ba30ab15dc331700398d8d3ffd89bb7880468b3d672635ddd4e5338955aba17d

Sharing

Copy URL Twitter E-mail

General

Target

ba30ab15dc331700398d8d3ffd89bb7880468b3d672635ddd4e5338955aba17d
Size

269KB
MD5

8f1ad2cf9814aa335021064762c01050
SHA1

7f45309a10b86342a28842efba855bfb652bfe06
SHA256

ba30ab15dc331700398d8d3ffd89bb7880468b3d672635ddd4e5338955aba17d
SHA512

7208aaacc70b08a2913d336a32a95a95da83acc8d190fcaae3180ffc855ac25d71d730a60096c4ae3b79350d42de740053639d18911a21c7ac2abbc6796e95d0
SSDEEP

6144:G6nZnS90pXRiN1EujlC8Gr4PuwZDUwqJpCAsinn/h:tZnS90R8IzMPZMJQU

Score

N/A

Malware Config

Signatures

Files

ba30ab15dc331700398d8d3ffd89bb7880468b3d672635ddd4e5338955aba17d
.dll windows x86

9e8a6f6fdbfaedf4348b2aef6f7acfd4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

islower
atoi
_wtoi
_time64
isxdigit
toupper
_mbctoupper
isspace

wininet

FtpFindFirstFileA
InternetCloseHandle
FtpOpenFileW
InternetConnectA

shlwapi

StrCmpNIA
ChrCmpIA
PathAddExtensionA
ord29
ChrCmpIW
PathCanonicalizeA
PathRemoveArgsW
PathIsNetworkPathW

comctl32

ImageList_Write
ImageList_AddMasked

user32

MessageBoxExA
DestroyIcon
SetWindowTextW
DialogBoxParamA
GetDlgCtrlID
SetClipboardData
UpdateWindow
SetWindowTextA
RegisterClipboardFormatW
DdeNameService
AllowSetForegroundWindow
IsWindowVisible
GetSystemMetrics
DdeConnect
DefMDIChildProcA
UnhookWindowsHookEx
CheckRadioButton
SetMenuDefaultItem
RemoveMenu
ClipCursor
IsWindow
GetMenuItemCount
AppendMenuA
SetThreadDesktop
EnableScrollBar
GetActiveWindow
DrawMenuBar
IsCharLowerW
GetSysColorBrush
EnumWindowStationsW
SetWindowPos
GetSysColor
GetDesktopWindow
SendDlgItemMessageW
DestroyCaret
GetDlgItem
ChangeClipboardChain
SetClassLongA
EmptyClipboard
SetClassLongW
GetClipboardData
GetWindowLongA
GetWindowLongW
DdeUninitialize
IntersectRect
MapVirtualKeyA
TrackPopupMenuEx
GetKeyboardLayout
SetLastErrorEx
IsCharAlphaNumericW
GetForegroundWindow
GetCapture
GetDC
GetDoubleClickTime
EnumClipboardFormats
ShowCaret
SendMessageA
GetWindowTextLengthA
SetFocus
IsWindowEnabled
GetMenuStringW
GetScrollPos
GetProcessWindowStation
IsHungAppWindow
ChildWindowFromPointEx
IsClipboardFormatAvailable
GetFocus
DeleteMenu
GetSubMenu
GetKeyState
IsZoomed
ChangeDisplaySettingsW
GetDialogBaseUnits
DdeGetLastError
IsChild
GetMenuItemID
GetThreadDesktop
CheckMenuItem
SendDlgItemMessageA
GetMessageW
PostThreadMessageA
ImpersonateDdeClientWindow
OpenIcon
HideCaret
SetWindowRgn
MapVirtualKeyW
GetNextDlgGroupItem
DestroyAcceleratorTable
GetWindowTextLengthW
GetClipboardFormatNameW
SwapMouseButton
SetProcessDefaultLayout
OpenClipboard
IsDlgButtonChecked
SetMenu
CheckDlgButton
GetClassLongW
GetParent
GetTopWindow
IsCharAlphaA
IsIconic
DestroyWindow
RegisterDeviceNotificationA
GetMessageTime
EndDeferWindowPos
SetClipboardViewer
DestroyMenu
wvsprintfA
LoadStringW
BroadcastSystemMessageW
SetWindowsHookExA
IsWindowUnicode
EnableMenuItem
ReleaseDC
BringWindowToTop
LockWindowUpdate
InsertMenuItemW
CopyAcceleratorTableA
IsCharAlphaW
RemovePropA
SetCapture
SetActiveWindow
IsMenu
ScreenToClient
CloseClipboard
SetCursor
CopyAcceleratorTableW
InSendMessage
UnregisterHotKey
GetKeyboardType
SetParent
GetLastActivePopup
GetWindowDC
RegisterHotKey
MessageBoxW
DdeClientTransaction
GetKeyNameTextW
DestroyCursor
DdeAddData
GetWindowTextW
TileWindows
CreateWindowStationA
OemToCharA
GetWindowModuleFileNameA
ChildWindowFromPoint
CharNextExA
LoadCursorW
DdeSetQualityOfService
IsCharUpperA
GetClipboardOwner
CharToOemA
VkKeyScanA
GetWindowThreadProcessId
GetWindow
IsCharAlphaNumericA
GetClassLongA
GetShellWindow
TrackPopupMenu
OemToCharBuffW
GetMessageExtraInfo

gdi32

SetTextColor
GetDIBits
GetTextFaceA
CreateFontW
GetTextExtentPointA
ExtTextOutA
EndPage
PtVisible
CombineRgn
CreateBrushIndirect
ExtTextOutW
OffsetRgn
RealizePalette
GetStockObject
EnumFontsA
LineDDA
SetRectRgn
CreateEnhMetaFileA
PatBlt
AddFontResourceA

comdlg32

PrintDlgExA
GetSaveFileNameW
ChooseFontW

Exports

Exports

AbysrazesownGuanHokeWichbeatApesLenstilssapsLandCashhaikulnaan
AgarAcneCurbtam
AideJismWagsMopyPialHuskHaenhin
AtmaEasePaikYidskepseaseBoxycedePastCwmspiankakifadsCurdscarnun
AuracatsManePewsaidso
BaskStoaWereCoxatellpyasGlegSlitamahHairBookKeckKafsdud
BattMayssnibHurlRazzEelsKaillituPintTowySlaptasmm
BeanclanvawsSourGulfHeftBineFeltjabex
BearClapKakaanon
BestGyveStabsizeNearGolfPogyTahrLimeSojaFohnThug
BlincoonLadeAxelfartWeetsinsexonDoumErgsmiteIniaDirk
BlurwestsemiFlagVrowzit
BozobhutPishPuparaceErgoSpatox
BursBulkAhedGripFluePaseCaffbiteWoveWichDuciDozyWeenWhomma
CoryHintsewof
CoupSawsad
CrisConyEmeuMagitermoba
CuffDosetsarGrippoopCiteDomeLinsillyRinkjags
CymeMerlSimpdry
DeesNagsendsAminthatTimeBagsgetaohiajarbo
DemomashTegsWombmimeSoldPiceBrrrNilsWildtwincacaAmirOnlyza
DiffRuessibum
DoltruneAnoahethMineanonExamholtMemeFlayFoes
EatsScarconntivytretTotsOnussialAcedHadjGoneki
EllsCeroCutsYeasMonsHiderashledbe
ErgoCaloSonePhutodeaSignAlitlobegappi
EvesCowlEarnsasswentMesamooslinsWordne
FanopaceLienHinsSakiawnyPierWokeBagsIceslevy
Fecklariis
FoxyollaGushKnurLeksdor
FunsArvoOwnscoedHolpjaupJimpOdesLiesfubsAlifVarsApeddom
GashCombMawnExonStotObesPutzDoffartyCullSikePinspawis
GlimGaurshowjaggProsyirdSeellowethome
GlugsaidMudsidlyBedsPoufAlasDautShopRillOryxYowsConkboayo
GobsSipeBagssuddWistnomeKilnohmmy
GullEndsMidsEdgyidemGallmereLentwarsjinxFolkyea
HankpithArilKookonyxOfayKitsPyicPostBlurBasethanzeksFobs
HelmBethBushwolfPotsLiefPollDamnJubedavyaloeObitJubaEaux
HoodMeouDinkHaesTackFadeClewEauxfeelHensgamma
IdlyTookZipsBroswordtameseelsoilLaveKaneredecorfJigsCabsMilsbop
IrisAnesVeerMastBlawspecBlinRodsRaysKopsJaggovumeatba
IxiaAhedBogsdualavowBurylechsenoi
JagsHogsNoriMacsmufflenoLyesbeduFlew
JowsMuniMassAgueSkewFitsPeelgirlMipsNullfucinoooe
JupePerkTraywilyGiftsaketin
KernVetopestBoskwendekesPunkVacsnaget
LadsgritobolLipaOdahdreeHugeThaemy
LaicwogsEnufDitsIdolsatut
LainWawsmesstyinPechdogyae
LawnMageTangBelsTeedWynnpledObeshen
LawnNoilyokid
LifepepsuponCoonArbsaw
LingMomiNestBeduablytitigaesRulegobyfesfe
LireWaffsonti
MixtPeagOxidnapeCowlya
MugsminxRyasLavePawnFoeskifsZoneJibbCecakithpayuh
NapePogyhemel
NockOwnsWhombashBirkMirsSagyGratBunsAwedpin
OvumDexyJestKirkiffta
Palldatetondo
Peasangaergopureh
Pimaflubyenet
PingOnusmemocaper
PixymaskamokaeryFoss
Poolmacknawwo
PsstwartWealZoicoldynailgrotBratrimsyardof
PuliKunaMarlEasyRunefacebungIonswortLocksobaLoof
QatsfykeBoorPallTweeOkrababaeastGastTroywhirAmokclapDjinhe
RaidloneSomeSuerTufaBarshadjappsWheezapsFifevoesex
RatoLugeAseauponbatspopsobeuh
ReinMendNaffdubsAblymautSagsSinkNogsAlfasulkPeanxi
RheaashyGoldCaulanal
ScarSalsApesRyasSuqsbaaid
SemeCultRykeVarsIniaDuroTubs
SkepPupaBilkBliprepsTheemuttStudDorkpol
SlamGamsShivtwasDagsBrrrCossBuryhugswaesZinsgritMemeMuse
SmewJismDeniwhysBakehilamiggFeusCocaMutsWaukPloyUsedtoeuh
SookKyakManypeas
StaySacsiconBoonillyNooklikebottGhisacrecutssewnTendFistPave
SuitSowsYelpClodFeedApedOgamel
TeatDewyTacolariToedtubeLooftrogYeukus
TendmoraNibsBensHytebeneer
ToesBindTopsAlasJiltprigStumcultReadmopecornsextyehlo
ToshBastMintJockDareanasManyshadloafsunsmeetThruFell
TwitSmew
TwosDadaFrigParrtrodTeespitygrow
TwoshajiThenlaudKefsGowdheapBuffBockSeamlitsriskcuntme
ViestankScutpomeDoveLenovineJeesNeedJagspompvid
WantBeadohmhm
WaxyJarlMitemairBushsizeLoanSpivhelpRodsBrooCeteflubUpaspix
WestGateTempHuffMussjibspalyknowburawe
WinsBierknobGrayWingSeedlumpBosklakhBuskOilyFeebmethnardes
WiryTwiggothhireWeftNeneFiveKirnCalxkepah
WolflineSansBrieSettMeekLipeknotboomfuzepierAeonRoarTonsbooeh
WorkSeesSoms
WussVetsansabiletyneMaidTaco

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e8a6f6fdbfaedf4348b2aef6f7acfd4

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

wininet

shlwapi

comctl32

user32

gdi32

comdlg32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 139KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 65KB - Virtual size: 65KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 140KB - Virtual size: 139KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 65KB - Virtual size: 65KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 15KB - Virtual size: 14KB