General

Malware Config

Signatures

Files

• 45.dll

  .dll windows x64

  11816731f87952ce23da086b67eb30cb

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  kernel32

  AddVectoredExceptionHandler

  CloseHandle

  CreateEventA

  CreateIoCompletionPort

  CreateThread

  CreateWaitableTimerExW

  DeleteCriticalSection

  DuplicateHandle

  EnterCriticalSection

  ExitProcess

  FreeEnvironmentStringsW

  GetConsoleMode

  GetEnvironmentStringsW

  GetLastError

  GetProcAddress

  GetProcessAffinityMask

  GetQueuedCompletionStatusEx

  GetStdHandle

  GetSystemDirectoryA

  GetSystemInfo

  GetThreadContext

  InitializeCriticalSection

  IsDBCSLeadByteEx

  LeaveCriticalSection

  LoadLibraryA

  LoadLibraryW

  MultiByteToWideChar

  PostQueuedCompletionStatus

  ResumeThread

  SetConsoleCtrlHandler

  SetErrorMode

  SetEvent

  SetProcessPriorityBoost

  SetThreadContext

  SetUnhandledExceptionFilter

  SetWaitableTimer

  Sleep

  SuspendThread

  SwitchToThread

  TlsGetValue

  VirtualAlloc

  VirtualFree

  VirtualProtect

  VirtualQuery

  WaitForMultipleObjects

  WaitForSingleObject

  WideCharToMultiByte

  WriteConsoleW

  WriteFile

  msvcrt

  ___lc_codepage_func

  ___mb_cur_max_func

  __iob_func

  _amsg_exit

  _beginthread

  _errno

  _initterm

  _lock

  _unlock

  abort

  calloc

  fputc

  free

  fwrite

  localeconv

  malloc

  memcpy

  memset

  realloc

  strerror

  strlen

  strncmp

  vfprintf

  wcslen

  Exports

  Exports

  StartW

  _cgo_dummy_export

  afwslqrhl

  airexkvixaojyxfvx

  amizzaleerieudgnf

  azhgsyobzrvnmbmr

  bkgjnmqezbptuh

  bmsuulmgmg

  bnowmvb

  churxzjbcvqm

  dayxsaqetipzdifrb

  dqxygzgfhebhrypn

  drgmsjst

  dtiugclymoluvku

  dvfwbjtl

  egyculpcjsphfg

  ehamtzkackkzi

  eofncyyev

  eppcbsnxwajl

  erglqeonxwzzguxa

  esqgwsutdrfac

  evchksombvxnabwkp

  eyadnrpilygbtrpw

  fdjenfwhqjvk

  frcvweozor

  fwuvgcokotqcn

  fzfferwdxsbekniwo

  ggohgoanrozq

  gkuzglppqynz

  gluycsqcetqs

  hnlfbisezvkynzdg

  htefgge

  htlejnzf

  hvdqsqxj

  idyzgyo

  iqqrcvyy

  isjlwsmfla

  ixvrydu

  iybblzwvn

  jasbaihslwtpuxep

  javavjsbcjnbrq

  jesmkekyzhyqh

  jesxwxaak

  jhiszgdanjo

  jpdzrpcmyhlsobjl

  kczhbvbgvv

  kjmzmjrcew

  kylkutzigtf

  lgdyrvgyvwqlauoxp

  ljncjla

  mfuixmkpowmeh

  mksmrngiqudza

  mobiqdmisen

  mptbyhpkkafq

  obhvmqdgr

  oikzengdknh

  opeagmbpbi

  otqsmxbrgm

  pbzpfovzkpz

  pdsnwxoudefnlbcrk

  pevxmqthcabifmk

  prglvvxlulkre

  qjgxvxqogufhzh

  qktmiemcchtaie

  qtmtahijm

  rrbiebbhixb

  rwocchrxb

  ryagsbje

  rzjnoramxui

  skhwvaurtfjvtfku

  stfvxbvkrf

  tickyhnmvalpoox

  tijgftbgmdhyvq

  tleaenfsmtssplt

  tnmiheqwcwrf

  toeumcpdmehjkry

  tpwfgoy

  tqhazugcvfhzq

  tspyqpbi

  tuynunwpebdu

  ubowmwkmw

  ubzqdlzpizmk

  uiuzdhpybjiozr

  ulrbcwutlqkq

  uqeynckjvc

  uxdquzva

  vdrekzrjasu

  vkesmvatsjjznoks

  vnqoaqfvqdkbvnfv

  volkdmhmqlavmbn

  vupdqimuazhuzx

  wunpoxfnqrv

  xdihndwblhsake

  xeygunsjtlfjddkq

  xufkwdqhpdhifbjw

  ydunaeuxswyohmmxx

  ymqjaydz

  ymvvwsapmacdvsne

  zbwaeae

  zekxkzrnytk

  zhqdntsyythtts

  znmwojavxpdtag

  zsrsllive

  Sections

  .text

  Size: 483KB - Virtual size: 483KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 79KB - Virtual size: 79KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 492KB - Virtual size: 491KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .pdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .xdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 293KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 88B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ