General

Malware Config

Signatures

Files

• parte.exe

  .exe windows:5 windows x86

  43c856276c896899101e7feab79916ce

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetComputerNameA

  GetTempFileNameW

  GetModuleHandleExA

  GetLocaleInfoA

  CommConfigDialogA

  FindResourceExW

  FindResourceW

  DeleteVolumeMountPointA

  OpenJobObjectA

  ReadConsoleA

  InterlockedDecrement

  SetDefaultCommConfigW

  QueryPerformanceCounter

  GetEnvironmentStringsW

  InterlockedCompareExchange

  WriteConsoleInputA

  OpenSemaphoreA

  CreateHardLinkA

  FreeEnvironmentStringsA

  SetTapeParameters

  SetThreadUILanguage

  FindNextVolumeMountPointA

  GetConsoleAliasesA

  GetConsoleAliasesLengthA

  ConvertFiberToThread

  ReadConsoleW

  GetCompressedFileSizeW

  GetConsoleAliasExesW

  WaitNamedPipeW

  WriteFile

  EnumTimeFormatsW

  GetCommandLineA

  GetDriveTypeA

  GetVolumePathNameW

  GetEnvironmentStrings

  GetConsoleCP

  GlobalAlloc

  LoadLibraryW

  GetConsoleMode

  ReadConsoleInputA

  GetCalendarInfoW

  SetConsoleCP

  GetCommandLineW

  EnumSystemCodePagesA

  SetSystemPowerState

  IsDBCSLeadByte

  GetStartupInfoW

  CreateMailslotW

  GetShortPathNameA

  GetNamedPipeHandleStateW

  InterlockedExchange

  GetLastError

  SetLastError

  ReadConsoleOutputCharacterA

  PeekConsoleInputW

  SetVolumeLabelW

  RemoveDirectoryA

  CopyFileA

  EnumSystemCodePagesW

  FreeUserPhysicalPages

  SetComputerNameA

  FindClose

  GetAtomNameA

  SetCalendarInfoW

  MoveFileA

  SetConsoleCtrlHandler

  AddAtomA

  HeapWalk

  SetCommMask

  GetPrivateProfileSectionNamesA

  GetOEMCP

  FindNextFileA

  _lread

  GetModuleHandleA

  GetStringTypeW

  VirtualProtect

  EnumDateFormatsW

  PeekConsoleInputA

  FindFirstVolumeA

  GetWindowsDirectoryW

  DeleteFileW

  WriteConsoleW

  FlushFileBuffers

  SetStdHandle

  GetFileAttributesA

  GetVolumeNameForVolumeMountPointA

  SetFilePointer

  HeapFree

  HeapAlloc

  GetProcAddress

  GetModuleHandleW

  ExitProcess

  DecodePointer

  DeleteFileA

  WideCharToMultiByte

  HeapReAlloc

  HeapSetInformation

  RaiseException

  IsProcessorFeaturePresent

  HeapCreate

  GetStdHandle

  GetModuleFileNameW

  EncodePointer

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  TerminateProcess

  GetCurrentProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  InterlockedIncrement

  GetCurrentThreadId

  GetCPInfo

  GetACP

  IsValidCodePage

  SetHandleCount

  GetFileType

  CloseHandle

  FreeEnvironmentStringsW

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  Sleep

  HeapSize

  RtlUnwind

  LCMapStringW

  MultiByteToWideChar

  CreateFileW

  user32

  CharUpperA

  CharUpperBuffA

  gdi32

  GetTextFaceA

  winhttp

  WinHttpWriteData

  Sections

  .text

  Size: 219KB - Virtual size: 218KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 15KB - Virtual size: 30.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .zexuj

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .wukir

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 56KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ