General

Malware Config

Signatures

Files

• ffdca1cdb6cdf763e475c1c4d69e4663e31d02beb9cc59350b6f78202ce566b6

  .exe windows:4 windows x86 arch:x86

  84706849fa809feaa385711a628be029

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  advapi32

  CryptAcquireContextA

  CryptCreateHash

  CryptDestroyHash

  CryptGetHashParam

  CryptHashData

  CryptReleaseContext

  kernel32

  ExitProcess

  ExpandEnvironmentStringsA

  FormatMessageA

  GetLastError

  GetModuleFileNameA

  GetModuleHandleA

  GetProcAddress

  GetTickCount

  GetVersionExA

  SetLastError

  SetUnhandledExceptionFilter

  Sleep

  SleepEx

  msvcrt

  _read

  _strdup

  _unlink

  _write

  __getmainargs

  __mb_cur_max

  __p__environ

  __p__fmode

  __set_app_type

  _cexit

  _errno

  _iob

  _isctype

  _onexit

  _pctype

  _setmode

  _stati64

  _stricmp

  _strnicmp

  _sys_nerr

  atexit

  calloc

  fclose

  fflush

  fgets

  fopen

  fprintf

  fputc

  fputs

  fread

  free

  fseek

  ftell

  fwrite

  getenv

  gmtime

  malloc

  mbstowcs

  memchr

  memcmp

  memcpy

  memmove

  memset

  printf

  puts

  qsort

  rand

  realloc

  setlocale

  signal

  sprintf

  srand

  sscanf

  strchr

  strcmp

  strcpy

  strerror

  strncmp

  strncpy

  strrchr

  strstr

  strtol

  strtoul

  time

  tolower

  wcstombs

  ws2_32

  WSACleanup

  WSAGetLastError

  WSAIoctl

  WSASetLastError

  WSAStartup

  __WSAFDIsSet

  bind

  closesocket

  connect

  gethostbyname

  getpeername

  getsockname

  getsockopt

  htons

  ioctlsocket

  ntohs

  recv

  select

  send

  setsockopt

  socket

  Exports

  Exports

  curl_easy_cleanup

  curl_easy_duphandle

  curl_easy_escape

  curl_easy_getinfo

  curl_easy_init

  curl_easy_pause

  curl_easy_perform

  curl_easy_recv

  curl_easy_reset

  curl_easy_send

  curl_easy_setopt

  curl_easy_strerror

  curl_easy_unescape

  curl_escape

  curl_formadd

  curl_formfree

  curl_formget

  curl_free

  curl_getdate

  curl_getenv

  curl_global_cleanup

  curl_global_init

  curl_global_init_mem

  curl_maprintf

  curl_mfprintf

  curl_mprintf

  curl_msnprintf

  curl_msprintf

  curl_multi_add_handle

  curl_multi_assign

  curl_multi_cleanup

  curl_multi_fdset

  curl_multi_info_read

  curl_multi_init

  curl_multi_perform

  curl_multi_remove_handle

  curl_multi_setopt

  curl_multi_socket

  curl_multi_socket_action

  curl_multi_socket_all

  curl_multi_strerror

  curl_multi_timeout

  curl_multi_wait

  curl_mvaprintf

  curl_mvfprintf

  curl_mvprintf

  curl_mvsnprintf

  curl_mvsprintf

  curl_share_cleanup

  curl_share_init

  curl_share_setopt

  curl_share_strerror

  curl_slist_append

  curl_slist_free_all

  curl_strequal

  curl_strnequal

  curl_unescape

  Sections

  .text

  Size: 116KB - Virtual size: 115KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 16KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: 4KB - Virtual size: 312B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ