b67ff641ecc6f0d83bb8bb7489fa8436fc1aa250731e1b841731a93600192fef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b67ff641ecc6f0d83bb8bb7489fa8436fc1aa250731e1b841731a93600192fef
Size

452KB
MD5

2296cdfa045695288d03fcb53c0e244f
SHA1

f61df68a66fb64f8edb6a18037cdd0caf70bd254
SHA256

b67ff641ecc6f0d83bb8bb7489fa8436fc1aa250731e1b841731a93600192fef
SHA512

1f54f8fc5713a6e10100c200e414166421f95797041eb5b66f82fbeac93d0c3dfdc3eea8d4557a23072c6c3d5df61f687aad70385c5fe557f8ddaa568aaa5ecc
SSDEEP

12288:sdtPj5yWc6mLqbJZl+PsvKEj4ZWhMQ22ADQQgtpk:zimLqbJZluA1j4IM2/QgP

Score

N/A

Malware Config

Signatures

Files

b67ff641ecc6f0d83bb8bb7489fa8436fc1aa250731e1b841731a93600192fef
.exe windows x86

2c35ed123bf7fb5532653325910c7a41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree

Sections

CODE
Size: 431KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llydd
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE