General
Structural Analysis
Config.0
Yara Rules71
Sync
Community
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | fbb635df89fcbaff0248724410f2a9ed
|
| Sha1 | 1b012aa11767f36f11998d6f313ccb14fbfa8550
|
| Sha256 | fbceaf08b0037216719962007762c3688a41fd05aed4706ad0381f3ff2048260
|
| Sha384 | 6ae707a5ecf45f69952e9fbbedce8aab2a886e8408e1dfbceaf1250c7c4932c9105da16235c486bccbf1edab1af5d381
|
| Sha512 | 2a5a202e41d1e5e66a4fecd37054f5b73cbf94ffa20b906fb21ac3ab5acceb7c495ed1682e43f111d2ee581d89ab11d7c5b8d0bb07a8c117499650519985acb9
|
| SSDeep | 24576:Tl6I/IXt2+TMUpiI9J1Fv/QBele5zKD9/no13V0bCWjZun:Tln/4tNM2iIq2A13pn
|
| TLSH | A6754A1BBCD008F6C0AA9332896665917BB1BC450F3127D72EA0B37C2F726E49D79758
|
PeID
HQR data file
Microsoft Visual C++ v6.0 DLL
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
tElock 1.0 (private) -> tE!
tElock 1.0 (private) -> tE!
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0-preview.png
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
RT_MENU
ID:0080
ID:1024
RT_DIALOG
ID:0065
ID:2048
ID:0067
ID:2048
ID:0083
ID:2048
ID:008E
ID:2048
ID:0091
ID:2048
ID:0094
ID:2048
ID:009A
ID:2048
ID:009B
ID:2048
ID:009C
ID:2048
ID:00A0
ID:2048
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_MANIFEST
ID:0001
ID:1033
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
Artefacts
|
Name0 | Value |
|---|---|
| URLs in VB Code - #1 | http://schemas.microsoft.com/SMI/2005/WindowsSettings |
fbb635df89fcbaff0248724410f2a9ed (1.64 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0-preview.png
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
RT_MENU
ID:0080
ID:1024
RT_DIALOG
ID:0065
ID:2048
ID:0067
ID:2048
ID:0083
ID:2048
ID:008E
ID:2048
ID:0091
ID:2048
ID:0094
ID:2048
ID:009A
ID:2048
ID:009B
ID:2048
ID:009C
ID:2048
ID:00A0
ID:2048
RT_GROUP_CURSOR4
ID:0000
ID:0
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| URLs in VB Code - #1 | http://schemas.microsoft.com/SMI/2005/WindowsSettings |
fbb635df89fcbaff0248724410f2a9ed |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.