General

Malware Config

Signatures

Files

• 28866aeeee3377081ac0b841779e92c749357fa06cf842946c54432544cf0696

  .exe windows:5 windows x86 arch:x86

  fc1f1701cc2cd2382801317bb6201029

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  FreeLibrary

  GetModuleFileNameW

  GetProcAddress

  LoadLibraryW

  GetCommandLineW

  CloseHandle

  GetLastError

  Sleep

  GetCurrentProcessId

  TerminateProcess

  GetCurrentThreadId

  OpenProcess

  GetSystemDirectoryW

  GetSystemWow64DirectoryW

  GetModuleHandleW

  CreateToolhelp32Snapshot

  Process32FirstW

  Process32NextW

  DeleteFileW

  InitializeCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  WaitForSingleObject

  WaitForMultipleObjects

  CreateThread

  QueueUserWorkItem

  UnregisterWaitEx

  LocalFree

  GetTempPathW

  GetStartupInfoW

  GetTickCount

  SetDllDirectoryW

  GetDllDirectoryW

  CopyFileW

  GetSystemTime

  SystemTimeToFileTime

  GetExitCodeProcess

  VerSetConditionMask

  GetCurrentProcess

  LocalAlloc

  VerifyVersionInfoW

  CreateFileW

  ReadFile

  WriteFile

  SetNamedPipeHandleState

  WaitNamedPipeW

  GetOverlappedResult

  CancelIo

  FlushFileBuffers

  ConnectNamedPipe

  DisconnectNamedPipe

  CreateNamedPipeW

  CreateIoCompletionPort

  GetQueuedCompletionStatus

  PostQueuedCompletionStatus

  CreateDirectoryW

  GetFileAttributesW

  GetPrivateProfileStringW

  MultiByteToWideChar

  WideCharToMultiByte

  SetUnhandledExceptionFilter

  CreateProcessW

  GetProcessId

  LoadLibraryExW

  OutputDebugStringW

  DecodePointer

  RaiseException

  HeapDestroy

  HeapAlloc

  HeapReAlloc

  HeapFree

  HeapSize

  GetProcessHeap

  InitializeCriticalSectionAndSpinCount

  FindResourceExW

  LoadResource

  LockResource

  SizeofResource

  FindResourceW

  SetEvent

  CreateEventW

  GetModuleHandleExW

  VirtualAlloc

  VirtualFree

  GetFileAttributesExW

  GetSystemInfo

  SetLastError

  QueryPerformanceCounter

  QueryPerformanceFrequency

  GetCurrentThread

  WriteConsoleW

  VirtualProtect

  VirtualQuery

  LoadLibraryExA

  lstrlenW

  GetPrivateProfileIntW

  ExpandEnvironmentStringsW

  ProcessIdToSessionId

  CompareFileTime

  FindClose

  FindFirstFileW

  FindNextFileW

  GetFileSizeEx

  SetFilePointerEx

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  GetCompressedFileSizeW

  ReleaseSemaphore

  CreateSemaphoreW

  GetStringTypeW

  SwitchToThread

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetSystemTimeAsFileTime

  EncodePointer

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  GetCPInfo

  InitializeSListHead

  IsProcessorFeaturePresent

  IsDebuggerPresent

  UnhandledExceptionFilter

  RtlUnwind

  InterlockedPushEntrySList

  SetConsoleCtrlHandler

  ExitThread

  FreeLibraryAndExitThread

  GetStdHandle

  ExitProcess

  SetEnvironmentVariableW

  GetFileType

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  GetConsoleCP

  GetConsoleMode

  ReadConsoleW

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetStdHandle

  SetEndOfFile

  Exports

  Exports

  GetHostInterface

  Sections

  .text

  Size: 741KB - Virtual size: 740KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 196KB - Virtual size: 196KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 22KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 608KB - Virtual size: 612KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE