b1df6282c220afecb44cfdb55fc6dce8d76e50f6de171aa7b2b8ff9c89d18cb7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1df6282c220afecb44cfdb55fc6dce8d76e50f6de171aa7b2b8ff9c89d18cb7
Size

450KB
MD5

fcffdb9d848999b2d61c98bfefd35d58
SHA1

e8731aabf38377028d3ac8558155a97ec946e7a2
SHA256

b1df6282c220afecb44cfdb55fc6dce8d76e50f6de171aa7b2b8ff9c89d18cb7
SHA512

5f46b6ae2135a259eba2303d35481b8cf33b77f1b45880f4eed710a9b8643162a1c90c80c87d5cc340f628db093827b3ad51b1bddb87d6accb363dc51f4f76bb
SSDEEP

12288:r28Jbau5UH66iDnSpRe9FM5InqnGWhN54k:r28Jba1MSk4RGoNq

Score

N/A

Malware Config

Signatures

Files

b1df6282c220afecb44cfdb55fc6dce8d76e50f6de171aa7b2b8ff9c89d18cb7
.exe windows x86

2c35ed123bf7fb5532653325910c7a41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree

Sections

CODE
Size: 430KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llydd
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE