ca43c383eff74911cab8a81b4b41aa6c02550d916387a3ec3b64210c14ba4efd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca43c383eff74911cab8a81b4b41aa6c02550d916387a3ec3b64210c14ba4efd
Size

72KB
MD5

4239974e123a97bb072c930cbe543677
SHA1

f05cc097c2a06b3521c0a3bc8b6b91ad7b6bb33d
SHA256

ca43c383eff74911cab8a81b4b41aa6c02550d916387a3ec3b64210c14ba4efd
SHA512

337d47779dc070a1e8d7c01b0edf8461cbc36b77ad77415873e92e9f0fc59146b1bc1e0b53c4de93214072908390b34d29906adc9fb285e7d68604d100952e90
SSDEEP

1536:EG2NScJGU1o7tmqFD/QKzyfLsiSyBwjBLw/2:EpgU1St/8jsVyK9t

Score

N/A

Malware Config

Signatures

Files

ca43c383eff74911cab8a81b4b41aa6c02550d916387a3ec3b64210c14ba4efd
.dll windows x86

614e4c33bc390ae4edfd1607db8f8027

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
GetDevicePowerState
GetStringTypeA
DosPathToSessionPathA
CreateMutexA
GetConsoleWindow
SetStdHandle
PulseEvent
SetTermsrvAppInstallMode
CreateThread
IsValidLocale
_lopen
FreeUserPhysicalPages
GetCommMask
GetDefaultCommConfigA
SetConsoleScreenBufferSize
lstrcmpi
ExpungeConsoleCommandHistoryA
GetCommandLineA
GetStartupInfoA
ExitProcess
GlobalUnfix
GetComputerNameExA
GetConsoleMode
MapUserPhysicalPages
GlobalWire

Sections

WEIJUNLI
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.date
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ