General
Structural Analysis
Config.0
Yara Rules0
Sync
Community
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | a12da7f296d4a25cb4bf8db7ca35e115
|
| Sha1 | dc58e7599d266225b49fa99eb9b1a9b799fd8a10
|
| Sha256 | 54acba43e7a1843f01e0ff18d01acfc74bc402542c1c3f6f4b30616105c2fbf5
|
| Sha384 | 3ec084e1a4e335797e05a5cd56f36e2665ffe5a9ab4c45da35a50c6dc9b7db6c109acbb8a1606130e2f40502ee7f3834
|
| Sha512 | 4d153dae2ca137c0d7b2e88833444882dded02ada89b33052a372164c13d01d5ca21662f29b04b9adaf62dcf9d7cc4f48107e9f96be7ab79fb88891418e4b1aa
|
| SSDeep | 196608:I+8b5PzbtLIK4Hdrk1xMVdweblPjMnSa44iAYPYEt3V6PrWk/Ari/o0sdSdNTdv:I1z5mHdo4MiSnSarivgqgrWkI4H5J
|
| TLSH | 1BE623D36FC882A4C0879E30A64F5B9E71D2B3C549BBB80D3FC61C03A571E678956627
|
PeID
Microsoft Visual C++ v6.0 DLL
UPolyX 0.3 -> delikon
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.fptable
.=M1
.y
B
.|;=
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
ID:0007
ID:0
ID:0-preview.png
RT_MENU
ID:0205
ID:1033
ID:0273
ID:1033
ID:0292
ID:1033
RT_DIALOG
ID:0122
ID:1033
RT_STRING
ID:0048
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
a12da7f296d4a25cb4bf8db7ca35e115 (14.56 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.fptable
.=M1
.y
B
.|;=
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
ID:0007
ID:0
ID:0-preview.png
RT_MENU
ID:0205
ID:1033
ID:0273
ID:1033
ID:0292
ID:1033
RT_DIALOG
ID:0122
ID:1033
RT_STRING
ID:0048
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.