0e4ae42c799d92ef0814cace1c1693a03cfc698930cfe6f2124936c0fb4addd2

Sharing

Copy URL Twitter E-mail

General

Target

0e4ae42c799d92ef0814cace1c1693a03cfc698930cfe6f2124936c0fb4addd2
Size

489KB
MD5

8b49369a2621b60c4cbc08377b12830a
SHA1

8f43490ff810530845695a5f72beec7c02591167
SHA256

0e4ae42c799d92ef0814cace1c1693a03cfc698930cfe6f2124936c0fb4addd2
SHA512

8a381939ff1fadf8eb8f07a63c3f7e4d2e3370a0d42823f6f6d1835f1befd0ea03e363972e44d36e2c7bae6c8b8c74e07cf8da703813279cb9956ed2aec2bc1a
SSDEEP

12288:hpUT5P8U9yZEZgMAl9lOYC6b8VPJwd58ivYZtsjnpa:zUTl6M29bb8VPJK58iDp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e4ae42c799d92ef0814cace1c1693a03cfc698930cfe6f2124936c0fb4addd2

Files

0e4ae42c799d92ef0814cace1c1693a03cfc698930cfe6f2124936c0fb4addd2
.dll windows x86

f3a61bef5919ecdc65912b65a2b33202

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
IsBadReadPtr
IsBadWritePtr
SetThreadPriority
WaitForSingleObject
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileA
ReadFile
WriteFile
GetLastError
SetFilePointer
GetFileSize
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
HeapAlloc
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
lstrlenA
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetCommandLineA
ExitThread
CreateThread
GetSystemTimeAsFileTime
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
TerminateProcess
GetCurrentProcess
GetModuleHandleA
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
FreeLibrary
GetProcessHeap
VirtualQuery
HeapSize
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
LoadLibraryW
GetLocaleInfoW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetConsoleCP
GetConsoleMode
CreateFileW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

HIKANA_ClearBuffer
HIKANA_CreateHandleByPath
HIKANA_CreateStreamEx
HIKANA_Destroy
HIKANA_GetFileInfo
HIKANA_GetLastErrorH
HIKANA_GetOnePacketEx
HIKANA_GetRemainData
HIKANA_GetVersion
HIKANA_InputData
HIKANA_RegistStreamInforCB
HIKANA_SetAnalyzeFrameType
HIKANA_SetOutputPacketType

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3a61bef5919ecdc65912b65a2b33202

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 392KB - Virtual size: 391KB

.rdata Size: 42KB - Virtual size: 42KB

.data Size: 40KB - Virtual size: 159KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 392KB - Virtual size: 391KB

.rdata
Size: 42KB - Virtual size: 42KB

.data
Size: 40KB - Virtual size: 159KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 11KB