General
Structural Analysis
Config.0
Yara Rules0
Sync
Community
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | ccfbfad4f946688ce9f4089d39cadac8
|
| Sha1 | 64619c1c05b1e32b40feed5ed55abb852265b673
|
| Sha256 | a7c5e1f4789b6b066c8030a3966786c99682371751c255e4e77d4b5a485237ae
|
| Sha384 | 77ef3ce388ebf20e37ea71b679222078227b1791d8a27c73bcbc398c3f8337b00f2e26960f2841ffb7fb63d1a4b2d3d7
|
| Sha512 | 9cbc411c8b4959d7715c23b0662bdb7c69d6f050b46f507590cd04311aeb9a93bc7212f8c270bae24752bc02fa527bad185087a591a84f1cdc495bca2085464d
|
| SSDeep | 98304:+pTfWISwmEyxlYOP7v73mkmj8/rqnmPhn3q4oer5GnC/ZbE:+pFxmTYGSkmo/mnSha4YnmbE
|
| TLSH | AC363381B3C196F2CB70857BCF1EDB4012B6D7A4AB970ECF4B681C5A4DD36A906170DA
|
PeID
Microsoft Visual C++
Microsoft Visual C++ 5.0
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ v6.0
Microsoft Visual C++ v6.0
Microsoft Visual C++ v6.0 DLL
UPolyX 0.3 -> delikon
File Structure
Sandsaplie.jqvw
Sheas.miz
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_STRING
ID:003F
ID:1033
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1049
ID:0002
ID:1049
ID:0003
ID:1049
ID:0004
ID:1049
ID:0005
ID:1049
RT_GROUP_CURSOR4
ID:0065
ID:1049
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Artefacts
|
Name0 | Value |
|---|---|
| PDB Path | C:\build\cpython36\PCBuild\win32\pythonw.pdb |
| PDB Path | C:\build\cpython36\PCBuild\win32\python36.pdb |
| PDB Path | vcruntime140.i386.pdb |
ccfbfad4f946688ce9f4089d39cadac8 (5.19 MB)
File Structure
Sandsaplie.jqvw
Sheas.miz
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_STRING
ID:003F
ID:1033
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1049
ID:0002
ID:1049
ID:0003
ID:1049
ID:0004
ID:1049
ID:0005
ID:1049
RT_GROUP_CURSOR4
ID:0065
ID:1049
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| PDB Path | C:\build\cpython36\PCBuild\win32\pythonw.pdb |
ccfbfad4f946688ce9f4089d39cadac8 > 7z-stream @ 0x0002DF4F.7z > Coordinator-Mesh.exe |
| PDB Path | C:\build\cpython36\PCBuild\win32\python36.pdb |
ccfbfad4f946688ce9f4089d39cadac8 > 7z-stream @ 0x0002DF4F.7z > python36.dll |
| PDB Path | vcruntime140.i386.pdb |
ccfbfad4f946688ce9f4089d39cadac8 > 7z-stream @ 0x0002DF4F.7z > VCRUNTIME140.dll |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.