848bc404009e3f29f393f0a5d1eb10a3e92925164daee824a5e141286972f03a

Sharing

Copy URL Twitter E-mail

General

Target

848bc404009e3f29f393f0a5d1eb10a3e92925164daee824a5e141286972f03a
Size

32.0MB
MD5

1adf794a5147359a34e609dd79255401
SHA1

267a970015d700b20d1004d081318521b756db75
SHA256

848bc404009e3f29f393f0a5d1eb10a3e92925164daee824a5e141286972f03a
SHA512

7fb7b756027f6de0ee9659aef82de6df4fb7c1101d4b1f1bbbdebec16ce04ed47fbd730743a271a84945d8a0b80714cacb6725a0da2390f89dba3a06bccebbfe
SSDEEP

1536:RxPtqOTxWLmAxeiFNml+KvHN2jFWNTjb8:/Ph1WLmAxeiFKE078

Score

N/A

Malware Config

Signatures

Files

848bc404009e3f29f393f0a5d1eb10a3e92925164daee824a5e141286972f03a
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.Oly30nk
Size: 14KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.7tm8pS5
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zVLuB7I
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.U6P9Ate
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qZtuZfQ
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.q3I5w7F
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.01Y8LY9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wr8VU92
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.6LRdGc7
Size: 32.0MB - Virtual size: 32.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.Oly30nk Size: 14KB - Virtual size: 32KB

.7tm8pS5 Size: 8KB - Virtual size: 8KB

.zVLuB7I Size: 2KB - Virtual size: 28KB

.U6P9Ate Size: 2KB - Virtual size: 4KB

.qZtuZfQ Size: 10KB - Virtual size: 16KB

.q3I5w7F Size: 3KB - Virtual size: 4KB

.01Y8LY9 Size: 512B - Virtual size: 4KB

.wr8VU92 Size: 5KB - Virtual size: 8KB

.6LRdGc7 Size: 32.0MB - Virtual size: 32.0MB

.Oly30nk
Size: 14KB - Virtual size: 32KB

.7tm8pS5
Size: 8KB - Virtual size: 8KB

.zVLuB7I
Size: 2KB - Virtual size: 28KB

.U6P9Ate
Size: 2KB - Virtual size: 4KB

.qZtuZfQ
Size: 10KB - Virtual size: 16KB

.q3I5w7F
Size: 3KB - Virtual size: 4KB

.01Y8LY9
Size: 512B - Virtual size: 4KB

.wr8VU92
Size: 5KB - Virtual size: 8KB

.6LRdGc7
Size: 32.0MB - Virtual size: 32.0MB