2018-Malware-Repository-main.zip
- SHA256 441a9a9122532db11528624304aed8df2c43a75312641ab101dc63f881374fe0
Behavioral task
behavioral1
Sample
2018-Malware-Repository-main/Auto spreader/USB Spreader/USB_Spreader.exe
Resource
win7-20231215-en
windows7-x64
5 signatures
150 seconds
General
- Target 2018-Malware-Repository-main.zip
- Size 58.7MB
- Sample240124-b7g7tsfcfr
- SHA256 441a9a9122532db11528624304aed8df2c43a75312641ab101dc63f881374fe0
- MD5 24ef77d15d0e814b20c528e33cad70a0
- SHA1 3d84e73121feeb201a812c808f36e637e284daf2
- SHA512 096777b959280cdf632584c80a5366a6ed5716a8b766169aa09b7b7d61d22543c6d5ea3d42ae3e20b074a37299c8fd6e35b1e4cb17464b3e96d37a65c53ab29e
- SSDEEP 1572864:gq9Xhq+ab2R0ZIxMbpz1H2jwhD2CfQkyIIgrgEC3GEU7y0:Thq3u0yxgpz1H2chZKIIMgEC3GEUL
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/2018-Malware-Repository-main/Auto spreader/USB Spreader/USB_Spreader.exe upx static1/unpack007/USB Spreader/USB_Spreader.exe upx static1/unpack001/2018-Malware-Repository-main/EbraSha Dos Attacker.exe upx static1/unpack001/2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/ddoser.exe upx static1/unpack001/2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/website ip grabber.exe upx static1/unpack001/2018-Malware-Repository-main/TeV DoS/TeVDos.exe upx - PDF contains JavaScript
Detects presence of JavaScript in PDF files.
- HTTP links in PDF interactive object 4 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/2018-Malware-Repository-main/Auto spreader/QuikNEZ/spreading guide.pdf pdf_with_link_action static1/unpack001/2018-Malware-Repository-main/Auto spreader/Torrentator/Torrent Cash.pdf pdf_with_link_action static1/unpack007/QuikNEZ/spreading guide.pdf pdf_with_link_action static1/unpack007/Torrentator/Torrent Cash.pdf pdf_with_link_action - Unsigned PE 61 IoCs
Checks for missing Authenticode signature.
resource unpack001/2018-Malware-Repository-main/360Booter+GBooter XBL.exe unpack001/2018-Malware-Repository-main/Ad Clicker Bot - Private - Free-Hack VIP Tool.exe unpack001/2018-Malware-Repository-main/Auto spreader/Apex9.1/Apex.exe unpack001/2018-Malware-Repository-main/Auto spreader/QuikNEZ/QuikNEZUpdater.exe unpack001/2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/QuikNEZUpdater.exe unpack001/2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DeathByCaptcha.dll unpack001/2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib.dll unpack001/2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib32.dll unpack001/2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib64.dll unpack001/2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-nopitnoob.exe unpack001/2018-Malware-Repository-main/Auto spreader/Torrentator/Application/YahooAccountCreator.exe unpack001/2018-Malware-Repository-main/Auto spreader/Torrentator/Application/update.exe unpack001/2018-Malware-Repository-main/Auto spreader/USB Spreader/USB_Spreader.exe unpack007/Apex9.1/Apex.exe unpack007/QuikNEZ/QuikNEZUpdater.exe unpack007/QuikNEZ/quiknez_torrents_config/QuikNEZUpdater.exe unpack007/Torrentator/Application/DeathByCaptcha.dll unpack007/Torrentator/Application/DecaptcherLib.dll unpack007/Torrentator/Application/DecaptcherLib32.dll unpack007/Torrentator/Application/DecaptcherLib64.dll unpack007/Torrentator/Application/MTU-nopitnoob.exe unpack007/Torrentator/Application/YahooAccountCreator.exe unpack007/Torrentator/Application/update.exe unpack007/USB Spreader/USB_Spreader.exe unpack001/2018-Malware-Repository-main/BFF DoS (Ping) v1.0.exe unpack001/2018-Malware-Repository-main/BuffMods DDos V2.exe unpack001/2018-Malware-Repository-main/BuffMods DDos.exe unpack001/2018-Malware-Repository-main/DDOS/DDoS.exe unpack001/2018-Malware-Repository-main/EbraSha Dos Attacker.exe unpack001/2018-Malware-Repository-main/Exploit Attacker v1.1.exe unpack001/2018-Malware-Repository-main/Flooder.exe unpack001/2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/ddoser.exe unpack001/2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/website ip grabber.exe unpack001/2018-Malware-Repository-main/Infamous Stresser/Infamous Stresser 2.0.exe unpack001/2018-Malware-Repository-main/Kraken.exe unpack001/2018-Malware-Repository-main/MaddStress/MaddStress.exe unpack001/2018-Malware-Repository-main/NNEmailSpammer[Public].exe unpack001/2018-Malware-Repository-main/Shockwave Booter v2.0.exe unpack001/2018-Malware-Repository-main/Slayer DDos 2.0/AxInterop.MSWinsockLib.dll unpack001/2018-Malware-Repository-main/Slayer DDos 2.0/Interop.MSWinsockLib.dll unpack001/2018-Malware-Repository-main/Slayer DDos 2.0/Slayers DDoS V2.exe unpack001/2018-Malware-Repository-main/TeV DoS/TeVDos.exe unpack001/2018-Malware-Repository-main/Tsunami.exe unpack001/2018-Malware-Repository-main/UDP Flooder By FKN.exe unpack001/2018-Malware-Repository-main/Virus Maker.exe unpack001/2018-Malware-Repository-main/Windowskjdfhy unpack001/2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/D-Chatterbox Client/D-Chatterbox Client 1.0.exe unpack001/2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/Remote Desktop Client/RemoteDesktopClient.exe unpack001/2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/ddvniek's Hacker Toolbox 1.2.exe unpack001/2018-Malware-Repository-main/jays booter/DevComponents.DotNetBar2.dll unpack001/2018-Malware-Repository-main/jays booter/Jays Booter.exe unpack001/2018-Malware-Repository-main/trzCE08.tmp unpack001/2018-Malware-Repository-main/works/Anonymous DoSer.exe unpack001/2018-Malware-Repository-main/works/Unknown DoSer release.exe unpack001/2018-Malware-Repository-main/worms/Aurora Worm v1-Cracked by RoN1N.exe unpack001/2018-Malware-Repository-main/worms/FYI Worm v1.0 Cracked.exe unpack001/2018-Malware-Repository-main/worms/Uranium Worm.exe unpack001/2018-Malware-Repository-main/worms/Worm.exe unpack001/2018-Malware-Repository-main/worms/attworm/ATTWorm Cracked.exe unpack001/2018-Malware-Repository-main/worms/attworm/cracker.exe unpack001/2018-Malware-Repository-main/worms/d4ta.exe
File Explorer
-
2018-Malware-Repository-main.zip.zip 58.7MB
-
2018-Malware-Repository-main/360Booter+GBooter XBL.exe.exe 220KB
-
2018-Malware-Repository-main/Ad Clicker Bot - Private - Free-Hack VIP Tool.exe.exe 32KB
-
2018-Malware-Repository-main/Auto spreader/Apex9.1/Apex.exe.exe 424KB
-
2018-Malware-Repository-main/Auto spreader/Apex9.1/ApexExtraConfigs.txt13KB
-
2018-Malware-Repository-main/Auto spreader/Apex9.1/config.ini9KB
-
2018-Malware-Repository-main/Auto spreader/QuikNEZ/QuikNEZUpdater.exe.exe 80KB
-
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/QuikNEZUpdater.exe.exe 80KB
-
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/cat.txt2B
-
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/lastprofile.txt1B
-
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/lastupdate.txt17B
-
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/updated.txt2B
-
2018-Malware-Repository-main/Auto spreader/QuikNEZ/readme.txt594B
-
2018-Malware-Repository-main/Auto spreader/QuikNEZ/spreading guide.pdf.pdf 797KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/Account creator - read me.txt260B
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DeathByCaptcha.dll.dll 21KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib.dll.dll 56KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib32.dll.dll 56KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib64.dll.dll 57KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-cleaned.id01.5MB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-cleaned.id1648KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-cleaned.nam16KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-cleaned.til72B
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-nopitnoob.exe.exe 1.7MB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/YahooAccountCreator.exe.exe 47KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/update.exe.exe 24KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/READ ME.txt537B
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Torrent Cash Interview.pdf.pdf 78KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Torrent Cash.pdf.pdf 499KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Trackers 2011.txt17KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Usage Guide.pdf.pdf 530KB
-
2018-Malware-Repository-main/Auto spreader/Torrentator/Videos/Videos.url.url 122B
-
2018-Malware-Repository-main/Auto spreader/USB Spreader/USB_Spreader.exe.exe 193KB
-
2018-Malware-Repository-main/Auto spreader/archive.zip.zip 3.1MB
-
Apex9.1/Apex.exe.exe 424KB
-
Apex9.1/ApexExtraConfigs.txt13KB
-
Apex9.1/config.ini9KB
-
QuikNEZ/QuikNEZUpdater.exe.exe 80KB
-
QuikNEZ/quiknez_torrents_config/QuikNEZUpdater.exe.exe 80KB
-
QuikNEZ/quiknez_torrents_config/cat.txt2B
-
QuikNEZ/quiknez_torrents_config/lastprofile.txt1B
-
QuikNEZ/quiknez_torrents_config/lastupdate.txt17B
-
QuikNEZ/quiknez_torrents_config/updated.txt2B
-
QuikNEZ/readme.txt594B
-
QuikNEZ/spreading guide.pdf.pdf 797KB
-
Torrentator/Application/Account creator - read me.txt260B
-
Torrentator/Application/DeathByCaptcha.dll.dll 21KB
-
Torrentator/Application/DecaptcherLib.dll.dll 56KB
-
Torrentator/Application/DecaptcherLib32.dll.dll 56KB
-
Torrentator/Application/DecaptcherLib64.dll.dll 57KB
-
Torrentator/Application/MTU-cleaned.id01.5MB
-
Torrentator/Application/MTU-cleaned.id1648KB
-
Torrentator/Application/MTU-cleaned.nam16KB
-
Torrentator/Application/MTU-cleaned.til72B
-
Torrentator/Application/MTU-nopitnoob.exe.exe 1.7MB
-
Torrentator/Application/YahooAccountCreator.exe.exe 47KB
-
Torrentator/Application/update.exe.exe 24KB
-
Torrentator/READ ME.txt537B
-
Torrentator/Torrent Cash Interview.pdf.pdf 78KB
-
Torrentator/Torrent Cash.pdf.pdf 499KB
-
Torrentator/Trackers 2011.txt17KB
-
Torrentator/Usage Guide.pdf.pdf 530KB
-
Torrentator/Videos/Videos.url.url 122B
-
USB Spreader/USB_Spreader.exe.exe 366KB
-
description.txt107B
-
2018-Malware-Repository-main/Auto spreader/description.txt107B
-
2018-Malware-Repository-main/BFF DoS (Ping) v1.0.exe.exe 34KB
-
2018-Malware-Repository-main/BuffMods DDos V2.exe.exe 26KB
-
2018-Malware-Repository-main/BuffMods DDos.exe.exe 26KB
-
2018-Malware-Repository-main/DDOS/DDoS.exe.exe 58KB
-
2018-Malware-Repository-main/DDOS/Password.txt15B
-
2018-Malware-Repository-main/DDOSER-APRIL-PATCH.zip.zip 49KB
-
2018-Malware-Repository-main/D_Ds_Hk_Tls_Pck_1.0.rar.rar 13.9MB
-
2018-Malware-Repository-main/Destroy DoS.zip.zip 11KB
-
2018-Malware-Repository-main/DevModding DDos v3.zip.zip 24KB
-
2018-Malware-Repository-main/EbraSha Dos Attacker.exe.exe 350KB
-
2018-Malware-Repository-main/EbraSha-Dos-Attacker.bat103B
-
2018-Malware-Repository-main/Exploit Attacker v1.1.exe.exe 482KB
-
2018-Malware-Repository-main/Flooder.exe.exe 176KB
-
2018-Malware-Repository-main/Hoic.rar.rar 1.7MB
-
2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/INSTRUCTIONS READ ME!.txt3KB
-
2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/ddoser.exe.exe 26KB
-
2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/website ip grabber.exe.exe 225KB
-
2018-Malware-Repository-main/Icons/3xhumed-Mega-Games-Pack-27-GTA-4-new-5.ico190KB
-
2018-Malware-Repository-main/Icons/App.ico1KB
-
2018-Malware-Repository-main/Icons/BACKUP_RESTORE.ico12KB
-
2018-Malware-Repository-main/Icons/Cursors/Red Aero.cur3KB
-
2018-Malware-Repository-main/Icons/Cursors/RedGlow.cur4KB
-
2018-Malware-Repository-main/Icons/Cursors/aero_busy.ani75KB
-
2018-Malware-Repository-main/Icons/Cursors/alt.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/busy.ani122KB
-
2018-Malware-Repository-main/Icons/Cursors/cross.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/diag1.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/diag2.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/handwriting.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/help.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/horiz.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/link.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/loc.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/move.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/normal.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/person.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/readme.txt396B
-
2018-Malware-Repository-main/Icons/Cursors/text.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/unavailable.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/vert.cur9KB
-
2018-Malware-Repository-main/Icons/Cursors/working.ani141KB
-
2018-Malware-Repository-main/Icons/Cursors/xenon.crs483B
-
2018-Malware-Repository-main/Icons/Hopstarter-Malware-Delete.ico196KB
-
2018-Malware-Repository-main/Icons/Icon downloader.txt38B
-
2018-Malware-Repository-main/Icons/LiveUpdate.ico8KB
-
2018-Malware-Repository-main/Icons/MC32.ICO766B
-
2018-Malware-Repository-main/Icons/PC_Protection.ico29KB
-
2018-Malware-Repository-main/Icons/PayPal.ico7KB
-
2018-Malware-Repository-main/Icons/ProgressError.ico1KB
-
2018-Malware-Repository-main/Icons/ProgressWarn.ico1KB
-
2018-Malware-Repository-main/Icons/Shortcut.ico162KB
-
2018-Malware-Repository-main/Icons/SuiteIcon.ico281KB
-
2018-Malware-Repository-main/Icons/VAN_Logo.ico28KB
-
2018-Malware-Repository-main/Icons/Ypf-Transformers-Folder-virus.ico180KB
-
2018-Malware-Repository-main/Icons/advixe-arp.ico99KB
-
2018-Malware-Repository-main/Icons/amplxe-arp.ico99KB
-
2018-Malware-Repository-main/Icons/apple_ipod.ico8KB
-
2018-Malware-Repository-main/Icons/asap-utilities.ico31KB
-
2018-Malware-Repository-main/Icons/bing.ico5KB
-
2018-Malware-Repository-main/Icons/cursor_121863.ico66KB
-
2018-Malware-Repository-main/Icons/dell_digitaljb.ico8KB
-
2018-Malware-Repository-main/Icons/favicon.ico99KB
-
2018-Malware-Repository-main/Icons/inspxe-arp.ico99KB
-
2018-Malware-Repository-main/Icons/iss.ico29KB
-
2018-Malware-Repository-main/Icons/lethal_virus_browser_website_webpage_icon_124645.ico66KB
-
2018-Malware-Repository-main/Icons/mylocation.ico12KB
-
2018-Malware-Repository-main/Icons/padlock_78356.ico66KB
-
2018-Malware-Repository-main/Icons/pdfforge.ico17KB
-
2018-Malware-Repository-main/Icons/sqltut.ico8KB
-
2018-Malware-Repository-main/Icons/virus_icon-icons.com_76805.ico66KB
-
2018-Malware-Repository-main/Icons/wmdm.ico2KB
-
2018-Malware-Repository-main/Infamous Stresser/Infamous Stresser 2.0.exe.exe 283KB
-
2018-Malware-Repository-main/Kraken.exe.exe 78KB
-
2018-Malware-Repository-main/MaddStress/Installation/Font/Firestorm Regular.ttf18KB
-
2018-Malware-Repository-main/MaddStress/MaddStress.exe.exe 1.8MB
-
2018-Malware-Repository-main/MaddStress/MaddStress.zip.zip 1.7MB
-
2018-Malware-Repository-main/MaddStress/README.md1KB
-
2018-Malware-Repository-main/NNEmailSpammer[Public].exe.exe 643KB
-
2018-Malware-Repository-main/Pro Dos.zip.zip 1.2MB
-
2018-Malware-Repository-main/README.md231B
-
2018-Malware-Repository-main/Shockwave Booter v2.0.exe.exe 282KB
-
2018-Malware-Repository-main/Slayer DDos 2.0/AxInterop.MSWinsockLib.dll.dll 12KB
-
2018-Malware-Repository-main/Slayer DDos 2.0/Interop.MSWinsockLib.dll.dll 16KB
-
2018-Malware-Repository-main/Slayer DDos 2.0/Slayers DDoS V2.exe.exe 135KB
-
2018-Malware-Repository-main/Sprut + Pega Ip - DDoser #6/Multiple CmSSite FlooDDoS.txt1KB
-
2018-Malware-Repository-main/Sprut + Pega Ip - DDoser #6/Readme.chm.chm 27KB
-
2018-Malware-Repository-main/Sprut + Pega Ip - DDoser #6/sprut.ini57B
-
2018-Malware-Repository-main/Super virus.bat.bat .vbs 5KB
-
2018-Malware-Repository-main/TeV DoS/TeVDos.exe.exe 22KB
-
2018-Malware-Repository-main/TeV DoS/bin/src/TevAttack.class2KB
-
2018-Malware-Repository-main/TeV DoS/bin/src/TevDos.class1KB
-
2018-Malware-Repository-main/Tsunami.exe.exe 8.4MB
-
2018-Malware-Repository-main/UDP Flooder By FKN.exe.exe 450KB
-
2018-Malware-Repository-main/VIRUS001.TB-master (batch).zip.zip 2.8MB
-
2018-Malware-Repository-main/Virus Maker.exe.exe 3.7MB
-
2018-Malware-Repository-main/Windowskjdfhy.exe 287KB
-
2018-Malware-Repository-main/ddoser.zip.zip 7.2MB
-
2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/D-Chatterbox Client/D-Chatterbox Client 1.0.exe.exe 449KB
-
2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/Remote Desktop Client/Client.ini68B
-
2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/Remote Desktop Client/RemoteDesktopClient.exe.exe 593KB
-
2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/ddvniek's Hacker Toolbox 1.2.exe.exe 4.3MB
-
2018-Malware-Repository-main/jays booter/DevComponents.DotNetBar2.dll.dll 4.2MB
-
2018-Malware-Repository-main/jays booter/DevComponents.DotNetBar2.xml.xml 3.5MB
-
2018-Malware-Repository-main/jays booter/Jays Booter.exe.exe 1.1MB
-
2018-Malware-Repository-main/jays booter/Jays Booter.pdb75KB
-
2018-Malware-Repository-main/jays booter/Jays Booter.xml678B
-
2018-Malware-Repository-main/siinst.exe.exe 3.7MB
-
2018-Malware-Repository-main/spam.vbs.vbs 1KB
-
2018-Malware-Repository-main/stax.exe.exe 1.3MB
-
2018-Malware-Repository-main/stllssvr.exe.exe 76KB
-
2018-Malware-Repository-main/trzCE08.tmp.exe 35KB
-
2018-Malware-Repository-main/updater.exe.exe 360KB
-
2018-Malware-Repository-main/works/Anonymous DoSer.exe.exe 278KB
-
2018-Malware-Repository-main/works/Unknown DoSer release.exe.exe 35KB
-
2018-Malware-Repository-main/worms/Aurora Worm v1-Cracked by RoN1N.exe.exe 953KB
-
2018-Malware-Repository-main/worms/FYI Worm v1.0 Cracked.exe.exe 1.0MB
-
2018-Malware-Repository-main/worms/Uranium Worm.exe.exe 1.2MB
-
2018-Malware-Repository-main/worms/Worm.exe.exe 2.1MB
-
2018-Malware-Repository-main/worms/archive.zip.zip 4.3MB
-
2018-Malware-Repository-main/worms/attworm/ATTWorm Cracked.exe.exe 251KB
-
2018-Malware-Repository-main/worms/attworm/Screen snap.png.png 18KB
-
2018-Malware-Repository-main/worms/attworm/cracker.exe.exe 243KB
-
2018-Malware-Repository-main/worms/d4ta.exe.exe 21KB
-
2018-Malware-Repository-main/worms/description.txt45B
2018-Malware-Repository-main/360Booter+GBooter XBL.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ce2a4b0c5864251c49e57a3f2d34c54edca0b50ccd8ec25b71e97c3cf0b55f7c
- MD5 6e6c8817eab4da02456bda979fdf1479
- SHA1 2b06717955aed1ac349972b09fe5dcb09c4cc9f6
- SHA512 d5a61e46adb4cb98603b4205cd9a76a3ac426acbeb19551b8c67a791854a1fc110b8273f43b9af325b270ab3f4a9a5a5f57092d8a9787395b29442c0a583b3da
- SSDEEP 1536:DkMRE9PHkhJX/NYt39Ma3C9kMRE9PHkhJX/NYt:7uvkRbpuvkR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
123358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
112KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
106KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Ad Clicker Bot - Private - Free-Hack VIP Tool.exe
- IMPHASH 846ab24b358db4fb14ca8764053ff32d
- SHA256 ad87d8b208f5697ee5e012ef524745e51e9c9849454a07c3bf1b46f6e1ef8510
- MD5 25aefec5c96c8b00d5832a9a4b375027
- SHA1 c8e97fb686b7cec50236de61b5eefb9ba623d06b
- SHA512 46138f58324ad81ea09c2261ef0228590e6d8ee0b64ee3ddec82c1247a6680bdf08675461f10ecc8eea54742aeb8a75241b3bc0958cb0325f6b08d5741983936
- SSDEEP 384:F7HDePOjE213WUKuf0RACzRBpMDFUlVVFVsVPc2TRPZDB0SQlsgU:F7HyCp1mUIplVVFVsVxTRB98sg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5000
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLateIdCall
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaExitProc
__vbaOnError
ord595
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaAryConstruct2
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr
Name
.text
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=9, version=8041,
count=1, id=13, version=8169,
2018-Malware-Repository-main/Auto spreader/Apex9.1/Apex.exe
- IMPHASH 56f3e5d6e985936a6c20f33d5866b3e0
- SHA256 e6f12248cc37747dc6b55ef94545fe4983398f48f9a03b8813394254ecaaddb3
- MD5 3402af12de0454b4480371e4c486ae59
- SHA1 4a851c37b1f4cb5a779c36ea39e9c1d56b81f80c
- SHA512 da32d0aa252e34bb54246f772c592e0207b7fb86fb408315f4456451d4e2a22b419fd1b03a98591953f844e9db5127d72086873c1e8abeeab0f13fcbfb400b58
- SSDEEP 12288:FQjDpJh+sz7JQEWSwOP5iuucduey5QhEFQl:YpJ7wOP5TucgP5M
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10272
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaR8FixI4
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
ord588
__vbaLineInputStr
__vbaLateIdCall
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
ord516
__vbaVarIndexLoadRef
__vbaStrErrVarCopy
_adj_fprem1
ord518
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaStrCat
ord660
__vbaLsetFixstr
__vbaBoolErrVar
__vbaRecDestruct
__vbaSetSystemError
__vbaLenBstrB
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaVarIndexLoadRefLock
__vbaLateMemSt
__vbaBoolStr
__vbaVarForInit
__vbaForEachCollObj
__vbaExitProc
__vbaStrBool
__vbaObjSet
__vbaOnError
ord595
ord596
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord520
__vbaBoolVar
__vbaFPFix
ord708
__vbaRefVarAry
__vbaBoolVarNull
_CIsin
ord631
ord632
ord525
__vbaNextEachCollObj
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
ord528
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaPrintObj
DllFunctionCall
__vbaVarOr
__vbaCastObjVar
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaLateIdCallLd
__vbaStrR8
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
ord710
__vbaExceptHandler
ord711
__vbaStrToUnicode
ord712
__vbaPrintFile
ord713
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
__vbaI2Str
ord608
__vbaFPException
__vbaInStrVar
ord717
__vbaUbound
__vbaStrVarVal
__vbaVarCat
ord535
__vbaCheckType
__vbaLsetFixstrFree
__vbaI2Var
ord644
ord645
_CIlog
__vbaFileOpen
ord648
__vbaInStr
__vbaNew2
__vbaR8Str
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
ord681
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
__vbaLateMemCall
__vbaAryLock
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaFpI4
__vbaLateMemCallLd
ord617
_CIatan
__vbaStrMove
__vbaAryCopy
__vbaCastObj
__vbaStrVarCopy
__vbaR8IntI4
_allmul
__vbaLateIdSt
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaR8FixI2
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
__vbaRecAssign
Name
.text
Size
352KB
Virtual Size
350KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=15, id=9, version=8041,
count=1, id=13, version=8169,
2018-Malware-Repository-main/Auto spreader/Apex9.1/ApexExtraConfigs.txt
- SHA256 478632e36aac1b0c813e9762918bd88c35254812b16622fa4a6b82b90fe38679
- MD5 88f0e80e86f245677fea5fe3020d1517
- SHA1 c369d34eaba8a73cd69c08f6c5b3dd3b2d23d7a0
- SHA512 3170a94ec7d8259099818ded122eb76b4f4c5abf7081356ae667abc128499808e677e1e1b6e50c5d1ab999d0593abca2561f23eae9ae76d59599ca4e6b797b5d
- SSDEEP 192:k4JKYIdSWpaJQ/97r2CXP4iDL+oB75o3iHI1wLI1Qx4b3Ii3UGAWF:18YgeQ/97iCXD/R23iH4q4Qx4Df3NF
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Apex9.1/config.ini
- SHA256 12cf500f53a065df12037905b06008aea402f25d58e3940abf78c49978629b57
- MD5 d56cf44cd4736a18ee60f706f352d569
- SHA1 804f98f78013f23498fa007f811f21b216605255
- SHA512 d30d4594ad4b37e683cd8ce93eb152c1b8ed13ac9403d9388ae5d9a6f64b98ab9ac912f6abd79e6a7b91814571d4d45a212f24dc79c4b06457a15e6e0374cab4
- SSDEEP 192:nDL0vbQm0xidf1ZtOE9EV3AmH2PKPPiwkE0b+Ee4T2m5o8txzsqx0rxKlpm4VH9X:nDLTh+EV3AmHCGiwTMFMDCT
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/QuikNEZ/QuikNEZUpdater.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ccc20e99d60ddaffb7b60a027180e0c2071d43a4f01b10ac73f90b67b3cf7ae4
- MD5 fb02f87c1d1559ff3c9216f2c2939da8
- SHA1 7897f931863dcbbff159285e17a9d6a35af5bf0d
- SHA512 a1de88cc673cbe5d6ba8df9fe097b569b93786ded2f4f300f3ffc0ca9d8b97824e747b01580c91f8d24a35713eabf9905603efcd1482a1fac98834b44bbbfee5
- SSDEEP 1536:vJvaYZwPObE5WoxeLkBCy3e0pJvaYZwPObE5WoxeLk:vFZwPObE5Sy3ppFZwPObE5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/QuikNEZUpdater.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ccc20e99d60ddaffb7b60a027180e0c2071d43a4f01b10ac73f90b67b3cf7ae4
- MD5 fb02f87c1d1559ff3c9216f2c2939da8
- SHA1 7897f931863dcbbff159285e17a9d6a35af5bf0d
- SHA512 a1de88cc673cbe5d6ba8df9fe097b569b93786ded2f4f300f3ffc0ca9d8b97824e747b01580c91f8d24a35713eabf9905603efcd1482a1fac98834b44bbbfee5
- SSDEEP 1536:vJvaYZwPObE5WoxeLkBCy3e0pJvaYZwPObE5WoxeLk:vFZwPObE5Sy3ppFZwPObE5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/cat.txt
- SHA256 9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa
- MD5 897316929176464ebc9ad085f31e7284
- SHA1 09d2af8dd22201dd8d48e5dcfcaed281ff9422c7
- SHA512 a546d1300f49037a465ecec8bc1ebd07d57015a5ff1abfa1c94da9b30576933fb68e3898ff764d4de6e6741da822a7c93adc6e845806a266a63aa14c8bb09ebb
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/lastprofile.txt
- SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
- MD5 68b329da9893e34099c7d8ad5cb9c940
- SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
- SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/lastupdate.txt
- SHA256 ef78fb19e0994ba67395e8fa68dfcbb7549880de49d387cfb58196c74fc5fc53
- MD5 10df1071c3a2f16f7a9b6b07c3bfb92c
- SHA1 65214babe36b8d4c2a4661511cf480cb5e83f1a9
- SHA512 ea3bd2ec05f55c7855ce9d8aaa01ce67a989c319adab219692e82f171a236ef450d8743d2a92541c4781033046c79b937b3ddcd3e65e70f8aea1213202c95fbd
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/QuikNEZ/quiknez_torrents_config/updated.txt
- SHA256 9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa
- MD5 897316929176464ebc9ad085f31e7284
- SHA1 09d2af8dd22201dd8d48e5dcfcaed281ff9422c7
- SHA512 a546d1300f49037a465ecec8bc1ebd07d57015a5ff1abfa1c94da9b30576933fb68e3898ff764d4de6e6741da822a7c93adc6e845806a266a63aa14c8bb09ebb
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/QuikNEZ/readme.txt
- SHA256 6ccfc5d0f7302661690b9e8705d869be31368446298b070e9bbd8d5d6d7c7d98
- MD5 5b9fe5a2b4163797c0b328efd48593fd
- SHA1 80424770c3c14f7203f5a50056f71882603600d6
- SHA512 65217176cf9f60406fe3f9fc188e8b9f957fb91497259925f99d8b9545f5f9e8c6a77143cc490d75cef55f82f8a927ff4f3adc1becc48360d57ff7390bf12945
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/QuikNEZ/spreading guide.pdf
- SHA256 1093b454e1cdffb649a43fbe4e65b389ce115268cd9fed9001f808d5518da6c9
- MD5 f137f766436c29e346bb925e990c3128
- SHA1 a820b9efdf79e73d453c28e32fc9ed12f6d63efb
- SHA512 ac6b429ea9bd8c6c5adc52b0c1de1bfe356e4edddc566fcfd338d0fb15868f053dff53b79ca55cf3f88bd156387c0a4788cf89e878a3fade7f4938df39c6d943
- SSDEEP 24576:swkBnMpH1BMfWMSqzbs5z7CsmODVxsOf0:swwfWCA5z+qDVxh0
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/Account creator - read me.txt
- SHA256 205bf4e7774ede8172eba973194c0e01df15c7116c22ba846d322998bec360ec
- MD5 2686998eafb17d95b48e46131dbbb443
- SHA1 5a993156f57996eab57739ab70110453cd0e5db4
- SHA512 4c12806917819122f97f673b6ed08599c46630cbb037cb46c3a599ecfb0c0191c10cff3e3f92e1195122c762e2c52c33e9f2f65e5edb4679c2d1ffc5081a5d2c
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DeathByCaptcha.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6117524319292fe6dc7ae7727d5c8e03868e6bc047e621cd25198b1e1afff70f
- MD5 a576d702e1840c943c05970b4660dd01
- SHA1 859b441cbe2367ce3aed17b6e9e00d9584339366
- SHA512 46b365e3dd50eddb85c829e46dc54889ad7b0ce2c2babd14856d6efbc4ae04ba2ce733c3b9776f4fa286c39e23787e9a8b6d0d5fd0f259d69d590d292d64fa80
- SSDEEP 384:k4ltuVrlsg6FPMDKPNEOA3eIg26XXWBLQ5m2GuMakJTQAnR/R34whb8CdYeNkHxI:ptuVrlsg6F0DC4Hg26XGB9u3snVR34Kr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib.dll
- IMPHASH 648981ac42c3d2745a0a6594fc001d5d
- SHA256 cca220c49a7bdf199ea451d3d94eb601f3fd9ac6978a36f9006b45066a79bac6
- MD5 340ced65d12200b367666568609dbd62
- SHA1 d86fe45482a22f947b176f815a77d54a497ec2a2
- SHA512 c58428827953805242cc8a9bf32b5e73104ad9aecdbe3836b2d1a2c04374b0d5cbd61c206a19f7a385fe467528529d1c55ea794efdb545fcca61bdd3fc9470f0
- SSDEEP 768:lE/4yfxDfsA16BoBS4SD1HXuSlUFPq+Z2/dFcHlyQJ/4SjNq:lEAyJDfsA16Bo6WFy+0logSjg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
34224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcr90
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_malloc_crt
free
_encoded_null
__FrameUnwindFilter
_cexit
__CxxQueryExceptionSize
__CxxDetectRethrow
_encode_pointer
wcstombs
__CxxUnregisterExceptionObject
__CxxExceptionFilter
__CxxRegisterExceptionObject
memcpy
memset
atof
strlen
kernel32
SetUnhandledExceptionFilter
LocalFree
IsBadReadPtr
IsBadWritePtr
IsDebuggerPresent
LocalAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
ws2_32
connect
WSAStartup
inet_addr
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
htons
msvcm90
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
740B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=2, id=149, productName=VS2008 build 21022, version=21022,
count=13, id=131, productName=VS2008 build 21022, version=21022,
count=6, id=132, productName=VS2008 build 21022, version=21022,
count=65, id=1, productName=Unmarked objects,
count=6, id=123, productName=VS2005 build 50727, version=50727,
count=7, id=138, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib32.dll
- IMPHASH 648981ac42c3d2745a0a6594fc001d5d
- SHA256 cca220c49a7bdf199ea451d3d94eb601f3fd9ac6978a36f9006b45066a79bac6
- MD5 340ced65d12200b367666568609dbd62
- SHA1 d86fe45482a22f947b176f815a77d54a497ec2a2
- SHA512 c58428827953805242cc8a9bf32b5e73104ad9aecdbe3836b2d1a2c04374b0d5cbd61c206a19f7a385fe467528529d1c55ea794efdb545fcca61bdd3fc9470f0
- SSDEEP 768:lE/4yfxDfsA16BoBS4SD1HXuSlUFPq+Z2/dFcHlyQJ/4SjNq:lEAyJDfsA16Bo6WFy+0logSjg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
34224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcr90
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_malloc_crt
free
_encoded_null
__FrameUnwindFilter
_cexit
__CxxQueryExceptionSize
__CxxDetectRethrow
_encode_pointer
wcstombs
__CxxUnregisterExceptionObject
__CxxExceptionFilter
__CxxRegisterExceptionObject
memcpy
memset
atof
strlen
kernel32
SetUnhandledExceptionFilter
LocalFree
IsBadReadPtr
IsBadWritePtr
IsDebuggerPresent
LocalAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
ws2_32
connect
WSAStartup
inet_addr
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
htons
msvcm90
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
740B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=2, id=149, productName=VS2008 build 21022, version=21022,
count=13, id=131, productName=VS2008 build 21022, version=21022,
count=6, id=132, productName=VS2008 build 21022, version=21022,
count=65, id=1, productName=Unmarked objects,
count=6, id=123, productName=VS2005 build 50727, version=50727,
count=7, id=138, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/DecaptcherLib64.dll
- IMPHASH 5d19bc11d7ee88672f7d8abe31a9150f
- SHA256 136b58aa14a7bc0db9095353a17600495a6f1febb78571df98f7884ded7696a1
- MD5 c3e378d9ba2b8d4d545d5dde1bf2080b
- SHA1 12254b076465ce06e383061704745305c8bed148
- SHA512 cba3361285fe00c36c45e48c4fa90a673fdba5f22c2163bd9880ea88819dc6b33957bbb4266effe96411a95547a942f28fe557bb88ab264e4a970d1714f13a39
- SSDEEP 768:UxXrqVyfxDfsA164lS4SD15YHTIcCI1Qk49urmuIWFh/lyQ7Bo3Hq:JyJDfsA1640SCI1Qz90mW7Bo3K
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
34688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
msvcr90
__dllonexit
_lock
_unlock
__clean_type_info_names_internal
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
_encode_pointer
_onexit
__FrameUnwindFilter
_cexit
__CxxQueryExceptionSize
__CxxDetectRethrow
wcstombs
__CxxUnregisterExceptionObject
__CxxExceptionFilter
__CxxRegisterExceptionObject
memcpy
memset
atof
strlen
kernel32
LocalAlloc
IsBadReadPtr
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
Sleep
IsBadWritePtr
ws2_32
connect
WSAStartup
inet_addr
htons
setsockopt
WSACleanup
recv
socket
gethostbyname
send
closesocket
msvcm90
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=9, id=131, productName=VS2008 build 21022, version=21022,
count=6, id=132, productName=VS2008 build 21022, version=21022,
count=6, id=123, productName=VS2005 build 50727, version=50727,
count=56, id=1, productName=Unmarked objects,
count=7, id=138, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-cleaned.id0
- SHA256 0358bcd4a1267bddb492a443bcb90e169d5580b01f26bd1fa5560c8650cf96c2
- MD5 e374e9f7c8313cd1e8a3ad6b7229319b
- SHA1 b5d2e0ed5f61df383bb70fac7784675fbd2cb68e
- SHA512 458f82f3aeed1918f8e9b3308e142c52556fb16da2402d481a2c0e8671ebb6b8341d983983b19df2e066ca381123da25be676185a049d952435d6fdfa5565976
- SSDEEP 6144:+QXKTYpB1thrjMXnZ0/W4+zX+6xJs98Pt:+WBW+sXf48V
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-cleaned.id1
- SHA256 4f42486b931de86aacb9d8b2f46e6943a7770aea57213786a19b4e12c09558cd
- MD5 f14e20f800bffef7664f1b8eb5ef6716
- SHA1 0be9969dca0f2b2d01a321dee053e7169a38b2e6
- SHA512 df70509d8dd353a86958a6ac94409117d0aac3564b2bcd9e2409661409fd593f2af45c3d02cd53bd1590423cd8b63b8632a12578aa16c80ffeb715d6f14f762d
- SSDEEP 1536:AXQZ6mQf4H6ZZgK+6zih8kCw1YH//Kg1LnDFW1Wu:8DFW1
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-cleaned.nam
- SHA256 f40f48b03b7eb47e285419bbf6a1224bdf668c63aaabf296ed2503472c9fab34
- MD5 274b575c49a239ff9b9af701a64d0456
- SHA1 ddea83eab585a54bdaa8b9bf6e00f28132b473b2
- SHA512 92bb710d98686ec6707cda77c72d97450f804d9b8b4cc3b114c84a0edbe522327b3dfab122e5af10633163807f2728317c53cefccd9aa44b0929a5c8a81b38d0
- SSDEEP 24:EbbstnVs1Iig+iqLcCEG/r0EFE1I4Wz5nnrAH9lO/41AscMy:Eb4nS17i2c8Y8MI45LOwescM
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-cleaned.til
- SHA256 7e887fed895845fc8a924e0578f1b6118727e330b748638d6399a9af378db3fd
- MD5 a0c0162d9147744de33b012544c11f28
- SHA1 d0a7e68438217bd76576f164365f91651fe3dbc9
- SHA512 97d7fdbbe6b25a19a033ba4d7678baf87433634952194caffecd53c145462c45f4d34dbc77f5aafd41f7d24a91a716b35540f5d4f1999c3dee8b4e1c5f058f2e
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/MTU-nopitnoob.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ccf43b2389707d64a934fd38081c43ede580a494fd101a64a6a5233a56bc03c5
- MD5 55f11efc94bf845dd14efe7122df841a
- SHA1 bb52f0a93d2be1be12a9b79e5c93e357daaf9b52
- SHA512 dee0e6d0b637e8d9d60cd08486503aa70e96a8bbe9036eff3eeb0dc365eec35b2232b15945a4f96568244636f5099db6ce2e4f48249c5bb00b3512162d9be078
- SSDEEP 12288:3tYk/5yzFBS8r+9IS8r+9SS8r+9rmMS8r+9:3X/5yzm7r7J7rmH7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1386190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
347KB
Virtual Size
347KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/YahooAccountCreator.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d3c8942e22a288ff323fa911943442334fdc34ad013acbbba2995acb74558067
- MD5 745330a913694abb4e492632feb2e427
- SHA1 887135f815244debbaf714b4397f8b5769d091c9
- SHA512 86d3625b510852dbd2feb7886800e3ecb867b5aae696f35df6cc8b1ffa3cd8f4d8967afe7dca4ed06b0dcbea6cc5dc76d8cc0a572b002949c2cc133dba6e3964
- SSDEEP 768:RoGuz+xs2HdfrCiMvgp1+iAL3eTL9c+gb7lMoj5pvPgWbvzP9y7BXFh:SRemjLL3eP9pS7lMoj5pHgWbvzVy7BVh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
53422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Auto spreader/Torrentator/Application/update.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5f1553fde5698417527400e28ccbf341cd79420c552a1ef581b43ef48b01fed6
- MD5 eca2728526091586f649bf7bc5c62080
- SHA1 71ad2d5cb47a48fef4a75041ef1f794d74310cd8
- SHA512 ee09dc95e0cf2a60c0f7ad599b21d6eed500cef0a9c1b5351dc689165ef5de9010a2fb90014a4c5dbf8b2d3391f003c21478bb484043c081a1544a7d75d3bd6a
- SSDEEP 384:evP96uUdaDzPRNABIlEe25to2curJGRJLML794jcypaU1+dNITRjmqzbPKgPctmw:ldkzYBxbo2curJGrgGcUa4R3zbQtmw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
149B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Auto spreader/Torrentator/READ ME.txt
- SHA256 983c20676aa8e3ee9ab4381c550912857e05df94c118bc98e395fc924f2421a3
- MD5 e3197ed05218d14a9568f6a06a9141ca
- SHA1 499bbc351076529580fc272c1aad1dfc4b3383cd
- SHA512 0efc9250c123be98f415269f6daaacc2df82e6c85eeaf5aa47a6dbee233b70a88887c5188c1e646e0e06046904a79b96a1ba795e830ea1c241fa9c941923eb73
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/Torrentator/Torrent Cash Interview.pdf
- SHA256 f9e6bd2e8fc8cab30af1e823a89da758026100b923d46f1ee187b9cef0f0da6b
- MD5 cf8b726c6a7d24c13d18e7dd232d4ba3
- SHA1 1aba6b1f85cf61021dbd06f0d7da31f41db7832d
- SHA512 2d699c881c5534950e70045c7c36ad846ff0b2c6000e3119484b7182e5c54f3c8bc5cb2cabc6d3b1a33cda875562d5fb799edfcc00b39ca6839186884c577254
- SSDEEP 1536:I8S8tnwxRgChIl31q+YHT9+SCf9JeZvdnn+GgtLt7MhloaaEyp:fzqhHToSKJAvwGgtupaEyp
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Torrentator/Torrent Cash.pdf
- SHA256 52c8a0579442b2108429b7b190a204814c677bb854af2f059541bf74222ac854
- MD5 8ae3b5507a8c19f94c7dd7a9b9a46747
- SHA1 acfa42fad7873cf3dea2731ee04e0243fe66c451
- SHA512 3731dc679f009c4ea08839ddde66afd43f79f413686b0cb1a7118553dfcc0e98b54be90861bd5bd5e1b0704e45d0b7f4adc22317084600341b25a3ff47c45231
- SSDEEP 12288:wk2WhfIL8QlZ7p6tjNrl/cW3nYLEp7/ZwYs6sEf:wk2WhfILLqNrKyYez
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Torrentator/Trackers 2011.txt
- SHA256 20c724bc239acd26b7b02e5714660d571403d614649dd4b31d81c78d2ca7727f
- MD5 224aad16846002bb44aad25663b1da1e
- SHA1 fd1ffb65e6acf202009fb4f051f7bdb1d26f63ff
- SHA512 a4d1ed7a00d855be4e924c98a7f4b182a77fd99a2842696e53cf08dfebdc15af94e797fdf1c5c186fc074725f9ba857c7924c7a26964cb7b5a9ac7ce0932d100
- SSDEEP 192:7UoE+Ym5sEJ53+c4fxUcOtb6c0jlocnIircRKgtcmNf8cynl2cythtztGtcMtrtt:7UoE+JrlS5D6CEvM
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Torrentator/Usage Guide.pdf
- SHA256 eed958a95c53aedc8d9332057bb64d690659aedd556bf9bee215d407363e6692
- MD5 a75a7194374d90afed0d99aa8fda2b81
- SHA1 83e0a7e20b3ac58aca381203f21033c5cff81dd5
- SHA512 dc95e253b16a4ef0f6d21ca96edda7e6a5a8d7fccc8b685774c02ec07a0b06c172ce8152b1e05c5597975c6c5faf0bf78e86cde6473f5a4eaf5783d9838736f5
- SSDEEP 12288:PH7VVrjcerpLpMLwaBoPqbo2NWJ26dCQH9Omk9l4zTP+:PxVrI65qc/I6dCQHjzS
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Auto spreader/Torrentator/Videos/Videos.url
- SHA256 367b9debdd88a0ac3e637eb865d09be7e76300b147770bca1783a970f12f021b
- MD5 90f05d1aa8bb2c82d18923c6bad799b9
- SHA1 80139a470f2b27062fa3aa85a9e8f91e83baffbf
- SHA512 c0c64a014426335db220eefdc3d8a793b44641109a4d4f2f1db3410f6322c19d0c5abdf3efdceacf95144465ee5bb10fe9f2d85b6a8aaae1a3a78d02ad819928
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/USB Spreader/USB_Spreader.exe
- SHA256 a321c239a2ea4fe46482a8bf4f7a02aa3a4a7287f63f389ebcfb3e93631cb5ec
- MD5 ed2170076a9c5ea140d173911b836f49
- SHA1 07862503298a270d019a77940113de0c6e1051df
- SHA512 7e73d992e2f0932a7170ed7b8da1511f007383f3de04fe0b9e9f6000e3ac0ef109ff7413e148aedf210bf663a801eeaf67851df6ec4b6fabaf1b6adb6ccc9690
- SSDEEP 3072:uwKd3THtitZNOltJK8+TH9ntkFjYellYY9a/FrNHVLWx0+WEf4HoqxzX6kTLrsj:uw4jtiROlHp+7IhjNIFrxExhfXqxp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
509440
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
UPX0
Size
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
174KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/Auto spreader/archive.zip
- SHA256 3c592941a25fb5e83fc38f4cee3d8092c8b7f7229c3897a8fa03f5e5012e3465
- MD5 cadb5c84617192ea74977784cad67434
- SHA1 244034478c1e500408c04767761a1635a6b2bd43
- SHA512 1d108fdc032c63eb79340d6ca8603cd0bb46ec092e63da212d059dd312bd21e0d4818c396755cbc342d6622fbe8acb22a29faf1d7938992a8080f780e169ad99
- SSDEEP 49152:zMFTTFcpoZ/X2K7d0WEoW/euiQ/g+KP8JxCFu0QF8IBSwtcyjWtKRjvqIF6GLhj:IX2K7dBpW/euiJ7Uyu0QuyatOjvXf
- MD5 SHA1 SHA512 SSDEEP
Apex9.1/Apex.exe
- IMPHASH 56f3e5d6e985936a6c20f33d5866b3e0
- SHA256 e6f12248cc37747dc6b55ef94545fe4983398f48f9a03b8813394254ecaaddb3
- MD5 3402af12de0454b4480371e4c486ae59
- SHA1 4a851c37b1f4cb5a779c36ea39e9c1d56b81f80c
- SHA512 da32d0aa252e34bb54246f772c592e0207b7fb86fb408315f4456451d4e2a22b419fd1b03a98591953f844e9db5127d72086873c1e8abeeab0f13fcbfb400b58
- SSDEEP 12288:FQjDpJh+sz7JQEWSwOP5iuucduey5QhEFQl:YpJ7wOP5TucgP5M
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10272
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaR8FixI4
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
ord588
__vbaLineInputStr
__vbaLateIdCall
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
ord516
__vbaVarIndexLoadRef
__vbaStrErrVarCopy
_adj_fprem1
ord518
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaStrCat
ord660
__vbaLsetFixstr
__vbaBoolErrVar
__vbaRecDestruct
__vbaSetSystemError
__vbaLenBstrB
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaVarIndexLoadRefLock
__vbaLateMemSt
__vbaBoolStr
__vbaVarForInit
__vbaForEachCollObj
__vbaExitProc
__vbaStrBool
__vbaObjSet
__vbaOnError
ord595
ord596
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord520
__vbaBoolVar
__vbaFPFix
ord708
__vbaRefVarAry
__vbaBoolVarNull
_CIsin
ord631
ord632
ord525
__vbaNextEachCollObj
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
ord528
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaPrintObj
DllFunctionCall
__vbaVarOr
__vbaCastObjVar
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaLateIdCallLd
__vbaStrR8
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
ord710
__vbaExceptHandler
ord711
__vbaStrToUnicode
ord712
__vbaPrintFile
ord713
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
__vbaI2Str
ord608
__vbaFPException
__vbaInStrVar
ord717
__vbaUbound
__vbaStrVarVal
__vbaVarCat
ord535
__vbaCheckType
__vbaLsetFixstrFree
__vbaI2Var
ord644
ord645
_CIlog
__vbaFileOpen
ord648
__vbaInStr
__vbaNew2
__vbaR8Str
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
ord681
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
__vbaLateMemCall
__vbaAryLock
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaFpI4
__vbaLateMemCallLd
ord617
_CIatan
__vbaStrMove
__vbaAryCopy
__vbaCastObj
__vbaStrVarCopy
__vbaR8IntI4
_allmul
__vbaLateIdSt
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaR8FixI2
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
__vbaRecAssign
Name
.text
Size
352KB
Virtual Size
350KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=15, id=9, version=8041,
count=1, id=13, version=8169,
Apex9.1/ApexExtraConfigs.txt
- SHA256 478632e36aac1b0c813e9762918bd88c35254812b16622fa4a6b82b90fe38679
- MD5 88f0e80e86f245677fea5fe3020d1517
- SHA1 c369d34eaba8a73cd69c08f6c5b3dd3b2d23d7a0
- SHA512 3170a94ec7d8259099818ded122eb76b4f4c5abf7081356ae667abc128499808e677e1e1b6e50c5d1ab999d0593abca2561f23eae9ae76d59599ca4e6b797b5d
- SSDEEP 192:k4JKYIdSWpaJQ/97r2CXP4iDL+oB75o3iHI1wLI1Qx4b3Ii3UGAWF:18YgeQ/97iCXD/R23iH4q4Qx4Df3NF
- MD5 SHA1 SHA512 SSDEEP
Apex9.1/config.ini
- SHA256 12cf500f53a065df12037905b06008aea402f25d58e3940abf78c49978629b57
- MD5 d56cf44cd4736a18ee60f706f352d569
- SHA1 804f98f78013f23498fa007f811f21b216605255
- SHA512 d30d4594ad4b37e683cd8ce93eb152c1b8ed13ac9403d9388ae5d9a6f64b98ab9ac912f6abd79e6a7b91814571d4d45a212f24dc79c4b06457a15e6e0374cab4
- SSDEEP 192:nDL0vbQm0xidf1ZtOE9EV3AmH2PKPPiwkE0b+Ee4T2m5o8txzsqx0rxKlpm4VH9X:nDLTh+EV3AmHCGiwTMFMDCT
- MD5 SHA1 SHA512 SSDEEP
QuikNEZ/QuikNEZUpdater.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ccc20e99d60ddaffb7b60a027180e0c2071d43a4f01b10ac73f90b67b3cf7ae4
- MD5 fb02f87c1d1559ff3c9216f2c2939da8
- SHA1 7897f931863dcbbff159285e17a9d6a35af5bf0d
- SHA512 a1de88cc673cbe5d6ba8df9fe097b569b93786ded2f4f300f3ffc0ca9d8b97824e747b01580c91f8d24a35713eabf9905603efcd1482a1fac98834b44bbbfee5
- SSDEEP 1536:vJvaYZwPObE5WoxeLkBCy3e0pJvaYZwPObE5WoxeLk:vFZwPObE5Sy3ppFZwPObE5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QuikNEZ/quiknez_torrents_config/QuikNEZUpdater.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ccc20e99d60ddaffb7b60a027180e0c2071d43a4f01b10ac73f90b67b3cf7ae4
- MD5 fb02f87c1d1559ff3c9216f2c2939da8
- SHA1 7897f931863dcbbff159285e17a9d6a35af5bf0d
- SHA512 a1de88cc673cbe5d6ba8df9fe097b569b93786ded2f4f300f3ffc0ca9d8b97824e747b01580c91f8d24a35713eabf9905603efcd1482a1fac98834b44bbbfee5
- SSDEEP 1536:vJvaYZwPObE5WoxeLkBCy3e0pJvaYZwPObE5WoxeLk:vFZwPObE5Sy3ppFZwPObE5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QuikNEZ/quiknez_torrents_config/cat.txt
- SHA256 9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa
- MD5 897316929176464ebc9ad085f31e7284
- SHA1 09d2af8dd22201dd8d48e5dcfcaed281ff9422c7
- SHA512 a546d1300f49037a465ecec8bc1ebd07d57015a5ff1abfa1c94da9b30576933fb68e3898ff764d4de6e6741da822a7c93adc6e845806a266a63aa14c8bb09ebb
- MD5 SHA1 SHA512
QuikNEZ/quiknez_torrents_config/lastprofile.txt
- SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
- MD5 68b329da9893e34099c7d8ad5cb9c940
- SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
- SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09
- MD5 SHA1 SHA512
QuikNEZ/quiknez_torrents_config/lastupdate.txt
- SHA256 ef78fb19e0994ba67395e8fa68dfcbb7549880de49d387cfb58196c74fc5fc53
- MD5 10df1071c3a2f16f7a9b6b07c3bfb92c
- SHA1 65214babe36b8d4c2a4661511cf480cb5e83f1a9
- SHA512 ea3bd2ec05f55c7855ce9d8aaa01ce67a989c319adab219692e82f171a236ef450d8743d2a92541c4781033046c79b937b3ddcd3e65e70f8aea1213202c95fbd
- MD5 SHA1 SHA512
QuikNEZ/quiknez_torrents_config/updated.txt
- SHA256 9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa
- MD5 897316929176464ebc9ad085f31e7284
- SHA1 09d2af8dd22201dd8d48e5dcfcaed281ff9422c7
- SHA512 a546d1300f49037a465ecec8bc1ebd07d57015a5ff1abfa1c94da9b30576933fb68e3898ff764d4de6e6741da822a7c93adc6e845806a266a63aa14c8bb09ebb
- MD5 SHA1 SHA512
QuikNEZ/readme.txt
- SHA256 6ccfc5d0f7302661690b9e8705d869be31368446298b070e9bbd8d5d6d7c7d98
- MD5 5b9fe5a2b4163797c0b328efd48593fd
- SHA1 80424770c3c14f7203f5a50056f71882603600d6
- SHA512 65217176cf9f60406fe3f9fc188e8b9f957fb91497259925f99d8b9545f5f9e8c6a77143cc490d75cef55f82f8a927ff4f3adc1becc48360d57ff7390bf12945
- MD5 SHA1 SHA512
QuikNEZ/spreading guide.pdf
- SHA256 1093b454e1cdffb649a43fbe4e65b389ce115268cd9fed9001f808d5518da6c9
- MD5 f137f766436c29e346bb925e990c3128
- SHA1 a820b9efdf79e73d453c28e32fc9ed12f6d63efb
- SHA512 ac6b429ea9bd8c6c5adc52b0c1de1bfe356e4edddc566fcfd338d0fb15868f053dff53b79ca55cf3f88bd156387c0a4788cf89e878a3fade7f4938df39c6d943
- SSDEEP 24576:swkBnMpH1BMfWMSqzbs5z7CsmODVxsOf0:swwfWCA5z+qDVxh0
- MD5 SHA1 SHA512 SSDEEP
Torrentator/Application/Account creator - read me.txt
- SHA256 205bf4e7774ede8172eba973194c0e01df15c7116c22ba846d322998bec360ec
- MD5 2686998eafb17d95b48e46131dbbb443
- SHA1 5a993156f57996eab57739ab70110453cd0e5db4
- SHA512 4c12806917819122f97f673b6ed08599c46630cbb037cb46c3a599ecfb0c0191c10cff3e3f92e1195122c762e2c52c33e9f2f65e5edb4679c2d1ffc5081a5d2c
- MD5 SHA1 SHA512
Torrentator/Application/DeathByCaptcha.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6117524319292fe6dc7ae7727d5c8e03868e6bc047e621cd25198b1e1afff70f
- MD5 a576d702e1840c943c05970b4660dd01
- SHA1 859b441cbe2367ce3aed17b6e9e00d9584339366
- SHA512 46b365e3dd50eddb85c829e46dc54889ad7b0ce2c2babd14856d6efbc4ae04ba2ce733c3b9776f4fa286c39e23787e9a8b6d0d5fd0f259d69d590d292d64fa80
- SSDEEP 384:k4ltuVrlsg6FPMDKPNEOA3eIg26XXWBLQ5m2GuMakJTQAnR/R34whb8CdYeNkHxI:ptuVrlsg6F0DC4Hg26XGB9u3snVR34Kr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Torrentator/Application/DecaptcherLib.dll
- IMPHASH 648981ac42c3d2745a0a6594fc001d5d
- SHA256 cca220c49a7bdf199ea451d3d94eb601f3fd9ac6978a36f9006b45066a79bac6
- MD5 340ced65d12200b367666568609dbd62
- SHA1 d86fe45482a22f947b176f815a77d54a497ec2a2
- SHA512 c58428827953805242cc8a9bf32b5e73104ad9aecdbe3836b2d1a2c04374b0d5cbd61c206a19f7a385fe467528529d1c55ea794efdb545fcca61bdd3fc9470f0
- SSDEEP 768:lE/4yfxDfsA16BoBS4SD1HXuSlUFPq+Z2/dFcHlyQJ/4SjNq:lEAyJDfsA16Bo6WFy+0logSjg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
34224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcr90
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_malloc_crt
free
_encoded_null
__FrameUnwindFilter
_cexit
__CxxQueryExceptionSize
__CxxDetectRethrow
_encode_pointer
wcstombs
__CxxUnregisterExceptionObject
__CxxExceptionFilter
__CxxRegisterExceptionObject
memcpy
memset
atof
strlen
kernel32
SetUnhandledExceptionFilter
LocalFree
IsBadReadPtr
IsBadWritePtr
IsDebuggerPresent
LocalAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
ws2_32
connect
WSAStartup
inet_addr
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
htons
msvcm90
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
740B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=2, id=149, productName=VS2008 build 21022, version=21022,
count=13, id=131, productName=VS2008 build 21022, version=21022,
count=6, id=132, productName=VS2008 build 21022, version=21022,
count=65, id=1, productName=Unmarked objects,
count=6, id=123, productName=VS2005 build 50727, version=50727,
count=7, id=138, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Torrentator/Application/DecaptcherLib32.dll
- IMPHASH 648981ac42c3d2745a0a6594fc001d5d
- SHA256 cca220c49a7bdf199ea451d3d94eb601f3fd9ac6978a36f9006b45066a79bac6
- MD5 340ced65d12200b367666568609dbd62
- SHA1 d86fe45482a22f947b176f815a77d54a497ec2a2
- SHA512 c58428827953805242cc8a9bf32b5e73104ad9aecdbe3836b2d1a2c04374b0d5cbd61c206a19f7a385fe467528529d1c55ea794efdb545fcca61bdd3fc9470f0
- SSDEEP 768:lE/4yfxDfsA16BoBS4SD1HXuSlUFPq+Z2/dFcHlyQJ/4SjNq:lEAyJDfsA16Bo6WFy+0logSjg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
34224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcr90
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_malloc_crt
free
_encoded_null
__FrameUnwindFilter
_cexit
__CxxQueryExceptionSize
__CxxDetectRethrow
_encode_pointer
wcstombs
__CxxUnregisterExceptionObject
__CxxExceptionFilter
__CxxRegisterExceptionObject
memcpy
memset
atof
strlen
kernel32
SetUnhandledExceptionFilter
LocalFree
IsBadReadPtr
IsBadWritePtr
IsDebuggerPresent
LocalAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
ws2_32
connect
WSAStartup
inet_addr
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
htons
msvcm90
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
740B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=2, id=149, productName=VS2008 build 21022, version=21022,
count=13, id=131, productName=VS2008 build 21022, version=21022,
count=6, id=132, productName=VS2008 build 21022, version=21022,
count=65, id=1, productName=Unmarked objects,
count=6, id=123, productName=VS2005 build 50727, version=50727,
count=7, id=138, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Torrentator/Application/DecaptcherLib64.dll
- IMPHASH 5d19bc11d7ee88672f7d8abe31a9150f
- SHA256 136b58aa14a7bc0db9095353a17600495a6f1febb78571df98f7884ded7696a1
- MD5 c3e378d9ba2b8d4d545d5dde1bf2080b
- SHA1 12254b076465ce06e383061704745305c8bed148
- SHA512 cba3361285fe00c36c45e48c4fa90a673fdba5f22c2163bd9880ea88819dc6b33957bbb4266effe96411a95547a942f28fe557bb88ab264e4a970d1714f13a39
- SSDEEP 768:UxXrqVyfxDfsA164lS4SD15YHTIcCI1Qk49urmuIWFh/lyQ7Bo3Hq:JyJDfsA1640SCI1Qz90mW7Bo3K
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
34688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
msvcr90
__dllonexit
_lock
_unlock
__clean_type_info_names_internal
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
_encode_pointer
_onexit
__FrameUnwindFilter
_cexit
__CxxQueryExceptionSize
__CxxDetectRethrow
wcstombs
__CxxUnregisterExceptionObject
__CxxExceptionFilter
__CxxRegisterExceptionObject
memcpy
memset
atof
strlen
kernel32
LocalAlloc
IsBadReadPtr
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
Sleep
IsBadWritePtr
ws2_32
connect
WSAStartup
inet_addr
htons
setsockopt
WSACleanup
recv
socket
gethostbyname
send
closesocket
msvcm90
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=9, id=131, productName=VS2008 build 21022, version=21022,
count=6, id=132, productName=VS2008 build 21022, version=21022,
count=6, id=123, productName=VS2005 build 50727, version=50727,
count=56, id=1, productName=Unmarked objects,
count=7, id=138, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Torrentator/Application/MTU-cleaned.id0
- SHA256 0358bcd4a1267bddb492a443bcb90e169d5580b01f26bd1fa5560c8650cf96c2
- MD5 e374e9f7c8313cd1e8a3ad6b7229319b
- SHA1 b5d2e0ed5f61df383bb70fac7784675fbd2cb68e
- SHA512 458f82f3aeed1918f8e9b3308e142c52556fb16da2402d481a2c0e8671ebb6b8341d983983b19df2e066ca381123da25be676185a049d952435d6fdfa5565976
- SSDEEP 6144:+QXKTYpB1thrjMXnZ0/W4+zX+6xJs98Pt:+WBW+sXf48V
- MD5 SHA1 SHA512 SSDEEP
Torrentator/Application/MTU-cleaned.id1
- SHA256 4f42486b931de86aacb9d8b2f46e6943a7770aea57213786a19b4e12c09558cd
- MD5 f14e20f800bffef7664f1b8eb5ef6716
- SHA1 0be9969dca0f2b2d01a321dee053e7169a38b2e6
- SHA512 df70509d8dd353a86958a6ac94409117d0aac3564b2bcd9e2409661409fd593f2af45c3d02cd53bd1590423cd8b63b8632a12578aa16c80ffeb715d6f14f762d
- SSDEEP 1536:AXQZ6mQf4H6ZZgK+6zih8kCw1YH//Kg1LnDFW1Wu:8DFW1
- MD5 SHA1 SHA512 SSDEEP
Torrentator/Application/MTU-cleaned.nam
- SHA256 f40f48b03b7eb47e285419bbf6a1224bdf668c63aaabf296ed2503472c9fab34
- MD5 274b575c49a239ff9b9af701a64d0456
- SHA1 ddea83eab585a54bdaa8b9bf6e00f28132b473b2
- SHA512 92bb710d98686ec6707cda77c72d97450f804d9b8b4cc3b114c84a0edbe522327b3dfab122e5af10633163807f2728317c53cefccd9aa44b0929a5c8a81b38d0
- SSDEEP 24:EbbstnVs1Iig+iqLcCEG/r0EFE1I4Wz5nnrAH9lO/41AscMy:Eb4nS17i2c8Y8MI45LOwescM
- MD5 SHA1 SHA512 SSDEEP
Torrentator/Application/MTU-cleaned.til
- SHA256 7e887fed895845fc8a924e0578f1b6118727e330b748638d6399a9af378db3fd
- MD5 a0c0162d9147744de33b012544c11f28
- SHA1 d0a7e68438217bd76576f164365f91651fe3dbc9
- SHA512 97d7fdbbe6b25a19a033ba4d7678baf87433634952194caffecd53c145462c45f4d34dbc77f5aafd41f7d24a91a716b35540f5d4f1999c3dee8b4e1c5f058f2e
- MD5 SHA1 SHA512
Torrentator/Application/MTU-nopitnoob.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ccf43b2389707d64a934fd38081c43ede580a494fd101a64a6a5233a56bc03c5
- MD5 55f11efc94bf845dd14efe7122df841a
- SHA1 bb52f0a93d2be1be12a9b79e5c93e357daaf9b52
- SHA512 dee0e6d0b637e8d9d60cd08486503aa70e96a8bbe9036eff3eeb0dc365eec35b2232b15945a4f96568244636f5099db6ce2e4f48249c5bb00b3512162d9be078
- SSDEEP 12288:3tYk/5yzFBS8r+9IS8r+9SS8r+9rmMS8r+9:3X/5yzm7r7J7rmH7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1386190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
347KB
Virtual Size
347KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Torrentator/Application/YahooAccountCreator.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d3c8942e22a288ff323fa911943442334fdc34ad013acbbba2995acb74558067
- MD5 745330a913694abb4e492632feb2e427
- SHA1 887135f815244debbaf714b4397f8b5769d091c9
- SHA512 86d3625b510852dbd2feb7886800e3ecb867b5aae696f35df6cc8b1ffa3cd8f4d8967afe7dca4ed06b0dcbea6cc5dc76d8cc0a572b002949c2cc133dba6e3964
- SSDEEP 768:RoGuz+xs2HdfrCiMvgp1+iAL3eTL9c+gb7lMoj5pvPgWbvzP9y7BXFh:SRemjLL3eP9pS7lMoj5pHgWbvzVy7BVh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
53422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Torrentator/Application/update.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5f1553fde5698417527400e28ccbf341cd79420c552a1ef581b43ef48b01fed6
- MD5 eca2728526091586f649bf7bc5c62080
- SHA1 71ad2d5cb47a48fef4a75041ef1f794d74310cd8
- SHA512 ee09dc95e0cf2a60c0f7ad599b21d6eed500cef0a9c1b5351dc689165ef5de9010a2fb90014a4c5dbf8b2d3391f003c21478bb484043c081a1544a7d75d3bd6a
- SSDEEP 384:evP96uUdaDzPRNABIlEe25to2curJGRJLML794jcypaU1+dNITRjmqzbPKgPctmw:ldkzYBxbo2curJGrgGcUa4R3zbQtmw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
149B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Torrentator/READ ME.txt
- SHA256 983c20676aa8e3ee9ab4381c550912857e05df94c118bc98e395fc924f2421a3
- MD5 e3197ed05218d14a9568f6a06a9141ca
- SHA1 499bbc351076529580fc272c1aad1dfc4b3383cd
- SHA512 0efc9250c123be98f415269f6daaacc2df82e6c85eeaf5aa47a6dbee233b70a88887c5188c1e646e0e06046904a79b96a1ba795e830ea1c241fa9c941923eb73
- MD5 SHA1 SHA512
Torrentator/Torrent Cash Interview.pdf
- SHA256 f9e6bd2e8fc8cab30af1e823a89da758026100b923d46f1ee187b9cef0f0da6b
- MD5 cf8b726c6a7d24c13d18e7dd232d4ba3
- SHA1 1aba6b1f85cf61021dbd06f0d7da31f41db7832d
- SHA512 2d699c881c5534950e70045c7c36ad846ff0b2c6000e3119484b7182e5c54f3c8bc5cb2cabc6d3b1a33cda875562d5fb799edfcc00b39ca6839186884c577254
- SSDEEP 1536:I8S8tnwxRgChIl31q+YHT9+SCf9JeZvdnn+GgtLt7MhloaaEyp:fzqhHToSKJAvwGgtupaEyp
- MD5 SHA1 SHA512 SSDEEP
Torrentator/Torrent Cash.pdf
- SHA256 52c8a0579442b2108429b7b190a204814c677bb854af2f059541bf74222ac854
- MD5 8ae3b5507a8c19f94c7dd7a9b9a46747
- SHA1 acfa42fad7873cf3dea2731ee04e0243fe66c451
- SHA512 3731dc679f009c4ea08839ddde66afd43f79f413686b0cb1a7118553dfcc0e98b54be90861bd5bd5e1b0704e45d0b7f4adc22317084600341b25a3ff47c45231
- SSDEEP 12288:wk2WhfIL8QlZ7p6tjNrl/cW3nYLEp7/ZwYs6sEf:wk2WhfILLqNrKyYez
- MD5 SHA1 SHA512 SSDEEP
Torrentator/Trackers 2011.txt
- SHA256 20c724bc239acd26b7b02e5714660d571403d614649dd4b31d81c78d2ca7727f
- MD5 224aad16846002bb44aad25663b1da1e
- SHA1 fd1ffb65e6acf202009fb4f051f7bdb1d26f63ff
- SHA512 a4d1ed7a00d855be4e924c98a7f4b182a77fd99a2842696e53cf08dfebdc15af94e797fdf1c5c186fc074725f9ba857c7924c7a26964cb7b5a9ac7ce0932d100
- SSDEEP 192:7UoE+Ym5sEJ53+c4fxUcOtb6c0jlocnIircRKgtcmNf8cynl2cythtztGtcMtrtt:7UoE+JrlS5D6CEvM
- MD5 SHA1 SHA512 SSDEEP
Torrentator/Usage Guide.pdf
- SHA256 eed958a95c53aedc8d9332057bb64d690659aedd556bf9bee215d407363e6692
- MD5 a75a7194374d90afed0d99aa8fda2b81
- SHA1 83e0a7e20b3ac58aca381203f21033c5cff81dd5
- SHA512 dc95e253b16a4ef0f6d21ca96edda7e6a5a8d7fccc8b685774c02ec07a0b06c172ce8152b1e05c5597975c6c5faf0bf78e86cde6473f5a4eaf5783d9838736f5
- SSDEEP 12288:PH7VVrjcerpLpMLwaBoPqbo2NWJ26dCQH9Omk9l4zTP+:PxVrI65qc/I6dCQHjzS
- MD5 SHA1 SHA512 SSDEEP
Torrentator/Videos/Videos.url
- SHA256 367b9debdd88a0ac3e637eb865d09be7e76300b147770bca1783a970f12f021b
- MD5 90f05d1aa8bb2c82d18923c6bad799b9
- SHA1 80139a470f2b27062fa3aa85a9e8f91e83baffbf
- SHA512 c0c64a014426335db220eefdc3d8a793b44641109a4d4f2f1db3410f6322c19d0c5abdf3efdceacf95144465ee5bb10fe9f2d85b6a8aaae1a3a78d02ad819928
- MD5 SHA1 SHA512
USB Spreader/USB_Spreader.exe
- SHA256 9b0c7dfe3aef3531372fdc74d1bfc95b2b8182a2d934edb0801de04d1048eb38
- MD5 76d96549d74a582b9b8aa413148d8eec
- SHA1 05ffb27bb4d34e4a53f131a2497ac7441be5833b
- SHA512 4f98922ab00b003f3b830515041061b0a354dd693d0389aeb826ca7dd13d8a1b799b313b4cc1db226112a7f71a3c68cfb24f4780f29ee22918ff1eef9baab226
- SSDEEP 6144:0w4jtiROlHp+7IhjNIFrxExhfXqxp4vFAX3koIm/7S3wwldmZogBDils:n4piJ7mNoKIpyF03nj/g5mZnSs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
532480
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
UPX0
Size
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
174KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.heb
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
description.txt
- SHA256 5d2e0db4e4cd75bbdb7051d2be677d0ed3a55d80e465f22831478566b2e988eb
- MD5 f13780e73ffdc50d8a9a90902a2d21a0
- SHA1 907a96ba338907a58331e3d189090d2444e71fc9
- SHA512 1c7952859462c7ca58847255321dceca06e617fcf036a230df5430db495bf469cee033c1e93d8c4638598f6f10ee55a1beb669713bc951b3fe2683efaee68729
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Auto spreader/description.txt
- SHA256 5d2e0db4e4cd75bbdb7051d2be677d0ed3a55d80e465f22831478566b2e988eb
- MD5 f13780e73ffdc50d8a9a90902a2d21a0
- SHA1 907a96ba338907a58331e3d189090d2444e71fc9
- SHA512 1c7952859462c7ca58847255321dceca06e617fcf036a230df5430db495bf469cee033c1e93d8c4638598f6f10ee55a1beb669713bc951b3fe2683efaee68729
- MD5 SHA1 SHA512
2018-Malware-Repository-main/BFF DoS (Ping) v1.0.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 18846c67efed8d3dbe965b3a1e3437d9bd341baa7ef85034bdeedd4a9be3de09
- MD5 2584fdc930667c942b2cd0319d685107
- SHA1 17124ca544193210c7955ae6496059baf4caf1b3
- SHA512 604f4d9e8043f92ba2756462f4defdce2a65b7d948e5e200d7348d7b799da0dc7dd364cddb5d8d5d11b6560b87599243b936a0054345b4f0eb6cfbc992ea82fc
- SSDEEP 768:l0yN5pNiCjWy1r/STneZleQQ4cHnG0yN5pNiCj:l0yNLdjvhST64vG0yNLdj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
162B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/BuffMods DDos V2.exe
- IMPHASH 691f1193f16065947032ace3a2329e55
- SHA256 e59015ad313942a98e30f905cb657fecb1d49d3781113d2df94dc7a622175cfb
- MD5 aaee9fbf9a5c3d5fdd058c9b0fe77fed
- SHA1 04feecc6e378ae9e284138ac1d486d1f6d50881b
- SHA512 b131b66d100faa5f133b100da2da464da1ae419d724b03bd7b935d42961ee62ba80ed6c5d6b3b2c5d88fa17c1b98bfc425eedbef82c82de526f1d0b3981c75d9
- SSDEEP 768:e/HKmM0qauedFQFtxTXKXAx6ZQgZOgRTI7DbCO:eymMyTcTXfxhgZzT7O
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57831
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Name
.MPRESS1
Size
20KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.MPRESS2
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/BuffMods DDos.exe
- IMPHASH 691f1193f16065947032ace3a2329e55
- SHA256 28a6db4faeb3afd2c1056e1062908a45e5f7d64c78e9351d30e41b6a25adb669
- MD5 31b2cc201c59689efc1fa1c645e6d976
- SHA1 5762bdd9ceb9c9a55ac7281ded6300113192e27f
- SHA512 8390e38eec79d17d010663cfafd29f8b03531bf4fcbb5316c79098c81da94f3a219cc3ebc0c51d352e6bad68b9e41e0b782c8c52f63c1f13cb73d9302feef572
- SSDEEP 768:e9HKmM0qauedFQFtxTXKXAx6ZQgZOgRTwQ7DWO:eMmMyTcTXfxhgZzTwTO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57831
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Name
.MPRESS1
Size
20KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.MPRESS2
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/DDOS/DDoS.exe
- IMPHASH 691f1193f16065947032ace3a2329e55
- SHA256 ec3be960cc7765f8c6500635ee2f78b335d377279923c6c5b175d472a3db920e
- MD5 e3b365a40cb6d3dd8d8303f34a25842a
- SHA1 89ce10c568fd0ccea6ccd4b1228b6f07f2839e8a
- SHA512 9f994ff62916ac08ee40476bc075ac0477cb0d41a3f282215de486e2d5ea320c117ed277a13fb192f30ea28dedcd01cb151f8fe193f181b00bd4b0ed9bf72d98
- SSDEEP 1536:eAmMyMWO0SECHuKPUklXrRu8g6gOPdanoeWO:eOZHJfXrRu8x6o
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
90599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Name
.MPRESS1
Size
20KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.MPRESS2
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/DDOS/Password.txt
- SHA256 3d9625093be65579afda0ba1806c0a83c5b707a1b3b3e3834aedc9f729a6ee7d
- MD5 cf96fc9775ab1986560bba8bcbbcc050
- SHA1 0375badedb1d0e311a97e7fbf6e4435b2254d7e5
- SHA512 70f7d964f22e0b3871df01f79279e0005d88c7f3a7ee9dbe759b9cb2265cfc08977d6e42362b37a2ed48abf3317cb4fc0110fbfcb1f45c836474610bc8b3837f
- MD5 SHA1 SHA512
2018-Malware-Repository-main/DDOSER-APRIL-PATCH.zip
- SHA256 65a9396bc13d17e3572aea51e857cca1ddbda753b8fc581b0a8889f56050d940
- MD5 a7691ac28ebefd6ec4189e13afa775f9
- SHA1 fc22cb1b5bc52baf987aae4c777f56bb2ddd5f5b
- SHA512 1fc5f1263227f3313167ff7ae2d1b679f26a2cb4bb00f29fd0aac17e0b94268a7f3a060665adb478b25472759bdcc51f0cebdf762716128cae7dfa575f92c3d3
- SSDEEP 768:27Q97RTSDLiQezWybH0UytB9GKKqumop5D50HBvzJN7Y2Pqar5O:27ZD7dybHutTNKvmopR50Hhv02q
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/D_Ds_Hk_Tls_Pck_1.0.rar
- SHA256 56881139c03eb757d3fbb3329e64610950ea02f25f1d2baf0718823fff72d4b6
- MD5 7248e96691a9c506f36ad04b624789f8
- SHA1 3c0543d778917f88dedc6746c832b8e1c42fb6cc
- SHA512 acc68463bebae248e8d3351cd00fe422e31bf2ecc3bf4e472829b15c2eae9eee80ab697f0205ee679b755ada5782d06f134f391bfd348fff3d4335a856cfe3fb
- SSDEEP 393216:yBSvmEQSlIVfnCUjrdHCU2Cd47S94ubzMip4jvkKkzOUWm:QSvaSlgfCmrUDCR94ubz7WzkVyUN
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Destroy DoS.zip
- SHA256 c48ac1188b977d6f285a65abfa1c0cae4487f0b2720d04cbdb4ddc2262cad24a
- MD5 eb3cc3fcaf5b2a4b6ca421cf4524d712
- SHA1 57b898c42c483bb5e37caa08216ead6902aca81e
- SHA512 cb98a2433cfe083f03c2d9661603ec049396b541049ff4b761fc2afefac37515b97530d84902d10c251fca1919a6f27badecdc66ef9e52e464acb9c695043792
- SSDEEP 192:U5/p8fHcVbU0bQAnPtkuUwl9lqKnH25eVIneEcwxpXQnecNkiC4mVeLHo+rLM3M:U5h5g00AnlUk9lqKnH2IVse/wTgtvCRC
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/DevModding DDos v3.zip
- SHA256 70bfba752c5a67902892b89c64391497853ac9f0f576b544d90a114fb64b8ba9
- MD5 fb18cea7babcd28a22d38bd6f32e4178
- SHA1 79a09faa002dfb38a83bde3498e0b52275431837
- SHA512 b7f26a0beaadca25daad43fae1a808834f31de02064344b4ecf1c701d9c19bc7775e228ec13b3661c32f10c10f5da6fd72b335f2b1dc018ecf9befd99fede5ff
- SSDEEP 768:MHtpbGCzPkbDc4P51CbvuWPRn9QFxvbwp7m:4b7aP5EbvuWPh9c58m
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/EbraSha Dos Attacker.exe
- SHA256 9aef617dd1c48c093e9febaa37bf1249dcd8b5aeb509000fda36a5cad673f9bc
- MD5 887a973d3f3598c4c6eced2c94b49642
- SHA1 a78c328d200172be426cfd04a33643d09807b3f1
- SHA512 56e8df88288bce7d188761df94d7c53912d3d543e7db4736d4eb721564166970ef08e2f279777f4fb77827ebceb8e13faf7c535a3cd2d65dbe92265c888e1fa4
- SSDEEP 6144:3uIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qL5LhTH5opRrPOHaf:+6Wq4aaE6KwyF5L0Y2D1PqL6+c
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
765552
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
480KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
264KB
Virtual Size
268KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
38KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=152, version=20115,
count=175, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=53, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=528, id=1, productName=Unmarked objects,
count=72, id=180, version=40219,
count=28, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
2018-Malware-Repository-main/EbraSha-Dos-Attacker.bat
- SHA256 7652709b0effebd1624baa894a61ac640f9ba6e1934ecb7a93fcbd4b97c79f66
- MD5 7b7009060525d73d859fad266314755f
- SHA1 43edca67fecfee286945a26583f4be19942a06e4
- SHA512 cbc0602cd593adc6c611542a6a223d940659f53e24a06233440695e43117ac7d98d3eaa7c262bac6b09f72d2a658537d4e9a2c2b7a9a75448f51685c766fefda
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Exploit Attacker v1.1.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 cb26812de0941e1ce1ce173e154464527cac1a0a08e2a656668cb9541ff4fe37
- MD5 3222f726b752bea68ab4a0c55eaa5ffd
- SHA1 fb5fb4156c676cf0e906fc61142cd80174e8aaff
- SHA512 5b85c5c39cee295d87d71a02b234c79c0a2ffbbd0a635b3b01dddd321737670b83ac716808310d3787ac60a98f3832820448327bf85448d48e82232465ae1013
- SSDEEP 6144:uU3I2c40aaAx+6tSD5LPyT4sR2IGkWU3I2c48aaAx+6tSD5LPy:ueI28aaAHStLPydROeI2UaaAHStLPy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
292382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
278KB
Virtual Size
277KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
202KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Flooder.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 dcdd9e1463a854ce38941385f69e5eef8307787e7b5cc634e562d0fe4784d715
- MD5 b1715c48b6466b22b290fc08f71889d2
- SHA1 314346fb2f9273f96ac5ea9a6b1491eaa229dc50
- SHA512 4f8a5f851abb4cb7581afb579a6eda995e8bf1bf43e941e3b4969ad840ffbff1d5d8f0712642855b8275f74b6b4f59f594f66015f1d34f8ba2aa0c1e68b78d4a
- SSDEEP 1536:lIC6BmtfGkjvGf27cGupvVsFDtolT/leUC+iiGAWCSZq2Z/OpmhQF+9+OgZdNihZ:l7Ukj+f2u6DwT9CsQh+OIihncwAmW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
109790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Hoic.rar
- SHA256 59e0d15fcdf92551a204c7e71776a88f54ea9df74e2ba2cfb04e7582c04dec81
- MD5 ba60fe26a85d5f5b6338d562930aeff2
- SHA1 499b6643dd5a7f1dd4d57506041c1207e657bce0
- SHA512 2fcc74e1c44ae2a9829d53eb6f7946965ad6f8d88b2ebaf8df223c881b99066c155cc94a3c566cfe08ebfe1eded6615df410ee30dc0c9877aba1c9daa44217ec
- SSDEEP 49152:YQs04R8oXUEgIRnwN/INLZw8NoibprkwSIdwHQa:zSRYfNANLZw8NLbZudh
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/INSTRUCTIONS READ ME!.txt
- SHA256 939ee1847aee68d3b7be031bff1afd2fcedd25746506c8ec98c9e02e7eff482b
- MD5 fc43f32e7649dd799534e97573e32f35
- SHA1 ffeaf26ba34eca5e7be63b0f9d2bdd0b9cc802ad
- SHA512 d2050a1f6e16a40e1cbac73e183cb90461ab686ba054ada349760fe61802dab841e927bce143d9bffbc1a08b8fc2c54fdc054e301c14be6680597583cdd4e69c
- MD5 SHA1 SHA512
2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/ddoser.exe
- SHA256 e94caecffb93ae04551bc93fdf0170599bdbe6a2d3453403abd627dc10c52c31
- MD5 9222254c57da5ac87cc39c3d93677a58
- SHA1 fffb413fb1f5e7ae9b5ca2250f087a511a355dba
- SHA512 27b2552a189deba0b58fd1b2d35618664ba986d41be5d19479f5360420254ee91e9e0331880817a90de62b62a358fea3977da4eb5a1b49205fb9f997db400872
- SSDEEP 768:1GcAPQIpz0Mb18Kdt14yvLhlcjnbcuyD7UnWCO:53TMb1FpPtOjnouy8nWCO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
62368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/IP GRABBER AND DDOSER PACK V1/website ip grabber.exe
- SHA256 1100b197992c499e5ae8d484ab83ef06e20e46d4f74847e2f838c98ee1c0caeb
- MD5 6520d9ab650c992b25c6467324baa2b2
- SHA1 0a1f8a830228eb8f6229fed60b1171b2cdbfa5c1
- SHA512 2d8be4db599f735869fc5e9f0357fb5559e828c551399eeee7b9530850bd23577d27d0554e13ceb43ed3c9e7eb933e5509c2bee8408407f01f966e6ca858609b
- SSDEEP 1536:K3TMb1FpPt1nouy8QgVr4lAivHzqJYVPlOk2E/tB1oWOPhTXimhBDSzHrnw/kjw6:OeLpPttoutW/H8Y5zl7IzPQxk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
267248
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
205KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/Icons/3xhumed-Mega-Games-Pack-27-GTA-4-new-5.ico
- SHA256 4ab5f334be47c3b92fa9416fe4add02b61b4a7e14b24de9a4f2ae33c9c0c25c5
- MD5 760af4148564e88a3a2cd3cf8291da2a
- SHA1 d9ed459d4852910d9de197bc0bc395f8850a0ba8
- SHA512 94d0428790a91ce002e87888aedab97d75a93bdc2956bf123fb5fb0bbea6e527c96adfec90b33b38b1e9bb62b6b0f6121cc0f176af69e88d0cadafb73dc39dbb
- SSDEEP 3072:hPwr/7bn8fd45gdJC844mpj3sRoLg2Z3Nsx:hwrX8Gi684jIRig2ZNsx
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/App.ico
- SHA256 382cd3997832491be248e19daf00e5881057c7a0818af23649341a2b97e12527
- MD5 a78a91ff7a8c59192edc05466a68bee5
- SHA1 18cece51be2d78e7c654983d97182a1545873d89
- SHA512 e9fcb7c33181ad531a12aa53ce7c66afde00578df9b3c68ad4aa051a44ddc9cbc450e19d3131fe979d9ed8a397ce1f712dd269ca85f993c59de856a52924ae2d
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Icons/BACKUP_RESTORE.ico
- SHA256 5ed23a9bb0e717bc7d3636939466f9bdaa30edebfb184649f6cd2d9218d57fd4
- MD5 1f8bdadbb094d27985c860361e6a569f
- SHA1 e9bf8b917474f1185593db5a2785cc3fd1e87302
- SHA512 1e530680e22be8ac66cf2617aaedcfc87016b5a31310755e8088c31398508f6780ff5028d3ddbb0a3a1a84efb4a2e02e2483f6c0422f9a6fa976a48be8baeb9d
- SSDEEP 96:T5WabmG8CL3uSTYgfZTabmG8CL3uSTdfneTX6abmG8CL3uSTdf04OabmG8CL3uSA:l93jtfZ293jkTXf93jp93jA
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/Red Aero.cur
- SHA256 45d0a5cbeb03f7937355cc33d0d5eefa8d5e1847146c0033c6287005cf46f51f
- MD5 2692500be0dc8c96058ed6b0db7f56bf
- SHA1 1f347ab1e37d85de2a5cfdd8b54805caaa46b0e6
- SHA512 21b7b0ed2fa43cf5b5eb760a6f2b9efa33d18368b4b2479b279c97021f1ab1f9dea22d4e220e32d1f8410d973a8a6adbe7a404f6287b43c29db9c72df20f6363
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Icons/Cursors/RedGlow.cur
- SHA256 5ad63ba2ee99f47beb562e2c9e0e28cb1934d8415dc2bddb819e8e9a6d22db19
- MD5 e7396bc8a74059edd8517756a7f4d3ba
- SHA1 9e12bb3f324126e1b04e0f7d1839edf1ebdbc9d8
- SHA512 d27162340f375839d6ef669134f46f62f07ee106b7e35947fdbab7a5bbe7784a9dfea504a7d642e024ddc70fbd7ff0c41d7e96b0c9bd2ee0656768e98574d042
- SSDEEP 48:atTjyVUjzo8u6B2rEsPHoTXGTTyOunX2DFUzadf0v7i/SrN8CDb7Rtof:atTiU456BuPoTW3yOAXEAvvG/bg7s
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/aero_busy.ani
- SHA256 6d6b541002d9e43ac165abe446a0fef6e5e4fc9e5b9719d574ce4cbd7b346f41
- MD5 1c2357bb6364b8bbca71a152c8d96676
- SHA1 d0a701edf60f538f1233ce8e862c9e197ff01fc2
- SHA512 80b74c72d5c5116d5ce617c2e1ad9cba62cac597f5fc837987b8259edbee344307b5fbf86e5531cd91be70498067a65afd048496cd709087c9332c02c79df70c
- SSDEEP 768:1aduEBSUp4rf3eElWNDz3rdkr4cZu8/9pjDR:EduSSUpCmECv3+D5/9BDR
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/alt.cur
- SHA256 d7a50bb8f7826498b5bedf73cb3730cbc6c4e3e7eaa5cf6ffe816893ea2e28fe
- MD5 ae0c7ee79ec017e2b7c612e54fea9745
- SHA1 9f71f1af333cfb6da0c0698bc0db6fff2e1c2912
- SHA512 c83306c94f007df4cd0f60d295730bab0a74f17fce62d21bf3d2cc980daa76b0b32f6c72e99ede3d4e556ded834f2bbf14aadf04a792125a989cf3f0d39203f8
- SSDEEP 96:bJ1VBeSUBpjweeYm4bl5cRbZBI8T0fvTzfDnWwDcvW3rY5PIST:bJ1bueQ3ibDQXTzLWwAvW7oRT
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/busy.ani
- SHA256 dee1eabccddfc93401a9d983a794bdf8939579870a3afbf9f9f698b3863f901c
- MD5 fe1c4f24918958773f6093e6d93f89b1
- SHA1 1b60bb92c7557c60fdc268747683571c5fb4dd38
- SHA512 67e2133ca6cc3af1e0b0a7858dcf861cdd295b269d4fff7dfa463f98bee82b0bea934e2ca080fdc7b7871ce850d95fe25837721ae872b99a23c2f4c03e544639
- SSDEEP 1536:fY0Jx0JF0J80JC0JT0Ji0JTU0Js0JU0JOQ0JIJ+F:fNJGJ6JBJPJwJvJT5JRJ5JOlJIJ+F
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/cross.cur
- SHA256 c6f145502ba6e806b2aba3d170ddf7dcacd2f0f2ead3855f060fdd89379d488f
- MD5 3f0d0716172724c34b0e258f17e3d469
- SHA1 39d01bac58cb99772aa540b675480d8484622778
- SHA512 5e2018cd9b8b018bfb96361e8d5c185b763adde4256cd58c197cbdb8457de0b491112c8fddd07f77b7095ba69ca98cb5b1da97abf3a1e4b9d19a9018a8d4af18
- SSDEEP 48:2J+4qcW6XqnXKsRv8HtyAZb2SvDdxpEoLjdkN0nad85RlD9++ytI4lIgggggggg/:qS+aXKsRvfAVddxD36atDWFIII/
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/diag1.cur
- SHA256 39eba50740e0c459b24b77379e63b07d607134e1fbfb97ccfdcea8307cdfc73e
- MD5 99ba63b353fdd0b5dee5252dd1abb04c
- SHA1 ed67753af8f1e33b5e8228ca2e2dde835194704c
- SHA512 50e18387a4ddde2e02acc694159916cb0d1879f9dc8eb39810ad17322e376d7f648c9725d03b7162bf653b1ffa42726735e75344062d0f3561c376570c8e23b0
- SSDEEP 96:0QQn+wazTjCMwixwQ/I64hISAYEt4jyp5TsDUmclKF9PmWLxXRPHA95h37:0Rn2ndgrSS2O14hA/OWdeDt
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/diag2.cur
- SHA256 61628714bbc3f757e0206cf41a255ffc5c36ccc8b67299c27b26f27a56c4d972
- MD5 1b7fe7a09976a77a23a96e5629b16f47
- SHA1 b7f8b034f4254f6b3207480a5d2b8e6cc3202651
- SHA512 71561b9a4072c49c2a00885ae53486a9d6fbeb92dcb5f70c51753b7b0f08b9835735b2c5779b89381c78c88a8d70ace33db1af7a1dccdd9a920bd63db52f38de
- SSDEEP 96:3DA8Q6LpbOXG1n7GD++gpDP3QARDF/JCW2R82L+V4yGbCrdNf4i:3Dbr9biG1abcvb2LVFCZ5
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/handwriting.cur
- SHA256 5f54b149505f97520b26811ad170748dc8bbd948dc78a4e34ad196eb7f3c8dca
- MD5 b99868c93fc9cfa14999164cf8343b33
- SHA1 064c5554043f589d0d0a1dfcf023ce91b96a8e4f
- SHA512 c7a900eac1fd476038b33653816f8dc1396900edca17c7868d0eb6ec869772d7f70a5f5ee364ab2756bb823d4157de2bb8436b90ef7d99ca4b8c084627ae4296
- SSDEEP 96:BBjBobyPlTw2GEA/C2A02U2Y282WFh+m1npJs/7j:flobOTwpEA/CEzfvFh+m1nc/7j
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/help.cur
- SHA256 0e35145b83a0d426e28c38fd6916ddbf7afce5082d9ebd6aee633e2d3ad08eb5
- MD5 1742a72200732a2ec8b7360ca0824ed2
- SHA1 c2bd911fffbfffe532528ecb901ca0038facfbfc
- SHA512 07ab42baff519e874c799d7f4c8dcbbf7f0b0a08fb7702d78bd5580bfa9a1e23cf4adaec71ede2e67b5b9f61df76872d7e61f5bb5abc4ac89e2c45d02c112209
- SSDEEP 96:RwkBwkBm+JP0VDtnCXurx60vW1jkO1ElSRm5ew79ql:2YVmW0VBnCXMO1HsS
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/horiz.cur
- SHA256 5ace08b91742025459c0a935279cd1c7640a7b408d8de2580f48d3c40c574880
- MD5 3431eee0c658d61161e77ed50ef3ec15
- SHA1 baad8ed214e700a9076b35dc614e83616a523069
- SHA512 ad91f41f7c0c271a5f668e1fde2c6364f653a8c96077f645211b7152e2da4470ba118e431f70b27420881f3e2a18d7242f54ab86fdfa4cee8a59acafb94ca8f2
- SSDEEP 96:iDOQHcVltPnFBCmc0bwAbz8M2SNV4h2G3cG/DRuPPtPNJeDnGE:iZcrVXtbw08M2SNuc+MPBep
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/link.cur
- SHA256 dddd2b06fbf96186610d7861731e946b4209ea711b55e937cb2993ed3e8787db
- MD5 04f058c3e5dd81844f139455de49ec47
- SHA1 099ce7de09115d2433f635c581d80b15284e0067
- SHA512 03ba74a985f1cf79ae6f9fc2c3b971daa8fa2b8a35025a996e60bc2786e3b3d01cf14115bac0658cc4e84039516721107e8427272e11937fc82a48d23641a4eb
- SSDEEP 48:RWXI2JHhM+BPhKlspZN/SjnUGFKVTnclbPX4DorlVPSROA+92LSfKTTRTFbdhKsC:R5oHjBP+srEjfFuuRqPKs7evjI4l
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/loc.cur
- SHA256 e028e45221b3ba74716a92c2503071fa6130a93ffa61e94bb523e493a37418d2
- MD5 4d55306d6a495f22431e18444e54f7c7
- SHA1 fc7c21ac9cb931fabe564e68909e1dad7e39021d
- SHA512 e2fa80a43373ddcb02d56ee6f75f2a2c31612384423916dce49cc28e3699b3d67b9944b32ca511113e74fa0e9ed28bcb850e2fb2644d3dd12bf42f44198cce08
- SSDEEP 96:RwkBw0Sm+QFtOlVfnqXurx60vW1jkO1ElSRm5ew79ql:2Y2mhglVfnqXMO1HsS
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/move.cur
- SHA256 4e263af9c6da6acde665ef04c591a3fb5370eea11c349271da1b0f1052e2acf4
- MD5 671deba680f7eb4c59b00a66597ea4d7
- SHA1 b921bfb541ba5a95e026e228c7f21fca84f225af
- SHA512 8684f9a5dab92dabb6dd1b7097fb5363248b51ffb78f5480af03274694c52f3701fabe4369af2cab2368f349fb2afb87350c0cb28c7b60abcc5efa3e2d4f9396
- SSDEEP 192:zC4xdVXlQFBXnbUE8Emf30A+VEKt92enviT:zC8AB3Q1EmfE3T/i
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/normal.cur
- SHA256 3b650050a0a13215a12547d9e2f2a622a2e8e844d2ba3960fdc049cbf3c84136
- MD5 5ac634038f11a480c4dd7d6db5f0c31b
- SHA1 5b3166753f4e0a27f192e1a8b5d1080aa40d2c05
- SHA512 50bf9783b7c8c7f39fb4042667c7e05d10deff74eee259ba8656b6a5a1a2833fe90b6ea8ce61b613d5a3c7f4ac845a8c88c3605405d9d7c15681acce45fdd03b
- SSDEEP 96:OwJ1RVo/9BDwA6+TGvW1jkO1ElSRm5ewRVvql:3VoFBEKgO1Hs4
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/person.cur
- SHA256 fd78764b887099ad44c0f1fda013cf6ddd1524eac49eea707f358acaf7ac003b
- MD5 cb98b0af84f4f9e450e0ef46d1286fc2
- SHA1 473069e3d55a07c5144f4e149cee461875547fef
- SHA512 db4e1ddd28aa773387a921a313fc08f6a499912e42b325d9e845ce60f04bf918f53299568a1bb04f3970a258e47f16d1a13da835955479382b975e73ac490ed4
- SSDEEP 96:hwkBwsoTm+FivJvJvIRPic4SNmXuyxn16yQuIvKtOSRm5ew79ql:mYQTmAiRR2GEmX8vKzsS
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/readme.txt
- SHA256 d9bca82afec636ba7770f8d678cba7be1837868685eb2500c1d7bbe646812ef1
- MD5 ba2b364660100b08828f640cc423e37a
- SHA1 684be4484c20c05db4de3c3f82edf6fa1a6754ca
- SHA512 d789542731e2131cef2dc6f590e90436204d8f60f69894393ce8bd347f17737e2af58d4800c7549c6e32c80d0e6f95322051c8aee00e2110c3132faf00f9bdee
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Icons/Cursors/text.cur
- SHA256 3811b5676a18475400313707a83d8749b673cccb2055cfc170283f0a2ada4030
- MD5 edec15953cf64c7d85ec88c884ce7567
- SHA1 668be4220a14e710c8e30c0782876d16b626110f
- SHA512 b104015636087edfb291e499ad50cbbc6138dadcc9a1ca43d4cf5bdac70f9d600da577d48d55ac41215369baf13323ffca72a73381cd0b516273fab567a96a43
- SSDEEP 48:2o4KDWEBtyiJdqCSnc1ZcBG5FQ6XPVA9jqbVA0190kQ280YZjyfYKzpezZkgggI9:5D1oC0n9YFjdE01x8nZqycIIIIIe
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/unavailable.cur
- SHA256 5c04941c50218e3615ec16d4bd6437577741752d1c3c1cccc75831b9912d1bca
- MD5 7d341d8fbd515b96bb829dfdfa72db97
- SHA1 93d594409ad1f5f95d3ad1f8bc3c9fd9af1ab739
- SHA512 603586d0ffcc5e6c792af98a5442f40cbf0207f2dbeee0eaf4c93f19b9be270a9b003901be8d2218e67786c63e3959d9299c235096bec0452e9ae28bee7555c7
- SSDEEP 96:crbNd95dCQKTelo5BtGCMQSKUkXDOIIkAOXK+5rEVvql:cVdRz5oJMQSKUkXDORkAO6+5J
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/vert.cur
- SHA256 cac3b488d4ab40594dbfc990342745349dec7847e40ff216fba2fa09619208c9
- MD5 7d7105ae6ed7f90cb5c215b03b397f6b
- SHA1 630a9de4d074b36ec943ed02d7c64bd1f66141b3
- SHA512 00e589d48ed29d97402bd2285058e1d6474e797411039b42bea8b2fd032885ff005cc70f0d26604b16295a30ec9d1aefc4e5473b2796b7e040d383c0df72c45d
- SSDEEP 96:zCgRtX1RGrUvOdb7L4AqEPhKjWVmiIGla4j90nIg:zC4x1Rudb7L4AquKQTnvinIg
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/working.ani
- SHA256 644ddc8735ba3fe57e4f30d67180438cb29a86fb50a35382c8fae33b805e6129
- MD5 83b24106bf0655b270e15917d707284f
- SHA1 1d387fd9877b5649a8eeafa464b404c6fcb587aa
- SHA512 39edbca305508a4e32a59dfacdcbaa229870e323ef0d37b5ab0dc9ff1698a8861c0ed678e21cbf00e621355a508783f56387ae7375513de7ccb45d371e77781e
- SSDEEP 1536:otZ4dZ43Z4SZ4qZIIJBUZ4QVZ4sZvGFwjiPb5B7ZIXJZwJP:2
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Cursors/xenon.crs
- SHA256 2b7c1870616264bcd7d025484357268ad5d3155a829a517fb2ea1835561443bd
- MD5 cc192e8dcaa44c433461b40ec3e6952e
- SHA1 bd22ee39b0a62efbe66c3d9ad05aa58da1ffdea6
- SHA512 adbaa88e4418e2a645d69173551043d713a2019b6c58aa222d90df805927f158ae586373a7d2612cfe006f21fce9281e85cc8a238c71e8302385e871ff83c112
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Icons/Hopstarter-Malware-Delete.ico
- SHA256 2ab14e9e8d45d45a201149eeaf9abfc07c56b7a74fab0d7919fca009a747166e
- MD5 545b5ffacc08973eb5073b865a92f76a
- SHA1 bbcc6847b03557a6ef1234d52a8fd74d024b8fda
- SHA512 13635380e08f5ba5b6efb5301b189142077ba6646f609fad84408b069ef7a95fbcd5e463d06b947e88f75b40c4ddc2e4051e8cc7e0dcdaf44694334014d20a72
- SSDEEP 3072:NjXilGd2uiGx5bDgMUaoUI9YwmOExu5oJ543nc276oU/4RKiMB:NrisiGbgDzUI9YROEx752c54RGB
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Icon downloader.txt
- SHA256 c794ac63bde0b98504e58d5200b31b7ddd3da2638c12d0ebfbea914a28381522
- MD5 b2df26ef7b59b2804354a9774acae64c
- SHA1 351f02cfb5c157e55e9930862490a48fb8daf6ab
- SHA512 aa1ae689dfc5ebf4df6c03c26e1e8a8687bc2330a547b5ffbdd2751e83d475c4a3ba337eb02be824cd954a757179c41818bd86590a41ced0b3fc6d274f9a83d5
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Icons/LiveUpdate.ico
- SHA256 bd5e5885e1bb2a64dd0d3355d9c9cabdecd717f21b439ad00343bd2f84857d2a
- MD5 eec1e6d55cd55e5bce9fa84f57c962d4
- SHA1 cfe506b6a350e4b3ac1035ccba7f047a4ce16b69
- SHA512 9d662eed5f3ca36f36d8c62725ab6761e5c584526c203dc0e147d198f55a4d09a143821c6dc36d5a2cff9711d4ac4127dd8d8659114166bb006bb35d00070dc9
- SSDEEP 192:RE7Fchy2TRY8hL/CgFjMstD38ZZLQoqONv3AYW:iCTWEvFjXtD2Zvq+v3A
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/MC32.ICO
- SHA256 6df836be41ebe1d9ebcb861ca6101d694433cf0f6a6d894289de81660c5d1e0b
- MD5 a87b1117463afc25ae6483acb975ed01
- SHA1 aba2a31b6ab821f8c594e9e9c764adb3e57ffbd6
- SHA512 430706b6a1edc68a18d4c11152db0eca2c959f8cfc1ea7230b6e5c5e4913064dc2850f41c947764645530a4c44444fab73bdffd80296fa2e8d2d336a56c65525
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Icons/PC_Protection.ico
- SHA256 51da2340872e1c122ad6d00be3cb42f056b0b94660e81069606493a146f40f05
- MD5 b07ab11c7b49e4d3c2e92b33255f28f6
- SHA1 f46dd73a9e764286918763af1747b4f13e4abd1a
- SHA512 f42383acc9c5359c6da005462bb579705bd62ee0021fad8ba73ec1be11a40b23d6690af357718bd9cca60e640814f7f136b46aff2fd4375e9bdb536efdd09909
- SSDEEP 384:+jjjo5VuQvFuApTuIpr+EBkpqe9Xv7gUj:AU5VddhpTzpr+EBkpqqXvkUj
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/PayPal.ico
- SHA256 51ff90941f5b8133f3f0e01db62ac65bb8a87ac05a5672f5ab0a36f39bdb3ca2
- MD5 9a3d5545857887211d50a143c45f67ed
- SHA1 e3db18b4d1d99561bd6a3fd9503c3c6f98ec3a77
- SHA512 2bc6444c82d1a6c03ff0027393faebcc6d227e3eea2cb08c2384a1d1bbf7ae51adda38f0be184a8f9aeaa64ff71bae1fc52f22617b5a1d7410444e74a0a674d0
- SSDEEP 96:x2yJb2gcP2Xb71mFiWQqM/Mkzs3P+scTAL1tkVgtOqltGIbI0a8OQ+ILWNKQ5u0s:syZ2XP2Xf1mFiVkP+scMRtkVgWIkA0s
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/ProgressError.ico
- SHA256 4290a41d2bc74badfb8f6382e2f16eb2871e4637abb3fc4719896598b5d226c7
- MD5 52a8d17efb82a9362789845d2c2f5538
- SHA1 7ad1ca40d2d3ddc6a5ec47d32a3048a62b7ddec9
- SHA512 3090cad4569166ef163d6033200d4b63e9241380808ade076de751738bef8c60241bf99a5b4be785625e3c500e1650dc3e8122060f0a87b382215e4ff9a179c8
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Icons/ProgressWarn.ico
- SHA256 7bbf59dddbf3d98b1633e9c19cb88586dd1464ef58b1bea141a03c5d4c8168f6
- MD5 ca5144d9a6b0eeca14260480f4b1fd2e
- SHA1 9b153988cb9157b5810cf343c81ed83bf872bfb4
- SHA512 488926cc6adc594fb0838419ffec6be70b7897ae841720739aba4290e88af9f4a0b7369c4d391080aea6d5ab1dff37dedb174a096e1a9afca836a0b30ce30bf7
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Icons/Shortcut.ico
- SHA256 73dcd708f55c399a150e39165f5b7fa74a04f577145985eed08946f9d480265f
- MD5 02442d7db8bdb35bdbf0de65507c0a87
- SHA1 67d93cf56a8d0e5d78284d42462fd4db1646c166
- SHA512 1c66a98ce8d15ca3fdc38d81bcd3e0a9cb228ce1a3cbac769fb99e5623d7268a0363291b09079989eb46756fc59b0836f6cd82066d8d72fd73ba501b9c5ce920
- SSDEEP 768:yMXe3rHm9P3IHluYe8x7KJRo7azEVLYA/RRN:71tkHx7KQ2zEVEA/RR
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/SuiteIcon.ico
- SHA256 265ca15283593e65b6498c8224b31e495650afcfd87b77035bb05bcebee15025
- MD5 f7c3d418c23b80149f0facbdea19f2e0
- SHA1 84734e53d5f7bc6c9d515d6d708d585adecabb1a
- SHA512 58b1a335c24c6cdf96164275155c5aa9bc05b6f13242ec48efd82783917dd4087f5010c04656fbbd412135379fc8119dd832dc5bc865487e920762c7d806670f
- SSDEEP 1536:A/g3GPi6ZRMnMyegTt/YkS6uMs1irGYPnAn:MZRMi6vy
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/VAN_Logo.ico
- SHA256 08e53f251e442ee2f6846819f37ed188db3f5d6d45373f935ac639a0fbdcf4ad
- MD5 9b15ec874e77526b4a13a9b1c6886168
- SHA1 acd32b70397ef6f0781e866b09b3e224f6c0b035
- SHA512 6522d8b4f10edae77e419772edcd9f7eea8b0472490e8c67ded02564d969b21f5974c5c72a19ce057497d8b9b52953ad436d5043f15a0d16d51a08aa63a3321c
- SSDEEP 384:+6QYnfaIQ6gK+yN4K6TqP8MxCIupH8+xqoQnLtdpXXbIuhsDCF5p:+UxOKTPXCIANQn5VFb
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/Ypf-Transformers-Folder-virus.ico
- SHA256 ef2bde5778e822e8ff7762b9ddb2e93607781b86b0bcef78b134dcecd298c4ae
- MD5 9e7f2a6cdfdabc572f23ec1ac323709e
- SHA1 1698926f992ee122e5be86c96c4105f63f72f400
- SHA512 7af62b5daa6034ed2a9fba3f4232fabfe84232faa8fe7e22353818953bd44c09ffe3724b576ca7b39722ec14dd81fe18f3c9a3aa43369d7d0b5f3c11c7c20880
- SSDEEP 1536:RNh5YCEYJgH5r3W0yHKL6VaDMGQtBzdW/sgecgfntcf+OS/lF3h1wBMhEjkkXsop:/h2CEKgRFy6FgGy3lcg/r38BMhnofgI7
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/advixe-arp.ico
- SHA256 fde4237f56cd3c5568b99c67d7ded97ed9ace6a72fd66d4b73d733d56e2ae574
- MD5 cc40d3e958a89ff8e370922a078dcdba
- SHA1 07900acb5f9f5aaf7653eaf68cc3647b7ceaadf5
- SHA512 a7d570273e096ee6939484875bbb6ef7fe14c2027a6795adac7c953c5b2379c78b47351b36b12a02dc7aa7c5c774d3f82980cb71717c4535452dd787ae176dbd
- SSDEEP 1536:Efn2nOvoJ2UMwHuPf72AnCsg382ul+nuMx9Yao4E:FwUBOPHRg382+mu+o
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/amplxe-arp.ico
- SHA256 87c541a80c338a2c9ca785b4610f3db7c97b941b17a3a8dd642153fbef7cd0cf
- MD5 ccaf29bbf4c3061a9424261d9582a260
- SHA1 2d0bf319f12d6c9bb4cebe62d87866b132c7710c
- SHA512 56352353ec11f7cc183073001ce946668777f0615e594a84c27b10f47cf4e4be785262bb9dfb2d201c1f0d58e19abf41d70beea02c62ca5d0e3967c53b569000
- SSDEEP 1536:EsRkqIAvR4r/36MtbGnITRXGv4AY5MVHrzj9TWXewK2MPkZ36aAgWkrf:1+NRWgj5MFz5TWXewK2MPkZqBk
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/apple_ipod.ico
- SHA256 49c3682d297715c327c3a8663ba5bcca257a2a03e87cd109a4b29d6f93de910a
- MD5 d89d6936c68effcaa01f310b24ff5275
- SHA1 b2a4b7dce72add5929340f9f43a2474c0d46cc4e
- SHA512 d691b1a88396b9889a6b5d193e94304f9aa6cd6e173a115a09ba9db4ddfca2e3080ba5f4ce3208dd3c60e7ff0c83c100978dda96b1e5d997d854ce67edfa6c06
- SSDEEP 192:vQ5d4FNz0FllllllSmehbZs5Ljjm03twellX:vGkzNZULO03twy
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/asap-utilities.ico
- SHA256 1673f482e8ab7e6a766c9a554d123acfff07ff2ae3ef07d99e2209035bac3c80
- MD5 eea1ecd18ac45d26be7ddd9266a0175d
- SHA1 dc5401db2e43d46b07d246b9995838dccae3be9a
- SHA512 b18144b35ee23a8e4cd7c4884db4d9375d9fc53c432b13f04f226ebf6dd4b473259048602206a042e37ebea3a5ad46c7db265ba03f229384cd16b414ea2753bf
- SSDEEP 384:4rlZl+n4rYuBv2MPqLicZX49Q4IvbUkZKSI7:oe40Z5149+vbDy7
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/bing.ico
- SHA256 b6f0864dba0dc78bf4d551073d793493169659bd2d45349b9b5ccfce4cdeed23
- MD5 14532f2c3b9ef902a712150efdc3d7cd
- SHA1 3d4d83d653adea4382e3d20cc4ab0f6bc1f3a0d9
- SHA512 f4c218827e84a84fe58c232e47fcadece10f3050676ae7e0ccebdbf44c14a46c59cfb64ce48c339042bc5a90e17fbbfe6cdd9eeeac296ff67387c71497ce1a5f
- SSDEEP 48:Pu5P9er8888EjNLlsF0Y0hnhA6wmm91g7mm7zk4mXqvo/RZE9db+q++++++++++S:PmVer8888yN5sX6+4YPadRx+AZE
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/cursor_121863.ico
- SHA256 2a8374c925eba93cbe57da1d832f5d8cd7b8649154f1a5b484b6e97401381a0c
- MD5 73c4d210529c02f56e59510c70ee376f
- SHA1 821e552514c940beed05c3da7ee791fd382a70b4
- SHA512 2101f2e6d61447416455b13e553c3ab6f1139a30f164d2830757eb1d84df47ad9de2141766a54deb2ca24db705ee775dc51d2bc5310c889e801ed997487d03e9
- SSDEEP 192:9dw5cp/+5MzT5NDBUk0EUk0nMudZCon+5HoD:9dw5cp/+5MzT5NDBUk0EUk0nZMM
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/dell_digitaljb.ico
- SHA256 15e39139412342d28781f6a663980ed126ebacad836727f3fd6ba417bcd1a662
- MD5 7d86969972565ecf75f6b2e02aa5035b
- SHA1 5dad6d3b549d8fb8ccb7521c3adbb50203e52105
- SHA512 5ccd5a67345e0ce58ce14969c3994f9cfe63f154245ce93412a0875303a42da71a7d75c29902e7cd2394ed6ae9ea7ea1925780d0119ea18d0d33efdba11f58a8
- SSDEEP 96:OaQTB76kpYU0f4/TqPsTMb5ZmLKm5W5gM0lFHkOIw5RbyZgDI/wWCKsZK/1yQ9ih:OlTBGkphJToZmS00FXhsZK9K21bG
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/favicon.ico
- SHA256 027c50af7b6a78e715d47fbee57734ae129aa4c43d815ae5e9b600d816f800d8
- MD5 38399a9b122a836ff191912fd620ee22
- SHA1 63543682777ae5d5cd4279dfc018c2789bde5d4f
- SHA512 bfced14631f3b2f494f998c824e0841e9549030f30dc24eb29cc3be5fa6f0d0b4991b560474dff4dc8b296ae667b95cde8e867890ccce244313bd51c1731eb68
- SSDEEP 96:EQ9kKHtt6YmjcHgWGslkJ3ClTp5RDjI/5lcqYpNY7FRnY0BtPQrM0mWudt67j:EQyKttBAWVlkJ3gjI5OjOW0XQrMDdmj
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/inspxe-arp.ico
- SHA256 dacb0810a341461e9f5b5a83714c39745ca12bf8119aa83171e6c9bc021d4311
- MD5 a97f78641fc72f6067c361428ed872ae
- SHA1 15b47f88213fd1b2b293d7ce0cce57903b53bf01
- SHA512 721c1a345cf637f23736c78d46b2dfe69fbb6ed1b249afe020e1499edd0bb8c6970ab7e37d9c3e90ff8b6be8abcb178eb0594225591a8306571d67effb6c3fc4
- SSDEEP 3072:w//Y9U/4sDghLfMXwsTylV7ldKV3i/Wtn0f5xgxnd:n9U/3ghLUFuKA80f5u
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/iss.ico
- SHA256 653bb8d52399a5aa684033b4d44279b5efc72af628c1ad94625f213c22b1b781
- MD5 41cc512ae81ee4c3308fa2931a5de7ec
- SHA1 0bff2a15ae5fabbb6eb319dd33945f3dd764a83e
- SHA512 22083710c631c15dc66b1ba432e1790820aaf2730a3f14040db8b6dd2a5de43c7be7743fdf1179b7a5fd8b61f5e56d7f3f6ebe0000b7436a417d34a1ed9fd0e3
- SSDEEP 768:pwYyyyyyyyyyyyyyyyyyyyycZJpzGDfU2eZ1PFoZbGE6sl:6TZTzyHe7P14
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/lethal_virus_browser_website_webpage_icon_124645.ico
- SHA256 fa7ef74e118c71e9386e074fc5bc91f25133908428e9d8c8c0d3198d6c30745d
- MD5 30712297e911fea83ce107f80fa5f2a8
- SHA1 b361b55e9ed02d6b72c538b7e7ebf8a18a9708f6
- SHA512 995b320a44be06db1e8995a5524f61286db0e7e0a97ca415f2fb3eced156b7bf228c465ce50e3c59c2bc7bf89e3ddfd71998199120e2d4db5acd609b99d72aab
- SSDEEP 384:BBSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSJiZNNNNNNNNNNNNNNNNL:liUw7bTCJtk65sgAUhMGdpqssss42
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/mylocation.ico
- SHA256 96133d046e0fc6c849e11efa5a2f16e0782ef9d0df8c65d6e81bcaedeee85211
- MD5 eab0f16285a4ba0776f5f2d20a02e927
- SHA1 e7ee96efea904e6142e64a351321916270d68af7
- SHA512 47ad34bbd7c481975ff89d19b95118b5e70f02c7ea88bd37b3395b58286905a168eb7fc23027368cfa83686558dbc79d1bfc87eff1fa70a519c3b75c33435ad2
- SSDEEP 96:1aabmG8CL36tN8yjuJM4DOIPbXrmTJzQHKzntkgEO6JM4Dwc:N93CNjeDRPbbmTJdbtnKDwc
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/padlock_78356.ico
- SHA256 2192e36ad1746e4bc60c80db20160936b57b666ef488e7107f7f427653769b44
- MD5 8be407deab8b6fc694a884a8b1882f6c
- SHA1 617d99acb45e2936d50698241421bc12d7260f77
- SHA512 e4b8c3458891f9dc6384779643e71ee907ab24fc6b68d53a0e418b069ce50dd55948286c3fa29c83e9efbfab4c0e6ed137865ebf7879d520f48c3e26e2bc9ca5
- SSDEEP 192:tneAUHm7xKz8Hoz6cavlkFk+InGTEh4hClOLJNrsB3Qum5OiJ9VJSiVxV3M5IQqt:s0uV6ccUhTK4srsOiJngIV3sURjf8G5
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/pdfforge.ico
- SHA256 54038738b2da0cd4b83043d18284e4eb470dff742f8b02f296b9df2228ee1609
- MD5 8f1597f43cd39bbf3a985f66df3af563
- SHA1 6d201b868ae2bf777ec56a55e0096c139f0a2867
- SHA512 44a3dfab1c35b04d256facd85c64ff5bafe5fe3f7428a83e82bb20c9165505ad51952f07e4a2596faf4f2bc5fe78188541d492ca63b652aaab6de461361b7ff0
- SSDEEP 192:9NbCWzBIhXAmvLtIcb+V4mI+EYTZzH+TMI1MHAXKjprRXL+p3o8I:3hsrh+OixTZzHc71MHAXyprR+pY8I
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/sqltut.ico
- SHA256 63bf6c5c108f7142497aa53822d7bd0da666c35b05d38fbe5fbc3c790a482c7b
- MD5 9772f39373044209556c24244b2a9078
- SHA1 d446afabb12c6476762fcb26d44402cfcdd3fad1
- SHA512 9ee981e8d1fb5d83cbd0aef6632aedcb77d29d53aa835f4fc0ceffd08c4a9fc9617d43cf352dc122a47b4f62c1b39a10c45f796969bc266c7d7f112dc9b6b093
- SSDEEP 192:hy/gbO+QYJtJBJmQxZ1OI9WNQ9729bmoJDCCQmbw:hy/AHBoQxZoI9W29729CrRow
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/virus_icon-icons.com_76805.ico
- SHA256 deb114178ce5ffd0a94899d7cabbfd8d190fa02e2c1c58cbaac4458839cfa719
- MD5 c820eb0270729b2b0fcd92a9a1d1ec36
- SHA1 0d82540b6dce77c4e98902b4e40410a2c4622cf1
- SHA512 e06851e8a926ec2187b0f15d2fd34cb5a7944e6c03691593703cbe16abb440705580ce0db28ab2ecfc155ab58bb4adba82ec7df59cbf3ffbeb3b912497556da5
- SSDEEP 768:CJH2efrHPFOf9XpVyzmhRu/Ryr/mwFVZt:CJWarHPgfxTyor/lx
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Icons/wmdm.ico
- SHA256 86219c4221bc5199999ac4addc2a25920e3fadc01dd126ba0b64e95a07881aff
- MD5 0bef21f01919cfd0eeb8dc2b1620dd9f
- SHA1 1d3af2f7ee5690273edfa32d84bb0dfd89f42ef0
- SHA512 f2209b9f84afb921db60677f89e9ec127bda4bbcd9f9658b36a5b588d9befe47de0535e2b2bcbdcf3fb0d8af1cd793324fc141afec4aa8198dd90e8b2f3dae22
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Infamous Stresser/Infamous Stresser 2.0.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6381c7f6e7522ead7031b7bd5285813f042c96b5e7804a3a620463f620d1d4ba
- MD5 25190d3916c71683df1a96760984244f
- SHA1 a4fa0538f563981a4cfdb2857eef14ab976a8641
- SHA512 4d494f53c18db3dbe33fd3c0edf5a0334b8306e4b3b11b7713b62ef1694e0c5cf6633609ff641ea18a05974f7028bdf2b06e992782be21cc66a9c971f894c4cd
- SSDEEP 3072:aXaAgTiHqPDLZRbpWHRYg8HVM43unr5e1yfS9r3hqXDz6zjQFKJSQ8gfmQVaZ00Z:BTa6XnJSQ8gfmQVQvXnJSQ8gfmQVQtI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
193534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Kraken.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 3c9660524b7579b5d93455727bab4339f55705a5dea3652ff14c757194fb8306
- MD5 0992f76d80edfdd3817a64f8b7f76f2b
- SHA1 a3c655ae31218b54e5996b3cc33a9970670f65c1
- SHA512 a2e0660006e3e811dbbba82751081df661134cbc2403018d53c32b0fb35710b1863a00fc134eeb6df6e7ce832ce1f1e660246ccbb8b3b35aaf7e7d3c9b3a5f69
- SSDEEP 1536:rqIxYs3cwu+DyGsCLhDkuIRA/IqYUHtI/t0Bn:rqMvu+DyGsCLleRA/IqDHtW0Bn
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/MaddStress/Installation/Font/Firestorm Regular.ttf
- SHA256 c21f082ca927484263266baba1b37270b472219fc24bf32b11aa99645922103c
- MD5 48c9cd77a0938b2f478b33ac354975fb
- SHA1 d009b09c2ea7a44618275a38e05a952792af0b22
- SHA512 b697d7c1930cc4e19d008ff8bb85f728cc494cd75e3815ab1a3c572f8b7850dd06425b366b530e3b8d7e346ccfd9ebd57791c1473b5f827c2aef1e001688615e
- SSDEEP 192:Si2snx1okZsZu60ZkGa88QP2mglYt/XIttvJ/:ShsgtG2mgI/XIvvh
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/MaddStress/MaddStress.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 923315ae29fd603342611f4e9e1e18d691c917df609c16302ac41d1cd76e6ad7
- MD5 52c1265fd35131344319751559bf464f
- SHA1 7ae2e15851f16b831aab1333ce50f00b5b638902
- SHA512 9b6c2fffa2a6488cbc043475349699c132d31e65dc5964160d8434881940e54c2e2bfd99a79aea5b097a28ce44c5d83931ff4a005ffa1759f87775a4c2bb21f8
- SSDEEP 49152:HVTfTZrWkplnv4G+hf1ziYggtiidnySrarKA6/lY:HxZtplnvL+Llg8iihySrwKAJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1843850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/MaddStress/MaddStress.zip
- SHA256 cbbfe50abd4d77c9656a680f48130e6ad8864b23b467f43adf9649ef83a6134a
- MD5 25b9b6defd7f056b407958acaa5057c1
- SHA1 ba90e6f0199674c3bb1652ed9b5fc865f5bcfb37
- SHA512 f1287c1ad70fa45b2e1ef08267bb2815c64a699e72a600d8c0f2fe98d265deb630dcc3020a323f0987ac2019dfec353aa692c7e415c64fc75044219ce31f1089
- SSDEEP 49152:44NDbvX5+eNznr4G+hrDniEggLUi/XScBKr2G6jtYQh:44xXTNznrL+dvgQUivScBA2GFQh
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/MaddStress/README.md
- SHA256 ec45b4228ad75bad72290cf44b189839b6b214468bc09ee6acace8dfce6088e3
- MD5 1ad83b85a49c769942764fb236654e6b
- SHA1 605d872e405cda84c0b708474a35b7600a841c9f
- SHA512 2c0523509bfd8a046a92483a10cba44c308289f12531d67f426cf8e9a5de89b229c22e53471b39d262ae61af614232ddf8601846f8734bb95c80c88b848a17b9
- MD5 SHA1 SHA512
2018-Malware-Repository-main/NNEmailSpammer[Public].exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 44669c4ed1a0e320a86bb5048f43918e3506658dc8e30e316db5ad8dfb9c1d8a
- MD5 08cb9c85a45ef2f291b4031e811a92ed
- SHA1 290130c5cc99a4183187270c2828ca8a46cc7a3d
- SHA512 25ab7fa08d4f663c6d33e8ca854361b0c343d03052375851a54709a8150369233fb788de4a7e35e8f890c350c8f084cff1d5b1f16fd8c99524d33ac1fbb0169b
- SSDEEP 6144:Ov2P4i+sPoPe8YkaP2P4i+62P4i+p2P4i+f2P4i+WnROBfHp5S62K2P4i+:7pPoPhxa6+ldboVpk62d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
580142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
559KB
Virtual Size
558KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Pro Dos.zip
- SHA256 cefa4a16c17a5719feaecd5d011d72cadbc9b45d1062e84f3abb61fbd89ffee8
- MD5 92736f245505e1a116a24e8bdb0bc97e
- SHA1 812fe25cd421f6b1fcca881e420aac4a612d0d88
- SHA512 f92f65d64e6462cbf56e0e8a6b87292e5460b8587f7f111301339feebb2dc3a79abe50a231340fbdf29f2d2eae2ec3c722260c424a4299e5714c52ae45f971b9
- SSDEEP 24576:o11BGbW07RRzfnUNkjWQFXRo+Ct2AXA64HnjU83MtcT5WyGKMC1vlds:o11BGbFRRrUNkaQPo+e2Aw6kI83ZdeX7
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/README.md
- SHA256 58e481f3658ee0e70c90efedc21ff6d1d04e6424773a41132dfbaf9348d53721
- MD5 54bd99b15e5a2c704393da23ee5779ee
- SHA1 07d052e2e15bd33e968b910a76ae2706a07afed4
- SHA512 f4142610cacbcdbed7e441c308d7c5d0a5345584668a7f556b772b5da1f541b59a261825188a674b0e770b220bc659126c02daf1bc0d7e517471595acf843c3b
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Shockwave Booter v2.0.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e8e3502a3efcbf9066a9567267c8d502c0fa700aa2c28a462bdf01f5b76ed4e3
- MD5 1c72942961917ccf4fc5be1e823ab4cb
- SHA1 22b121e28b9032de93b78a35e5c959409dadd06f
- SHA512 1f82afacf464bf69d7a9e873760df904b83aacb99d4d15b3790c36577283f5c630fe1a4c2d2157726892a7cf33864a20faf4f97ef57d5ece577f4d657b702432
- SSDEEP 3072:iBLrUT/xMKVFXy/kURpUPITEN6AwZlv4/xMKVFXy/kURpU8oI:iBLrA/OWly/oRw/v4/OWly/oXI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
189194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Slayer DDos 2.0/AxInterop.MSWinsockLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 42034b2287108f41a081e220fb5f47554c8d06088a9b5988755929d0f83a4e8f
- MD5 54efbc05d29b0f107741ed643dcb5c68
- SHA1 99e1406ed41bcf30bb475c12c1280695a711ed92
- SHA512 b58c545e963107dacfbe10f81fe34ed4b4fbd8702bc5dbe48a455c35067f18fe1e44c1fa335f120c852ba133b03bd641461cc412e4c57a9061051dc161b3e1b1
- SSDEEP 384:kZlmDztlW17+CXSaiMfPrzpk7qX0NUaJcu:kLmDzv69X5iMfPrzpk/gu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Slayer DDos 2.0/Interop.MSWinsockLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 60df4059541c5de498a619507001a78c2c20956486e321073da66046622c73e5
- MD5 343ec1e971305f4b45e8cb168cb2caac
- SHA1 0391b898453363c909beb211323db8a1c346cb3a
- SHA512 2dd565ffbdcc7e91bb8aa91b4502ca4754672438f788ac59a32f695b50f32086ba6c2b801099ccf010c4c29890a454f6925065b11dc683de1d6b9d400eb6c555
- SSDEEP 384:RdAen1li7CJnr2xOl4d5dGhKWXYifarwpA3MZw1+yX6r3BbBmot9cLHGQ/:Me1li7CJnKxOl4d5MvXYifarwpA3kn3M
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Slayer DDos 2.0/Slayers DDoS V2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ea7a0afbb2505369dc707118c0ed2ab71f74bcf4ac5a5b0f983156ebf5305487
- MD5 1e0a734de2050ad96e2b4d1215ea8b10
- SHA1 4aaf904853415ba6357ea2b2240c7fde21ed9a56
- SHA512 3d13806ec55e8ab92d0ca2efeea9b6dac557ffbf1c117186b4fa787edbd14e15f83afbbe6cc155cfb723d7c478c1595ac048e41376dfe98c583ef6c8a243959d
- SSDEEP 1536:lo3c27ZVLBpg+6012O4ysmQqk0p8q8VqZ+W+VtwsGf0NGCfyvJTwxRn:luc27DBp005p8qkC++3sNGCahTMn
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
139374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
128KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Sprut + Pega Ip - DDoser #6/Multiple CmSSite FlooDDoS.txt
- SHA256 2c8e4a7795437f8ee35b1ca79df36e5ad61c5cd6005fa367a48a5506a0daee7c
- MD5 b593e61c96beda6b419c33d3193e04a4
- SHA1 50bc63e273e21c14fa69283d76cadf308d83c1f9
- SHA512 9096c82468589829f0131d52a4f136f0538b970c6a2603c98d0ff97c2d6bff2d3ba3586f6b34648c0008ffbdf5de5e93c90abb6ebea3617999a8a440260ac483
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Sprut + Pega Ip - DDoser #6/Readme.chm
- SHA256 fb037e9d414af060032c6d01c9608e4869931d30bbb9dbb66fd9f98db55581c5
- MD5 c9b2db0c6afe137f15c8fe534505a285
- SHA1 c1261b1f3a8e5e5f9972382ab590f4771e8b3e95
- SHA512 167af2e436d8355ded40a09a718597913c7430803aee0a9e1f95e96d5aa10cda8f3d99d75c07296b98afdf93201042eee6da2e7ed5e741cfbfd9472e7c67cab9
- SSDEEP 384:s+417jb9oqAkgr1vUPLZCYWMjaQZo9pDL2D2cV3BnTfV1o++UA:s+4ZBWkgZcPLgYWcu9hLIV3BnTfoIA
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Sprut + Pega Ip - DDoser #6/sprut.ini
- SHA256 5eb3bbddfccc7b53e44f3ff43eaa6a43c5a62e84b111c89f58a7403ced976f1a
- MD5 d998dd4cf4613517630ca63f5a88891c
- SHA1 989f8409eaa6bf8aec345d4c15d7d93f64e479a3
- SHA512 8066092ca344f46672626389c4c08bb950451d2e73b8b3e1bf2eb3657cb5c68f99aab7f702674b592bf044ca1bb7b1ada37ee5a9c6dc89bd10d6f9d6dd056751
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Super virus.bat
- SHA256 6d8be578157e3b1403c754d43b841e3eef1d03afde9a43d2f27de5e3154976f6
- MD5 f4a9f35bedccc6e4e9abd9279e090ade
- SHA1 d7081379faa1ab5e07dc11cb64545640729b20ff
- SHA512 948a0173441b0da59522edcaaabee77cc08a3288427b55a00c94dc0a50a261e66d743a2642aba8a541146edd6524e5998e72aaaab8a3ad742599aef3802a9edd
- SSDEEP 96:smDIS23YEQpLuLpDqUmDsYW0LGMJi7sJEJxaJeJdHLgLxkLM4019AU4c8cppdDm9:v23YEQpLuLpDq7QYfLGMV+jasHHLgLxQ
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/TeV DoS/TeVDos.exe
- SHA256 7994d38e14fc1f576c070022473bf7f32250c69be23da5e07d634758f8cc4e59
- MD5 94ecd2db28320bcc800e5e1e96b0fdf1
- SHA1 f06e70b24897a578985e336bfea6fdbbefe565ec
- SHA512 ac765974505965096b237d1e8257736ffe9c48bb5238d9919fd3015fd586196ebe40f019afd63a4787064889a2c79ac2dad2dfbf9edd93d3a785bf3e3617925f
- SSDEEP 384:gQkZbV8i+fIZFQyZpz0q7bYKkxRjK36ct14yvXbB75zusDaNJawcudoD7UmOv:DGcAPQIpz0Mb18Kdt14yvLhluDnbcuyU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58160
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/TeV DoS/bin/src/TevAttack.class
- SHA256 d9f87aa3bb61af83a7525bc3794a81137b73bad47021157f77ae1e1cdec05f95
- MD5 2a1c55afee03257d42e09938fa96816c
- SHA1 d6718dbe9c8af38875ecdfec8a43ba434c7b4bbf
- SHA512 5a6eb7718395feaac6df1ee7654a1cda30393829697a08bde35c08dcf8b8777e5b1fc89af1873432bbccc132fc0ced1032ae78550cf08f7a40e6cb14dea904db
- MD5 SHA1 SHA512
2018-Malware-Repository-main/TeV DoS/bin/src/TevDos.class
- SHA256 4f3efb4a4e0e0e51158b1337fbdab07c414e3f545406f8bc852b90d631bef376
- MD5 e52a36ca84898f3388a4d3e96d3e22f1
- SHA1 53224f1377edcc9eb62da6016b479dc01b00a35f
- SHA512 bfe8200642a56eea5bc037850ec8efa5ef8cdab0dfbc1b2019241a745bfdbb0576fd21e06eefb397a8c3acee77c1098fe59b72deaa463823aac35518a711bce8
- MD5 SHA1 SHA512
2018-Malware-Repository-main/Tsunami.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f8e778f7996a1199cb663b5f9da8508ca51e9a68425e33c31458f4f0721bc483
- MD5 c5371e23de704dbb285fb2cdb5bf3fc2
- SHA1 ec7f649100f12fbd7f5cc9c3439a093373a4787e
- SHA512 e8ad3777ed3f0ea81146e88c04daa3b67b2b7b0db50e735d9773389eaae659dd7dfc169cd152d7bda2a138e6960b0745cde4c0d36b496b118c6fc6ff6f60d951
- SSDEEP 98304:tTwhoh7/S6SGEIOxFTwhoh7/S6SGEIOx:tTwhoh7/S6fEIsFTwhoh7/S6fEIs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8396618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
8.0MB
Virtual Size
8.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
363KB
Virtual Size
362KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/UDP Flooder By FKN.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6f755053bcc70304ad806ce039e9aa06fcbcff192124499b16861cdc5259348d
- MD5 6e1e88b43b1dc54f36aa4fd2a4167e2b
- SHA1 79b80e34892562ae71a42297857c7403baca1b3e
- SHA512 fdd003c64afc044d5f864b7cb343ac751ba653ed7b5abd1da64d2f9d9c8da4f254c29038f0491a73e773eff1953a194a9b8352be9d935aaf8e6d8293da1e4e08
- SSDEEP 6144:/raujeTeI5FVdbi02zmS0ehbYfVXIVZ1KHbkr9uulUChM2Oo+JmQAgU0Q+XriqGK://joe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
128670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
118KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
330KB
Virtual Size
329KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/VIRUS001.TB-master (batch).zip
- SHA256 343efa9c858f1c03c103a9a0e7a5db36ac48ea9039cc17b697a32c2ee3dcc457
- MD5 093dd9b85fdb64b7a9b7e4aef3881b17
- SHA1 b60a52ba5ff09668a49782183646e7a512dfe8d2
- SHA512 570424fc159562cbdc1180063f9c6caa4a92c3b7d2de319cd7e3d4353f9f65dd5350510b0e2891759d77365e8b073f70dff4296b65d26b2be67ede8482b91f56
- SSDEEP 49152:F1H01x2VVIeOrvUpx/xcWVAbh8Kp4W5oU1H03Rejn52SdAVF0UWXtO5UM:F1U21cUpXcWVAb71J1bn9WT0PtO5UM
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/Virus Maker.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 16f14bd60c84a7838b99c34a791d5d334f08ee1e588c95162290ced38db8b092
- MD5 c00845708ee4e6cbaa628a0886076c4d
- SHA1 e011d28a40304957961654e62d00754a772fdee8
- SHA512 2b6a09b934ad6076008ad1b8bc960b6c3bf39968275f9f46fe1afbed7228eb196b46172c175106da70af80ad78aafc327869e71860af6472c74867dba022fb59
- SSDEEP 6144:GJvHYJvHYJvHYJvHYJvHYJvHoJvHYJvHRJvHulhfNPpXomiJvHkD:kvuvuvuvuvuvevuvjvkPN/Avi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3459790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
366KB
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/Windowskjdfhy
- SHA256 2972fb259c30cadf230090289fb94b1e1c5aa18d04e5f7d0e49164d79833b305
- MD5 10d8202927d38ea100bff764e63861be
- SHA1 1a89e6a3feaa76ec3f6915dfd1fb4ebe902c8817
- SHA512 4286398c7e0bbd777d4632387b03113a155f48e1d909175e8c83f5fb6d4fe806bf5e6aa7c6ac35041eb93b995c77cff79137ffac76400566dd7bdab165bc4ea7
- SSDEEP 3072:jqdFy78eBqpxcsRjMNlazKEoEjWiovE5ZOnMp9QqhRI+k+01WhLOHZjx1Qza15iU:udWAp+QyiSE5ZOnMp9phRXk4ux07o
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
171400
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
164KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
12B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
2018-Malware-Repository-main/ddoser.zip
- SHA256 89ca73227c8aa89ef8b8c6991518268adf8191850fa7aec05548f60339293651
- MD5 23c3066ad3017ec278c44c0b36d36b97
- SHA1 e483b66cfef3458a6a290aab324c788a451458ef
- SHA512 d30a889dce6b63d9d964fd3bd52e50eb1774d774971a07457f19c964398352d8d0080ce75ea85482cabdb04d7ee8b3d0515726ab64f69ff235fd561d0c42ead3
- SSDEEP 196608:gy3harXTP2j5cVnnHgM6BOtgo9tmz6pQIG8Ug2nY/Q3UY:gy3cXTP2yVnnHgep9tmz6WIGhJIY
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/D-Chatterbox Client/D-Chatterbox Client 1.0.exe
- SHA256 9191793eb4127747e8d686e1f8a41abc064ad540fede34e4f81dc4f63a539fa9
- MD5 dc261bc155a47280f7d9fbae01e78d4f
- SHA1 b07f968af8a5932a1b9d85e08925e8ef8bf1ab60
- SHA512 ba5c0a18d02cc92ca454493cddf96fdbf42e4c95b8feb4b77e019d94cee9a6cd217f01ee30357a5e6fbdee96d1e0c3f5b4a5aa96813ffe0410b47e874912e507
- SSDEEP 6144:mFoI/kP6CV6Sf8/AOv1x/BhwDG4YZgMG/dzc4YcvzgPajBuJjtrzaC41lvaQNU:soI/26CV6SfrGBOS4rJYaLuJhR4Tv1N
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
366040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
354KB
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
20B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/Remote Desktop Client/Client.ini
- SHA256 e072833fb424b82014dfed7626590f33dc64c57bf03854ec0396639ed815658b
- MD5 7afb503f745fa04df8b709da3cf08935
- SHA1 5c7aac7b206df5dd70940610ae58248b258bf5bd
- SHA512 36e09c217225a3c70e09dad10232aa7888b39e340b84d877c7bf0556651315d24b6bcea85a1a5ab3411017856debd313db2a98bfc4b6db5c3c921272c6316e24
- MD5 SHA1 SHA512
2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/Remote Desktop Client/RemoteDesktopClient.exe
- SHA256 1b4f152eba3ea11551d6f4a3c35088d8303d778b12b300b09c029ea7afa91807
- MD5 cac3334e48303c8ad6a3decc45050daa
- SHA1 3a7325e28a1285221dd06f84740be208f3d27e81
- SHA512 6dcecc4be879ee0465524a313ded52f2776e196375d83d116414cdbdb74f0b832c39887dd3ce11aec73aa5df49075bc5007c618dbce320f2524beb62c58c96c3
- SSDEEP 12288:PcWp/oXm5W8mMnqpg+SzXUNnVW/e0M+iWnMIh35zH0at:PDVW8mMaSzGVGe0vB9BV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
506180
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
491KB
Virtual Size
490KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
20B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
2018-Malware-Repository-main/ddvniek's Hacker Toolbox 1.2/ddvniek's Hacker Toolbox 1.2.exe
- SHA256 1372035341485a1170e26d19a93b79550e437f974d35e3d969a1bb62b18c68bf
- MD5 eee822bbf3249d38dfe405e8e216ec54
- SHA1 59f1f11a5713930d1244da1b43637931a1ea3341
- SHA512 583b68d8cef48ef4d68181c90b21321841571a7965484066292eea52930f0c97733f1041b4ff74c362528e5d261e87d729d6f5d31e6bc5813924f96974f0f974
- SSDEEP 49152:Yac97VAKgK314b80v0kCNrGT5O6G0oUkFD:Yaa7VAE314bCkCVZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1626760
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
24B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
83KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
2018-Malware-Repository-main/jays booter/DevComponents.DotNetBar2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9873bce4dbce00e3663b8c39ec008a34e75d18f6674df5aee714890569dc477c
- MD5 e5277bc7d04a32074f9e9b645cd80882
- SHA1 98a76767c349e83b32b2e4f13138041b9fadeee5
- SHA512 80d360ba2dcd349538057148d31b701d88e184b50b1fd56e358b647e8a6f8f2bffb2982cac0cb38ffdbe2f6f24b6b46198184ac4f3e0e4c70b0a604d1dd5a676
- SSDEEP 49152:XfbOVjWg5F9dJOb/RnMuBBqKF1CYQqeZWaASLkYzNrFriYTDkiK3+elxfytLHEVZ:yVjWG0ZYzRFZDki2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4421911
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.textxc
Size
4.2MB
Virtual Size
4.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.datax
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
86B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/jays booter/DevComponents.DotNetBar2.xml
- SHA256 7ee0140286d50c79c275befce1f201c707acbc29553474d37f96f02e08bc9be9
- MD5 54c686ca426dd7d045f99a55e7d726c6
- SHA1 16f1ea2a96a4ae11147072d7dc3d08720907d749
- SHA512 92ffa6561273e516ff6dc8b1bc12fc95c7c47d53d3780a70cc759d89759fa0a284b462ecc3fc13727c0025117bf347d1bb2f52ad69713223fa078c83d7abce5b
- SSDEEP 24576:pmPlhA8Mqw1r3T+P9scu4M4cT/fmj1pRz:pmPlS8Mqw1r3qP9scu4M4cT/fmj1pRz
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/jays booter/Jays Booter.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 af266a6e1212a854eaa2b05d0e02275bf11609e5dabed7fcd9fccf547314a39b
- MD5 778cb37b45bed32662c67748edf508ea
- SHA1 06d488a1c278eb8d86c10c76f117c2a658e17d69
- SHA512 c6a48bb8a780144b0ad6225b9343fc373a4cbc5876f120cd9ff30e9b8b5923d3106c1f46a80dfc7e09861758a3e136f86050b42a572540004412053a70568a53
- SSDEEP 24576:dparQKxTtQNM7ApiUf7ApiUf7ApiUSqWGxLqWGxLqWGxLqWGxvCL:OrQGTuIMiiMiiMijqWQqWQqWQqWoC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1175646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
177B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/jays booter/Jays Booter.pdb
- SHA256 ef925c0109a476d59ca63f7473ad1c48c69e943388018c8aa11e7398cef43861
- MD5 8197a14c1e519f61f0a7da254e499350
- SHA1 4c8aaef7c8b3c464661a0b4387097d486647ac8e
- SHA512 ba7b8b43438e17c24601a25a61d92ccc4c9821d245e153560fd3ade25c35ab826eb1c44bf264985b0762519e1e2b75d4eb20ab5355bc6d670ca9d18d2a1f92c0
- SSDEEP 384:FM2kusmQ+vZQZQ+vZQsn6+braKQ+vZQYWgPQ+vZQUV0f4xoeA6hhvA8W8Na1me0p:FM2sI+D0fGhvAFIde0iCMlycEaGtevc
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/jays booter/Jays Booter.xml
- SHA256 de5f309126d5c475e7ec0aa1e43639cc7def81b28c66025e4c6b885675bd45bb
- MD5 3c7d81de601e8606169c9434681e96f8
- SHA1 95848cc4ac99558c02369dc03bd1b11593367741
- SHA512 c1ca5815a7b68c190dbe94050291c771c1e3cd32ae367007111fa83a05ad97accaa186b5fe287a05e9be36e71728631dd191e620d0d08269dafb379e0c358117
- MD5 SHA1 SHA512
2018-Malware-Repository-main/siinst.exe
- IMPHASH 48aa5c8931746a9655524f67b25a47ef
- SHA256 e545505c69cee250c86e9449411f3c744a4fad1551f17e3ab1ea39eb7990f7dc
- MD5 d41ece62118be1c957d244133e6748a2
- SHA1 6d7ffa0771613fd2cb919897d75b4fee6f529856
- SHA512 989ab8a88e6461a02fcccd2a3ebad23db27d5d70d48bd6274e43fdd4e73d3a0fa8ad79da4e265962b4a87193ffc45d20b4075656c15158cee32fce9cf6ec1884
- SSDEEP 98304:dTfZyxt390TFPjxEBxlLaBirPDxuNKXtL/TXOq:d7ZCzyPjMaBCPDkNKXFJ
- MD5 SHA1 SHA512 SSDEEP
Digest
3a:d3:3f:6f:3c:f5:2a:63:3c:d3:ca:02:0c:55:1d:94:41:26:5e:46
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Softdeluxe Ltd.,O=Softdeluxe Ltd.,POSTALCODE=141980,STREET=Universitetskaya St.\, 19,L=Dubna,C=RU
Chains
Jul 9, 2020
CN=Softdeluxe Ltd.,O=Softdeluxe Ltd.,POSTALCODE=141980,STREET=Universitetskaya St.\, 19,L=Dubna,C=RU
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Softdeluxe Ltd.,O=Softdeluxe Ltd.,POSTALCODE=141980,STREET=Universitetskaya St.\, 19,L=Dubna,C=RU
Serial Number
0f:db:2d:f5:c9:e0:a1:a0:2e:bf:ab:f7:26:91:a3:e3
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 16, 2019 - Aug 15, 2020
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Minor OS version
0
Major OS version
5
Entry point
70588
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep
comctl32
InitCommonControls
Name
.text
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
21KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
2018-Malware-Repository-main/spam.vbs
- SHA256 1b2e3480635f27227529c288910eeec2b870376231b69d7bfac4ed3e6c750746
- MD5 973da5f83b7e4545d646a68fa6165a1a
- SHA1 f4ed42679f7fd3bf8f99d0d97b3000f704c8b547
- SHA512 4faf5bc02058d6accd0677e12f39d9db1ffbbd56c6d8ca744663d0e37a33f912b2db036b641547de1df8520c145ed5afddbcdbf1c005d36c7d874738512165c5
- MD5 SHA1 SHA512
2018-Malware-Repository-main/stax.exe
- SHA256 8e81584db561bde07f3547f6d185b8a6ce592ec0a1f8b144ed913a7dad8d174d
- MD5 4665755abe79f02bbf195dcccf70c954
- SHA1 2e7d84dac5b273c89e91d40e1a857537faeb389e
- SHA512 2b2bff0939cc61e5603c1b40ff1e3ca2463f4be6d0204e315d3b095dda2a907aed3d105fb97f378e15a2be3a3e6c8640612ec2aebc142a65027f003282c1156d
- SSDEEP 12288:vBd5s9979jDBob/pLS7u4g3GS4QNit331eTLm9AbRLVwul/8ZOCxJ8lKzOZm3oOJ:vTI9d+hLNit3Unm9AbRLieE1o9TbmiG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dd:bf:c5:54:e5:19:bf:29:6c:54:b8:0d:40:c1:3a:76:9a:46:a9:a2
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=MicroVision Development Inc.,OU=SURETHING,O=MicroVision Development Inc.,L=Carlsbad,ST=California,C=US
Chains
Jan 16, 2009
Subject
CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA
Serial Number
0a
Issuer
CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Aug 6, 2003 - Aug 5, 2013
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=MicroVision Development Inc.,OU=SURETHING,O=MicroVision Development Inc.,L=Carlsbad,ST=California,C=US
Serial Number
18:b0:3e:7f:ec:9a:8f:b6:0e:4c:aa:33:4e:0f:fe:b7
Issuer
CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Oct 5, 2007 - Oct 13, 2009
Minor OS version
0
Major OS version
4
Entry point
1157416
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
44B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
2018-Malware-Repository-main/stllssvr.exe
- IMPHASH 42f3b6612c56d617586f951741df3fd9
- SHA256 c4b40e4c932ec2457c74a4e71f3feff000f3b91633c0a9fb726b133ec1becd69
- MD5 afb31e4a07d48a40b846462db2114bab
- SHA1 cdea8041e7ada53dd654f49e858fbe1d62e9e62c
- SHA512 9fd68148fc6df31df923f69fe79d7663e6e8272a2c09d46f63f4e9b387d346efe374af14be84933b85412227a42ad6f8a1531bac0a0cc3af487d785bc1b6adb8
- SSDEEP 1536:Wn64KQqkKPLiLZmjTwnC3yNt2mNb38f3jGPA:DpPCUTwnCiNcW38fjGP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e1:5e:22:07:6d:9d:e8:05:cf:75:02:af:b6:c6:a9:f1:bd:15:9d:ad
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=MicroVision Development Inc.,OU=SURETHING,O=MicroVision Development Inc.,L=Carlsbad,ST=California,C=US
Chains
Jan 16, 2009
Subject
CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA
Serial Number
0a
Issuer
CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Aug 6, 2003 - Aug 5, 2013
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=MicroVision Development Inc.,OU=SURETHING,O=MicroVision Development Inc.,L=Carlsbad,ST=California,C=US
Serial Number
18:b0:3e:7f:ec:9a:8f:b6:0e:4c:aa:33:4e:0f:fe:b7
Issuer
CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Oct 5, 2007 - Oct 13, 2009
Minor OS version
0
Major OS version
4
Entry point
39131
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
WaitForSingleObject
lstrcatW
Sleep
CreateThread
CreateEventW
GetCurrentThreadId
SetEvent
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
CloseHandle
LoadLibraryExW
GetCommandLineW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetModuleHandleA
ExitProcess
GetVersionExA
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
lstrcpyW
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
GetShortPathNameW
lstrlenW
GetLastError
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
SetErrorMode
LoadLibraryW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
FindResourceW
InterlockedExchange
user32
PostThreadMessageW
GetMessageW
LoadStringW
TranslateMessage
CharNextW
MessageBoxW
CharUpperW
DispatchMessageW
advapi32
StartServiceCtrlDispatcherW
ControlService
DeleteService
CreateServiceW
RegQueryInfoKeyW
RegQueryValueExW
RegDeleteValueW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegisterServiceCtrlHandlerW
shell32
SHGetFileInfoW
ole32
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoTaskMemAlloc
CoRegisterClassObject
CoRevokeClassObject
CoInitializeSecurity
CoInitialize
CoUninitialize
StringFromCLSID
CoTaskMemFree
oleaut32
SysAllocString
SysFreeString
RegisterTypeLi
UnRegisterTypeLi
SysStringLen
LoadRegTypeLi
VarUI4FromStr
LoadTypeLi
VariantChangeType
VariantInit
VariantClear
shlwapi
PathFindExtensionW
msvcr70
_purecall
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
_controlfp
__set_app_type
__p__fmode
_c_exit
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
memset
memmove
vswprintf
_putws
??2@YAPAXI@Z
wcschr
realloc
??3@YAXPAX@Z
_CxxThrowException
_except_handler3
malloc
free
??_U@YAPAXI@Z
__CxxFrameHandler
??_V@YAXPAX@Z
__p__commode
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=25, productName=VS2002 (.NET) build 9466, version=9466,
count=4, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=3, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=13, id=28, productName=VS2002 (.NET) build 9466, version=9466,
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=133, id=1, productName=Unmarked objects,
count=5, id=29, version=9955,
count=1, id=69, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=61, version=9955,
2018-Malware-Repository-main/trzCE08.tmp
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8a736f31ce2c831aa97e1f21e9c9c4702769641e16952ef968e34018908d7e8b
- MD5 4f3782e2f6f8daeeb7cf7957d60b8044
- SHA1 72a843c013b03e5b0f3f4753a221cdd5dfadd5e4
- SHA512 d30eb50e542c4db36ab65e7118184dd6e862746df8552229766d1d954afd77d0a3913ac8bcf91a66ec5b09bcbd16f12f12bb7e8543d38c0c6628f6c3a2676614
- SSDEEP 768:5ErmzkuR10ug8zl9ZTvhqaqw1M+9+6AZ1Hk:5cmz1SEl7jnBX06AZ1Hk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/updater.exe
- IMPHASH 4f564f683b4d357f9444a0ee822b8d8e
- SHA256 30103105309c005fc9dc5fda6b30d2cd249daa77bceba9a5c815261844302519
- MD5 56d48d80b58f68d8ca5cdf516517457c
- SHA1 4f9cdb43795e345ee95f49a350e8244903ee4d76
- SHA512 7dc8acafb888b1300411360ce3f44098413db1708cb892b02f49c3a74a0f4278e7a723546957eded4cf81234b0e0f32275430c1ac4e81ee46540197cea9de2cf
- SSDEEP 6144:kgZivvSCrKPjKg5zgQcSCERtlD1/GvYHnnu6GaDBNx47Jg3PfcKrKywP:SvKQg5zhcSCERtlD1/3nu6R6JAdGyc
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
50:6d:f7:02:64:e0:28:5c:31:6e:2d:69:a7:1a:56:0a:9a:a8:90:a2
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c2072656c656173652b636572746966696361746573406d6f7a696c6c612e636f6d
Chains
Aug 31, 2020
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c2072656c656173652b636572746966696361746573406d6f7a696c6c612e636f6d
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c2072656c656173652b636572746966696361746573406d6f7a696c6c612e636f6d
Serial Number
0d:de:b5:3f:95:73:37:fb:ea:f9:8c:4a:61:5b:14:9d
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 7, 2020 - May 12, 2021
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Timespan
Nov 10, 2006 - Nov 10, 2021
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 22, 2014 - Oct 22, 2024
Minor OS version
1
Major OS version
6
Entry point
80416
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
CopyRect
DialogBoxParamW
DrawTextW
EndDialog
GetClientRect
GetDC
GetDesktopWindow
GetDlgItem
GetParent
GetWindowLongW
GetWindowRect
LoadIconW
OffsetRect
ReleaseDC
ScreenToClient
SendMessageW
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
WaitForInputIdle
wsprintfW
gdi32
SelectObject
advapi32
AdjustTokenPrivileges
CloseServiceHandle
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptGetHashParam
CryptHashData
CryptReleaseContext
CryptVerifySignatureA
GetTokenInformation
LookupPrivilegeValueA
OpenProcessToken
OpenSCManagerA
OpenServiceW
QueryServiceConfigW
QueryServiceStatusEx
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegGetValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
StartServiceW
shell32
SHGetKnownFolderPath
ShellExecuteExW
shlwapi
PathAppendW
PathCanonicalizeW
PathCommonPrefixW
PathIsUNCServerShareW
PathRemoveFileSpecW
PathStripPathW
PathStripToRootW
PathUnquoteSpacesW
ole32
CoTaskMemFree
rpcrt4
RpcStringFreeW
UuidCreate
UuidToStringW
wintrust
WinVerifyTrust
kernel32
ActivateActCtx
CloseHandle
CompareStringW
CopyFileW
CreateActCtxW
CreateDirectoryW
CreateEventW
CreateFileW
CreateProcessW
CreateThread
DeactivateActCtx
DecodePointer
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EncodePointer
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentStringsW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetLastError
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LocalAlloc
LocalFree
LockFile
MoveFileExW
MultiByteToWideChar
OpenProcess
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RemoveDirectoryW
ResetEvent
RtlUnwind
SetCurrentDirectoryW
SetDllDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
Name
.text
Size
192KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
3KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
2018-Malware-Repository-main/works/Anonymous DoSer.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1a9e73e0e877edd16882dcc866467e7ee817efad6ef68a7de82c2c12b2e566fe
- MD5 270f2f56af0de91cc5f0b83ed241851b
- SHA1 7b0ea98bb83ca8be24e62b2f68133f43867e6403
- SHA512 b8b4b06503cbc9da38a898088f8031b44ee0e4dd415f2ab853b360fd3065a37df7d63383913948cbc475669a6c5aaff6a20379d5bd89bbfa4c9510bff4e42597
- SSDEEP 3072:ORWxXXyzEf1aALBCYp4xObgRuBOPL+RNUI65KB2pUwMjbKtMBy2bY:eWxHyzENaA9SO0RuQLPIApniU2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
146062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
135KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.confuse
Size
135KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/works/Unknown DoSer release.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8a736f31ce2c831aa97e1f21e9c9c4702769641e16952ef968e34018908d7e8b
- MD5 4f3782e2f6f8daeeb7cf7957d60b8044
- SHA1 72a843c013b03e5b0f3f4753a221cdd5dfadd5e4
- SHA512 d30eb50e542c4db36ab65e7118184dd6e862746df8552229766d1d954afd77d0a3913ac8bcf91a66ec5b09bcbd16f12f12bb7e8543d38c0c6628f6c3a2676614
- SSDEEP 768:5ErmzkuR10ug8zl9ZTvhqaqw1M+9+6AZ1Hk:5cmz1SEl7jnBX06AZ1Hk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/worms/Aurora Worm v1-Cracked by RoN1N.exe
- SHA256 3dbcf4f75dbe901b2b555f8c929ced4ec56645e4a628a28d621221c6e8f00c60
- MD5 1d451506237077f8b09f5e977ffec232
- SHA1 f8bb2b74d165a1f9e76dd64779f5853277e185b8
- SHA512 aa075a87d9bc69b4835d081a2cb03cd27b76742d02112ccfa3f6fad85fea7f79996b94c770f89edd33bdb0789ecf53ead43417de700ba89611ccb37aa4d19d21
- SSDEEP 24576:9flidX74kthTE6mBcrcP5cCcMfVwHackDDsfou:9diV57+V77f4qsgu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
102KB
Virtual Size
304KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
82KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
767KB
Virtual Size
768KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/worms/FYI Worm v1.0 Cracked.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 48f281b5cdad1a15f8f1e291ef4411e0ae851ca3307ab1cf6e9836d78c286b73
- MD5 557113d12f17a827d6591e7f462e0dfc
- SHA1 462887fddace5a8e092bca64e15b442931fad5bb
- SHA512 00a4e819791cbbb111ce62c82822e10e8a28856fd3a17ac1f96620278f3f2beb12ae9b99450004a9a55bbe9ceee07b4519e40365b851a5180b90a78473e00320
- SSDEEP 12288:9x8l/0f6v9CfjSfhhVTYEzd219eecijWmRgpuI9QLrpj7Ghcqk0ckwf/tV9frCZ5:9al/DYr2jdecijWmKKt0ckwflV9T4iQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
989358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
958KB
Virtual Size
958KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
99KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/worms/Uranium Worm.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 19a1bde4c4af9240212d3b7d85117eb16d782d16c8f6b78fd1979b1fd5ada66f
- MD5 1b7b0cde5290b8c78fbcc93aea12b011
- SHA1 22768da558ea8a77169684ae07e2dd9a916c7533
- SHA512 ad93fd44e144bf81bac374abfda828843d44ec0ad5c6ff7faa364807f04fbcc1876f0d9b6938a4b35a0f002c1e719af58071f0b3bbad187c9a47e1b05faa94de
- SSDEEP 6144:GBy67Mvg3ujvyfOP5A0zWwk1+3UnH49t+J7g3ujvyfOP5A0zoW0lRg3ujvyfOP57:GBy672xvyfm56w84sxvyfm5exvyfm5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
921662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
892KB
Virtual Size
892KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
194B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
349KB
Virtual Size
349KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/worms/Worm.exe
- IMPHASH baa93d47220682c04d92f7797d9224ce
- SHA256 36cb7ab2c9ae591155cca29fd718f88c8437607a9df08993199ce8a2c750b01e
- MD5 f34d63ee4d9edf5129c4b6b516cf84b6
- SHA1 209cbf06b01cc8773e4ef3f75104ea1cefdbb28f
- SHA512 f075a94698f15a6ef2f29c1d81360a8df9fec337d002e7b39429b445223ea27338333654ee715b7a607b81ea694271a1676545a45f4c5ab2fe1cb6851cefea15
- SSDEEP 49152:rOS9GqgWEJe5M1/3CKUW9Oje420ZXh9S8ivyIvaIAA4:iSodtJe5M1/8i4zZx9EbAA4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3645440
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrcpy
comctl32
InitCommonControls
Name
Size
1.2MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
107KB
Virtual Size
237KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
euurywxn
Size
825KB
Virtual Size
832KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
kbaloxij
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
2018-Malware-Repository-main/worms/archive.zip
- SHA256 b158afc4fb23356c156bb596602b68871c52ed7c8a5c3a14c5c7da4dd0f44b9b
- MD5 3e59f5134174756398c9f2272e0c2dd6
- SHA1 7c8efef481a317a663baba5f0eaf492f90bdc79a
- SHA512 1a97295a0c7f07fc00c6eb6002095c89e5877e090250692b23c7263913dde78f183873d1b1a7b64f4acb2292ea9ec3490a9747e4ea1dabfa6728ff1b523179f9
- SSDEEP 98304:sxMU9+E3wyKINmlNAf0pHMPVuHtI+ZFHEsoWVc1BZz2:SMUF3wyKIU8vPVuNXZFFyF2
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/worms/attworm/ATTWorm Cracked.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 881cb0fb1d8fc32e7cc636c40602a189101f20f5926a7618658453b2d9318d63
- MD5 e4eed29dd468222723ce4281beb497b2
- SHA1 670a2b409e3b2be3145c2a1409f3483d1f143302
- SHA512 297effe85c3d1f0e0f040fb10308a7ff29d2a0f30fd72559d02af94f01ed7097603afe9599da6908fd600a7a874ce58b19271553884d10aa6462c118ddb1703e
- SSDEEP 3072:1mSN+RTX2EO3FgZCkUlXtzFFi/1E1udxFxOq5JYAI:1B+TkgZCV9zf8d7JI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
159678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
148KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
144B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/worms/attworm/Screen snap.png
- SHA256 3f8054ed08af64fe280565bc348f9fa7a05c2337128c824db40294598c2dfa86
- MD5 c4a99122c596c216e51b178e06f82b95
- SHA1 11d27ce0fa4f8041c1f2e6c733785b887ef14643
- SHA512 ed7ba0c214debe547bb76ec243e4e65ae0d954cbf9ee7b4c9c33aa0efb056d67d797d30c76ad341b6ad643d31188481961808058542a8c761792805711235111
- SSDEEP 384:fcjtZl2ed7PYXDK2R7vLlcmndgA+zlY90bLpLJojUFIP5R7cSuq5J8Ne:UjzlRd7YzKevBZdgP60b9FojciZJuCEe
- MD5 SHA1 SHA512 SSDEEP
2018-Malware-Repository-main/worms/attworm/cracker.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6465bfa52574947bc3ae862896ef10562db3c3d8e8a990ed994049a6260cc5d4
- MD5 21f52e21e1f82e5c58665f3f6ef1faa8
- SHA1 a2058cfaf00ddaf6b7cfded0b9c9d7171eec15ef
- SHA512 70e38c752d08d8a2564ffda04621734ed847740d06a027744c107c46b454d7d232544e9fd39df5f32e3a851e6010a021c077b99ef9f128c542e49c12d282ea0f
- SSDEEP 3072:Q0SXzzBBs/kaT16qIPUDUT3OWzmDMG/y1R2ogli9pYYYYYYYYYYUAAAPj3i2z3Mw:TSDdBs/TG8o3b4MG/y6XW3iU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/worms/d4ta.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fa47cd33a4252fd92794182216f5295d45ee9ab29d9f2d26c192ceec5d66c36f
- MD5 eddb4cfd77fce7992305c228538d4259
- SHA1 49cd5b40c7dc2ee963bc4c05c197aaca267d5f1e
- SHA512 23b03c166db2313713286500e5b0ce5e09f4d1b9eb9fc680c0fa2271dac48e154719a24981f70dab68ee4637a6c6b3b5209fa01d4fd11b16147c48bc2777eaf4
- SSDEEP 384:trkZ4kg6bGY63fbvqU4ALf48XiQfstZY16pXVyXFY:tK4kXGYkfbvv4EN6jN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
186B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
2018-Malware-Repository-main/worms/description.txt
- SHA256 9924eb48aac1c1aad8b68719b268ab1866a35557fdeec86b1d0873a0ba3b5014
- MD5 e2ede8fbb48cd98779d2486be36f8665
- SHA1 a737a73e923d2e0caa8ddc5a3210acb4fae5c686
- SHA512 f2914e2512b4a26d0da729b9c340af0be860f7bc9e057ceea0470a2ebc440414e835743236d2a87d0b000104dc8b02626dd0ca495a4d9c7cde3311e05e81d8fa
- MD5 SHA1 SHA512