Woxy_3[.]0__ed[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Woxy_3.0__ed.rar
Size

11.7MB
MD5

0f2142e94c854265d7d668c6e71c0875
SHA1

8dbe64bcb96df89c3d965113cd88ea6150b17285
SHA256

c12283507f436804a7857856569b39cce5e8c270a12e98fce51a2f56bec2a6bf
SHA512

236df2e4e2f2d85261549288ba54e2e42fc5dc8452cce0c9c09a17e2873a9f3cad03b263d980dccc9796a317f3e58eb86727a5a4dd24f13080849a343783010f
SSDEEP

196608:9pLFYQxCygTOtOT+3Hxd97s9uIwVyvwMUQzlaHFLyvi65bcdwRuLJO0TEjeGPnOm:9pL+O0+XZY9uXVJ5QBaH6/5Y1A1GTSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Woxy 3.0 Cracked/BouncyCastle.Crypto.dll
unpack001/Woxy 3.0 Cracked/Colorful.Console.dll
unpack001/Woxy 3.0 Cracked/ConsoleTables.dll
unpack001/Woxy 3.0 Cracked/MailKit.dll
unpack001/Woxy 3.0 Cracked/MimeKit.dll
unpack001/Woxy 3.0 Cracked/Woxy 3.0 [Crack.sx].exe

Files

Woxy_3.0__ed.rar
.rar
Woxy 3.0 Cracked/Blacklist.txt
Woxy 3.0 Cracked/BouncyCastle.Crypto.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Woxy 3.0 Cracked/Colorful.Console.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Woxy 3.0 Cracked/Configs/1and1.com.ini
Woxy 3.0 Cracked/Configs/ATT.json
Woxy 3.0 Cracked/Configs/AdventureQuest.json
Woxy 3.0 Cracked/Configs/Aeroplan.json
Woxy 3.0 Cracked/Configs/Amazon.co.uk.ini
Woxy 3.0 Cracked/Configs/Amazon.com.ini
Woxy 3.0 Cracked/Configs/Amazon.de.ini
Woxy 3.0 Cracked/Configs/Amazon.ini
Woxy 3.0 Cracked/Configs/Amazon.it.ini
Woxy 3.0 Cracked/Configs/AmazonCA.json
Woxy 3.0 Cracked/Configs/AmazonIT.json
Woxy 3.0 Cracked/Configs/AmazonUSGC.ini
Woxy 3.0 Cracked/Configs/AmericanEagle.json
Woxy 3.0 Cracked/Configs/Amstak.ini
Woxy 3.0 Cracked/Configs/Amstak.json
Woxy 3.0 Cracked/Configs/Apple.ini
Woxy 3.0 Cracked/Configs/Artix.ini
Woxy 3.0 Cracked/Configs/Avangate.ini
Woxy 3.0 Cracked/Configs/BOOKING.com.ini.ini
Woxy 3.0 Cracked/Configs/Bank Of America.ini
Woxy 3.0 Cracked/Configs/Basssrewards.json
Woxy 3.0 Cracked/Configs/Bestbuy.ini
Woxy 3.0 Cracked/Configs/BitcoinTalk.json
Woxy 3.0 Cracked/Configs/Bitstamp.ini
Woxy 3.0 Cracked/Configs/Blazin Rewards.ini
Woxy 3.0 Cracked/Configs/Blizzard.ini
Woxy 3.0 Cracked/Configs/Blockchain.ini
Woxy 3.0 Cracked/Configs/Brazzers.ini
Woxy 3.0 Cracked/Configs/Cashback.json
Woxy 3.0 Cracked/Configs/CharmsRewards.json
Woxy 3.0 Cracked/Configs/Childrens Place.ini
Woxy 3.0 Cracked/Configs/Childrensplace.json
Woxy 3.0 Cracked/Configs/Coinbase.ini
Woxy 3.0 Cracked/Configs/Cryptomate.ini
Woxy 3.0 Cracked/Configs/Currys.ini
Woxy 3.0 Cracked/Configs/Delta Skymiles.ini
Woxy 3.0 Cracked/Configs/Discord.ini
Woxy 3.0 Cracked/Configs/DominosUS.json
Woxy 3.0 Cracked/Configs/DunkinDonuts.ini
Woxy 3.0 Cracked/Configs/Ebay.com.ini
Woxy 3.0 Cracked/Configs/Ebay.json
Woxy 3.0 Cracked/Configs/EpicGames.ini
Woxy 3.0 Cracked/Configs/EpicGames.json
Woxy 3.0 Cracked/Configs/EscapeFromTarkov.com.ini
Woxy 3.0 Cracked/Configs/ExpediaRewards.ini
Woxy 3.0 Cracked/Configs/FitBit.ini
Woxy 3.0 Cracked/Configs/Fortnite.ini
Woxy 3.0 Cracked/Configs/G2A.ini
Woxy 3.0 Cracked/Configs/GNC Rewards.ini
Woxy 3.0 Cracked/Configs/GameTopUp.ini
Woxy 3.0 Cracked/Configs/Gamestop.ini
Woxy 3.0 Cracked/Configs/Gamestop.json
Woxy 3.0 Cracked/Configs/GeforceKey.json
Woxy 3.0 Cracked/Configs/GermanCard.json
Woxy 3.0 Cracked/Configs/Gnc Rewards.json
Woxy 3.0 Cracked/Configs/Godaddy.ini
Woxy 3.0 Cracked/Configs/GooglePlay.ini
Woxy 3.0 Cracked/Configs/HH Woxy.ini
Woxy 3.0 Cracked/Configs/HRKGame.ini
Woxy 3.0 Cracked/Configs/Hitleap.json
Woxy 3.0 Cracked/Configs/Homedepot.json
Woxy 3.0 Cracked/Configs/IHGRewards.ini
Woxy 3.0 Cracked/Configs/IHGRewards.json
Woxy 3.0 Cracked/Configs/IQOptions.ini
Woxy 3.0 Cracked/Configs/Interac.json
Woxy 3.0 Cracked/Configs/Kinguin.ini
Woxy 3.0 Cracked/Configs/Kohl.ini
Woxy 3.0 Cracked/Configs/Localbitcoins.ini
Woxy 3.0 Cracked/Configs/Loco Rewards.ini
Woxy 3.0 Cracked/Configs/Macy's rewards.ini
Woxy 3.0 Cracked/Configs/Macy's.ini
Woxy 3.0 Cracked/Configs/Macyx's rewards.ini
Woxy 3.0 Cracked/Configs/Macyx's.ini
Woxy 3.0 Cracked/Configs/Mariott.json
Woxy 3.0 Cracked/Configs/McDonaldsPointsFR.json
Woxy 3.0 Cracked/Configs/McdonaldsFR.json
Woxy 3.0 Cracked/Configs/Microsoft Rewards.ini
Woxy 3.0 Cracked/Configs/Microsoft.ini
Woxy 3.0 Cracked/Configs/MineCraft.ini
Woxy 3.0 Cracked/Configs/MyPoints.ini
Woxy 3.0 Cracked/Configs/Netflix.ini
Woxy 3.0 Cracked/Configs/Nordstrom.ini
Woxy 3.0 Cracked/Configs/OPSkins.ini
Woxy 3.0 Cracked/Configs/OVH.ini
Woxy 3.0 Cracked/Configs/OVH.json
Woxy 3.0 Cracked/Configs/OfficeDepot.ini
Woxy 3.0 Cracked/Configs/Origin.ini
Woxy 3.0 Cracked/Configs/PAYBACK.json
Woxy 3.0 Cracked/Configs/PSN.ini
Woxy 3.0 Cracked/Configs/PSNWallet.json
Woxy 3.0 Cracked/Configs/Paxful.ini
Woxy 3.0 Cracked/Configs/PayPal.com.ini
Woxy 3.0 Cracked/Configs/Paypal.ini
Woxy 3.0 Cracked/Configs/Paypal.json
Woxy 3.0 Cracked/Configs/PetroPoints.json
Woxy 3.0 Cracked/Configs/PornHubPremium.com.ini
Woxy 3.0 Cracked/Configs/Poshmark.ini
Woxy 3.0 Cracked/Configs/Recyclebank.json
Woxy 3.0 Cracked/Configs/Roblox.ini
Woxy 3.0 Cracked/Configs/RodanFields.json
Woxy 3.0 Cracked/Configs/Runescape.ini
Woxy 3.0 Cracked/Configs/SamsClub.json
Woxy 3.0 Cracked/Configs/Samsung.com.ini
Woxy 3.0 Cracked/Configs/Schwan Rewards.ini
Woxy 3.0 Cracked/Configs/Schwan Rewards.json
Woxy 3.0 Cracked/Configs/Scorecards.ini
Woxy 3.0 Cracked/Configs/SearsCap.json
Woxy 3.0 Cracked/Configs/SellyBuyer.ini
Woxy 3.0 Cracked/Configs/SellySeller.ini
Woxy 3.0 Cracked/Configs/Sendgrid.json
Woxy 3.0 Cracked/Configs/Sephora.ini
Woxy 3.0 Cracked/Configs/Sephora.json
Woxy 3.0 Cracked/Configs/ShopUrWay.json
Woxy 3.0 Cracked/Configs/Skrill.ini
Woxy 3.0 Cracked/Configs/Skype.ini
Woxy 3.0 Cracked/Configs/SocialClub.ini
Woxy 3.0 Cracked/Configs/Spotify.ini
Woxy 3.0 Cracked/Configs/Sprint.json
Woxy 3.0 Cracked/Configs/Staples.ini
Woxy 3.0 Cracked/Configs/Starbucks.ini
Woxy 3.0 Cracked/Configs/Starbucks.json
Woxy 3.0 Cracked/Configs/Steam Purchases.ini
Woxy 3.0 Cracked/Configs/StreamateSub.json
Woxy 3.0 Cracked/Configs/Target Red.json
Woxy 3.0 Cracked/Configs/Target.ini
Woxy 3.0 Cracked/Configs/Teamviewer.json
Woxy 3.0 Cracked/Configs/Testing.ini
Woxy 3.0 Cracked/Configs/TwitchAffiliated.ini
Woxy 3.0 Cracked/Configs/TwitterUsername.json
Woxy 3.0 Cracked/Configs/Uber.json
Woxy 3.0 Cracked/Configs/Ulta.ini
Woxy 3.0 Cracked/Configs/Ulta.json
Woxy 3.0 Cracked/Configs/Venmo.ini
Woxy 3.0 Cracked/Configs/Very.ini
Woxy 3.0 Cracked/Configs/Walmart.ini
Woxy 3.0 Cracked/Configs/Wish.ini
Woxy 3.0 Cracked/Configs/Xsolla.ini
Woxy 3.0 Cracked/Configs/a2hosting.ini
Woxy 3.0 Cracked/Configs/aws.amazon.com.ini
Woxy 3.0 Cracked/Configs/chaturbate.json
Woxy 3.0 Cracked/Configs/chewy.com.ini
Woxy 3.0 Cracked/Configs/dominos.com.ini
Woxy 3.0 Cracked/Configs/doordash.com.ini
Woxy 3.0 Cracked/Configs/eBay.co.uk.ini
Woxy 3.0 Cracked/Configs/etsy.ini
Woxy 3.0 Cracked/Configs/exodus.json
Woxy 3.0 Cracked/Configs/facebook ads.ini
Woxy 3.0 Cracked/Configs/gilt.json
Woxy 3.0 Cracked/Configs/google ads.ini
Woxy 3.0 Cracked/Configs/google domains.ini
Woxy 3.0 Cracked/Configs/hi5.ini
Woxy 3.0 Cracked/Configs/hostgator.ini
Woxy 3.0 Cracked/Configs/instagram.com.ini
Woxy 3.0 Cracked/Configs/juul.com.ini
Woxy 3.0 Cracked/Configs/nordstromgc.json
Woxy 3.0 Cracked/Configs/ovh2.ini
Woxy 3.0 Cracked/Configs/payza.ini
Woxy 3.0 Cracked/Configs/sendgrid.ini
Woxy 3.0 Cracked/Configs/twitter.ini
Woxy 3.0 Cracked/Configs/uPlay.ini
Woxy 3.0 Cracked/Configs/verizon.json
Woxy 3.0 Cracked/Configs/vultr.com.ini
Woxy 3.0 Cracked/Configs/walgreens.ini
Woxy 3.0 Cracked/Configs/wellsfargo.ini
Woxy 3.0 Cracked/Configs/xvideos.com.ini
Woxy 3.0 Cracked/ConsoleTables.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Woxy 3.0 Cracked/Domains.txt
Woxy 3.0 Cracked/MailKit.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Woxy 3.0 Cracked/MimeKit.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 877KB - Virtual size: 877KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Woxy 3.0 Cracked/Newtonsoft.Json.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25/10/2018, 00:00

Not After

29/10/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc
Signer

Actual PE Digest

e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Woxy 3.0 Cracked/Woxy 3.0 [Crack.sx].exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

@-azJ$zP
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 86KB - Virtual size: 85KB

.rsrc Size: 1024B - Virtual size: 980B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 10KB - Virtual size: 9KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 684KB - Virtual size: 683KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 877KB - Virtual size: 877KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23Certificate

Extended Key Usages

Key Usages

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7eCertificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dcSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 649KB - Virtual size: 648KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 86KB - Virtual size: 85KB

.rsrc
Size: 1024B - Virtual size: 980B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 684KB - Virtual size: 683KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 877KB - Virtual size: 877KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc
Signer

.text
Size: 649KB - Virtual size: 648KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

@-azJ$zP
Size: 36KB - Virtual size: 36KB

.text
Size: 37KB - Virtual size: 37KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B