18098ba6c001d37236f5394b6b5b26688b1f53023c90c8d08a3a38d89f366264
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2019-Jul-30 08:52:50 |
Plugin Output
| Info | Matching compiler(s): | MASM/TASM - sig2(h) |
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to MD5 Uses constants related to SHA1 |
| Info | The PE contains common functions which appear in legitimate applications. |
[!] The program may be hiding some of its imports:
|
| Suspicious | The PE is possibly a dropper. |
Resource 12187EFA4A2FD563691BFE55B409D3CE512C5587 is possibly compressed or encrypted.
Resource 211812217E5072D1BB7DF21191D1868B4BCFCD1D is possibly compressed or encrypted. Resource 325B5EABE0CA074D5206A09F47735566D4F67456 is possibly compressed or encrypted. Resource 42662B5FC4A63176C662903C192F8D573CF36744 is possibly compressed or encrypted. Resource 48CFDDB7093334C8046CDB98BC8BB39165FE79D8 is possibly compressed or encrypted. Resource 4D5C4CE8940872978436B079E1F47385D08E0E12 is possibly compressed or encrypted. Resource 6852AAF61035F106B86E38426CC2BC9B is possibly compressed or encrypted. Resource 83EA49E2D830597197E6ABBCB29CF946 is possibly compressed or encrypted. Resource 9C92C71C48CE19CE96F5E57B953979204BCB26FB is possibly compressed or encrypted. Resource 9EFEB44D42C5874FF32AB64F2DF55ED54631E9FF is possibly compressed or encrypted. Resource AFB27C6655DF63CB2BC4427855A301D76E79F77D is possibly compressed or encrypted. Resource D5BFFFF61CD960DE6877CEFB0F80DAA8B3D7CC20 is possibly compressed or encrypted. Resource D61B868B4D4F73EE8615F9E7F35B832DE960A90B is possibly compressed or encrypted. Resource E38A9029F02BF118FB6E09F50E08383B6A174B90 is possibly compressed or encrypted. Resources amount for 95.9448% of the executable. |
| Malicious | VirusTotal score: 29/71 (Scanned on 2025-02-07 20:49:59) |
APEX:
Malicious
Antiy-AVL: Trojan/Win32.Nitol Bkav: W32.AIDetectMalware CTX: exe.trojan.generic CrowdStrike: win/malicious_confidence_70% (W) Cylance: Unsafe Cynet: Malicious (score: 100) DeepInstinct: MALICIOUS Elastic: malicious (high confidence) FireEye: Generic.mg.71d60cbee25a3806 Fortinet: W32/PSLoader.gen!tr Google: Detected Gridinsoft: Trojan.Win32.Generic.sa Kingsoft: malware.kb.a.975 Lionic: Trojan.Win32.Tiny.trFe Malwarebytes: Generic.Malware.AI.DDS MaxSecure: Trojan.Malware.300983.susgen McAfee: GenericRXWO-YL!71D60CBEE25A McAfeeD: Real Protect-LS!71D60CBEE25A SentinelOne: Static AI - Suspicious PE Skyhigh: BehavesLike.Win32.RealProtect.vc Sophos: Generic ML PUA (PUA) Symantec: ML.Attribute.HighConfidence VBA32: BScope.Trojan.Meterpreter Varist: W32/ABApplication.ESGV-7079 VirIT: Trojan.Win32.Genus.IHW Zillya: Tool.Lazagne.Win32.102 Zoner: Trojan.Win32.85523 tehtris: Generic.Malware |
Hashes
| MD5 | 71d60cbee25a380604d5a484c33b9ea6 🔍 |
|---|---|
| SHA1 | 101634f3e01e549295bcde80849db2d4dc720af4 🔍 |
| SHA256 | 18098ba6c001d37236f5394b6b5b26688b1f53023c90c8d08a3a38d89f366264 🔍 |
| SHA3 | e4f28d93772d3917f0cbc5dbee15b7be7b5d566beceda926fa0f092f82377fe8 🔍 |
| SSDeep | 49152:rvkTM8vVU6dUUNhEA9VvqliSkdGWgX5z7XJvSmIM0wUE/J:rcvVUulf7s3XJvSmIFwB/J 🔍 |
| Imports Hash | 5877688b4859ffd051f6be3b8e0cd533 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2019-Jul-30 08:52:50 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x10c00 |
| SizeOfInitializedData | 0x20d600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00001000 (Section: .code) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x13000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x222000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.code
| MD5 | 6c0f4094a5493360ae8c9032ef3a9f47 🔍 |
|---|---|
| SHA1 | 46e4e4c197cbfd5b6bc4fcfe852e2f6c19ff32d5 🔍 |
| SHA256 | f6e9812089d0028c33a2b9eb53df013efade78f2c7a82910557b2ab9ff8f24e1 🔍 |
| SHA3 | 36b8e17b505b7236975ff151e879eec5490c1aa7483cfb43a819f0d42876bf25 🔍 |
| VirtualSize | 0x37f0 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x3800 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.60878 |
.text
| MD5 | 1da643e4b1937b50550f9d9e8250428e 🔍 |
|---|---|
| SHA1 | 705a8d46edc2898b99a24b89e3af8a73702de27e 🔍 |
| SHA256 | 5dd774a6dd19c00b8ae3b487d1a1297ccdfe7c83f6c8b1a13c97f9c64e3f1b0f 🔍 |
| SHA3 | b3f3032b15c38542c6b1f3e9906bfb5e2c66877804d9811f2f948dee7774131b 🔍 |
| VirtualSize | 0xd2c2 |
| VirtualAddress | 0x5000 |
| SizeOfRawData | 0xd400 |
| PointerToRawData | 0x3c00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.55808 |
.rdata
| MD5 | 4fb07923b0eb72c40319d48fd2d4f13f 🔍 |
|---|---|
| SHA1 | f8f4ac5ba9f5ff221c01568f2e378e4582faa7fe 🔍 |
| SHA256 | cdfd6bc8c473d8389be0f336e7ed1ea672d6918ed1be6b2f5554f649f6dd4695 🔍 |
| SHA3 | 614e0060afaa826b4884f4069d01868583d72e4233009f9779b0529a02a10922 🔍 |
| VirtualSize | 0x339d |
| VirtualAddress | 0x13000 |
| SizeOfRawData | 0x3400 |
| PointerToRawData | 0x11000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.11064 |
.data
| MD5 | 457b3152cba49d33d9814ad6dd040076 🔍 |
|---|---|
| SHA1 | 0656e8517b64a97f49bf29a9390e04451b37e697 🔍 |
| SHA256 | aa0bb9b22ec52c85865d6896d1ad317f0e26fbc4aec9eaf381253b4cd02957af 🔍 |
| SHA3 | 26d54065310989c0761781b86517f303d32ba2db2bb39fcdff7b609c05a25384 🔍 |
| VirtualSize | 0x172c |
| VirtualAddress | 0x17000 |
| SizeOfRawData | 0x1200 |
| PointerToRawData | 0x14400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 4.99941 |
.rsrc
| MD5 | adafd50e42c3a4a5d5de1aa98f5bf7a2 🔍 |
|---|---|
| SHA1 | 0571b1b9f585f06c291198ef06c7180f595364a3 🔍 |
| SHA256 | 28c21ab4aaa1a03b8230acb5daa1691213c81c96e7f622c6a15960a0d39fbefc 🔍 |
| SHA3 | 4fa57d32c009e1db11c38b1daceda598dfb2a2da99e6a22a4a659181c54208ca 🔍 |
| VirtualSize | 0x208f70 |
| VirtualAddress | 0x19000 |
| SizeOfRawData | 0x209000 |
| PointerToRawData | 0x15600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.99978 |
Imports
| MSVCRT.dll |
memset
wcsncmp memmove wcsncpy wcsstr _wcsnicmp _wcsdup free _wcsicmp wcslen wcscpy wcscmp memcpy tolower wcscat malloc |
|---|---|
| KERNEL32.dll |
GetModuleHandleW
HeapCreate GetStdHandle HeapDestroy ExitProcess WriteFile GetTempFileNameW LoadLibraryExW EnumResourceTypesW FreeLibrary RemoveDirectoryW GetExitCodeProcess EnumResourceNamesW GetCommandLineW LoadResource SizeofResource FreeResource FindResourceW GetNativeSystemInfo GetShortPathNameW GetWindowsDirectoryW GetSystemDirectoryW EnterCriticalSection CloseHandle LeaveCriticalSection InitializeCriticalSection WaitForSingleObject TerminateThread CreateThread Sleep GetProcAddress GetVersionExW WideCharToMultiByte HeapAlloc HeapFree LoadLibraryW GetCurrentProcessId GetCurrentThreadId GetModuleFileNameW GetEnvironmentVariableW SetEnvironmentVariableW GetCurrentProcess TerminateProcess SetUnhandledExceptionFilter HeapSize MultiByteToWideChar CreateDirectoryW SetFileAttributesW GetTempPathW DeleteFileW GetCurrentDirectoryW SetCurrentDirectoryW CreateFileW SetFilePointer TlsFree TlsGetValue TlsSetValue TlsAlloc HeapReAlloc DeleteCriticalSection InterlockedCompareExchange InterlockedExchange GetLastError SetLastError UnregisterWait GetCurrentThread DuplicateHandle RegisterWaitForSingleObject |
| USER32.DLL |
CharUpperW
CharLowerW MessageBoxW DefWindowProcW DestroyWindow GetWindowLongW GetWindowTextLengthW GetWindowTextW UnregisterClassW LoadIconW LoadCursorW RegisterClassExW IsWindowEnabled EnableWindow GetSystemMetrics CreateWindowExW SetWindowLongW SendMessageW SetFocus CreateAcceleratorTableW SetForegroundWindow BringWindowToTop GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW DestroyAcceleratorTable PostMessageW GetForegroundWindow GetWindowThreadProcessId IsWindowVisible EnumWindows SetWindowPos |
| GDI32.DLL |
GetStockObject
|
| COMCTL32.DLL |
InitCommonControlsEx
|
| SHELL32.DLL |
ShellExecuteExW
SHGetFolderLocation SHGetPathFromIDListW |
| WINMM.DLL |
timeBeginPeriod
|
| OLE32.DLL |
CoInitialize
CoTaskMemFree |
| SHLWAPI.DLL |
PathAddBackslashW
PathRenameExtensionW PathQuoteSpacesW PathRemoveArgsW PathRemoveBackslashW |
Delayed Imports
1
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0xba8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.74001 |
| MD5 | 2c5eaf15c1260f1a2783dabd9a82345f 🔍 |
| SHA1 | b2533bb45cc36c67dbb799ce275a853b4711534f 🔍 |
| SHA256 | 548c0de2e0fcbc6296f9119339ed571cbe0ed71e18036bd2e2d0cc9cb854bb80 🔍 |
| SHA3 | 5d8d879df51d17c3b3244433a235851cc4d1b80c498309c5442b47a60b69e71f 🔍 |
12187EFA4A2FD563691BFE55B409D3CE512C5587
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x2a355 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99898 |
| MD5 | 4c7ce51c014c51094539d9fdd43a3ac4 🔍 |
| SHA1 | 7a2c2144af90d446f983d7c8ffb00cd37165da9a 🔍 |
| SHA256 | be6ac7cdb6a92ea9480e2eefb781ac6fa713c9116b064f7170e65db2d5b681d7 🔍 |
| SHA3 | 5e20e995ede139af9443ebda1db5f1adf3fe8d9d23519e60e80b8486d4c84bd6 🔍 |
211812217E5072D1BB7DF21191D1868B4BCFCD1D
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x118c9 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99754 |
| MD5 | 1ba553dc2778154cb136a32bf42320d3 🔍 |
| SHA1 | 817798a8cc44e17f61037f317deb865ce889b353 🔍 |
| SHA256 | 0129c403d29270d13a58756a296b79266cd6e35f2bf1ea80e692f18554be7034 🔍 |
| SHA3 | 93cb431ce507b367d93c3a55cc159b8ac05c6dc15258c17305e28f9d865b9aed 🔍 |
325B5EABE0CA074D5206A09F47735566D4F67456
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x6ad92 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99958 |
| MD5 | d84fc836d5dd0826abbe87dde32c3426 🔍 |
| SHA1 | a48b4f27773d799fcdf310acf21732aa55f3ae31 🔍 |
| SHA256 | 4417f89e55e95320728eeb284aae56ef94284b0587507f693afe9210ec8eca5d 🔍 |
| SHA3 | 3649e1d027b9616eeb46c324a519e7cd8b9240aa6782f226721d2cc66a573702 🔍 |
351C1A4EC64C722FD0056B10E9B32E43
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0xe |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.23593 |
| MD5 | 7bb55e591962edd967c9a3039407256c 🔍 |
| SHA1 | e84642313805d66ef70fdada202992d040a1c2cc 🔍 |
| SHA256 | 8fcbd3ba77d0af716d0b3f342b877539512ba665a6c5ad7999a531bff05a6a91 🔍 |
| SHA3 | 116f25e12adcabbb7a50c5223cf85536391d06d1114f226b2e5d018f6907ff91 🔍 |
416284E240
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x1 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 0 |
| MD5 | 55a54008ad1ba589aa210d2629c1df41 🔍 |
| SHA1 | bf8b4530d8d246dd74ac53a13471bba17941dff7 🔍 |
| SHA256 | 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a 🔍 |
| SHA3 | 2767f15c8af2f2c7225d5273fdd683edc714110a987d1054697c348aed4e6cc7 🔍 |
42662B5FC4A63176C662903C192F8D573CF36744
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x2e435 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99906 |
| MD5 | 1a0d1bef698b554b6dde6f5079a92841 🔍 |
| SHA1 | 6b5ec38db57b35febc355d32c1f1f2a57851a791 🔍 |
| SHA256 | 1f7cbdd84c36c09c5154746db441a743de6a1e80690bbc84d241ad29c7c7f6a6 🔍 |
| SHA3 | f61fc18491418c2df4ec54fa88be18174f09a7bda77402ab06b56cc77012541e 🔍 |
48CFDDB7093334C8046CDB98BC8BB39165FE79D8
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x18add |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99789 |
| MD5 | 78c808b7d77e43c391b82c53a9aeb1f8 🔍 |
| SHA1 | 0bc95744970d8968d118e60a83593eef2db164e4 🔍 |
| SHA256 | ade8d9cd4ca5da526953f09fee5c6b3a0b6bbc0562d3d78a9e7dc6926816e201 🔍 |
| SHA3 | b523a2271cd4205eae663bf811dc76d55dbaba3dcc6c1fc2f4a500667cd25880 🔍 |
4D5C4CE8940872978436B079E1F47385D08E0E12
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x73751 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99964 |
| MD5 | a5b1caaa8c8295130c3b1189d2c3452b 🔍 |
| SHA1 | 8801e90457edfc8d91773280b93a0351ceef98bd 🔍 |
| SHA256 | 328941a0ef97156c27740575153a8c2b3e63123cde07c1853d0a87ebd7d27b50 🔍 |
| SHA3 | 752822a4b332ee7e8fcc02f0d18b8a66f4363bd573ca854f188f83aec44fafbd 🔍 |
51043A0C0115D4E3EB9A0E8E1FFA5FFADA5BF8D5
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x9 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.16993 |
| MD5 | cf5120613d2dff81776e296657f798dc 🔍 |
| SHA1 | b74fe24fb98b2f7713734eedbe6b7d4881403126 🔍 |
| SHA256 | 65c392e08912a1189df87e9fdc19adb8336d3fde6b3d1b3afccc28d3351a57fb 🔍 |
| SHA3 | 58a4d5e2b952215c15b36bb8071b5211df83d9cd628e48063bf1b0970e15173f 🔍 |
6852AAF61035F106B86E38426CC2BC9B
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x266 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.6652 |
| MD5 | f2d253506c8740403c8031a21af106b2 🔍 |
| SHA1 | d91a998f7c21de5ea28d857aa124d2282df49266 🔍 |
| SHA256 | 505422c5380c3a9ca48213797aa311f2a0a3150ade4d53ca12b02690819a8bad 🔍 |
| SHA3 | 3586d8d7a84940200c95c67280fc90b2d03f9bd944e95c5d79610b1a6346817c 🔍 |
83EA49E2D830597197E6ABBCB29CF946
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x1534 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.96087 |
| MD5 | 2518eb638da29e5ecce8366f1c835e4f 🔍 |
| SHA1 | df1190d170e9a440dbef03f63711db3c35723bd7 🔍 |
| SHA256 | ed7763a4eb5c58a92e034d1c01eafa634ad6e4cdab51564f05139c18fde9498c 🔍 |
| SHA3 | 561cfbcd777e209f70136665f4a8efda5489d8bb0863ab87c249dd3f8610ebbd 🔍 |
9C92C71C48CE19CE96F5E57B953979204BCB26FB
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x1c947 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99828 |
| MD5 | e74707720cff2a10dfac061b652ab755 🔍 |
| SHA1 | 2382ad97c1d918466543b5375e664733d5022b20 🔍 |
| SHA256 | 90d0298cf807d6df4fe232ef0e0a76b841679e0b4ec603e813d20d2c6ee32188 🔍 |
| SHA3 | 007aed414e64d2b82d63564e6816ef0564dd260f0849df0c7d733bb568cf75f7 🔍 |
9EFEB44D42C5874FF32AB64F2DF55ED54631E9FF
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x438e4 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99939 |
| MD5 | d2ce9ee57cbada7300fef05c292b1056 🔍 |
| SHA1 | 42e8dac28a8a655d8090c4d554856ad3862e842d 🔍 |
| SHA256 | 926a297bde5c4ef122a922401fc103b449291b8a1b4102e13bf0775cdab5052d 🔍 |
| SHA3 | c83bf9069df1de3ff9b6e5acee4a85708b927eccbe7ab793537444469eaf1b11 🔍 |
AFB27C6655DF63CB2BC4427855A301D76E79F77D
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x1ae75 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99838 |
| MD5 | d8afb87e4dfe59749f8e9e23e58caadf 🔍 |
| SHA1 | 17e7ef2f40635ac2fed6fd20bc939f37d2f6e082 🔍 |
| SHA256 | 54c8e6043112368eaa9292fee268c09054192325a42282e7615b47a62099c1e8 🔍 |
| SHA3 | 7f4b7d374f153a546603397f2d6110f13661ec4fe3372886c5850102687dd5cc 🔍 |
D5BFFFF61CD960DE6877CEFB0F80DAA8B3D7CC20
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x4038 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.98992 |
| MD5 | 35e222241d9793ecd2d199ef3e7d26b7 🔍 |
| SHA1 | 188ea80ff724b43ec568641fd079050076078e2d 🔍 |
| SHA256 | e570772e4a2faf335a90f8e2c48e6a302a3cbcae1708dbcacf584207f83e4e87 🔍 |
| SHA3 | 2bec68cc112ced2ad7304d2a5bb1fe13454f94f1b61bca0a36d8bd44595e600a 🔍 |
D61B868B4D4F73EE8615F9E7F35B832DE960A90B
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x21f24 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99873 |
| MD5 | da2e66f4a52406ff5ae2366b4da4a2ad 🔍 |
| SHA1 | 3df71df0ab6eb0809206a20176544c430b447c6a 🔍 |
| SHA256 | 226058e402c9a9af84ecf1fe710c5d72940f9fdaf77917dafe5cc11f2527d61c 🔍 |
| SHA3 | ad3705e32a248658363854af77674f375b5cfa9a9cd62994b7d076a5391ddc6b 🔍 |
E38A9029F02BF118FB6E09F50E08383B6A174B90
| Type |
RT_RCDATA
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x4038 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.98992 |
| MD5 | 35e222241d9793ecd2d199ef3e7d26b7 🔍 |
| SHA1 | 188ea80ff724b43ec568641fd079050076078e2d 🔍 |
| SHA256 | e570772e4a2faf335a90f8e2c48e6a302a3cbcae1708dbcacf584207f83e4e87 🔍 |
| SHA3 | 2bec68cc112ced2ad7304d2a5bb1fe13454f94f1b61bca0a36d8bd44595e600a 🔍 |
1 (#2)
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.91924 |
| Detected Filetype | Icon file |
| MD5 | b1f9039521a16d476e582676eb9b16aa 🔍 |
| SHA1 | d67dcf54ecf5968830b14ffe8432669d42082034 🔍 |
| SHA256 | cce8ff37d3a4952f502191b65671cfa074259512cbe1245bc2d627e5d397314b 🔍 |
| SHA3 | 85f68af59253a68e051a6d9f3d38427839ed6aaf35feb79111f8de6c4b60baaf 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | UNKNOWN |
| Codepage | Latin 1 / Western European |
| Size | 0x263 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.92322 |
| MD5 | 841795bb3b61ebd511249778aa26af77 🔍 |
| SHA1 | 59f426938522ef9906b0740821e8cc270d1ca897 🔍 |
| SHA256 | be809cba9d14bfb52a969d766992832b10e99e133babcdd99dc6d1bba5597cf7 🔍 |
| SHA3 | 5fa5c36711cc5c3661248b1180ce35543201ff1dc77d158129b844f03a2144c9 🔍 |
Version Info
TLS Callbacks
Load Configuration
RICH Header
Errors
Leave a comment
No comments yet.