General

Malware Config

Signatures

Files

• 74ea99336f700f208033f8ce3b8fea9c

  .exe windows:6 windows x86 arch:x86

  68ef2de998b32cb5b93a836509d4fc9b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetProcessHeap

  GetExitCodeProcess

  Sleep

  GetModuleFileNameW

  CreateProcessW

  GetModuleHandleW

  CopyFileW

  GetTickCount

  MoveFileW

  HeapAlloc

  5

  a

  a

  E

  _

  V

  C

  c

  3

  CreateThread

  CloseHandle

  TerminateThread

  GetLastError

  WaitForSingleObject

  CreateFileW

  WriteFile

  GetCurrentProcess

  HeapFree

  GetStdHandle

  SetConsoleTextAttribute

  GetVersionExW

  CreateDirectoryW

  8

  user32

  wsprintfW

  SendInput

  ReleaseDC

  GetSystemMetrics

  FindWindowW

  SendMessageW

  GetDC

  gdi32

  CreateCompatibleBitmap

  SelectObject

  CreateCompatibleDC

  DeleteObject

  BitBlt

  advapi32

  RegOpenKeyExW

  RegQueryValueExW

  LookupPrivilegeValueW

  AdjustTokenPrivileges

  OpenProcessToken

  RegCloseKey

  shlwapi

  PathFileExistsW

  PathRemoveFileSpecW

  PathFindFileNameW

  i

  GdE

  C

  8

  _

  GdipDisposeImage

  GdipGetImageEncodersSize

  GdipSaveImageToFile

  tn���eɨñ
  

  U

  -

  o

  0

  b

  8

  0

  -

  {

  0

  8

  -

  6

  s

  <

  ��TN���eƗñ
  

  
  

  9

  -

  �
  �

  n

  4

  �eƗñ
  

  c

  ?

  f

  E

  t

  m

  1

  P

  d

  -

  

  {

  0

  9�@@9�

  9

  l,

  D

  3

  Sections

  .text

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 892B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ