21189edbeafe1a52a6ff1b7e96cd7f4b673396bc45720cf77ea9c33229567f87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21189edbeafe1a52a6ff1b7e96cd7f4b673396bc45720cf77ea9c33229567f87
Size

2.6MB
MD5

e619fdad63ec9c2c468020b91b83ddcd
SHA1

f45b30ba93143a8816bac354fb485357fed2b062
SHA256

21189edbeafe1a52a6ff1b7e96cd7f4b673396bc45720cf77ea9c33229567f87
SHA512

c388f073dfe760ea0ac8bec3271fead10c48a4722c3d88b5488794d89e690bef924f849c57737f3645391e823e5e254c4e7161a36ae6d4d3cf5063c14258fa8a
SSDEEP

49152:cHGb1EwpNTg/VZrv6NMEJL8kIxU8UsLPa3AXz2Dp1e4zq19upRHsmchMDsZUifM0:b/e4zzpRsMYx4AREBzs6x+Wz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21189edbeafe1a52a6ff1b7e96cd7f4b673396bc45720cf77ea9c33229567f87

Files

21189edbeafe1a52a6ff1b7e96cd7f4b673396bc45720cf77ea9c33229567f87
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?GetMouseXMoveInt@QianJinDirectInput@@UAGHXZ
?GetMouseYMoveInt@QianJinDirectInput@@UAGHXZ
?GetMouseZMoveInt@QianJinDirectInput@@UAGHXZ

Sections

.text
Size: 4KB - Virtual size: 617KB

IMAGE_SCN_MEM_READ

CODE
Size: 620KB - Virtual size: 620KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 2.0MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ