pholha080329[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

pholha080329.zip
Size

9.9MB
MD5

4f96b3c49cf7513fb0fc422474483b1d
SHA1

59c43fbb4f03f042a2b6aa881926cf2be10290cf
SHA256

935abbf3146ff12583c60d2e6de1330c2b6612a60048e636ce6dd4cb9cd47a97
SHA512

53f6ab70e02ce6bdc2f7e5d98bae4889e46eae8cace4cafdc5e8eb63b44ecd497021aeab704f7165ce9a8f749d723bde696f07f89cd6c3399078beb8ebc99790
SSDEEP

196608:2VL25RVpH80Mecpaj0SZ9VqieBwsPnt+sVtI7iuKPmamzkM5fX9PelYM05nxyM2E:BRVpHOeoajV1wwsPDVtepanQlGKhxyM9

Score

7^/10

pdf link upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Pholy/Pholha/pholha.exe	upx
static1/unpack001/Pholy/uteis/PhNeti.exe	upx
static1/unpack001/Pholy/uteis/PhNetw8.exe	upx

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

pdf link

resource	yara_rule
static1/unpack001/Pholy/Pholha/PhDicas/PhDica 030 - Limitao da Base de Calculo Contrib a Terceiros a 20 SM.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pholy/Pholha/pholha.exe
unpack001/Pholy/uteis/PhCalc.exe
unpack001/Pholy/uteis/PhNeti.exe
unpack001/Pholy/uteis/PhNetw8.exe
unpack001/Pholy/uteis/phnet.exe

Files

pholha080329.zip
.zip
Pholy/Pholha/Help/2WAY.BMP
Pholy/Pholha/Help/BtAbreArq.BMP
Pholy/Pholha/Help/BtCSV.BMP
Pholy/Pholha/Help/BtCalendario.BMP
Pholy/Pholha/Help/BtCancela.bmp
Pholy/Pholha/Help/BtCancelaEsp.bmp
Pholy/Pholha/Help/BtConfere.bmp
Pholy/Pholha/Help/BtConfirmaEsp.BMP
Pholy/Pholha/Help/BtConsulta.BMP
Pholy/Pholha/Help/BtDeleta.bmp
Pholy/Pholha/Help/BtDiretorio.BMP
Pholy/Pholha/Help/BtEdita.BMP
Pholy/Pholha/Help/BtEmail.BMP
Pholy/Pholha/Help/BtExclui.bmp
Pholy/Pholha/Help/BtExcluiEsp.bmp
Pholy/Pholha/Help/BtExporta.BMP
Pholy/Pholha/Help/BtFiltro.BMP
Pholy/Pholha/Help/BtHTML.BMP
Pholy/Pholha/Help/BtHelp.bmp
Pholy/Pholha/Help/BtImporta.BMP
Pholy/Pholha/Help/BtInclui.bmp
Pholy/Pholha/Help/BtInternet.bmp
Pholy/Pholha/Help/BtMeuRh.bmp
Pholy/Pholha/Help/BtMeuRh2.bmp
Pholy/Pholha/Help/BtNao.bmp
Pholy/Pholha/Help/BtOk1.BMP
Pholy/Pholha/Help/BtOk2.BMP
Pholy/Pholha/Help/BtOperacao.BMP
Pholy/Pholha/Help/BtPDF.BMP
Pholy/Pholha/Help/BtPesquisa.BMP
Pholy/Pholha/Help/BtProcuraArq.BMP
Pholy/Pholha/Help/BtProgExt.BMP
Pholy/Pholha/Help/BtRegistro.BMP
Pholy/Pholha/Help/BtRelatorio.BMP
Pholy/Pholha/Help/BtRetorno.bmp
Pholy/Pholha/Help/BtReverte.bmp
Pholy/Pholha/Help/BtSalvaArq.BMP
Pholy/Pholha/Help/BtSelecao.BMP
Pholy/Pholha/Help/BtSetaAnterior.BMP
Pholy/Pholha/Help/BtSetaAvancaProximo.bmp
Pholy/Pholha/Help/BtSetaAvancaTudo.BMP
Pholy/Pholha/Help/BtSetaDesce.BMP
Pholy/Pholha/Help/BtSetaProxima.BMP
Pholy/Pholha/Help/BtSetaSobe.BMP
Pholy/Pholha/Help/BtSetaVoltaProximo.bmp
Pholy/Pholha/Help/BtSetaVoltaTudo.BMP
Pholy/Pholha/Help/BtSim.BMP
Pholy/Pholha/Help/BtSom.bmp
Pholy/Pholha/Help/BtTodos.bmp
Pholy/Pholha/Help/BtVisualiza.bmp
Pholy/Pholha/Help/EScosial.bmp
Pholy/Pholha/Help/ESocial.bmp
Pholy/Pholha/Help/ESocial2.bmp
Pholy/Pholha/Help/Help.rar
.rar
2WAY.BMP
BtAbreArq.BMP
BtCalendario.BMP
BtCancela.bmp
BtCancelaEsp.bmp
BtConfere.bmp
BtConfirmaEsp.BMP
BtConsulta.BMP
BtDeleta.bmp
BtDiretorio.BMP
BtEdita.BMP
BtEmail.BMP
BtExclui.bmp
BtExcluiEsp.bmp
BtExporta.BMP
BtFiltro.BMP
BtHTML.BMP
BtHelp.bmp
BtImporta.BMP
BtInclui.bmp
BtInternet.bmp
BtMeuRh.bmp
BtMeuRh2.bmp
BtNao.bmp
BtOk1.BMP
BtOk2.BMP
BtOperacao.BMP
BtPDF.BMP
BtPesquisa.BMP
BtProcuraArq.BMP
BtProgExt.BMP
BtRegistro.BMP
BtRelatorio.BMP
BtRetorno.bmp
BtReverte.bmp
BtSalvaArq.BMP
BtSelecao.BMP
BtSetaAnterior.BMP
BtSetaAvancaProximo.bmp
BtSetaAvancaTudo.BMP
BtSetaDesce.BMP
BtSetaProxima.BMP
BtSetaSobe.BMP
BtSetaVoltaProximo.bmp
BtSetaVoltaTudo.BMP
BtSim.BMP
BtSom.bmp
BtTodos.bmp
BtVisualiza.bmp
EScosial.bmp
ESocial.bmp
ESocial2.bmp
Megafone.jpg
.jpg
Megafone2.jpg
.jpg
Megafone3.jpg
.jpg
MeuRH.bmp
Online.bmp
PHOLHA.HLP
Social.bmp
Temp.bmp
Users.bmp
VSocial.bmp
eSocialXX.bmp
usuarios.bmp
Pholy/Pholha/Help/Megafone.jpg
.jpg
Pholy/Pholha/Help/Megafone2.jpg
.jpg
Pholy/Pholha/Help/Megafone3.jpg
.jpg
Pholy/Pholha/Help/MeuRH.bmp
Pholy/Pholha/Help/Online.bmp
Pholy/Pholha/Help/PHOLHA.HLP
Pholy/Pholha/Help/Social.bmp
Pholy/Pholha/Help/Temp.bmp
Pholy/Pholha/Help/Users.bmp
Pholy/Pholha/Help/VSocial.bmp
Pholy/Pholha/Help/eSocialXX.bmp
Pholy/Pholha/Help/phuefdz.dcu
Pholy/Pholha/Help/phuefdz.dfm
Pholy/Pholha/Help/phuefdz.pas
Pholy/Pholha/Help/phuefdz.~dfm
Pholy/Pholha/Help/phuefdz.~pas
Pholy/Pholha/Help/usuarios.bmp
Pholy/Pholha/PhDicas/PhDica 030 - Limitao da Base de Calculo Contrib a Terceiros a 20 SM.pdf
.pdf
- http://www.gov.br/esocial/pt-br
Pholy/Pholha/PhSQL/AJUDA.SQL
Pholy/Pholha/PhSQL/Acerto1_080101.SQL
Pholy/Pholha/PhSQL/Acerto2_080101.SQL
Pholy/Pholha/PhSQL/D060525.SQL
Pholy/Pholha/PhSQL/D060621.SQL
Pholy/Pholha/PhSQL/D060630.SQL
Pholy/Pholha/PhSQL/D060705.SQL
Pholy/Pholha/PhSQL/D060725.SQL
Pholy/Pholha/PhSQL/D060771.SQL
Pholy/Pholha/PhSQL/D060777.SQL
Pholy/Pholha/PhSQL/D060791.SQL
Pholy/Pholha/PhSQL/D060805.SQL
Pholy/Pholha/PhSQL/D060825.SQL
Pholy/Pholha/PhSQL/D060827.SQL
Pholy/Pholha/PhSQL/D060835.SQL
Pholy/Pholha/PhSQL/D060853.SQL
Pholy/Pholha/PhSQL/D060855.SQL
Pholy/Pholha/PhSQL/D060867.SQL
Pholy/Pholha/PhSQL/D060881.SQL
Pholy/Pholha/PhSQL/D060883.SQL
Pholy/Pholha/PhSQL/D060885.SQL
Pholy/Pholha/PhSQL/D060887.SQL
Pholy/Pholha/PhSQL/D060889.SQL
Pholy/Pholha/PhSQL/D060891.SQL
Pholy/Pholha/PhSQL/D060895.SQL
Pholy/Pholha/PhSQL/D070301.SQL
Pholy/Pholha/PhSQL/D070307.SQL
Pholy/Pholha/PhSQL/D070311.SQL
Pholy/Pholha/PhSQL/D070323.SQL
Pholy/Pholha/PhSQL/D070325.SQL
Pholy/Pholha/PhSQL/D070435.SQL
Pholy/Pholha/PhSQL/D070443.SQL
Pholy/Pholha/PhSQL/D080101 Acerto.SQL
Pholy/Pholha/PhSQL/D080101 Salvo.SQL
Pholy/Pholha/PhSQL/D080101.SQL
Pholy/Pholha/PhSQL/D080101MAI2015.SQL
Pholy/Pholha/PhSQL/D080115.SQL
Pholy/Pholha/PhSQL/D080117.SQL
Pholy/Pholha/PhSQL/D080119.SQL
Pholy/Pholha/PhSQL/D080121.SQL
Pholy/Pholha/PhSQL/D080131.SQL
Pholy/Pholha/PhSQL/D080133.SQL
Pholy/Pholha/PhSQL/D080151.SQL
Pholy/Pholha/PhSQL/D080179.SQL
Pholy/Pholha/PhSQL/D080180.SQL
Pholy/Pholha/PhSQL/D080185.SQL
Pholy/Pholha/PhSQL/D0801XX.SQL
Pholy/Pholha/PhSQL/DPHTARQ.SQL
Pholy/Pholha/PhSQL/DPHTARQ_BKP.SQL
Pholy/Pholha/PhSQL/DPHTHOM.SQL
Pholy/Pholha/PhSQL/N010105.SQL
Pholy/Pholha/PhSQL/N010109.SQL
Pholy/Pholha/PhSQL/PholhaD.OLD
Pholy/Pholha/PhSQL/X060891.SQL
Pholy/Pholha/PhSQL/X060895.SQL
Pholy/Pholha/PhSQL/X060899.SQL
Pholy/Pholha/PhSQL/X080137.SQL
Pholy/Pholha/VersoesPHOLHA.txt
Pholy/Pholha/eSocial/Config/Erros no LayOut .txt
Pholy/Pholha/eSocial/Config/S-1000.csv
Pholy/Pholha/eSocial/Config/S-1005.csv
Pholy/Pholha/eSocial/Config/S-1010.csv
Pholy/Pholha/eSocial/Config/S-1020.csv
Pholy/Pholha/eSocial/Config/S-1030.csv
Pholy/Pholha/eSocial/Config/S-1035.csv
Pholy/Pholha/eSocial/Config/S-1040.csv
Pholy/Pholha/eSocial/Config/S-1050.csv
Pholy/Pholha/eSocial/Config/S-1060.csv
Pholy/Pholha/eSocial/Config/S-1070.csv
Pholy/Pholha/eSocial/Config/S-1080.csv
Pholy/Pholha/eSocial/Config/S-1200.csv
Pholy/Pholha/eSocial/Config/S-1202.csv
Pholy/Pholha/eSocial/Config/S-1207.csv
Pholy/Pholha/eSocial/Config/S-1210.csv
Pholy/Pholha/eSocial/Config/S-1250.csv
Pholy/Pholha/eSocial/Config/S-1260.csv
Pholy/Pholha/eSocial/Config/S-1270.csv
Pholy/Pholha/eSocial/Config/S-1280.csv
Pholy/Pholha/eSocial/Config/S-1295.csv
Pholy/Pholha/eSocial/Config/S-1298.csv
Pholy/Pholha/eSocial/Config/S-1299.csv
Pholy/Pholha/eSocial/Config/S-1300.csv
Pholy/Pholha/eSocial/Config/S-2190.csv
Pholy/Pholha/eSocial/Config/S-2200.csv
Pholy/Pholha/eSocial/Config/S-2205.csv
Pholy/Pholha/eSocial/Config/S-2206.csv
Pholy/Pholha/eSocial/Config/S-2210.csv
Pholy/Pholha/eSocial/Config/S-2220.csv
Pholy/Pholha/eSocial/Config/S-2221.csv
Pholy/Pholha/eSocial/Config/S-2230.csv
Pholy/Pholha/eSocial/Config/S-2240.csv
Pholy/Pholha/eSocial/Config/S-2241.csv
Pholy/Pholha/eSocial/Config/S-2245.csv
Pholy/Pholha/eSocial/Config/S-2250.csv
Pholy/Pholha/eSocial/Config/S-2260.csv
Pholy/Pholha/eSocial/Config/S-2298.csv
Pholy/Pholha/eSocial/Config/S-2299.csv
Pholy/Pholha/eSocial/Config/S-2300.csv
Pholy/Pholha/eSocial/Config/S-2306.csv
Pholy/Pholha/eSocial/Config/S-2399.csv
Pholy/Pholha/eSocial/Config/S-2400.csv
Pholy/Pholha/eSocial/Config/S-3000.csv
Pholy/Pholha/eSocial/Config/S-5001.csv
Pholy/Pholha/eSocial/Config/S-5002.csv
Pholy/Pholha/eSocial/Config/S-5003.csv
Pholy/Pholha/eSocial/Config/S-5011.csv
Pholy/Pholha/eSocial/Config/S-5012.csv
Pholy/Pholha/eSocial/Config/S-5013.csv
Pholy/Pholha/eSocial/Config/S-8299.csv
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/eventos.ini
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAdmPrelim.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAdmPrelim_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAdmissao.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAdmissao_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAfastTemp.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAfastTemp_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAltCadastral.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAltCadastral_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAltContratual.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAltContratual_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAqProd.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAqProd_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAvPrevio.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtAvPrevio_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtBasesFGTS.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtBasesTrab.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtBasesTrab_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtBenPrRP.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtBenPrRP_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtCAT.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtCAT_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtCS.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtCS_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtCdBenPrRP.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtCdBenPrRP_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtComProd.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtComProd_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtContrSindPatr.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtContrSindPatr_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtContratAvNP.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtContratAvNP_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtConvInterm.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtConvInterm_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtDeslig.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtDeslig_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtExclusao.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtExclusao_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtExpRisco.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtExpRisco_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtFGTS.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtFechaEvPer.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtFechaEvPer_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtInfoComplPer.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtInfoComplPer_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtInfoEmpregador.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtInfoEmpregador_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtInfoEmpregador_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtInfoEmpregador_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtInsApo.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtInsApo_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtIrrf.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtIrrfBenef.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtIrrfBenef_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtIrrf_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtMonit.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtMonit_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtPgtos.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtPgtos_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtReabreEvPer.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtReabreEvPer_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtReintegr.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtReintegr_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtRemun.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtRemun_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtRmnRPPS.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtRmnRPPS_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTSVAltContr.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTSVAltContr_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTSVInicio.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTSVInicio_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTSVTermino.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTSVTermino_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabAmbiente.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabAmbiente_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabAmbiente_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabAmbiente_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabCargo.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabCargo_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabCargo_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabCargo_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabCarreira.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabCarreira_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabCarreira_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabCarreira_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabEstab.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabEstab_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabEstab_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabEstab_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabFuncao.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabFuncao_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabFuncao_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabFuncao_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabHorTur.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabHorTur_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabHorTur_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabHorTur_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabLotacao.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabLotacao_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabLotacao_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabLotacao_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabOperPort.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabOperPort_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabOperPort_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabOperPort_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabProcesso.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabProcesso_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabProcesso_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabProcesso_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabRubrica.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabRubrica_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabRubrica_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTabRubrica_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTotConting.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTotConting_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtToxic.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtToxic_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTreiCap.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/evtTreiCap_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/2.5.00/xmldsig-core-schema.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/eventos.ini
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAdmPrelim.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAdmPrelim_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAdmissao.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAdmissao_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAfastTemp.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAfastTemp_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAltCadastral.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAltCadastral_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAltContratual.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtAltContratual_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtBaixa.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtBaixa_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtBasesFGTS.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtBasesFGTS_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtBasesTrab.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtBasesTrab_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtBenPrRP.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtBenPrRP_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCAT.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCAT_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCS.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCS_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenAlt.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenAlt_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenIn.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenIn_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenTerm.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenTerm_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenefAlt.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenefAlt_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenefIn.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCdBenefIn_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCessao.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtCessao_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtComProd.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtComProd_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtContratAvNP.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtContratAvNP_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtDeslig.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtDeslig_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtExclusao.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtExclusao_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtExpRisco.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtExpRisco_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtFGTS.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtFGTS_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtFechaEvPer.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtFechaEvPer_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtInfoComplPer.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtInfoComplPer_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtInfoEmpregador.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtInfoEmpregador_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtInfoEmpregador_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtInfoEmpregador_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtIrrfBenef.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtIrrfBenef_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtMonit.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtMonit_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtPgtos.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtPgtos_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtReabreEvPer.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtReabreEvPer_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtReativBen.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtReativBen_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtReintegr.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtReintegr_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtRemun.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtRemun_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtRmnRPPS.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtRmnRPPS_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTSVAltContr.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTSVAltContr_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTSVInicio.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTSVInicio_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTSVTermino.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTSVTermino_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabEstab.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabEstab_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabEstab_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabEstab_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabLotacao.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabLotacao_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabLotacao_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabLotacao_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabProcesso.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabProcesso_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabProcesso_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabProcesso_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabRubrica.xsd
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabRubrica_Mapping.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabRubrica_MappingAlteracao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/evtTabRubrica_MappingExclusao.txt
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/tipos.xsd
.xml
Pholy/Pholha/eSocial/LayOutAtual/Esquemas/S.01.00.00/xmldsig-core-schema.xsd
Pholy/Pholha/eSocial/LayOutAtual/Templates/2.5.00/assinarevento.xml
Pholy/Pholha/eSocial/LayOutAtual/Templates/2.5.00/consultaprotocolo.soap
Pholy/Pholha/eSocial/LayOutAtual/Templates/2.5.00/consultaprotocolo.xml
Pholy/Pholha/eSocial/LayOutAtual/Templates/2.5.00/enviarevento.soap
Pholy/Pholha/eSocial/LayOutAtual/Templates/2.5.00/enviarevento.xml
Pholy/Pholha/eSocial/LayOutAtual/Templates/S.01.00.00/assinarevento.xml
Pholy/Pholha/eSocial/LayOutAtual/Templates/S.01.00.00/consultaprotocolo.soap
Pholy/Pholha/eSocial/LayOutAtual/Templates/S.01.00.00/consultaprotocolo.xml
Pholy/Pholha/eSocial/LayOutAtual/Templates/S.01.00.00/enviarevento.soap
Pholy/Pholha/eSocial/LayOutAtual/Templates/S.01.00.00/enviarevento.xml
Pholy/Pholha/eSocial/LayOutAtual/Templates/elementospermitidos.bin
Pholy/Pholha/pholha.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 25.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Pholy/Pholha/pholhae.rar
.rar
pholhae.fdb
Pholy/Pholha/pholhae64.rar
.rar
pholhae64.fdb
Pholy/Pholha/pholhap.fdb
Pholy/Pholha/pholhap64.fdb
Pholy/uteis/PhCalc.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 395KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Pholy/uteis/PhCalc.ini
Pholy/uteis/PhNeti.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 412KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 232KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Pholy/uteis/PhNetw8.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 792KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 571KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Pholy/uteis/phnet.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 573KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 25.1MB

UPX1 Size: 5.0MB - Virtual size: 5.0MB

.rsrc Size: 51KB - Virtual size: 52KB

Headers

File Characteristics

Sections

CODE Size: 395KB - Virtual size: 394KB

DATA Size: 4KB - Virtual size: 4KB

BSS Size: - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 28KB - Virtual size: 28KB

.rsrc Size: 44KB - Virtual size: 44KB

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 412KB

UPX1 Size: 232KB - Virtual size: 236KB

.rsrc Size: 4KB - Virtual size: 8KB

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 2.4MB

UPX1 Size: 792KB - Virtual size: 796KB

.rsrc Size: 571KB - Virtual size: 572KB

Headers

File Characteristics

Sections

CODE Size: 573KB - Virtual size: 573KB

DATA Size: 14KB - Virtual size: 14KB

BSS Size: - Virtual size: 10KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 40KB - Virtual size: 40KB

.rsrc Size: 51KB - Virtual size: 51KB

UPX0
Size: - Virtual size: 25.1MB

UPX1
Size: 5.0MB - Virtual size: 5.0MB

.rsrc
Size: 51KB - Virtual size: 52KB

CODE
Size: 395KB - Virtual size: 394KB

DATA
Size: 4KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 44KB - Virtual size: 44KB

UPX0
Size: - Virtual size: 412KB

UPX1
Size: 232KB - Virtual size: 236KB

.rsrc
Size: 4KB - Virtual size: 8KB

UPX0
Size: - Virtual size: 2.4MB

UPX1
Size: 792KB - Virtual size: 796KB

.rsrc
Size: 571KB - Virtual size: 572KB

CODE
Size: 573KB - Virtual size: 573KB

DATA
Size: 14KB - Virtual size: 14KB

BSS
Size: - Virtual size: 10KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 51KB - Virtual size: 51KB