General

Malware Config

Signatures

Files

• 750abbf4060038945cdfcf85d7249d51

  .exe windows:6 windows x86 arch:x86

  3a6577dd29951a6892400612bbf2394d

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetProcessHeap

  GetExitCodeProcess

  Sleep

  GetModuleFileNameW

  CreateProcessW

  GetModuleHandleW

  CopyFileW

  GetTickCount

  MoveFileW

  HeapAlloc

  
  

  

  Y]<$

  o

  _

  1

  CreateThread

  CloseHandle

  TerminateThread

  GetLastError

  WaitForSingleObject

  CreateFileW

  WriteFile

  GetCurrentProcess

  HeapFree

  GetStdHandle

  SetConsoleTextAttribute

  GetVersionExW

  CreateDirectoryW

  1

  user32

  wsprintfW

  SendInput

  ReleaseDC

  GetSystemMetrics

  FindWindowW

  SendMessageW

  GetDC

  gdi32

  CreateCompatibleBitmap

  SelectObject

  CreateCompatibleDC

  DeleteObject

  BitBlt

  advapi32

  RegOpenKeyExW

  RegQueryValueExW

  LookupPrivilegeValueW

  AdjustTokenPrivileges

  OpenProcessToken

  RegCloseKey

  shlwapi

  PathFileExistsW

  PathRemoveFileSpecW

  PathFindFileNameW

  8

  Gd&

  0

  V

  I

  GdipDisposeImage

  GdipGetImageEncodersSize

  GdipSaveImageToFile

  p

  2

  C

  v

  P

  V

  0

  C

  a

  3

  a

  5

  #

  A

  #

  0

  7

  P

  Ɨñ
  

  8

  5

  c

  2

  ���TN���eƗñ
  

  \

  -

  t

  c

  ñ
  

  l

  ��;$

  O

  0

  c

  5

  -

  8

  a

  8

  #

  8

  o

  Sections

  .text

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 892B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ