General

Malware Config

Signatures

Files

• 96e07521774c2323748b514466fcf834b3601c08eeeae4b9c7ca50ce7c54f821

  .exe windows:5 windows x86 arch:x86

  9f66c5e602a1bfa2a29ccbb4934c01e5

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  cmdl32.pdb

  Imports

  msvcrt

  _controlfp

  _except_handler3

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _cexit

  _XcptFilter

  _exit

  _c_exit

  advapi32

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyExA

  kernel32

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  QueryPerformanceCounter

  GetCurrentProcess

  CreateMutexA

  ReleaseMutex

  GetPrivateProfileSectionA

  GetModuleHandleA

  ExitProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetStartupInfoA

  CreateDirectoryA

  GetCurrentProcessId

  CloseHandle

  SetEndOfFile

  SetFilePointer

  CreateFileA

  SetLastError

  lstrcpyA

  GetLastError

  ReadFile

  WriteFile

  GetTempFileNameA

  GetTempPathA

  lstrlenA

  SetFileAttributesA

  lstrcmpiA

  SetFileTime

  LocalFileTimeToFileTime

  DosDateTimeToFileTime

  lstrcatA

  GetFileSize

  lstrcpynA

  RemoveDirectoryA

  FindClose

  FindNextFileA

  DeleteFileA

  lstrcmpA

  FindFirstFileA

  WritePrivateProfileStringA

  CopyFileA

  FlushFileBuffers

  Sleep

  WaitForSingleObject

  SetEvent

  GetTickCount

  CreateThread

  CreateEventA

  GetPrivateProfileStringA

  ConvertDefaultLocale

  GetVersionExA

  GetSystemInfo

  GetPrivateProfileIntA

  SetCurrentDirectoryA

  GetCommandLineA

  FreeLibrary

  GetProcAddress

  LoadLibraryExA

  user32

  CharNextA

  DialogBoxParamA

  RegisterWindowMessageA

  GetClassInfoExA

  RegisterClassExA

  GetWindowLongA

  EnableMenuItem

  SetWindowLongA

  GetWindowRect

  SystemParametersInfoA

  GetSystemMetrics

  MoveWindow

  GetDlgItemTextA

  SetDlgItemTextA

  wsprintfA

  PostMessageA

  SetWindowTextA

  SendDlgItemMessageA

  ShowWindow

  KillTimer

  SetFocus

  EndDialog

  cmpbk32

  PhoneBookMergeChanges

  PhoneBookLoad

  PhoneBookFreeFilter

  PhoneBookParseInfoA

  PhoneBookUnload

  cmutil

  CmFree

  CmMalloc

  CmStrCpyAllocA

  CmRealloc

  CmStrchrA

  CmFmtMsgA

  ?Log@CmLogFile@@QAAXW4_CMLOG_ITEM@@ZZ

  CmStrrchrA

  CmLoadSmallIconA

  CmLoadIconA

  ?Stop@CmLogFile@@QAEJXZ

  ?Start@CmLogFile@@QAEJH@Z

  ?SetParams@CmLogFile@@QAEJHKPBD@Z

  ?Init@CmLogFile@@QAEJPAUHINSTANCE__@@HPBD@Z

  GetOSVersion

  ??0CmLogFile@@QAE@XZ

  ?DeInit@CmLogFile@@QAEJXZ

  CmBuildFullPathFromRelativeA

  comctl32

  ord17

  rasapi32

  RasEnumConnectionsA

  wininet

  HttpOpenRequestA

  HttpSendRequestA

  HttpQueryInfoA

  InternetOpenA

  InternetConnectA

  FtpFindFirstFileA

  InternetFindNextFileA

  InternetCloseHandle

  FtpOpenFileA

  InternetReadFile

  InternetCrackUrlA

  InternetSetOptionA

  InternetOpenUrlA

  Sections

  .text

  Size: 41KB - Virtual size: 41KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ