LoadLibraryA

  CloseHandle

  SetFilePointer

  ReadFile

  FlushFileBuffers

  InterlockedIncrement

  InterlockedDecrement

  Sleep

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  EncodePointer

  DecodePointer

  GetLastError

  HeapFree

  RtlUnwind

  RaiseException

  HeapReAlloc

  HeapAlloc

  MoveFileA

  DeleteFileA

  GetCommandLineA

  HeapSetInformation

  GetStartupInfoW

  WideCharToMultiByte

  LCMapStringW

  MultiByteToWideChar

  GetCPInfo

  IsProcessorFeaturePresent

  HeapCreate

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameW

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  TerminateProcess

  GetCurrentProcess

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  InitializeCriticalSectionAndSpinCount

  GetFileType

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetACP

  GetOEMCP

  IsValidCodePage

  GetStringTypeW

  GetLocaleInfoW

  HeapSize

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  LoadLibraryW

  GetConsoleCP

  GetConsoleMode

  CreateFileW

  user32

  LoadMenuW

  advapi32

  LookupAccountSidW

  shell32

  FindExecutableA

  ole32

  CoGetInstanceFromFile

  Sections

  .text

  Size: 99KB - Virtual size: 98KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 157KB - Virtual size: 658KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 55KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ