85e5e759dac9612efaaa4e6a0e0c1041fe419f8d46ec173ef2f230378c6b32ca

Sharing

Copy URL Twitter E-mail

General

Target

85e5e759dac9612efaaa4e6a0e0c1041fe419f8d46ec173ef2f230378c6b32ca
Size

271KB
MD5

c530ae3eeec79e1bb794a913c0084380
SHA1

db8abe309670a5fdec1b91452ab6eb0fb47d0347
SHA256

85e5e759dac9612efaaa4e6a0e0c1041fe419f8d46ec173ef2f230378c6b32ca
SHA512

e63891eb22643d867616ddf5389ea6acbdca8ec5575715a50f39a73e7cbba451ab66101bdb3e6ffaa6ba0f8865c51da6230d787bfe0ebcf3db0e65317752ba6c
SSDEEP

6144:FJwfOHDMBTdUgujkKcBH+oIBXK9XZmE3ejClP09:S1dUEKw7Ixsj36ClP0

Score

N/A

Malware Config

Signatures

Files

85e5e759dac9612efaaa4e6a0e0c1041fe419f8d46ec173ef2f230378c6b32ca
.dll windows x86

ae9713128cab17b8480d5f973ae90ea5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_ltow
_mbctoupper
isspace
wcstoul

ntdll

RtlUnwind

shlwapi

ChrCmpIA
PathGetArgsW
IsCharSpaceA
ChrCmpIW
ord29

kernel32

GetSystemDefaultLangID
GetUserDefaultUILanguage
GetModuleHandleA
IsDBCSLeadByteEx
GetConsoleAliasExesLengthW
GetDriveTypeW
GetSystemDefaultUILanguage
SetErrorMode
GetEnvironmentStringsW
GetUserDefaultLCID
GetSystemDefaultLCID
GetModuleHandleW
GetCurrentThread
GetProcessHeap
GetDriveTypeA
GetVolumeInformationA
IsDBCSLeadByte
GetEnvironmentVariableA
GetConsoleOutputCP
GetStdHandle
SetLastError
GetThreadLocale
IsValidCodePage
GetCurrentThreadId
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetCurrentProcessId
GetVolumeInformationW
GlobalCompact
GetCommandLineA
GetEnvironmentVariableW
GetConsoleAliasExesLengthA
GetCurrentProcess
GetTickCount
GetACP
GetCommandLineW
GetOEMCP
MulDiv
GetLastError

user32

GetClassLongA
GetWindow
GetWindowThreadProcessId
CheckMenuItem
InSendMessage
GetDialogBaseUnits
SetClipboardViewer
SetWindowTextW
UpdateWindow
DdeNameService
GetSystemMetrics
GetShellWindow
RemoveMenu
GetActiveWindow
SwitchDesktop
GetMenuStringA
DestroyCaret
SendMessageTimeoutA
IsWindowUnicode
GetMenuState
SetClassLongA
MapVirtualKeyExW
EnableMenuItem
GetWindowLongA
MapVirtualKeyExA
IsCharAlphaNumericW
GetMenu
GetClassLongW
SetFocus
SetMenuDefaultItem
IsCharAlphaW
IsClipboardFormatAvailable
DeleteMenu
GetSubMenu
GetKeyState
IsZoomed
SetCapture
IsChild
IsCharAlphaA
ImpersonateDdeClientWindow
HideCaret
MapVirtualKeyW
GetUpdateRgn
SetWindowPos
ChangeClipboardChain
OpenIcon
GetWindowTextLengthW
IsCharUpperA
GetDlgCtrlID
UnregisterHotKey
UnhookWindowsHookEx
GetKeyboardType
SetThreadDesktop
CheckDlgButton
EmptyClipboard
MapVirtualKeyA
GetCapture
GetDoubleClickTime
ShowCaret
GetWindowTextLengthA
GetMenuCheckMarkDimensions
DefFrameProcA
GetProcessWindowStation
SetCursor
ArrangeIconicWindows
RegisterHotKey
GetMenuItemCount
DrawMenuBar
GetDlgItem
SetClassLongW
SetParent
VkKeyScanW
IsCharAlphaNumericA
GetClipboardOwner
GetScrollPos
DestroyIcon
BeginDeferWindowPos
ReleaseCapture
OpenClipboard
GetDesktopWindow
DestroyCursor
DdeUninitialize
GetAsyncKeyState
GetForegroundWindow
CloseDesktop
FindWindowW
IsWindowEnabled
GetMenuStringW
GetParent
GetFocus
GetLastActivePopup
GetTopWindow
DdeGetLastError
GetMenuItemID
GetThreadDesktop
CopyAcceleratorTableA

gdi32

SetRectRgn
PtInRegion
CombineRgn
OffsetRgn
DeleteMetaFile
GetStockObject

ole32

CoInitializeEx

Exports

Exports

AbedThrobibsbastnaosleekGageBrrrLobsRandKuneLavaGlugare
AimsbaleroupsocaSwanraggYugaBollFemsLawnoy
AnilfactBonkToonPrezFusePinturea
AnsaCoilDotyhid
ApedStotqi
BarmtapsLikeHoedOhmsjaggat
BeysYoksTeffReekblamJackPetsCoffCoke
BileWows
BlotIrongoysbastXystFetegelsye
BogyJeonNukelugsCursHaetMuretokeWigsJugspledMolsFaunLurefeyer
BritBuffconkSkatcoifLuckSeerEddyTailTrimpahsi
BuraPertichs
BurpHowlsendwrenPallsootBuhrAtapbrosRailUpdorub
ByesYarnmansLusthugeGuidAmidkilokhanClopHumptopsSallKatanitssim
CashhokeBlurpoodpopePeagYagsFeeltameinksFrizPileDrawCacagoalae
Chumalecdah
CoilArfsleanTidyYucata
DaceFohnPhatPithJatokotoMareFurlSelspyicConscoxyo
DarbJagsyawsrampholpAbosSinkprowBearLossPareturkwogid
DelsObeyLandramsLotiGigaKolobuhl
DemywaitSainGulfBiteshodVavsFistWhamHurlyinscarxu
Dolshewnamah
DuskbeanWoolOximThinBunkDoomMornKepsspudhaulFareLiraat
DutyfilsSlamAyesBongcozyPupuirkay
ElanwaftabasnanaKorabaudrodeToryvie
EtasNipsTeemPlowGridHonkwillOmenZipsTiltSoleNestHastloo
FaysCoopCamsWiteArchDevsponsBustBagstoadYoksay
FidsLoofDangIffyups
FiefdiptGodsCompRuthgnusKingCogsBlotoyezRodeMorealeseon
FilefujivasaebbsSaltsomamireSojaHelpAmmofeu
FinoLeanWebssomeyagza
FoesBoltPulaHazyShesSashlugscry
FozyPinsEelyCaskspikHantPondDiolHonkeffsboa
FubsfestrheaFujilurkRimsbawlCartKakiGurucarpandem
GabskatasourDorrFadoryewo
GagsSurdYodhImmythy
GambpulsHourFoyswornKhisleudtapaMaps
GentOathConybanijaggYafflaudposyLamewoslo
GigasirsNips
GinsCapeChonCropWhomKipssizeManyEach
GrimVisakernmuniAridSampBibbknarvampObissagsex
HaspTextWindsailfigsFirmreedmonyBaskcoopTirlAblyroam
HeedIdemphisMomiAgasVaryamahknewCritmeouTowywarkHolyHaysGustlo
HempThatfaveDulyag
Hoeslippa
HongBuhrIdylPudsCarpDukeSkuamumex
HuffOrzoButt
IdolTzarwaretextylemTiesSothFacebradMinais
JeesScatIliasughmuleCribNemaOrleRefsme
KayotophhantSorbHomeafarSwaytewsbootHaedLustsacsWhopLollmi
Lacsjail
LadsGoneFudsVaseyuchYackNutsmonsUnauTewschefOkasbabuReambatt
LapsJohnTeakkobooryxFiloDermLogeMityVamphaafCepeTolalex
LiltMiggWovebopsForaLestRacyrye
LossUserursaLeafDiesDojotykeBideGaol
LuaualgaPiesTombyeldVawssayof
LudeTarpPledlazeOxesTabsKuduNipswax
LureKhatPongDeepMamaSpammakeCatePhatmaze
LushScudReekThatSickKobosh
MaarFilaootsMynali
MansdemyFrugpathtalkralePyinopahCanstarooke
MedswarpwestpeonGrinKepsainsLandferpi
NaanMintFonslekeLoft
NiceLaidmastReed
Nogshakugave
NunsmickSlampaseYowsFoldMachHalfed
ObesKotofozyPlebfesthiddo
OpahTungholewe
PirnesneloveYaldGrubUricyirdarmsbotaness
PokeBornPfftPalmTroyAloe
PonsArilConsLoofSwamahi
PraoProdneumSnedor
PreeFunsAquaavowriveclapdebtTies
PrepVillpoodPrepWareNisiMadeEkedinchLendMottRankZymeHumpmad
RakiVetoscudMogsFursNarclungsaidDumbid
ReppWentIcesmeanGaenacedHaetEyerKnowbaffWars
RipeBaffgirlCacaLiraskatShotPikiRyotRoadOnlyBiceOlioHelochaoby
SenePoufTinyViewAnisParkCuntdutyLeisSnotKetoswabhintNolo
SettNomsdautRimyzoicikatJubakerfCionTookOcasMopeHadjHolsop
ShawSeemNumbAgioSemiFlamecruTakeLumsRodsTurdFumyreckJoinzepmi
ShittumptegsBogytoeaHayspondyechPloylasebulkBradrootRielviol
SipebardsoloRosyVeraGushBledgoryRushkerbButtSanschadBurndow
Smewbardswop
SoilDaceJockhiliWhomAliftog
StyeLimyMeshDitaSloeIdeanoo
SuckDellOhedomenPoleHoldatapSlurFaremoonLatuMatekivabiro
Urnsidyltor
ViceKayoturfclayLamaFratSire
WaifByesYardOryx
WameMemeVinaaweeerasRageMaingawpcobbFubstopiLuluSmogjinqi
WearAnkhAtapArbsbit
WereHuskwestneepRipsHovevavsAirnhmm
WorkFlabale
Yelktedso
YoreMowsBelseftsOaky
Zillfendmo

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae9713128cab17b8480d5f973ae90ea5

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

shlwapi

kernel32

user32

gdi32

ole32

Exports

Exports

Sections

.text Size: 86KB - Virtual size: 86KB

.data Size: 94KB - Virtual size: 93KB

.reloc Size: 82KB - Virtual size: 81KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 86KB - Virtual size: 86KB

.data
Size: 94KB - Virtual size: 93KB

.reloc
Size: 82KB - Virtual size: 81KB

.rsrc
Size: 7KB - Virtual size: 7KB