General
Structural Analysis
Config.0
Yara Rules0
Sync
Community
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 9ccaa99d9416281d67bed5df0d99fa17
|
| Sha1 | 57e6cdf15fd6c45f3b0c8bc79df90aea4ce572c9
|
| Sha256 | e0cd2f267e4bbb3507a100f2ea798b996f023a63f77734c5e0752f8dbc77a4aa
|
| Sha384 | 14969b29fe93449528157f26084bc1171621be82ff2654f3a7fb8afa0774df68b2a306376dfe4e13d407d16edc9778e5
|
| Sha512 | bed6a9b499041a2849489d8d59be0231879a0d67aa952987b105633ba9131b346e2ad2bb461e459f492ee9109a87b07802b7e4dad3dc04f89ef481bd9f8f7635
|
| SSDeep | 49152:Hjqex/MHqRCaekO9gRCcW6cMCP/kUjPtq:HjqehMKRCaekO9lPtkUjPM
|
| TLSH | 5475C146EAD330BDE9CB06B1145BA73AAF211D9344108CE7E6D4FE70153A532A62F72D
|
PeID
MASM/TASM - sig4 (h)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
UPolyX 0.3 -> delikon
VC8 -> Microsoft Corporation
File Structure
9ccaa99d9416281d67bed5df0d99fa17
[Authenticode]_c2b5243d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0000
ID:1033
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x18E600 size 9768 bytes |
| Info | PDB Path: t |
9ccaa99d9416281d67bed5df0d99fa17 (1.64 MB)
File Structure
9ccaa99d9416281d67bed5df0d99fa17
[Authenticode]_c2b5243d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0000
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.