General

Malware Config

Signatures

Files

• 9b6bf6b18292879d45cbd5ed83ac14f088484299fcdcf5d382a2acf5e6887131.exe

  .exe windows x86

  81dcfb4077e724c86c444dcea6b08e8a

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _controlfp

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  _except_handler3

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueW

  kernel32

  IsValidCodePage

  QueryPerformanceCounter

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetPriorityClass

  GetLocalTime

  CreateDirectoryW

  CreateEventW

  CreateFileA

  CreateFileW

  CreateProcessW

  CreateThread

  DeleteCriticalSection

  DeleteFileW

  DeviceIoControl

  DuplicateHandle

  EnumResourceLanguagesW

  ExitThread

  ExpandEnvironmentStringsW

  FileTimeToLocalFileTime

  FileTimeToSystemTime

  FindClose

  FindFirstFileW

  FindNextFileW

  FindResourceW

  FlushFileBuffers

  FormatMessageW

  FreeEnvironmentStringsW

  FreeLibrary

  FreeResource

  GetACP

  GetCommandLineW

  GetConsoleCP

  GetConsoleMode

  GetConsoleOutputCP

  GetCurrentThread

  GetDiskFreeSpaceExW

  GetDriveTypeW

  GetEnvironmentStringsW

  GetFileAttributesW

  GetFileInformationByHandle

  GetFileTime

  GetFileType

  GetFullPathNameW

  GetLastError

  GetLocaleInfoA

  GetLocaleInfoW

  GetLogicalDrives

  GetLogicalDriveStringsW

  GetModuleFileNameA

  GetModuleFileNameW

  GetModuleHandleA

  GetModuleHandleW

  GetOEMCP

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  GetProcAddress

  GetProcessHeap

  GetStartupInfoA

  GetCPInfo

  GetStdHandle

  GetStringTypeA

  GetStringTypeW

  GetTempFileNameW

  GetTempPathW

  GetTimeZoneInformation

  GetVersionExA

  GetVersionExW

  GetVolumeInformationW

  GlobalAddAtomW

  GlobalAlloc

  GlobalDeleteAtom

  GlobalFindAtomW

  GlobalFlags

  GlobalFree

  GlobalHandle

  GlobalLock

  GlobalReAlloc

  GlobalUnlock

  HeapAlloc

  HeapCreate

  HeapFree

  HeapReAlloc

  HeapSize

  InterlockedDecrement

  InterlockedExchange

  InterlockedIncrement

  LCMapStringA

  LCMapStringW

  LoadLibraryW

  LoadResource

  LocalAlloc

  LocalFree

  LocalReAlloc

  LockFile

  LockResource

  lstrcmpA

  lstrcmpW

  lstrlenA

  lstrlenW

  MulDiv

  MultiByteToWideChar

  OpenProcess

  RaiseException

  ReadFile

  RemoveDirectoryW

  ResumeThread

  SetConsoleTitleW

  SetEndOfFile

  SetEnvironmentVariableA

  SetErrorMode

  SetEvent

  SetFileAttributesW

  SetFilePointer

  SetHandleCount

  SetLastError

  SetStdHandle

  SetThreadPriority

  SetUnhandledExceptionFilter

  SizeofResource

  Sleep

  SuspendThread

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  UnhandledExceptionFilter

  UnlockFile

  VirtualAlloc

  VirtualFree

  WaitForSingleObject

  WideCharToMultiByte

  WriteConsoleA

  WriteConsoleW

  GetCommandLineA

  WritePrivateProfileStringW

  CreateToolhelp32Snapshot

  Process32FirstW

  Process32NextW

  InitializeCriticalSection

  EnterCriticalSection

  GetTickCount

  ExitProcess

  LeaveCriticalSection

  LoadLibraryA

  GetStartupInfoW

  WriteFile

  user32

  GetClientRect

  GetCursorPos

  GetDC

  GetDesktopWindow

  GetDlgCtrlID

  GetDlgItem

  GetFocus

  GetForegroundWindow

  GetKeyState

  GetLastActivePopup

  GetMenu

  GetMenuCheckMarkDimensions

  GetMenuItemCount

  GetMenuItemID

  GetMenuState

  GetMessagePos

  GetMessageTime

  GetMessageW

  GetNextDlgTabItem

  GetParent

  GetPropW

  GetSubMenu

  GetSysColor

  GetSysColorBrush

  GetSystemMenu

  GetSystemMetrics

  GetTopWindow

  GetWindowLongW

  GetWindowPlacement

  GetWindowRect

  GetWindowTextLengthW

  GetWindowTextW

  GetWindowThreadProcessId

  GrayStringW

  InvalidateRect

  IsDialogMessageW

  IsIconic

  IsWindowEnabled

  IsWindowVisible

  IsZoomed

  LoadBitmapW

  LoadCursorW

  GetClassNameW

  LoadStringW

  MapWindowPoints

  MessageBoxW

  ModifyMenuW

  MoveWindow

  PeekMessageW

  PostMessageW

  PostQuitMessage

  PtInRect

  RegisterClassW

  RegisterWindowMessageW

  ReleaseCapture

  ReleaseDC

  RemovePropW

  ScreenToClient

  SendDlgItemMessageA

  SendDlgItemMessageW

  SendMessageW

  SetActiveWindow

  SetCursor

  SetDlgItemTextW

  SetFocus

  SetForegroundWindow

  SetMenu

  SetMenuItemBitmaps

  SetPropW

  SetWindowLongW

  SetWindowPos

  SetWindowRgn

  SetWindowsHookExW

  SetWindowTextW

  ShowWindow

  SystemParametersInfoA

  TabbedTextOutW

  TrackPopupMenu

  TranslateMessage

  UnhookWindowsHookEx

  UnregisterClassW

  UpdateWindow

  ValidateRect

  WindowFromPoint

  WinHelpW

  GetClassLongW

  GetClassInfoW

  GetClassInfoExW

  GetCapture

  LoadIconW

  GetWindowDC

  CharToOemW

  CharUpperW

  FillRect

  ExitWindowsEx

  EndDialog

  EnableWindow

  EnableMenuItem

  DrawTextW

  DrawTextExW

  DrawMenuBar

  DrawIcon

  DrawFocusRect

  DrawEdge

  DispatchMessageW

  DestroyWindow

  DestroyMenu

  DefWindowProcW

  CreateWindowExW

  CreatePopupMenu

  CreateDialogIndirectParamW

  CopyRect

  ClientToScreen

  CheckMenuItem

  GetActiveWindow

  winspool.drv

  XcvDataW

  WritePrinter

  StartPagePrinter

  StartDocPrinterW

  StartDocPrinterA

  SetPrinterW

  WaitForPrinterChange

  advapi32

  RegCloseKey

  EnumDependentServicesW

  GetTokenInformation

  InitializeSecurityDescriptor

  LookupPrivilegeValueW

  OpenProcessToken

  OpenSCManagerW

  OpenServiceW

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegEnumKeyExW

  RegEnumKeyW

  RegEnumValueW

  StartServiceW

  SetSecurityDescriptorOwner

  SetSecurityDescriptorGroup

  RegQueryInfoKeyW

  RegQueryValueExW

  RegQueryValueW

  RegSetValueExW

  SetFileSecurityW

  SetSecurityDescriptorDacl

  RegOpenKeyExW

  RegOpenKeyW

  shell32

  StrStrW

  shlwapi

  PathRemoveFileSpecW

  PathStripToRootW

  SHDeleteKeyW

  Sections

  .text

  Size: 440KB - Virtual size: 436KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 12KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 14.0MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 4KB - Virtual size: 34B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 288KB - Virtual size: 288KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .fir310

  Size: 2.3MB - Virtual size: 2.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE