General
Structural Analysis
Config.0
Yara Rules0
Sync
Community
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | f22e7cf4b0cebbc8842c74269f507593
|
| Sha1 | f2c5db769a47167696a41635a9847cc9ebf2aed1
|
| Sha256 | 12de355f8e97662a40565682475a662ed58bceedfeb94de5269f5f62d4749e24
|
| Sha384 | 85ba799f34a40b4bd7a0a5f19fc1e7d980662e19c732398eed331ef75435e4ff8774b40700796b6deb846969d42b26bf
|
| Sha512 | 6d6a4048fb1eaa3a8631c6f3560e891415103e0b685531021cb6c2d2a04f3cdf317251f36251bbc66a0b77198f8c0f4e17fee81dc434281da887e2ffadc09230
|
| SSDeep | 49152:eamfAA+2TNBJUgf/YJXMIK+x6B4OMW3/h8d0:epBnE6Bv+0
|
| TLSH | C7D56D17BCD30865D4A9A23589E241527AF1BCC50B3223D32A6077392F7ABD49BFB744
|
PeID
HQR data file
Microsoft Visual C++ v6.0 DLL
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
tElock 1.0 (private) -> tE!
tElock 1.0 (private) -> tE!
File Structure
[Authenticode]_6fb40609.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
RT_MESSAGETABLE
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x2CBA00 size 11736 bytes |
f22e7cf4b0cebbc8842c74269f507593 (2.94 MB)
File Structure
[Authenticode]_6fb40609.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
RT_MESSAGETABLE
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.