redline | PekkaRat[.]zip

PekkaRat.zip

.zip

PekkaRat/MetroSet UI.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

PekkaRat/NAudio.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

PekkaRat/PekkaRat.exe

.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 18.1MB - Virtual size: 18.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

PekkaRat/System.IO.Compression.ZipFile.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77
Signer

Actual PE Digest

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

27/02/2023, 09:31
Valid: false

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94
Signer

Actual PE Digest

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

05/11/2016, 04:50
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

PekkaRat/WinMM.Net.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

PekkaRat/res/Audio/1.wav

PekkaRat/res/Audio/2.wav

PekkaRat/res/Audio/3.wav

PekkaRat/res/Audio/4.wav

PekkaRat/res/Audio/5.wav

PekkaRat/res/Audio/notification.wav

PekkaRat/res/Config/Pass.inf

PekkaRat/res/Config/maps.inf

PekkaRat/res/Config/supported_images.inf

PekkaRat/res/Config/supported_text.inf

PekkaRat/res/Config/supported_video.inf

PekkaRat/res/Fonts/Hack-Bold.ttf

PekkaRat/res/Fonts/Hack-BoldOblique.ttf

PekkaRat/res/Fonts/Hack-Regular.ttf

PekkaRat/res/Fonts/Hack-RegularOblique.ttf

PekkaRat/res/GeoIP/Flags/-1.ico

PekkaRat/res/GeoIP/Flags/AD.ico

PekkaRat/res/GeoIP/Flags/AE.ico

PekkaRat/res/GeoIP/Flags/AF.ico

PekkaRat/res/GeoIP/Flags/AG.ico

PekkaRat/res/GeoIP/Flags/AI.ico

PekkaRat/res/GeoIP/Flags/AL.ico

PekkaRat/res/GeoIP/Flags/AM.ico

PekkaRat/res/GeoIP/Flags/AN.ico

PekkaRat/res/GeoIP/Flags/AO.ico

PekkaRat/res/GeoIP/Flags/AQ.ico

PekkaRat/res/GeoIP/Flags/AR.ico

PekkaRat/res/GeoIP/Flags/AS.ico

PekkaRat/res/GeoIP/Flags/AT.ico

PekkaRat/res/GeoIP/Flags/AU.ico

PekkaRat/res/GeoIP/Flags/AW.ico

PekkaRat/res/GeoIP/Flags/AX.ico

PekkaRat/res/GeoIP/Flags/AZ.ico

PekkaRat/res/GeoIP/Flags/BA.ico

PekkaRat/res/GeoIP/Flags/BB.ico

PekkaRat/res/GeoIP/Flags/BD.ico

PekkaRat/res/GeoIP/Flags/BE.ico

PekkaRat/res/GeoIP/Flags/BF.ico

PekkaRat/res/GeoIP/Flags/BG.ico

PekkaRat/res/GeoIP/Flags/BH.ico

PekkaRat/res/GeoIP/Flags/BI.ico

PekkaRat/res/GeoIP/Flags/BJ.ico

PekkaRat/res/GeoIP/Flags/BL.ico

PekkaRat/res/GeoIP/Flags/BM.ico

PekkaRat/res/GeoIP/Flags/BN.ico

PekkaRat/res/GeoIP/Flags/BO.ico

PekkaRat/res/GeoIP/Flags/BR.ico

PekkaRat/res/GeoIP/Flags/BS.ico

PekkaRat/res/GeoIP/Flags/BT.ico

PekkaRat/res/GeoIP/Flags/BW.ico

PekkaRat/res/GeoIP/Flags/BY.ico

PekkaRat/res/GeoIP/Flags/BZ.ico

PekkaRat/res/GeoIP/Flags/CA.ico

PekkaRat/res/GeoIP/Flags/CC.ico

PekkaRat/res/GeoIP/Flags/CD.ico

PekkaRat/res/GeoIP/Flags/CF.ico

PekkaRat/res/GeoIP/Flags/CG.ico

PekkaRat/res/GeoIP/Flags/CH.ico

PekkaRat/res/GeoIP/Flags/CI.ico

PekkaRat/res/GeoIP/Flags/CK.ico

PekkaRat/res/GeoIP/Flags/CL.ico

PekkaRat/res/GeoIP/Flags/CM.ico

PekkaRat/res/GeoIP/Flags/CN.ico

PekkaRat/res/GeoIP/Flags/CO.ico

PekkaRat/res/GeoIP/Flags/CR.ico

PekkaRat/res/GeoIP/Flags/CU.ico

PekkaRat/res/GeoIP/Flags/CV.ico

PekkaRat/res/GeoIP/Flags/CW.ico

PekkaRat/res/GeoIP/Flags/CX.ico

PekkaRat/res/GeoIP/Flags/CY.ico

PekkaRat/res/GeoIP/Flags/CZ.ico

PekkaRat/res/GeoIP/Flags/DE.ico

PekkaRat/res/GeoIP/Flags/DJ.ico

PekkaRat/res/GeoIP/Flags/DK.ico

PekkaRat/res/GeoIP/Flags/DM.ico

PekkaRat/res/GeoIP/Flags/DO.ico

PekkaRat/res/GeoIP/Flags/DZ.ico

PekkaRat/res/GeoIP/Flags/EC.ico

PekkaRat/res/GeoIP/Flags/EE.ico

PekkaRat/res/GeoIP/Flags/EG.ico

PekkaRat/res/GeoIP/Flags/EH.ico

PekkaRat/res/GeoIP/Flags/ER.ico

PekkaRat/res/GeoIP/Flags/ES.ico

PekkaRat/res/GeoIP/Flags/ET.ico

PekkaRat/res/GeoIP/Flags/EU.ico

PekkaRat/res/GeoIP/Flags/FI.ico

PekkaRat/res/GeoIP/Flags/FJ.ico

PekkaRat/res/GeoIP/Flags/FK.ico

PekkaRat/res/GeoIP/Flags/FM.ico

PekkaRat/res/GeoIP/Flags/FO.ico

PekkaRat/res/GeoIP/Flags/FR.ico

PekkaRat/res/GeoIP/Flags/GA.ico

PekkaRat/res/GeoIP/Flags/GB.ico

PekkaRat/res/GeoIP/Flags/GD.ico

PekkaRat/res/GeoIP/Flags/GE.ico

PekkaRat/res/GeoIP/Flags/GG.ico

PekkaRat/res/GeoIP/Flags/GH.ico

PekkaRat/res/GeoIP/Flags/GI.ico

PekkaRat/res/GeoIP/Flags/GL.ico

PekkaRat/res/GeoIP/Flags/GM.ico

PekkaRat/res/GeoIP/Flags/GN.ico

PekkaRat/res/GeoIP/Flags/GQ.ico

PekkaRat/res/GeoIP/Flags/GR.ico

PekkaRat/res/GeoIP/Flags/GS.ico

PekkaRat/res/GeoIP/Flags/GT.ico

PekkaRat/res/GeoIP/Flags/GU.ico

PekkaRat/res/GeoIP/Flags/GW.ico

PekkaRat/res/GeoIP/Flags/GY.ico

PekkaRat/res/GeoIP/Flags/HK.ico

PekkaRat/res/GeoIP/Flags/HN.ico

PekkaRat/res/GeoIP/Flags/HR.ico

PekkaRat/res/GeoIP/Flags/HT.ico

PekkaRat/res/GeoIP/Flags/HU.ico

PekkaRat/res/GeoIP/Flags/IC.ico

PekkaRat/res/GeoIP/Flags/ID.ico

PekkaRat/res/GeoIP/Flags/IE.ico

PekkaRat/res/GeoIP/Flags/IL.ico

PekkaRat/res/GeoIP/Flags/IM.ico

PekkaRat/res/GeoIP/Flags/IN.ico

PekkaRat/res/GeoIP/Flags/IQ.ico

PekkaRat/res/GeoIP/Flags/IR.ico

PekkaRat/res/GeoIP/Flags/IS.ico

PekkaRat/res/GeoIP/Flags/IT.ico

PekkaRat/res/GeoIP/Flags/JE.ico

PekkaRat/res/GeoIP/Flags/JM.ico

PekkaRat/res/GeoIP/Flags/JO.ico

PekkaRat/res/GeoIP/Flags/JP.ico

PekkaRat/res/GeoIP/Flags/KE.ico

PekkaRat/res/GeoIP/Flags/KG.ico

PekkaRat/res/GeoIP/Flags/KH.ico

PekkaRat/res/GeoIP/Flags/KI.ico

PekkaRat/res/GeoIP/Flags/KM.ico

PekkaRat/res/GeoIP/Flags/KN.ico

PekkaRat/res/GeoIP/Flags/KP.ico

PekkaRat/res/GeoIP/Flags/KR.ico

PekkaRat/res/GeoIP/Flags/KW.ico

PekkaRat/res/GeoIP/Flags/KY.ico

PekkaRat/res/GeoIP/Flags/KZ.ico

PekkaRat/res/GeoIP/Flags/LA.ico

PekkaRat/res/GeoIP/Flags/LB.ico

PekkaRat/res/GeoIP/Flags/LC.ico

PekkaRat/res/GeoIP/Flags/LI.ico

PekkaRat/res/GeoIP/Flags/LK.ico

PekkaRat/res/GeoIP/Flags/LR.ico

PekkaRat/res/GeoIP/Flags/LS.ico

PekkaRat/res/GeoIP/Flags/LT.ico

PekkaRat/res/GeoIP/Flags/LU.ico

PekkaRat/res/GeoIP/Flags/LV.ico

PekkaRat/res/GeoIP/Flags/LY.ico

PekkaRat/res/GeoIP/Flags/MA.ico

PekkaRat/res/GeoIP/Flags/MC.ico

PekkaRat/res/GeoIP/Flags/MD.ico

PekkaRat/res/GeoIP/Flags/ME.ico

PekkaRat/res/GeoIP/Flags/MF.ico

PekkaRat/res/GeoIP/Flags/MG.ico

PekkaRat/res/GeoIP/Flags/MH.ico

PekkaRat/res/GeoIP/Flags/MK.ico

PekkaRat/res/GeoIP/Flags/ML.ico

PekkaRat/res/GeoIP/Flags/MM.ico

PekkaRat/res/GeoIP/Flags/MN.ico

PekkaRat/res/GeoIP/Flags/MO.ico

PekkaRat/res/GeoIP/Flags/MP.ico

PekkaRat/res/GeoIP/Flags/MQ.ico

PekkaRat/res/GeoIP/Flags/MR.ico

PekkaRat/res/GeoIP/Flags/MS.ico

PekkaRat/res/GeoIP/Flags/MT.ico

PekkaRat/res/GeoIP/Flags/MU.ico

PekkaRat/res/GeoIP/Flags/MV.ico

PekkaRat/res/GeoIP/Flags/MW.ico

PekkaRat/res/GeoIP/Flags/MX.ico

PekkaRat/res/GeoIP/Flags/MY.ico

PekkaRat/res/GeoIP/Flags/MZ.ico

PekkaRat/res/GeoIP/Flags/NA.ico

PekkaRat/res/GeoIP/Flags/NC.ico

PekkaRat/res/GeoIP/Flags/NE.ico

PekkaRat/res/GeoIP/Flags/NF.ico

PekkaRat/res/GeoIP/Flags/NG.ico

PekkaRat/res/GeoIP/Flags/NI.ico

PekkaRat/res/GeoIP/Flags/NL.ico

PekkaRat/res/GeoIP/Flags/NO.ico

PekkaRat/res/GeoIP/Flags/NP.ico

PekkaRat/res/GeoIP/Flags/NR.ico

PekkaRat/res/GeoIP/Flags/NU.ico

PekkaRat/res/GeoIP/Flags/NZ.ico

PekkaRat/res/GeoIP/Flags/OM.ico

PekkaRat/res/GeoIP/Flags/PA.ico

PekkaRat/res/GeoIP/Flags/PE.ico

PekkaRat/res/GeoIP/Flags/PF.ico

PekkaRat/res/GeoIP/Flags/PG.ico

PekkaRat/res/GeoIP/Flags/PH.ico

PekkaRat/res/GeoIP/Flags/PK.ico

PekkaRat/res/GeoIP/Flags/PL.ico

PekkaRat/res/GeoIP/Flags/PN.ico

PekkaRat/res/GeoIP/Flags/PR.ico

PekkaRat/res/GeoIP/Flags/PS.ico

PekkaRat/res/GeoIP/Flags/PT.ico

PekkaRat/res/GeoIP/Flags/PW.ico

PekkaRat/res/GeoIP/Flags/PY.ico

PekkaRat/res/GeoIP/Flags/QA.ico

PekkaRat/res/GeoIP/Flags/RO.ico

PekkaRat/res/GeoIP/Flags/RS.ico

PekkaRat/res/GeoIP/Flags/RU.ico

PekkaRat/res/GeoIP/Flags/RW.ico

PekkaRat/res/GeoIP/Flags/SA.ico

PekkaRat/res/GeoIP/Flags/SB.ico

PekkaRat/res/GeoIP/Flags/SC.ico

PekkaRat/res/GeoIP/Flags/SD.ico

PekkaRat/res/GeoIP/Flags/SE.ico

PekkaRat/res/GeoIP/Flags/SG.ico

PekkaRat/res/GeoIP/Flags/SH.ico

PekkaRat/res/GeoIP/Flags/SI.ico

PekkaRat/res/GeoIP/Flags/SK.ico

PekkaRat/res/GeoIP/Flags/SL.ico

PekkaRat/res/GeoIP/Flags/SM.ico

PekkaRat/res/GeoIP/Flags/SN.ico

PekkaRat/res/GeoIP/Flags/SO.ico

PekkaRat/res/GeoIP/Flags/SR.ico

PekkaRat/res/GeoIP/Flags/SS.ico

PekkaRat/res/GeoIP/Flags/ST.ico

PekkaRat/res/GeoIP/Flags/SV.ico

PekkaRat/res/GeoIP/Flags/SY.ico

PekkaRat/res/GeoIP/Flags/SZ.ico

PekkaRat/res/GeoIP/Flags/TC.ico

PekkaRat/res/GeoIP/Flags/TD.ico

PekkaRat/res/GeoIP/Flags/TF.ico

PekkaRat/res/GeoIP/Flags/TG.ico

PekkaRat/res/GeoIP/Flags/TH.ico

PekkaRat/res/GeoIP/Flags/TJ.ico

PekkaRat/res/GeoIP/Flags/TK.ico

PekkaRat/res/GeoIP/Flags/TL.ico

PekkaRat/res/GeoIP/Flags/TM.ico

PekkaRat/res/GeoIP/Flags/TN.ico

PekkaRat/res/GeoIP/Flags/TO.ico

PekkaRat/res/GeoIP/Flags/TR.ico

PekkaRat/res/GeoIP/Flags/TT.ico

PekkaRat/res/GeoIP/Flags/TV.ico

PekkaRat/res/GeoIP/Flags/TW.ico

PekkaRat/res/GeoIP/Flags/TZ.ico

PekkaRat/res/GeoIP/Flags/UA.ico

PekkaRat/res/GeoIP/Flags/UG.ico

PekkaRat/res/GeoIP/Flags/US.ico

PekkaRat/res/GeoIP/Flags/UY.ico

PekkaRat/res/GeoIP/Flags/UZ.ico

PekkaRat/res/GeoIP/Flags/VA.ico

PekkaRat/res/GeoIP/Flags/VC.ico

PekkaRat/res/GeoIP/Flags/VE.ico

PekkaRat/res/GeoIP/Flags/VG.ico

PekkaRat/res/GeoIP/Flags/VI.ico

PekkaRat/res/GeoIP/Flags/VN.ico

PekkaRat/res/GeoIP/Flags/VU.ico

PekkaRat/res/GeoIP/Flags/WF.ico

PekkaRat/res/GeoIP/Flags/WS.ico

PekkaRat/res/GeoIP/Flags/YE.ico

PekkaRat/res/GeoIP/Flags/YT.ico

PekkaRat/res/GeoIP/Flags/ZA.ico

PekkaRat/res/GeoIP/Flags/ZM.ico

PekkaRat/res/GeoIP/Flags/ZW.ico

PekkaRat/res/GeoIP/Flags/_abkhazia.ico

PekkaRat/res/GeoIP/Flags/_basque-country.ico

PekkaRat/res/GeoIP/Flags/_british-antarctic-territory.ico

PekkaRat/res/GeoIP/Flags/_commonwealth.ico

PekkaRat/res/GeoIP/Flags/_england.ico

PekkaRat/res/GeoIP/Flags/_gosquared.ico

PekkaRat/res/GeoIP/Flags/_kosovo.ico

PekkaRat/res/GeoIP/Flags/_mars.ico

PekkaRat/res/GeoIP/Flags/_nagorno-karabakh.ico

PekkaRat/res/GeoIP/Flags/_nato.ico

PekkaRat/res/GeoIP/Flags/_northern-cyprus.ico

PekkaRat/res/GeoIP/Flags/_olympics.ico

PekkaRat/res/GeoIP/Flags/_red-cross.ico

PekkaRat/res/GeoIP/Flags/_scotland.ico

PekkaRat/res/GeoIP/Flags/_somaliland.ico

PekkaRat/res/GeoIP/Flags/_south-ossetia.ico

PekkaRat/res/GeoIP/Flags/_united-nations.ico

PekkaRat/res/GeoIP/Flags/_wales.ico

PekkaRat/res/GeoIP/GeoIP.dat

PekkaRat/res/Icons/Apps/air_translate.png

.png

PekkaRat/res/Icons/Apps/alarm.png

.png

PekkaRat/res/Icons/Apps/always_on_display.png

.png

PekkaRat/res/Icons/Apps/artcanvas.png

.png

PekkaRat/res/Icons/Apps/backup_and_restore.png

.png

PekkaRat/res/Icons/Apps/billing.png

.png

PekkaRat/res/Icons/Apps/bixby.png

.png

PekkaRat/res/Icons/Apps/bixby_vision.png

.png

PekkaRat/res/Icons/Apps/bookmark.png

.png

PekkaRat/res/Icons/Apps/calculator.png

.png

PekkaRat/res/Icons/Apps/calendar.png

.png

PekkaRat/res/Icons/Apps/camera.png

.png

PekkaRat/res/Icons/Apps/capture.png

.png

PekkaRat/res/Icons/Apps/car_mode.png

.png

PekkaRat/res/Icons/Apps/clock.png

.png

PekkaRat/res/Icons/Apps/clock_bg.png

.png

PekkaRat/res/Icons/Apps/connect.png

.png

PekkaRat/res/Icons/Apps/contacts.png

.png

PekkaRat/res/Icons/Apps/device_maintenance.png

.png

PekkaRat/res/Icons/Apps/document.png

.png

PekkaRat/res/Icons/Apps/edge_screen.png

.png

PekkaRat/res/Icons/Apps/email.png

.png

PekkaRat/res/Icons/Apps/enhanced_features.png

.png

PekkaRat/res/Icons/Apps/flow.png

.png

PekkaRat/res/Icons/Apps/galaxy_apps.png

.png

PekkaRat/res/Icons/Apps/gallery.png

.png

PekkaRat/res/Icons/Apps/game_launcher.png

.png

PekkaRat/res/Icons/Apps/gear_360.png

.png

PekkaRat/res/Icons/Apps/gear_manager.png

.png

PekkaRat/res/Icons/Apps/health.png

.png

PekkaRat/res/Icons/Apps/home.png

.png

PekkaRat/res/Icons/Apps/ic_bg_container.png

.png

PekkaRat/res/Icons/Apps/ic_bg_container_mask.png

.png

PekkaRat/res/Icons/Apps/ic_launcher.png

.png

PekkaRat/res/Icons/Apps/image.png

.png

PekkaRat/res/Icons/Apps/internet.png

.png

PekkaRat/res/Icons/Apps/keyboard.png

.png

PekkaRat/res/Icons/Apps/knox.png

.png

PekkaRat/res/Icons/Apps/knox_2.png

.png

PekkaRat/res/Icons/Apps/launcher.png

.png

PekkaRat/res/Icons/Apps/led_icon_editor.png

.png

PekkaRat/res/Icons/Apps/link_sharing.png

.png

PekkaRat/res/Icons/Apps/live_drawing.png

.png

PekkaRat/res/Icons/Apps/lockscreen.png

.png

PekkaRat/res/Icons/Apps/members.png

.png

PekkaRat/res/Icons/Apps/memo.png

.png

PekkaRat/res/Icons/Apps/messaging.png

.png

PekkaRat/res/Icons/Apps/milk.png

.png

PekkaRat/res/Icons/Apps/music.png

.png

PekkaRat/res/Icons/Apps/my_files.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_amr.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_apk.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_contact.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_eml.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_etc.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_gallery.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_html.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_hwp.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_memo.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_music.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_pdf.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_ppt.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_raw.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_s_planner.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_scrapbook.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_sdoc.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_snb.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_spd.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_storyalbum.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_task.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_txt.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_video.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_vtext.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_word.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_xls.png

.png

PekkaRat/res/Icons/Apps/myfiles_list_zip.png

.png

PekkaRat/res/Icons/Apps/myfiles_thumb_folder_home.png

.png

PekkaRat/res/Icons/Apps/notes.png

.png

PekkaRat/res/Icons/Apps/optical_reader.png

.png

PekkaRat/res/Icons/Apps/pass.png

.png

PekkaRat/res/Icons/Apps/pay.png

.png

PekkaRat/res/Icons/Apps/penup.png

.png

PekkaRat/res/Icons/Apps/phone.png

.png

PekkaRat/res/Icons/Apps/phone_log.png

.png

PekkaRat/res/Icons/Apps/photo360_editor.png

.png

PekkaRat/res/Icons/Apps/photo_editor.png

.png

PekkaRat/res/Icons/Apps/protect.png

.png

PekkaRat/res/Icons/Apps/recorder_audio.png

.png

PekkaRat/res/Icons/Apps/reminder.png

.png

PekkaRat/res/Icons/Apps/s_health.png

.png

PekkaRat/res/Icons/Apps/s_protect.png

.png

PekkaRat/res/Icons/Apps/s_translator.png

.png

PekkaRat/res/Icons/Apps/samsung_pay.png

.png

PekkaRat/res/Icons/Apps/secure_folder.png

.png

PekkaRat/res/Icons/Apps/settings.png

.png

PekkaRat/res/Icons/Apps/smart_switch.png

.png

PekkaRat/res/Icons/Apps/smart_view.png

.png

PekkaRat/res/Icons/Apps/soundcamp.png

.png

PekkaRat/res/Icons/Apps/story_album.png

.png

PekkaRat/res/Icons/Apps/svoice.png

.png

PekkaRat/res/Icons/Apps/theme_store.png

.png

PekkaRat/res/Icons/Apps/translator.png

.png

PekkaRat/res/Icons/Apps/video_editor.png

.png

PekkaRat/res/Icons/Apps/video_library.png

.png

PekkaRat/res/Icons/FillEllipse/Account.png

.png

PekkaRat/res/Icons/FillEllipse/CLICKED.png

.png

PekkaRat/res/Icons/FillEllipse/FOCUSED.png

.png

PekkaRat/res/Icons/FillEllipse/Incoming.png

.png

PekkaRat/res/Icons/FillEllipse/LONG CLICKED.png

.png

PekkaRat/res/Icons/FillEllipse/Missed.png

.png

PekkaRat/res/Icons/FillEllipse/NA.png

.png

PekkaRat/res/Icons/FillEllipse/NOTIFICATION.png

.png

PekkaRat/res/Icons/FillEllipse/Outgoing.png

.png

PekkaRat/res/Icons/FillEllipse/System.png

.png

PekkaRat/res/Icons/FillEllipse/TEXT.png

.png

PekkaRat/res/Icons/FillEllipse/User.png

.png

PekkaRat/res/Icons/FillEllipse/WINDOW CHANGED.png

.png

PekkaRat/res/Icons/FillEllipse/null.png

.png

PekkaRat/res/Icons/Menu_Items/17/account.png

.png

PekkaRat/res/Icons/Menu_Items/17/add.png

.png

PekkaRat/res/Icons/Menu_Items/17/applications.png

.png

PekkaRat/res/Icons/Menu_Items/17/callphone.png

.png

PekkaRat/res/Icons/Menu_Items/17/calls.png

.png

PekkaRat/res/Icons/Menu_Items/17/camera.png

.png

PekkaRat/res/Icons/Menu_Items/17/clipboard.png

.png

PekkaRat/res/Icons/Menu_Items/17/contacts.png

.png

PekkaRat/res/Icons/Menu_Items/17/copy.png

.png

PekkaRat/res/Icons/Menu_Items/17/cut.png

.png

PekkaRat/res/Icons/Menu_Items/17/decode.png

.png

PekkaRat/res/Icons/Menu_Items/17/delete.png

.png

PekkaRat/res/Icons/Menu_Items/17/download.png

.png

PekkaRat/res/Icons/Menu_Items/17/downloads.png

.png

PekkaRat/res/Icons/Menu_Items/17/edit.png

.png

PekkaRat/res/Icons/Menu_Items/17/encrypt.png

.png

PekkaRat/res/Icons/Menu_Items/17/folder.png

.png

PekkaRat/res/Icons/Menu_Items/17/hidden.png

.png

PekkaRat/res/Icons/Menu_Items/17/info.png

.png

PekkaRat/res/Icons/Menu_Items/17/keylogger.png

.png

PekkaRat/res/Icons/Menu_Items/17/location.png

.png

PekkaRat/res/Icons/Menu_Items/17/microphone.png

.png

PekkaRat/res/Icons/Menu_Items/17/open.png

.png

PekkaRat/res/Icons/Menu_Items/17/paste.png

.png

PekkaRat/res/Icons/Menu_Items/17/paths.png

.png

PekkaRat/res/Icons/Menu_Items/17/playsound.png

.png

PekkaRat/res/Icons/Menu_Items/17/refresh.png

.png

PekkaRat/res/Icons/Menu_Items/17/rename.png

.png

PekkaRat/res/Icons/Menu_Items/17/server.png

.png

PekkaRat/res/Icons/Menu_Items/17/show.png

.png

PekkaRat/res/Icons/Menu_Items/17/sms.png

.png

PekkaRat/res/Icons/Menu_Items/17/terminal.png

.png

PekkaRat/res/Icons/Menu_Items/17/unzip.png

.png

PekkaRat/res/Icons/Menu_Items/17/upload.png

.png

PekkaRat/res/Icons/Menu_Items/17/viewfile.png

.png

PekkaRat/res/Icons/Menu_Items/17/wallpaper.png

.png

PekkaRat/res/Icons/Menu_Items/17/zip.png

.png

PekkaRat/res/Icons/apk.ico

PekkaRat/res/Icons/win/1.ico

PekkaRat/res/Icons/win/10.ico

PekkaRat/res/Icons/win/11.ico

PekkaRat/res/Icons/win/12.ico

PekkaRat/res/Icons/win/13.ico

PekkaRat/res/Icons/win/14.ico

PekkaRat/res/Icons/win/15.ico

PekkaRat/res/Icons/win/16.ico

PekkaRat/res/Icons/win/17.ico

PekkaRat/res/Icons/win/18.ico

PekkaRat/res/Icons/win/19.ico

PekkaRat/res/Icons/win/2.ico

PekkaRat/res/Icons/win/20.ico

PekkaRat/res/Icons/win/3.ico

PekkaRat/res/Icons/win/4.ico

PekkaRat/res/Icons/win/5.ico

PekkaRat/res/Icons/win/6.ico

PekkaRat/res/Icons/win/7.ico

PekkaRat/res/Icons/win/8.ico

PekkaRat/res/Icons/win/9.ico

PekkaRat/res/Lib/platformBinary.zip

.zip

PekkaRat/res/Plugins/Android/gen-1.pl

PekkaRat/res/Plugins/Android/gen-2.pl

PekkaRat/res/Plugins/Android/gen-3.pl

PekkaRat/res/Plugins/Android/gen-4.pl

.dex

PekkaRat/res/Plugins/Android/gen-5.pl

.dex

PekkaRat/res/Plugins/Android/gen-6.pl

PekkaRat/res/Plugins/Android/gen-7.pl

PekkaRat/res/Plugins/Android/gen-8.pl

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 433KB - Virtual size: 433KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 496KB - Virtual size: 495KB

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 512B - Virtual size: 12B

Headers

File Characteristics

Sections

CODE Size: 5KB - Virtual size: 4KB

DATA Size: 512B - Virtual size: 124B

BSS Size: - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 770B

.tls Size: - Virtual size: 4B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 512B - Virtual size: 456B

.rsrc Size: 18.1MB - Virtual size: 18.1MB

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cbCertificate

Extended Key Usages

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77Signer

Signature Validations

Verification

27/02/2023, 09:31 Valid: false

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94Signer

Signature Validations

Verification

05/11/2016, 04:50 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 41KB - Virtual size: 41KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 433KB - Virtual size: 433KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 496KB - Virtual size: 495KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

CODE
Size: 5KB - Virtual size: 4KB

DATA
Size: 512B - Virtual size: 124B

BSS
Size: - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 770B

.tls
Size: - Virtual size: 4B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 512B - Virtual size: 456B

.rsrc
Size: 18.1MB - Virtual size: 18.1MB

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77
Signer

27/02/2023, 09:31
Valid: false

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94
Signer

05/11/2016, 04:50
Valid: false

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 41KB - Virtual size: 41KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 12B