General

Malware Config

Signatures

Files

• e18ea57d99a1dee00a6315ef73bec0b2

  .exe windows:4 windows x86 arch:x86

  7e57a57d064408ef12ef6ed396c02674

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  e:\Though\6\85\try\Never\Be\rest\73\child\39\Enter\74\charge\Touch\SelectQuick.pdb

  Imports

  advapi32

  LookupPrivilegeValueA

  GetTokenInformation

  DeleteService

  CreateServiceA

  ControlService

  CloseServiceHandle

  AdjustTokenPrivileges

  SetServiceStatus

  RegisterServiceCtrlHandlerA

  RegSetValueExA

  RegEnumKeyA

  InitializeSecurityDescriptor

  StartServiceCtrlDispatcherA

  OpenProcessToken

  FreeSid

  AllocateAndInitializeSid

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  user32

  SetWindowLongA

  SetWindowTextA

  IsIconic

  GetMenuItemID

  GetDlgItem

  GetWindow

  FindWindowA

  CallNextHookEx

  SetWindowsHookExA

  UnregisterClassA

  GetWindowTextA

  PtInRect

  GetClassNameA

  GetWindowRect

  GetDlgCtrlID

  ClientToScreen

  GetFocus

  CheckMenuItem

  EnableMenuItem

  ModifyMenuA

  LoadBitmapA

  GetParent

  ScrollWindow

  DispatchMessageA

  GetKeyState

  PeekMessageA

  ValidateRect

  LoadCursorA

  GetSystemMetrics

  GetDC

  ReleaseDC

  GetSysColor

  GetSysColorBrush

  UnhookWindowsHookEx

  GetWindowThreadProcessId

  SendMessageA

  GetWindowLongA

  PostQuitMessage

  GetLastActivePopup

  IsWindowEnabled

  EnableWindow

  MessageBoxA

  GetMenuState

  GetMenuItemCount

  GetSubMenu

  SystemParametersInfoA

  GetWindowPlacement

  SetMenuItemBitmaps

  GrayStringA

  DrawTextExA

  DrawTextA

  TabbedTextOutA

  DestroyMenu

  RegisterWindowMessageA

  LoadIconA

  WinHelpA

  GetCapture

  GetClassLongA

  SetPropA

  GetPropA

  RemovePropA

  IsWindow

  GetForegroundWindow

  GetTopWindow

  DestroyWindow

  GetMessageTime

  GetMessagePos

  MapWindowPoints

  SetForegroundWindow

  GetClientRect

  GetMenu

  PostMessageA

  CreateWindowExA

  GetClassInfoExA

  GetClassInfoA

  RegisterClassA

  AdjustWindowRectEx

  CopyRect

  DefWindowProcA

  CallWindowProcA

  SetWindowPos

  GetMenuCheckMarkDimensions

  gdi32

  CreatePatternBrush

  CreateRectRgnIndirect

  GetStockObject

  DeleteDC

  ScaleWindowExtEx

  SetWindowExtEx

  ScaleViewportExtEx

  SetViewportExtEx

  SetViewportOrgEx

  SelectObject

  TextOutA

  RectVisible

  PtVisible

  OffsetViewportOrgEx

  SetMapMode

  RestoreDC

  SaveDC

  ExtTextOutA

  SetBkColor

  SetTextColor

  GetClipBox

  CreateBitmap

  DeleteObject

  GetDeviceCaps

  Escape

  comctl32

  PropertySheetA

  CreatePropertySheetPageA

  ImageList_LoadImageA

  ImageList_SetDragCursorImage

  comdlg32

  GetSaveFileNameA

  GetOpenFileNameA

  ole32

  CoInitialize

  CoRegisterSurrogate

  CoUninitialize

  oleaut32

  VariantInit

  VariantChangeType

  VariantClear

  version

  GetFileVersionInfoA

  GetFileVersionInfoSizeA

  VerQueryValueA

  wininet

  InternetGetLastResponseInfoA

  InternetOpenUrlA

  InternetReadFile

  InternetWriteFile

  InternetSetFilePointer

  InternetOpenA

  HttpQueryInfoA

  InternetQueryDataAvailable

  InternetQueryOptionA

  InternetCanonicalizeUrlA

  InternetCrackUrlA

  InternetCloseHandle

  shlwapi

  PathAppendA

  wnsprintfA

  PathGetDriveNumberA

  AssocQueryStringA

  winmm

  mciSendCommandA

  timeBeginPeriod

  timeEndPeriod

  mciGetErrorStringA

  uxtheme

  CloseThemeData

  DrawThemeBackground

  DrawThemeText

  GetThemeFont

  avifil32

  AVIStreamFindSample

  AVIStreamEndStreaming

  AVIStreamTimeToSample

  AVIStreamRelease

  AVIFileExit

  AVIFileInit

  kernel32

  GetProcAddress

  FreeLibrary

  LoadLibraryA

  RaiseException

  VirtualProtect

  lstrlenA

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  SetStdHandle

  GetStringTypeW

  GetStringTypeA

  LCMapStringW

  LCMapStringA

  GetConsoleMode

  GetConsoleCP

  GetACP

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  GetFileType

  SetHandleCount

  GetCommandLineW

  GetCommandLineA

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  GetStdHandle

  HeapCreate

  HeapDestroy

  VirtualFree

  ExitProcess

  HeapSize

  GetStartupInfoW

  GetProcessHeap

  RtlUnwind

  VirtualAlloc

  HeapReAlloc

  HeapFree

  HeapAlloc

  CreateFileA

  GetCurrentProcess

  SetFilePointer

  WriteFile

  GetOEMCP

  GetCPInfo

  GetLocaleInfoA

  GlobalAddAtomA

  GlobalFindAtomA

  GlobalDeleteAtom

  lstrcmpW

  GetVersionExA

  GetThreadLocale

  GlobalGetAtomNameA

  GlobalFlags

  lstrcmpA

  GetCurrentThreadId

  InterlockedIncrement

  InterlockedDecrement

  GetModuleFileNameW

  GetModuleHandleA

  TlsFree

  DeleteCriticalSection

  LocalReAlloc

  TlsSetValue

  TlsAlloc

  InitializeCriticalSection

  GlobalHandle

  GlobalReAlloc

  EnterCriticalSection

  TlsGetValue

  LeaveCriticalSection

  GetCurrentProcessId

  GlobalFree

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  FormatMessageA

  FindResourceA

  LoadResource

  LockResource

  SizeofResource

  SetLastError

  CompareStringA

  GetWindowsDirectoryA

  CreateSemaphoreA

  GetSystemDirectoryA

  GetSystemInfo

  GetModuleFileNameA

  GetTempPathA

  LocalAlloc

  LocalFree

  CreateThread

  FlushFileBuffers

  GetTickCount

  DeleteFileA

  CopyFileA

  GetStartupInfoA

  CloseHandle

  CreateProcessA

  Sleep

  GetVersion

  GetLastError

  WideCharToMultiByte

  MultiByteToWideChar

  InterlockedExchange

  Sections

  .text

  Size: 124KB - Virtual size: 123KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 44KB - Virtual size: 41KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 12.8MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 52KB - Virtual size: 51KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ