General

Malware Config

Signatures

Files

• 123.exe

  .exe windows x64

  e6360e9b7a461166f83852282b66eb35

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  GetStringTypeW

  LCMapStringW

  CompareStringW

  GetTimeZoneInformation

  GetConsoleCP

  GetConsoleMode

  IsValidCodePage

  WriteConsoleW

  CreateFileW

  SetEnvironmentVariableA

  FlsAlloc

  FlsFree

  QueryPerformanceCounter

  SetHandleCount

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  FlsSetValue

  FlsGetValue

  HeapCreate

  GetVersion

  HeapSetInformation

  GetStdHandle

  RtlCaptureContext

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  FindResourceW

  UnhandledExceptionFilter

  TerminateProcess

  GetFileType

  SetStdHandle

  HeapSize

  HeapQueryInformation

  CreateThread

  ExitThread

  GetSystemTimeAsFileTime

  VirtualQuery

  GetSystemInfo

  SetThreadStackGuarantee

  RtlPcToFileHeader

  RaiseException

  RtlUnwindEx

  RtlLookupFunctionEntry

  HeapReAlloc

  HeapFree

  GetStartupInfoW

  GetCommandLineA

  ExitProcess

  HeapAlloc

  DecodePointer

  EncodePointer

  FindResourceExW

  SetErrorMode

  GetNumberFormatA

  GetWindowsDirectoryA

  GetFileSizeEx

  LocalFileTimeToFileTime

  GetFileAttributesExA

  FileTimeToLocalFileTime

  GetShortPathNameA

  GetVolumeInformationA

  DuplicateHandle

  SetEndOfFile

  UnlockFile

  LockFile

  FlushFileBuffers

  WriteFile

  ReadFile

  MoveFileA

  DeleteFileA

  lstrcmpiA

  GetStringTypeExA

  SearchPathA

  GetProfileIntA

  GetTempPathA

  SetFilePointer

  Sleep

  GetACP

  GetOEMCP

  GetCPInfo

  TlsFree

  LocalReAlloc

  TlsSetValue

  GlobalHandle

  TlsAlloc

  TlsGetValue

  LocalAlloc

  GlobalFlags

  InitializeCriticalSection

  GetDiskFreeSpaceA

  GetFullPathNameA

  GetTempFileNameA

  GetFileTime

  SetFileTime

  ReplaceFileA

  GetTickCount

  GetPrivateProfileStringA

  WritePrivateProfileStringA

  GetPrivateProfileIntA

  GetCurrentThread

  GetUserDefaultUILanguage

  ConvertDefaultLocale

  GetSystemDefaultUILanguage

  GetLocaleInfoA

  SystemTimeToFileTime

  FileTimeToSystemTime

  GetThreadLocale

  lstrcmpA

  CreateFileA

  GetFileSize

  GetFileAttributesA

  GlobalReAlloc

  WaitForSingleObject

  ResumeThread

  SetThreadPriority

  CloseHandle

  GetModuleFileNameW

  ReleaseActCtx

  CreateActCtxW

  GetModuleFileNameA

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  GetCurrentDirectoryA

  GetModuleHandleW

  EnterCriticalSection

  LeaveCriticalSection

  GlobalFree

  CopyFileA

  GlobalSize

  GlobalAlloc

  FormatMessageA

  LocalFree

  lstrlenW

  MulDiv

  FindResourceA

  FreeResource

  GetCurrentThreadId

  GlobalFindAtomA

  GlobalDeleteAtom

  GetVersionExA

  FreeLibrary

  CompareStringA

  LoadLibraryW

  lstrcmpW

  GlobalLock

  GlobalUnlock

  GetCurrentProcessId

  GlobalGetAtomNameA

  GlobalAddAtomA

  MultiByteToWideChar

  VirtualProtect

  FindNextFileA

  FindClose

  VirtualAlloc

  EnumUILanguagesW

  FindFirstFileA

  GetEnvironmentVariableA

  lstrcatA

  InitOnceExecuteOnce

  GetCurrentProcess

  lstrlenA

  lstrcpyA

  GetModuleHandleA

  LoadLibraryA

  GetProcAddress

  SetLastError

  GetLastError

  DeactivateActCtx

  ActivateActCtx

  LockResource

  SizeofResource

  WideCharToMultiByte

  LoadResource

  user32

  CreateAcceleratorTableA

  GetKeyboardState

  GetKeyboardLayout

  ToAsciiEx

  CopyAcceleratorTableA

  CopyIcon

  SetCursorPos

  RealChildWindowFromPoint

  WaitMessage

  PostThreadMessageA

  CreateDialogIndirectParamA

  GetNextDlgTabItem

  EndDialog

  SetWindowContextHelpId

  MapDialogRect

  ShowOwnedPopups

  PostQuitMessage

  HideCaret

  InvertRect

  FrameRect

  CharUpperBuffA

  GetIconInfo

  GetMenuItemInfoA

  LoadImageW

  EmptyClipboard

  CloseClipboard

  SetClipboardData

  CopyImage

  OpenClipboard

  TranslateMessage

  DestroyAcceleratorTable

  SetLayeredWindowAttributes

  EnumDisplayMonitors

  RegisterClipboardFormatA

  SetMenuDefaultItem

  GetMenuDefaultItem

  EndPaint

  BeginPaint

  GetWindowDC

  GrayStringA

  DrawTextExA

  DrawTextA

  TabbedTextOutA

  SetClassLongPtrA

  DrawIconEx

  GetSysColorBrush

  DrawFocusRect

  DrawFrameControl

  DrawEdge

  FillRect

  DrawStateA

  LockWindowUpdate

  GetUpdateRect

  SetRect

  MapVirtualKeyA

  GetKeyNameTextA

  ReleaseDC

  GetDC

  CharUpperA

  NotifyWinEvent

  MessageBeep

  LoadCursorW

  WindowFromPoint

  GetSystemMenu

  DeleteMenu

  IsMenu

  GetAsyncKeyState

  GetMessageA

  GetCursorPos

  MonitorFromPoint

  SystemParametersInfoA

  UpdateLayeredWindow

  LoadCursorA

  EnableScrollBar

  SetCapture

  KillTimer

  SetTimer

  ValidateRect

  UnionRect

  MoveWindow

  SetWindowTextA

  IsDialogMessageA

  SetDlgItemTextA

  SubtractRect

  CheckDlgButton

  TranslateMDISysAccel

  DrawMenuBar

  DefMDIChildProcA

  DefFrameProcA

  SetParent

  RedrawWindow

  SetWindowRgn

  IsZoomed

  IsRectEmpty

  GetMenuStringA

  AppendMenuA

  InsertMenuA

  RemoveMenu

  RegisterWindowMessageA

  LoadIconA

  SendDlgItemMessageA

  SetWindowsHookExA

  CallNextHookEx

  GetClassLongA

  GetClassLongPtrA

  SetPropA

  GetPropA

  RemovePropA

  GetWindowTextLengthA

  GetWindowTextA

  GetForegroundWindow

  DispatchMessageA

  BeginDeferWindowPos

  EndDeferWindowPos

  GetTopWindow

  DestroyWindow

  GetWindowLongPtrA

  SetWindowLongPtrA

  UnhookWindowsHookEx

  GetMessageTime

  GetMessagePos

  MonitorFromWindow

  GetMonitorInfoA

  MapWindowPoints

  ScrollWindow

  TrackPopupMenu

  SetScrollRange

  GetScrollRange

  SetScrollPos

  GetScrollPos

  SetForegroundWindow

  ShowScrollBar

  MessageBoxA

  CreateWindowExA

  GetClassInfoExA

  RegisterClassA

  AdjustWindowRectEx

  EnableWindow

  UpdateWindow

  LoadBitmapW

  GetSysColor

  LoadMenuW

  DeferWindowPos

  GetScrollInfo

  SetScrollInfo

  PtInRect

  SetWindowPlacement

  GetWindowPlacement

  DefWindowProcA

  CallWindowProcA

  GetClassNameA

  UnpackDDElParam

  ReuseDDElParam

  LoadMenuA

  DestroyMenu

  WinHelpA

  SetWindowPos

  GetDoubleClickTime

  IsClipboardFormatAvailable

  GetTabbedTextExtentW

  GetWindowRgn

  UnregisterClassA

  CreateMenu

  MapVirtualKeyExA

  IsCharLowerA

  DrawIcon

  DestroyIcon

  SetFocus

  GetWindowThreadProcessId

  GetActiveWindow

  IsWindowEnabled

  EqualRect

  GetDlgItem

  SetWindowLongA

  GetDlgCtrlID

  GetKeyState

  LoadIconW

  InvalidateRgn

  CharNextA

  DestroyCursor

  GetNextDlgGroupItem

  EnumChildWindows

  InvalidateRect

  InflateRect

  SetRectEmpty

  SendMessageA

  GetClientRect

  GetParent

  GetFocus

  GetSubMenu

  IsChild

  GetWindowRect

  ScreenToClient

  LoadImageA

  GetSystemMetrics

  wsprintfA

  ClientToScreen

  CheckMenuItem

  EnableMenuItem

  GetMenuState

  ModifyMenuA

  GetMenuCheckMarkDimensions

  SetMenuItemBitmaps

  TranslateAcceleratorA

  IsWindow

  GetWindow

  ShowWindow

  GetWindowLongA

  GetDesktopWindow

  SetMenu

  PostMessageA

  BringWindowToTop

  GetLastActivePopup

  GetMenu

  CopyRect

  OffsetRect

  IntersectRect

  GetClassInfoA

  CreatePopupMenu

  GetMenuItemCount

  GetMenuItemID

  InsertMenuItemA

  IsIconic

  IsWindowVisible

  SetActiveWindow

  LoadAcceleratorsA

  ReleaseCapture

  GetCapture

  PeekMessageA

  SetCursor

  LoadAcceleratorsW

  gdi32

  ExtSelectClipRgn

  CreatePatternBrush

  SelectPalette

  GetObjectType

  SetRectRgn

  GetMapMode

  DPtoLP

  GetTextMetricsA

  CreateDIBitmap

  EnumFontFamiliesA

  GetTextCharsetInfo

  SetDIBColorTable

  GetDIBits

  RealizePalette

  StretchBlt

  SetPixel

  StartPage

  EndPage

  SetAbortProc

  AbortDoc

  EndDoc

  GetCharWidthA

  OffsetRgn

  GetRgnBox

  RoundRect

  CreatePalette

  GetPaletteEntries

  ExtFloodFill

  SetPaletteEntries

  GetViewportOrgEx

  LPtoDP

  GetNearestPaletteIndex

  GetSystemPaletteEntries

  GetWindowOrgEx

  PtInRegion

  FillRgn

  FrameRgn

  GetBoundsRect

  EnumFontFamiliesExA

  GetNearestColor

  GetBkMode

  GetPolyFillMode

  GetROP2

  GetStretchBltMode

  GetTextAlign

  GetTextFaceA

  GetTextExtentPointA

  GetTextExtentPoint32W

  SetPixelV

  SetTextAlign

  MoveToEx

  GetCurrentPositionEx

  ScaleWindowExtEx

  SetWindowExtEx

  OffsetWindowOrgEx

  SetWindowOrgEx

  ScaleViewportExtEx

  SetViewportExtEx

  OffsetViewportOrgEx

  SetViewportOrgEx

  Escape

  TextOutA

  RectVisible

  PtVisible

  StartDocA

  GetPixel

  GetWindowExtEx

  GetViewportExtEx

  SelectClipRgn

  SetLayout

  GetLayout

  Rectangle

  GetObjectA

  LineTo

  IntersectClipRect

  ExcludeClipRect

  GetClipBox

  SetMapMode

  SetStretchBltMode

  SetROP2

  SetPolyFillMode

  SetBkMode

  RestoreDC

  SaveDC

  ExtTextOutA

  Polygon

  Ellipse

  Polyline

  GetTextColor

  GetBkColor

  CombineRgn

  CreatePolygonRgn

  CreateEllipticRgn

  CreateRectRgn

  CreateHatchBrush

  CreateSolidBrush

  PatBlt

  CreateRectRgnIndirect

  CreateRoundRectRgn

  CreatePen

  BitBlt

  CreateDIBSection

  SelectObject

  DeleteDC

  CreateDCA

  CopyMetaFileA

  GetDeviceCaps

  SetBkColor

  SetTextColor

  CreateCompatibleDC

  CreateCompatibleBitmap

  CreateBitmap

  CreateFontIndirectA

  DeleteObject

  GetStockObject

  GetTextExtentPoint32A

  msimg32

  TransparentBlt

  AlphaBlend

  comdlg32

  GetFileTitleA

  winspool.drv

  OpenPrinterA

  DocumentPropertiesA

  ClosePrinter

  GetJobA

  advapi32

  RegEnumKeyExA

  RegSetValueA

  RegQueryValueExA

  RegOpenKeyExA

  RegCreateKeyExA

  RegSetValueExA

  RegDeleteValueA

  RegDeleteKeyA

  RegEnumKeyA

  RegQueryValueA

  RegEnumValueA

  RegOpenKeyExW

  RegCloseKey

  GetFileSecurityA

  SetFileSecurityA

  shell32

  SHGetPathFromIDListA

  DragQueryFileA

  SHAppBarMessage

  ShellExecuteA

  SHGetFileInfoA

  SHGetDesktopFolder

  SHGetSpecialFolderLocation

  ExtractIconA

  SHAddToRecentDocs

  SHBrowseForFolderA

  SHGetMalloc

  DragFinish

  comctl32

  InitCommonControlsEx

  ImageList_GetIconSize

  ImageList_ReplaceIcon

  ImageList_GetIcon

  ImageList_Create

  ImageList_GetImageCount

  ImageList_Destroy

  ImageList_DrawEx

  shlwapi

  PathFindFileNameA

  PathStripToRootA

  PathIsUNCA

  PathRemoveFileSpecW

  PathFindExtensionA

  ole32

  OleFlushClipboard

  OleIsCurrentClipboard

  CreateILockBytesOnHGlobal

  StgOpenStorageOnILockBytes

  OleInitialize

  CoFreeUnusedLibraries

  OleUninitialize

  CLSIDFromProgID

  DoDragDrop

  CLSIDFromString

  CreateStreamOnHGlobal

  CoInitialize

  CoCreateInstance

  RegisterDragDrop

  OleDuplicateData

  CoTaskMemAlloc

  ReleaseStgMedium

  StringFromCLSID

  IsAccelerator

  OleTranslateAccelerator

  OleGetClipboard

  OleLockRunning

  CoInitializeEx

  CoGetClassObject

  StgCreateDocfileOnILockBytes

  CoRevokeClassObject

  CoRegisterMessageFilter

  RevokeDragDrop

  CoCreateGuid

  CoLockObjectExternal

  CoTaskMemFree

  OleDestroyMenuDescriptor

  CoUninitialize

  OleCreateMenuDescriptor

  oleaut32

  VariantChangeType

  VariantInit

  SysAllocStringLen

  SysAllocString

  SysStringLen

  VariantCopy

  SafeArrayDestroy

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  VarBstrFromDate

  OleCreateFontIndirect

  SysAllocStringByteLen

  SysFreeString

  VariantClear

  oledlg

  ord8

  gdiplus

  GdipGetImageGraphicsContext

  GdipBitmapUnlockBits

  GdipBitmapLockBits

  GdipCreateBitmapFromScan0

  GdipCreateBitmapFromStream

  GdipGetImagePalette

  GdipGetImagePaletteSize

  GdipGetImagePixelFormat

  GdipGetImageHeight

  GdipGetImageWidth

  GdipCloneImage

  GdipDrawImageRectI

  GdipSetInterpolationMode

  GdipCreateFromHDC

  GdiplusShutdown

  GdiplusStartup

  GdipCreateBitmapFromHBITMAP

  GdipDisposeImage

  GdipDeleteGraphics

  GdipAlloc

  GdipFree

  GdipDrawImageI

  wininet

  FtpOpenFileA

  InternetCloseHandle

  InternetOpenA

  FtpGetFileSize

  InternetReadFile

  InternetCrackUrlA

  InternetConnectA

  oleacc

  LresultFromObject

  AccessibleObjectFromWindow

  CreateStdAccessibleObject

  imm32

  ImmReleaseContext

  ImmGetContext

  ImmGetOpenStatus

  winmm

  PlaySoundA

  Sections

  .text

  Size: 1.8MB - Virtual size: 1.8MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 665KB - Virtual size: 665KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 37KB - Virtual size: 86KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 90KB - Virtual size: 90KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  text

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  data

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 82KB - Virtual size: 81KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ