2025-11-07 06:37:12
26eb3e2af9367cdc564f4cac812ea274
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00071448 | 0x00071600 | 6.63743307361 |
| .managed | 0x00073000 | 0x00118228 | 0x00118400 | 6.44299821313 |
| hydrated | 0x0018c000 | 0x00075818 | 0x00000000 | 0.0 |
| .rdata | 0x00202000 | 0x000e3436 | 0x000e3600 | 6.83397274682 |
| .data | 0x002e6000 | 0x00011da0 | 0x00002200 | 4.05564625607 |
| .pdata | 0x002f8000 | 0x00019f08 | 0x0001a000 | 6.20964876709 |
| _RDATA | 0x00312000 | 0x000000f4 | 0x00000200 | 2.46951712691 |
| .reloc | 0x00313000 | 0x00000754 | 0x00000800 | 5.14831656514 |
| Ordinal | Address | Name |
|---|---|---|
| 1 | 0x180136820 | JLI_AddArgsFromEnvVar |
| 2 | 0x180136850 | JLI_CmdToArgs |
| 3 | 0x180136880 | JLI_GetAppArgIndex |
| 4 | 0x1801368b0 | JLI_GetStdArgc |
| 5 | 0x1801368e0 | JLI_GetStdArgs |
| 6 | 0x180136910 | JLI_InitArgProcessing |
| 7 | 0x180136940 | JLI_Launch |
| 8 | 0x180136970 | JLI_List_add |
| 9 | 0x1801369a0 | JLI_List_new |
| 10 | 0x1801369d0 | JLI_ManifestIterate |
| 11 | 0x180136a00 | JLI_MemAlloc |
| 12 | 0x180136a30 | JLI_MemFree |
| 13 | 0x180136a60 | JLI_PreprocessArg |
| 14 | 0x180136a90 | JLI_ReportErrorMessage |
| 15 | 0x180136ac0 | JLI_ReportErrorMessageSys |
| 16 | 0x180136af0 | JLI_ReportExceptionDescription |
| 17 | 0x180136b20 | JLI_ReportMessage |
| 18 | 0x180136b50 | JLI_SetTraceLauncher |
| 19 | 0x180136b80 | JLI_StringDup |
| Antivirus | Signature |
|---|---|
| Bkav | W64.AIDetectMalware |
| Lionic | Trojan.Win64.XLoader.4!c |
| Elastic | malicious (high confidence) |
| ClamAV | Clean |
| CMC | Clean |
| CAT-QuickHeal | Clean |
| Skyhigh | Clean |
| ALYac | Clean |
| Cylance | Unsafe |
| Zillya | Clean |
| Sangfor | Trojan.Win64.Agent.V7dr |
| CrowdStrike | Clean |
| Alibaba | Trojan:Win64/XLoader.a71655b1 |
| K7GW | Trojan ( 005cd80f1 ) |
| K7AntiVirus | Trojan ( 005cd80f1 ) |
| huorong | Clean |
| Baidu | Clean |
| VirIT | Clean |
| Paloalto | generic.ml |
| Symantec | Trojan.Gen.MBT |
| tehtris | Clean |
| ESET-NOD32 | a variant of Win64/Agent.ECK |
| APEX | Clean |
| Avast | Win64:MalwareX-gen [Trj] |
| Cynet | Malicious (score: 100) |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| BitDefender | Trojan.GenericKD.77737268 |
| NANO-Antivirus | Clean |
| ViRobot | Clean |
| MicroWorld-eScan | Trojan.GenericKD.77737268 |
| Tencent | Win64.Trojan.Agent.Dflw |
| Sophos | Mal/Generic-S |
| F-Secure | Trojan.TR/AVI.Agent.nginv |
| DrWeb | Clean |
| VIPRE | Clean |
| TrendMicro | Clean |
| McAfeeD | ti!A129AA1A0E9B |
| Trapmine | Clean |
| CTX | dll.trojan.generic |
| Emsisoft | Trojan.GenericKD.77737268 (B) |
| Ikarus | Win32.Outbreak |
| GData | Win64.Trojan.Agent.GCJ5QX |
| Jiangmin | Clean |
| Webroot | Clean |
| Varist | W64/Agent.LIW.gen!Eldorado |
| Avira | TR/AVI.Agent.nginv |
| Antiy-AVL | Clean |
| Kingsoft | Win64.Trojan.XLoader.gen |
| Gridinsoft | Clean |
| Xcitium | Clean |
| Arcabit | Trojan.Generic.D4A22D34 |
| SUPERAntiSpyware | Clean |
| ZoneAlarm | Clean |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Detected | |
| AhnLab-V3 | Trojan/Win.Injector.X2248 |
| Acronis | Clean |
| VBA32 | Clean |
| TACHYON | Clean |
| Malwarebytes | Malware.AI.764062263 |
| Panda | Clean |
| Zoner | Clean |
| TrendMicro-HouseCall | Clean |
| Rising | Trojan.Agent!8.B1E (CLOUD) |
| Yandex | Trojan.Igent.b5sK77.11 |
| TrellixENS | Artemis!1109114A0C57 |
| SentinelOne | Clean |
| MaxSecure | Clean |
| Fortinet | W64/DllHijack.G1!tr |
| AVG | Win64:MalwareX-gen [Trj] |
| DeepInstinct | MALICIOUS |
| alibabacloud | Trojan:Win/Wacatac.B9nj |
| IRMA | Signature |
|---|---|
| Trend Micro SProtect (Linux) | Clean |
| Avast Core Security (Linux) | Win64:MalwareX-gen [Trj] |
| C4S ClamAV (Linux) | Clean |
| Trellix (Linux) | Clean |
| Sophos Anti-Virus (Linux) | Mal/Generic-S |
| Bitdefender Antivirus (Linux) | Trojan.GenericKD.77737268 |
| G Data Antivirus (Windows) | Virus: Trojan.GenericKD.77737268 (Engine A) |
| WithSecure (Linux) | Trojan.TR/AVI.Agent.nginv |
| ESET Security (Windows) | a variant of Win64/Agent.ECK trojan |
| DrWeb Antivirus (Linux) | Clean |
| ClamAV (Linux) | Clean |
| eScan Antivirus (Linux) | Trojan.GenericKD.77737268(DB) |
| Kaspersky Standard (Windows) | HEUR:Trojan.Win64.XLoader.gen |
| Emsisoft Commandline Scanner (Windows) | Trojan.GenericKD.77737268 (B) |