General

Malware Config

Signatures

Files

• 5d951b5f89c57f0c0d86faef17768594

  .dll windows:4 windows x86 arch:x86

  197aa1aff6228add3e2c7332778c32c5

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  user32

  PostQuitMessage

  RegisterClassExA

  LoadIconA

  SetWindowPos

  SetWindowTextA

  TranslateAcceleratorA

  TranslateMessage

  LoadCursorA

  SetTimer

  LoadAcceleratorsA

  KillTimer

  GetMessageA

  EndPaint

  DispatchMessageA

  DefWindowProcA

  CreateWindowExA

  BeginPaint

  kernel32

  lstrcpynA

  WritePrivateProfileStructA

  WaitForSingleObject

  TerminateProcess

  RtlZeroMemory

  LoadLibraryA

  GetVersionExA

  GetTempPathA

  GetTempFileNameA

  GetProcAddress

  ClearCommError

  CloseHandle

  CopyFileExA

  CopyFileExW

  CreateThread

  DefineDosDeviceA

  DeleteFileA

  GetLastError

  GetLongPathNameA

  GetModuleFileNameA

  GetModuleFileNameW

  msvcrt

  fread

  strlen

  strcpy

  strcat

  fwrite

  fseek

  fopen

  fclose

  atoi

  _wfopen

  _strlwr

  shlwapi

  PathFileExistsA

  StrStrA

  advapi32

  RegQueryValueExA

  RegOpenKeyExA

  RegOpenKeyA

  RegDeleteKeyA

  RegCreateKeyA

  RegCloseKey

  Exports

  Exports

  aab

  aal

  allert2

  fgllert

  qoad

  windows

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 466B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ