General

Malware Config

Signatures

Files

• 74f3ee71dc86f083db59f488dc6c72d7

  .exe windows:4 windows x86 arch:x86

  88a9e919ea1b9807e1519635b0ceabd1

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  version

  VerQueryValueA

  GetFileVersionInfoSizeA

  GetFileVersionInfoA

  shell32

  SHBrowseForFolderA

  SHGetMalloc

  SHGetPathFromIDListA

  comctl32

  ord17

  kernel32

  DeleteFileA

  lstrlenW

  WriteFile

  InterlockedIncrement

  InterlockedDecrement

  QueryPerformanceFrequency

  CreateEventA

  Sleep

  lstrcatA

  CompareStringA

  CompareStringW

  GetVersionExA

  SetFilePointer

  SetFileAttributesA

  SetFileTime

  LocalFileTimeToFileTime

  DosDateTimeToFileTime

  FreeLibrary

  GetProcAddress

  LoadLibraryA

  LockResource

  LoadResource

  SizeofResource

  FindResourceA

  CreateProcessA

  GetSystemDefaultLCID

  GlobalHandle

  VerLanguageNameA

  SetCurrentDirectoryA

  GetPrivateProfileSectionA

  WaitForSingleObject

  GetSystemInfo

  GetModuleFileNameA

  IsValidCodePage

  FlushFileBuffers

  LocalFree

  FormatMessageA

  GetDiskFreeSpaceA

  _lclose

  OpenFile

  GetDriveTypeA

  lstrcpynA

  CreateDirectoryA

  GetFileAttributesA

  RemoveDirectoryA

  GetExitCodeProcess

  GetCurrentProcess

  GetCurrentThread

  GetLocaleInfoA

  FreeEnvironmentStringsW

  lstrlenA

  UnhandledExceptionFilter

  GetOEMCP

  GetACP

  GetCPInfo

  SetUnhandledExceptionFilter

  WideCharToMultiByte

  VirtualAlloc

  VirtualFree

  HeapCreate

  HeapDestroy

  GetEnvironmentVariableA

  DeleteCriticalSection

  InitializeCriticalSection

  TlsGetValue

  TlsAlloc

  TlsSetValue

  GetCurrentThreadId

  HeapSize

  HeapReAlloc

  LeaveCriticalSection

  EnterCriticalSection

  GetVersion

  GetCommandLineA

  GetStartupInfoA

  GetModuleHandleA

  TerminateProcess

  ExitProcess

  RaiseException

  HeapFree

  HeapAlloc

  RtlUnwind

  SystemTimeToFileTime

  QueryPerformanceCounter

  ResetEvent

  SetEvent

  GetShortPathNameA

  SearchPathA

  GetStringTypeA

  FindFirstFileA

  VirtualProtect

  VirtualQuery

  FindClose

  GetStringTypeW

  IsBadReadPtr

  IsBadCodePtr

  LCMapStringA

  LCMapStringW

  SetStdHandle

  CreateFileA

  GetFileSize

  GlobalAlloc

  CloseHandle

  GlobalLock

  ReadFile

  GlobalUnlock

  GlobalFree

  GetLastError

  SetLastError

  CopyFileA

  MultiByteToWideChar

  CreateThread

  GetExitCodeThread

  GetTickCount

  lstrcmpiA

  lstrcmpA

  ExpandEnvironmentStringsA

  GetPrivateProfileIntA

  GetTempPathA

  SetErrorMode

  GetWindowsDirectoryA

  GetTempFileNameA

  WritePrivateProfileStringA

  lstrcpyA

  GetPrivateProfileStringA

  CreateFileMappingA

  MapViewOfFile

  IsBadWritePtr

  UnmapViewOfFile

  GetEnvironmentStrings

  GetEnvironmentStringsW

  SetHandleCount

  GetStdHandle

  GetFileType

  FreeEnvironmentStringsA

  user32

  GetWindowTextLengthA

  GetWindowTextA

  MoveWindow

  GetWindowPlacement

  DrawIcon

  DestroyIcon

  GetDlgCtrlID

  SetWindowTextA

  FillRect

  GetParent

  EnableWindow

  GetDlgItemTextA

  SetCursor

  UpdateWindow

  GetClassInfoA

  wvsprintfA

  LoadStringA

  GetSysColor

  GetSysColorBrush

  IsDialogMessageA

  SendMessageA

  GetSystemMetrics

  SetRect

  FindWindowA

  IntersectRect

  SubtractRect

  CharPrevA

  DestroyWindow

  CreateDialogParamA

  CharNextA

  MessageBoxA

  WaitForInputIdle

  GetWindowLongA

  BeginPaint

  EndPaint

  SetWindowLongA

  GetClientRect

  ClientToScreen

  SetWindowPos

  GetWindowDC

  EndDialog

  GetDlgItem

  ShowWindow

  DialogBoxParamA

  GetDesktopWindow

  wsprintfA

  MsgWaitForMultipleObjects

  PeekMessageA

  DefWindowProcA

  PostMessageA

  KillTimer

  PostQuitMessage

  SetTimer

  LoadIconA

  LoadCursorA

  RegisterClassA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  GetDC

  ReleaseDC

  ExitWindowsEx

  SendDlgItemMessageA

  IsWindow

  CharLowerBuffA

  GetWindowRect

  gdi32

  GetTextExtentPointA

  SetBkMode

  SetTextColor

  GetObjectA

  CreateFontIndirectA

  CreateSolidBrush

  CreateCompatibleDC

  SelectObject

  TranslateCharsetInfo

  DeleteDC

  DeleteObject

  GetStockObject

  GetSystemPaletteEntries

  CreatePalette

  GetDeviceCaps

  SelectPalette

  RealizePalette

  CreateDIBitmap

  BitBlt

  advapi32

  RegQueryValueA

  RegOpenKeyA

  RegEnumValueA

  RegCreateKeyExA

  RegSetValueExA

  RegDeleteValueA

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  AdjustTokenPrivileges

  LookupPrivilegeValueA

  OpenProcessToken

  FreeSid

  EqualSid

  AllocateAndInitializeSid

  GetTokenInformation

  OpenThreadToken

  RegDeleteKeyA

  ole32

  StringFromCLSID

  CoTaskMemFree

  CoCreateGuid

  CoCreateInstance

  GetRunningObjectTable

  StgIsStorageFile

  StgOpenStorage

  CoUninitialize

  CoInitialize

  CreateItemMoniker

  oleaut32

  VariantChangeType

  SysAllocString

  SysAllocStringLen

  SysStringLen

  SysReAllocStringLen

  SysFreeString

  VariantClear

  Sections

  .text

  Size: 136KB - Virtual size: 136KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 20KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 64KB - Virtual size: 64KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE