81cae9ba47052e1bbd1dae7b106d452c60ecaa7cd83c9473aed478025c7a4a4e

Sharing

Copy URL Twitter E-mail

General

Target

81cae9ba47052e1bbd1dae7b106d452c60ecaa7cd83c9473aed478025c7a4a4e
Size

397KB
MD5

8afec268241c7e9d32fd0f5c5efc0bc0
SHA1

43711b0828edee47bc07f3116d5b0f06830eb7c8
SHA256

81cae9ba47052e1bbd1dae7b106d452c60ecaa7cd83c9473aed478025c7a4a4e
SHA512

2e19c176bd40a21e40c49ba2946a35e75f13b0f54c44be3d338ebcbb54fc0f4bfae6261e0fb1e66c1364020b27e583c606a92747a1d9b773888d2593ffff427f
SSDEEP

6144:vTljJBlgPxPof47NiDXUaLZIt9Fbge3ojoHnx+CrK5M5BSTnxBndZHfUI44ZmgKe:rlXg5EUaLyt9hoohK51Dwfc711

Score

N/A

Malware Config

Signatures

Files

81cae9ba47052e1bbd1dae7b106d452c60ecaa7cd83c9473aed478025c7a4a4e
.exe windows x86

2e6b6c2a41017d263c2f6ce2bfad2a55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyMenu
TranslateMessage
ClientToScreen
EnumWindowStationsW
wsprintfW
SendMessageW
CreatePopupMenu
UpdateWindow
TrackPopupMenuEx
SetRectEmpty
ReleaseCapture
SetParent
GetKeyState
PtInRect
EqualRect
GetParent
SetRect
IsRectEmpty
IsWindow
OffsetRect
SetCursor
CopyRect
RedrawWindow
ClipCursor
GetClientRect
GetWindowRect
GetDesktopWindow
LoadCursorW
ReleaseDC
EnableWindow
FillRect
SetClipboardData
UnionRect
GetDC
SetCapture
InvalidateRect
GetFocus
GetClipboardData
IntersectRect
OpenClipboard
EmptyClipboard
CloseClipboard
SetWindowPos
ScreenToClient

winmm

timeGetTime

kernel32

GetVersionExW
GetProcAddress
InterlockedDecrement
GetModuleFileNameA
GetACP
LeaveCriticalSection
FindClose
FindFirstFileW
_llseek
GetLastError
LocalFree
SetFileAttributesW
InitializeCriticalSection
EnterCriticalSection
CloseHandle
SetThreadAffinityMask
GlobalLock
GetVersionExA
QueryPerformanceCounter
CreateFileW
OutputDebugStringW
WideCharToMultiByte
GetSystemTimeAsFileTime
TerminateProcess
GetTempPathW
GetCurrentThreadId
Sleep
GetLocaleInfoA
GetModuleFileNameW
GetTempFileNameW
GetFullPathNameW
DeleteFileW
LoadLibraryW
ReadFile
DisableThreadLibraryCalls
lstrlenA
GetTickCount
FreeLibrary
CopyFileW
GlobalAlloc
RemoveDirectoryW
InterlockedIncrement
CreateDirectoryW
GetCurrentProcessId
lstrlenW
MultiByteToWideChar
GetThreadLocale
ExitProcess
FindNextFileW
GetProcessIoCounters
LocalAlloc
InterlockedExchange
GlobalUnlock
DeleteCriticalSection
GetFileAttributesExW

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

ole32

CoInitialize
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance

shlwapi

PathRemoveBackslashW
PathIsDirectoryW
PathCombineW
PathIsRelativeW
PathAddBackslashW
PathRenameExtensionW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW

Sections

.text
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bomex
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e6b6c2a41017d263c2f6ce2bfad2a55

Headers

File Characteristics

Imports

user32

winmm

kernel32

winspool.drv

ole32

shlwapi

Sections

.text Size: 292KB - Virtual size: 292KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 103KB - Virtual size: 103KB

.bomex Size: 4KB - Virtual size: 24KB

.text
Size: 292KB - Virtual size: 292KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 103KB - Virtual size: 103KB

.bomex
Size: 4KB - Virtual size: 24KB