General
Structural Analysis
Config.0
Yara Rules0
Sync
Community
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 33814466690b890c170b6a8ffb07e0f9
|
| Sha1 | b0284d28801f21215f6f7d53d4eb4cb4b0b4a94b
|
| Sha256 | 3774c53aca05c170b5c22c787e7693ae216af823426c3bf46a34043c809b602a
|
| Sha384 | d8b069ee9ada069f1c8927a7dc84712f21a8f37c7b93e8459a992cbc729f1672b0068cfa4f6a800bb9b87cda0ecebe4d
|
| Sha512 | 48796973805a9770b104874c61ff887b8271b44bc4b69eb3cdbf13acddb0478d563b02b18ab8deb41df25b55ee4f626d3ed4d4fcaa6ac38039b09bed626cd620
|
| SSDeep | 98304:NY52PIDlN1UAnqUrVB+t5ZUNIGKBf3ZtXiTC2hKv86LI7lEwJu6kQctcIZ:NYQ+nxB+j+IPJ3riTThK0aQctbZ
|
| TLSH | AD363301B796ECB0D04547BF64913B7152BBB90A0B1D51DBE6E02B36FD04BF2A93D292
|
PeID
Microsoft Visual C++
Microsoft Visual C++ 5.0
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ v6.0
Microsoft Visual C++ v6.0
Microsoft Visual C++ v6.0 DLL
UPolyX 0.3 -> delikon
File Structure
[Authenticode]_0b13407a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1049
ID:0002
ID:1049
ID:0003
ID:1049
ID:0004
ID:1049
RT_GROUP_CURSOR4
ID:0065
ID:1049
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:1033
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x4A2ED0 size 15816 bytes |
33814466690b890c170b6a8ffb07e0f9 (4.88 MB)
File Structure
[Authenticode]_0b13407a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1049
ID:0002
ID:1049
ID:0003
ID:1049
ID:0004
ID:1049
RT_GROUP_CURSOR4
ID:0065
ID:1049
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.