28dfa78281e246cc78c6fda48e62617db1e5348489bc53e12d14b039c742fd8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28dfa78281e246cc78c6fda48e62617db1e5348489bc53e12d14b039c742fd8b
Size

163KB
MD5

6e6474aefff742649047cb8d1fed5f70
SHA1

86b705c522ceaf1b5999f0588551edef77ee0ba8
SHA256

28dfa78281e246cc78c6fda48e62617db1e5348489bc53e12d14b039c742fd8b
SHA512

35b51bdfabe640967bc566c1b8b0ea8739898baf5099643282f363c138b126f05f2f7925cbd3c90820e29d7de5773a13b5481033fdb12991877f69bde255dc26
SSDEEP

3072:oQhZkOLfuDg0PtOqzKONqsEykRLSDUoFnlMMfRn4icUolBu2K2rtNtJA:qOFStZzKqqsE6TFtFcZgr2rF

Score

N/A

Malware Config

Signatures

Files

28dfa78281e246cc78c6fda48e62617db1e5348489bc53e12d14b039c742fd8b
.exe windows x86

056d9b9e4e4d0b94131b46fe91becf14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt.dll

memset
realloc
free
??2@YAPAXI@Z
memcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strlen
_stricmp

Exports

Exports

Hai
wuhen

Sections

��
Size: 725B - Virtual size: 722B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ