Path: blob/master/data/templates/template_x86_windows.256kib.dll
19664 views
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode. $ w� �3�g�3�g�3�g���f�0�g�3�f�>�g���c�2�g��˘�2�g���e�2�g�Rich3�g� PE L <�c � ! " p ` @ h! ( @ � P 8 8 8 .text � `.rdata � @ @.data ) 0 @ �.rsrc � @ @ @.reloc 8 P @ B U����E�E��E� �E� � �M����M��U�;U s�E�� �M����M��ދ�]���������������U���( jD�E�P�������E�D �- ���� �M�Q�U�Rj j hD jj j h 2j � �E��}� u$�E�P�M�Qj j jDjj j h 2j � �E��}� �� Dž���� ������R�E�P� j@h h j �M�Q�( �E�j h h 0 �U�R�E�P�, �M�������������R�E�P�$ �M�Q� �U�R� �E�P� j � ��]�������U��Q�E �E��}�t������� ��]� ��������������U��� �E� �E� �E� �E� �E� �E� �E� h 0jj�E�P�0 �E��}� u�u�E� j �M�Q� = u�Y�E� h1jh � �E��}� t �U�R� �+h1jj�E�P� �E��}� t�E� 3��m����}� t �}� tj j�U�R� �E�P� �E��]� �! �! �! " " " ," <" N" b" v" �" �" <�c � t t �� l � � .text$mn 8 .idata$5 8 .rdata T .rdata$voltmd t � .rdata$zzzdbg h! .idata$2 |! .idata$3 �! 8 .idata$4 �! � .idata$6 0 ) .data @ � .rsrc$01 �@ ` .rsrc$02 �! �" �! �! �! " " " ," <" N" b" v" �" �" � CloseHandle �ReleaseSemaphore �WaitForSingleObject � CreateEventA OpenEventA kExitThread �ResumeThread � CreateProcessA GetThreadContext mSetThreadContext �VirtualAllocEx 5WriteProcessMemory � CreateSemaphoreA KERNEL32.dll PAYLOAD: Local\Semaphore:Default Local\Event:Default rundll32.exe rundll32.exe � X �0 � H �@ \ V S _ V E R S I O N _ I N F O \ 4 V S _ V E R S I O N _ I N F O ��� 8 �0�0�0�0�011"1<1F1P1Z1b1�1�122&292@2N2�2�2