General

  • Target

    Hehe_2.rar

  • Size

    7.3MB

  • MD5

    c3c4970c0022d035efeda7ff25681328

  • SHA1

    2b6f6183871cbbfd09fd4c62ce640002d06ed05a

  • SHA256

    84f2bfb5d2860ceaab91ba91c9d7fbef64df79b8635c95d5852eab1af2cfb159

  • SHA512

    ef21af5048c6bcc9501c88745cb8a31a2b6d7a8aed6eebfa6d06437e341da53a79b3a7592626ba0d15a237e361e66c1969add5ac92d1c577d228fe65fac4a47a

  • SSDEEP

    98304:rKhxy5EzUuX8dG97nUvk5wcDFyifhlOguRqAKHDZCQ1MAph8fwBu3eiegvZygE76:+W5Cbkg7nUezJzlhesQkBitBE6

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hehe_2.rar
    .rar

    Password: e

  • Hehe 2/Run.exe
    .exe windows:5 windows x64 arch:x64

    Password: e

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Headers

    Imports

    Sections

  • Run.pyc
  • Hehe 2/_internal/VCRUNTIME140.dll
    .dll windows:6 windows x64 arch:x64

    Password: e

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/_bz2.pyd
    .dll windows:6 windows x64 arch:x64

    Password: e

    a36962884764276bb35985709aa4e40d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/_decimal.pyd
    .dll windows:6 windows x64 arch:x64

    Password: e

    b4bc8290ce36e458b7f80d6ab6e100dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/_hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    Password: e

    a8173ef8679f8544a88e355945112c77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/_lzma.pyd
    .dll windows:6 windows x64 arch:x64

    Password: e

    b865edd9b0c291111893fc2b523f7264


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/_socket.pyd
    .dll .js windows:6 windows x64 arch:x64 polyglot

    Password: e

    de62106114a70bb3c0dfb5c6513e0ba1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: e


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Hehe 2/_internal/base_library.zip
    .zip
  • Hehe 2/_internal/libcrypto-3.dll
    .dll windows:6 windows x64 arch:x64

    40bce6a23883072a66c68006f08e105c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/python312.dll
    .dll windows:6 windows x64 arch:x64

    5a22bd40d1b845990102286d0fb385f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/select.pyd
    .dll windows:6 windows x64 arch:x64

    e41677fc9cd5514cd954ce2ce19e425c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    ea4d5e085d5bbdbd19dcce14d926b29e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hehe 2/_internal/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    a3519e9a1b69560ea1c5fe43fd626ac5


    Code Sign

    Headers

    Imports

    Exports

    Sections