General

Malware Config

Signatures

Files

• 750484b8a401682f6a28b4891f2880d1

  .exe windows:5 windows x86 arch:x86

  76f4150ff2eac35489c0dd426fc5fa9c

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdiplus

  GdipMeasureString

  GdipDrawImageRectRectI

  GdipCloneBrush

  GdipDeletePen

  GdipFree

  GdipDrawRectangleI

  GdipSetStringFormatLineAlign

  GdiplusStartup

  GdiplusShutdown

  GdipCloneImage

  GdipDisposeImage

  GdipCreateBitmapFromStream

  GdipDeleteBrush

  GdipDeleteStringFormat

  GdipCreatePen1

  GdipCreateStringFormat

  GdipDrawLineI

  GdipFillRectangleI

  GdipCreateFromHDC

  GdipCreateFontFamilyFromName

  GdipDrawString

  GdipGetGenericFontFamilySansSerif

  GdipCreateFont

  GdipAlloc

  GdipCreateSolidFill

  GdipDeleteFontFamily

  GdipSetStringFormatAlign

  GdipDeleteGraphics

  GdipDeleteFont

  wininet

  HttpSendRequestA

  InternetOpenUrlW

  InternetReadFile

  HttpQueryInfoW

  InternetOpenA

  InternetOpenUrlA

  InternetConnectA

  InternetCloseHandle

  HttpOpenRequestA

  shlwapi

  PathQuoteSpacesW

  PathRemoveFileSpecW

  kernel32

  GetTimeZoneInformation

  HeapReAlloc

  IsValidLocale

  EnumSystemLocalesA

  GetLocaleInfoA

  GetUserDefaultLCID

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  GetFileType

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  GetCurrentProcess

  TerminateProcess

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  HeapSize

  GetCurrentThreadId

  SetLastError

  ExitProcess

  GetProcAddress

  GetLastError

  CreateMutexA

  CloseHandle

  GetModuleFileNameW

  WideCharToMultiByte

  WriteFile

  Sleep

  CreateFileW

  GetTempFileNameW

  SetFilePointer

  CreateProcessW

  WaitForSingleObject

  ReadFile

  DeleteFileW

  CreateThread

  SetEvent

  GetModuleHandleW

  ResetEvent

  CreateEventW

  FindResourceW

  GlobalLock

  GlobalAlloc

  SizeofResource

  GlobalUnlock

  GlobalFree

  LockResource

  QueryPerformanceCounter

  QueryPerformanceFrequency

  GetWindowsDirectoryW

  GetVolumeInformationW

  InterlockedDecrement

  GetVersionExW

  FindNextFileA

  FindFirstFileA

  FindNextFileW

  FindFirstFileW

  MoveFileExA

  MoveFileExW

  GetSystemWow64DirectoryA

  MultiByteToWideChar

  HeapCreate

  TlsSetValue

  IsProcessorFeaturePresent

  CompareStringW

  GetDateFormatA

  GetTimeFormatA

  LCMapStringW

  RaiseException

  RtlUnwind

  DeleteFileA

  GetStartupInfoW

  HeapSetInformation

  GetCommandLineA

  GetCPInfo

  HeapAlloc

  HeapFree

  GetLocaleInfoW

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  DecodePointer

  EncodePointer

  GetStringTypeW

  InterlockedExchange

  InterlockedCompareExchange

  InterlockedIncrement

  LoadLibraryW

  GetConsoleCP

  GetConsoleMode

  TlsFree

  SetStdHandle

  WriteConsoleW

  FlushFileBuffers

  SetEnvironmentVariableA

  LocalFree

  TlsAlloc

  TlsGetValue

  IsValidCodePage

  GetOEMCP

  LoadResource

  GetStdHandle

  GetACP

  user32

  DispatchMessageW

  EndPaint

  DestroyWindow

  SetCursor

  SetTimer

  ScreenToClient

  GetWindowRect

  PostQuitMessage

  SetCapture

  PostMessageW

  TrackMouseEvent

  LoadCursorW

  TranslateMessage

  GetDC

  RegisterClassExW

  LoadIconW

  InvalidateRect

  ReleaseDC

  SetWindowPos

  GetCursorPos

  ShowWindow

  CreateWindowExW

  MessageBoxW

  ReleaseCapture

  GetSystemMetrics

  UpdateWindow

  MoveWindow

  GetMessageW

  BeginPaint

  DefWindowProcW

  gdi32

  DeleteObject

  CreateCompatibleBitmap

  CreateSolidBrush

  DeleteDC

  CreateCompatibleDC

  SelectObject

  BitBlt

  advapi32

  RegCreateKeyExA

  RegSetValueExA

  RegCloseKey

  shell32

  ShellExecuteW

  ole32

  CoUninitialize

  CoInitializeEx

  CreateStreamOnHGlobal

  CoSetProxyBlanket

  CoInitializeSecurity

  CoCreateInstance

  oleaut32

  SysFreeString

  VariantClear

  SysAllocString

  comctl32

  ord413

  ord410

  Sections

  .text

  Size: 243KB - Virtual size: 243KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 45KB - Virtual size: 45KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 11KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 292KB - Virtual size: 291KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ