General

Malware Config

Signatures

Files

• VirusShare_d8f3b153f6635d4257aa9de8cf5a0ef4

  .exe windows:5 windows x86 arch:x86

  55cf7d46d588cca3d1dc219960711b38

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  MultiByteToWideChar

  lstrcpyA

  CloseHandle

  WideCharToMultiByte

  lstrcpynA

  GetModuleHandleA

  GetProcAddress

  AreFileApisANSI

  GetLastError

  LoadLibraryA

  GetModuleFileNameA

  GlobalAlloc

  CreateMutexA

  lstrlenW

  GetFileAttributesA

  InterlockedDecrement

  GetStartupInfoA

  CreateProcessA

  SetLastError

  GlobalFree

  ExitProcess

  GetTickCount

  GetACP

  GetOEMCP

  VirtualProtect

  LocalFree

  GetCurrentThreadId

  FreeLibrary

  GetFullPathNameA

  OutputDebugStringA

  lstrlenA

  user32

  GetDlgCtrlID

  SetWindowTextA

  SetForegroundWindow

  DrawTextA

  GetSystemMetrics

  IsWindow

  UpdateWindow

  SendMessageA

  FillRect

  GetDesktopWindow

  SetCapture

  GetWindowRect

  GetWindowTextA

  TabbedTextOutA

  PtInRect

  GrayStringA

  DefWindowProcA

  EnumChildWindows

  GetParent

  EnableWindow

  GetSystemMenu

  IsWindowUnicode

  GetForegroundWindow

  wsprintfW

  GetTopWindow

  IsZoomed

  OffsetRect

  ReleaseCapture

  SetRect

  gdi32

  AnimatePalette

  AbortDoc

  RectVisible

  LPtoDP

  SetRectRgn

  BitBlt

  TextOutA

  CreateFontIndirectA

  DPtoLP

  CreatePolygonRgn

  GetTextColor

  CombineRgn

  Polyline

  CreatePalette

  CreateRectRgn

  PtInRegion

  GetObjectA

  SetPixel

  PtVisible

  advapi32

  LsaFreeMemory

  RegSetValueExW

  CryptDestroyHash

  LsaClose

  RegOpenKeyExW

  CryptDeriveKey

  RegOpenKeyExA

  RegDeleteValueA

  RegDeleteValueW

  CryptEncrypt

  RegEnumValueA

  CryptAcquireContextA

  LsaOpenPolicy

  EqualSid

  CryptReleaseContext

  RegEnumValueW

  RegCreateKeyExA

  FreeSid

  RegCreateKeyExW

  CryptCreateHash

  CryptDestroyKey

  CryptDecrypt

  RegCloseKey

  RegQueryValueExW

  IsTextUnicode

  RegQueryValueExA

  RegDeleteKeyW

  RegOpenCurrentUser

  RegEnumKeyW

  CryptHashData

  RegSetValueExA

  RegOpenKeyA

  shell32

  ShellExecuteA

  SHGetPathFromIDListA

  SHGetMalloc

  SHGetDesktopFolder

  ole32

  CoInitialize

  CLSIDFromProgID

  StringFromCLSID

  CoCreateInstance

  CoTaskMemFree

  CoUninitialize

  comctl32

  InitCommonControlsEx

  _TrackMouseEvent

  version

  VerQueryValueA

  GetFileVersionInfoSizeA

  GetFileVersionInfoA

  oledlg

  OleUIBusyW

  psapi

  GetModuleBaseNameA

  msvcrt

  malloc

  _mbscmp

  __set_app_type

  _CIcos

  _XcptFilter

  _initterm

  _vsnprintf

  _onexit

  ??1type_info@@UAE@XZ

  _controlfp

  __CxxFrameHandler

  ?terminate@@YAXXZ

  __setusermatherr

  free

  __p__commode

  _mbsicmp

  __getmainargs

  _strdup

  __p__fmode

  _setmbcp

  _except_handler3

  _splitpath

  _adjust_fdiv

  _CxxThrowException

  exit

  _exit

  _acmdln

  __dllonexit

  Sections

  .text

  Size: 55KB - Virtual size: 54KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 96KB - Virtual size: 95KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ