f7a21e442c7b5b4c6f7281250bb7628741df53744eb31d11430bb41603e6a598 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7a21e442c7b5b4c6f7281250bb7628741df53744eb31d11430bb41603e6a598
Size

96KB
MD5

047ce902d1dd6c4e30cd6510d25f7f5f
SHA1

c00eef0424642218635e000f54bd52f93a8fc39f
SHA256

f7a21e442c7b5b4c6f7281250bb7628741df53744eb31d11430bb41603e6a598
SHA512

ab354a30e909b32d04cb344b98d2906781949687bb80cd0b97e24d47d98a9463778f5c7a8f731fe9bb07163a8c3fd4013b39676f9eb6bd07cf03d1e81f14d37e
SSDEEP

1536:ExWFZT14S6fNoOfYACwn32nOc2+hOwse99BV0HtzXH1udUOqa69IgQ5oLSJJ9VS:ExoZT14S6f+AC432nY+OneLGtodUta6a

Score

N/A

Malware Config

Signatures

Files

f7a21e442c7b5b4c6f7281250bb7628741df53744eb31d11430bb41603e6a598
.exe windows x86

4f2f197545d9b6bb381b22d4e3b7662f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
GlobalFlags
GenerateConsoleCtrlEvent
NlsConvertIntegerToString
GlobalFindAtomA
SetEndOfFile
GetNamedPipeInfo
InitializeCriticalSection
SetStdHandle
PeekConsoleInputA
InterlockedExchangeAdd
CallNamedPipeA
TlsFree
GetCommandLineA
GetStartupInfoA
ExitProcess

Sections

.xtext
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ