General

Malware Config

Signatures

Files

• 8da9e6d81d1c75f2096569cf7fbb0aac9935973bfd1a07224872a5e4751ab3a6

  .exe windows x86

  0623f5db00daeb7e7d209f48f21ec2ff

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  ord17

  kernel32

  GetFileAttributesW

  CreateDirectoryW

  WriteFile

  GetStdHandle

  VirtualFree

  GetModuleHandleW

  GetProcAddress

  LoadLibraryA

  LockResource

  LoadResource

  SizeofResource

  FindResourceExA

  MulDiv

  GlobalFree

  GlobalAlloc

  lstrcmpiA

  GetSystemDefaultLCID

  GetSystemDefaultUILanguage

  GetUserDefaultUILanguage

  lstrlenW

  lstrcmpiW

  GetEnvironmentVariableW

  lstrcmpW

  GlobalMemoryStatusEx

  VirtualAlloc

  MultiByteToWideChar

  WideCharToMultiByte

  ExpandEnvironmentStringsW

  lstrlenA

  RemoveDirectoryW

  FindClose

  FindNextFileW

  DeleteFileW

  FindFirstFileW

  SetThreadLocale

  GetLocalTime

  GetSystemTimeAsFileTime

  GetTempPathW

  SetEnvironmentVariableW

  CloseHandle

  CreateFileW

  GetDriveTypeW

  SetCurrentDirectoryW

  GetModuleFileNameW

  GetCommandLineW

  GetVersionExW

  CreateEventW

  SetEvent

  ResetEvent

  InitializeCriticalSection

  TerminateThread

  ResumeThread

  SuspendThread

  IsBadReadPtr

  LocalFree

  lstrcpyW

  FormatMessageW

  GetSystemDirectoryW

  DeleteCriticalSection

  GetFileSize

  SetFilePointer

  ReadFile

  SetFileTime

  SetEndOfFile

  EnterCriticalSection

  LeaveCriticalSection

  WaitForMultipleObjects

  GetModuleHandleA

  SystemTimeToFileTime

  GetLastError

  CreateThread

  WaitForSingleObject

  GetExitCodeThread

  Sleep

  SetLastError

  SetFileAttributesW

  GetDiskFreeSpaceExW

  lstrcatW

  ExitProcess

  CompareFileTime

  GetStartupInfoA

  user32

  SendMessageW

  CharUpperW

  DestroyWindow

  ReleaseDC

  KillTimer

  DispatchMessageW

  GetMessageW

  SetTimer

  CreateWindowExW

  wsprintfW

  ScreenToClient

  GetWindowRect

  GetParent

  GetSystemMenu

  EnableMenuItem

  EnableWindow

  MessageBeep

  LoadIconW

  LoadImageW

  wvsprintfW

  IsWindow

  DefWindowProcW

  CallWindowProcW

  DrawIconEx

  DialogBoxIndirectParamW

  GetWindow

  ClientToScreen

  GetDC

  DrawTextW

  ShowWindow

  SystemParametersInfoW

  SetFocus

  SetWindowLongW

  GetSystemMetrics

  GetClientRect

  GetDlgItem

  GetKeyState

  wsprintfA

  MessageBoxA

  SetWindowTextW

  GetSysColor

  GetWindowTextLengthW

  GetWindowTextW

  GetClassNameA

  GetWindowLongW

  CopyImage

  SetWindowPos

  GetWindowDC

  EndDialog

  GetMenu

  gdi32

  GetCurrentObject

  StretchBlt

  SetStretchBltMode

  CreateCompatibleBitmap

  SelectObject

  CreateCompatibleDC

  GetObjectW

  GetDeviceCaps

  DeleteObject

  CreateFontIndirectW

  DeleteDC

  shell32

  SHGetFileInfoW

  SHBrowseForFolderW

  SHGetPathFromIDListW

  SHGetMalloc

  ShellExecuteW

  SHGetSpecialFolderPathW

  ShellExecuteExW

  ole32

  CoInitialize

  CreateStreamOnHGlobal

  CoCreateInstance

  oleaut32

  VariantClear

  OleLoadPicture

  SysAllocString

  msvcrt

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  ??1type_info@@UAE@XZ

  _onexit

  __dllonexit

  _CxxThrowException

  _beginthreadex

  ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

  memset

  _wcsnicmp

  _wtol

  strncmp

  malloc

  memmove

  wcscpy

  memcpy

  free

  memcmp

  _purecall

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _except_handler3

  _controlfp

  Sections

  .text

  Size: 70KB - Virtual size: 70KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 13KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ