General

Malware Config

Signatures

Files

• Request-20220613-268_docx.zip

  .zip

  Password: infected

• ahol3m.dll

  .dll windows x64

  Password: infected

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Exports

  Exports

  FsCacG2z

  G52tlex

  IEUWi3zF8T

  IyVg0rZF

  LMrBV5d9

  PluginInit

  SF3NTEhp6Lh

  X2M0fxZABxN

  aR9X2u

  idl4RUlCV

  qnPROcQWN

  rRxCylztL

  y60vuODJnc

  Sections

  .text

  Size: 22KB - Virtual size: 22KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 576KB - Virtual size: 576KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• documents.lnk

  .lnk