ph[.]dat[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ph.dat.dll
Size

285KB
MD5

c78fd17893d62d049bce5acef5b528ea
SHA1

567293138a4baedf64e45a0c2638b25a4ed7db90
SHA256

2af110ef88fa471a70d3310cc22898ad8e5a7a21a6efba01100105c77614614b
SHA512

39abbb6b85ba9a8afc9e95b744c2063b4f1b12dcbed8011514162695cddc22fe76c3fad68d53ed00e927cee0dec3aa480703b729e8fa8207a7e7fb023880741f
SSDEEP

6144:xH6gaGrz9m0JqINv5s+4xIW97niWgbE/6wP7Q1YTGdD9ErhE:xag1z9m0JNv5sd/6wjQ1YGR0

Score

N/A

Malware Config

Signatures

Files

ph.dat.dll
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

CuFfLZYdtGExgJmgRoR02U5tOwL44
GXWg1IGA9GNfxUoPRahnsrjvZKrVkL
GhniPOu7sukFpOUkhSCg3oX
IecRROaXQnsmJuLruAFDt0
Jw9EFEDVk9M7xScf0R3m
KDaWYx4zM1Y5yZ9NpDeEnLwCW
N1wy4CeYmFV73rdPz7uuxdigHq
NkfpnRUbZR27duSxxJcZC
Ot36JSseRGdxo1Tff4Lk
QDAgNDVfXVIdUEpoDgnsH2fKHNr
SSPmbY8d4oWyvlykBOVfzFIeAxXGAm
Sn84V3ZAB54nLQfkzGlfyraCPAl
VHhgsyYFGHjjasgftasjkasas
ZH1IU6DCx15GOYfOtvQa
bzmbvK8NcROP4upONX
c7VUvJxnJy4EzJ67loT1e8L9vtvgWS
fI1VXRbxe1LcZaCxQv2Z
fSgSh4eZjDh02dslrNqcK7Ji8
jSqLg62WCT1alsvBdZKS3Q9I
l8tIMzsHzVBmYFQ8YNY8wW
lFSeB2hi8GS0vUUvjpsxc3poB3oTY
lFdWZ7U0jnaXryWN2ShiOZSwXM9
nRln6VOoLNYEzr6bD
nzO6kNEFoNu4cim7yQCDrsUITQkQNM
p4AXV9eBM7vOUDVhUxad
pCtBtUK9hDRQIsKz80LdvgZPCK9N37
x22fObLkeZAqHhaFlJjZSBM1Zzv
xMCzMdWKFpg6zyzk9JCdbg4ak78k7s
z3Q0Wm8H7ylIe7Ui7qAv5tgXv
zyN7lvAGbBn65L38

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ