General
Structural Analysis
Config.0
Yara Rules99+
Sync
Community
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 2037857e20d02f17e02ea70de6a297ff
|
| Sha1 | f66d8189c89f27471bf60d5d9d284fab7363add5
|
| Sha256 | 0c7b5f5ebd66465ca682b496f7937bd056c04ec7d156e78dde012ef8541ef4b4
|
| Sha384 | 9c9076bf1604f440616fd3b05e3ffeb62e1dc78b437b2dde3b3c0eea9e9616c3dd2914676a68e808c75acd87381c1ab7
|
| Sha512 | d56361a747b13a26467731c4093de24c7b814d0ff1808ae09ffcd0b8f71427d7ebea0c86dd2a8e3775a085dfb3fd627f14023a74b390f4e6a2013e6c05de99e0
|
| SSDeep | 393216:gYA0aFsDXcn+B7LsvNRYtN2UPephIJU9RcTLRWbbmT8MQlO9Xks:gwT9W3wN2GkGFWbyEO9ks
|
| TLSH | 5657D023AD908274E5CA91FE86FD3B2AC96D9D05033891C759C83C985B31AE6373E717
|
PeID
MS Visual C++ v7.0 DLL
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ v6.0 DLL
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
UPolyX 0.3 -> delikon
Visual C++ 2003 DLL -> Microsoft
Visual C++ 2005 DLL -> Microsoft
File Structure
2037857e20d02f17e02ea70de6a297ff
[Authenticode]_a9e341a6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.unwante
.rsrc
.reloc
Resources
MUI
ID:0001
ID:1033
RT_RCDATA
ID:0000
[Authenticode]_a4a3cdc6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.crthunk
.fptable
.tls
CPADinfo
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
[Authenticode]_19499ecd.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.didat
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
614
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x19D6000 size 21560 bytes |
| Info | PDB Path: d:\OpenSourceProjs\wke-master\build\vs2008\Release_Cairo_CFLite\bin\wke.pdb |
2037857e20d02f17e02ea70de6a297ff (27.11 MB)
File Structure
2037857e20d02f17e02ea70de6a297ff
[Authenticode]_a9e341a6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.unwante
.rsrc
.reloc
Resources
MUI
ID:0001
ID:1033
RT_RCDATA
ID:0000
[Authenticode]_a4a3cdc6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.crthunk
.fptable
.tls
CPADinfo
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
[Authenticode]_19499ecd.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.didat
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
614
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.