General

Malware Config

Signatures

Files

• dd6320b125131dabd2a8215d5dae2fa4

  .exe windows:5 windows x86 arch:x86

  d3d90f0936e5019ce459fae651e906a8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  cryptsvc.pdb

  Imports

  ntdll

  atoi

  memmove

  _ftol

  user32

  PostMessageW

  LoadStringA

  IsWindow

  TranslateMessage

  DispatchMessageW

  BeginPaint

  EndPaint

  DefWindowProcW

  SetTimer

  GetClipboardData

  KillTimer

  MsgWaitForMultipleObjects

  SetWindowLongW

  SendMessageW

  EqualRect

  ClientToScreen

  MessageBeep

  wvsprintfW

  GetMessageW

  PeekMessageW

  SetCursor

  GetDC

  GetClientRect

  SetRect

  UpdateWindow

  LoadCursorW

  GetClassInfoW

  wsprintfW

  GetWindowLongW

  GetParent

  CreateWindowExW

  LoadStringW

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  RegisterClassW

  OpenClipboard

  InvalidateRect

  ReleaseDC

  wsprintfA

  GetAsyncKeyState

  MessageBoxW

  kernel32

  GetModuleHandleA

  IsBadStringPtrW

  LoadLibraryA

  DeleteFileW

  IsBadWritePtr

  IsBadCodePtr

  lstrcmpiW

  LocalUnlock

  GetPrivateProfileStringW

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  GetProcAddress

  lstrcatA

  GetModuleHandleW

  DeleteCriticalSection

  GetACP

  IsBadHugeReadPtr

  GetFileAttributesW

  HeapFree

  GetProcessHeap

  HeapAlloc

  GlobalFree

  GlobalUnlock

  lstrcpyW

  GlobalLock

  GlobalAlloc

  lstrlenW

  lstrcpynW

  LocalFree

  WideCharToMultiByte

  LocalAlloc

  GetModuleFileNameW

  lstrcatW

  LocalHandle

  MultiByteToWideChar

  LocalLock

  lstrlenA

  DisableThreadLibraryCalls

  QueryPerformanceCounter

  MulDiv

  QueryPerformanceFrequency

  Sleep

  GetVersionExW

  GetSystemInfo

  VirtualAlloc

  VirtualFree

  GlobalMemoryStatusEx

  GlobalHandle

  SetEvent

  FreeLibrary

  CloseHandle

  GlobalReAlloc

  lstrcpyA

  WaitForSingleObject

  SetThreadPriority

  GetThreadPriority

  GetCurrentThread

  GetLocalTime

  CreateEventW

  CreateThread

  GetFileSize

  GetOverlappedResult

  GetLastError

  WriteFile

  SetFilePointer

  CreateFileW

  GetDiskFreeSpaceW

  LoadLibraryW

  GetCurrentThreadId

  gdi32

  DeleteObject

  CreatePalette

  GetStockObject

  GetDCOrgEx

  SelectObject

  PatBlt

  GetObjectW

  GetPaletteEntries

  GetNearestPaletteIndex

  SetWindowOrgEx

  RealizePalette

  SelectPalette

  GetClipBox

  GetDeviceCaps

  GetSystemPaletteEntries

  winmm

  SendDriverMessage

  OpenDriver

  CloseDriver

  mmioDescend

  mmioRead

  mciSendStringW

  mmioAscend

  mmioOpenW

  mmioClose

  mmioWrite

  waveInStart

  waveInStop

  waveOutGetNumDevs

  mmioCreateChunk

  mmioFlush

  waveInReset

  waveInUnprepareHeader

  waveInClose

  waveInOpen

  waveInPrepareHeader

  waveInAddBuffer

  timeGetTime

  mmioSeek

  advapi32

  RegEnumKeyW

  RegOpenKeyW

  RegCloseKey

  RegQueryValueExW

  RegOpenKeyA

  RegQueryValueExA

  RegCreateKeyW

  version

  GetFileVersionInfoW

  VerQueryValueW

  GetFileVersionInfoSizeW

  msvfw32

  ICSeqCompressFrame

  ICSeqCompressFrameEnd

  DrawDibDraw

  ICSeqCompressFrameStart

  DrawDibGetPalette

  DrawDibBegin

  ICImageDecompress

  DrawDibOpen

  ICCompressorFree

  DrawDibClose

  ICCompressorChoose

  DrawDibRealize

  Sections

  .text

  Size: 53KB - Virtual size: 52KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 292KB - Virtual size: 711KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ