SuperDeath.2.0.zip
- SHA256 c2bbf6fe638c36c001d5d62cc0e49664e446517407a54911db57552adb118aa8
Overview
overview
8Static
static
7SuperDeath2.exe
windows7-x64
7SuperDeath2.exe
windows10-2004-x64
7source/Bat...er.exe
windows7-x64
7source/Bat...er.exe
windows10-2004-x64
7source/Bat...lp.chm
windows7-x64
1source/Bat...lp.chm
windows10-2004-x64
1source/ErrorDraw.exe
windows7-x64
1source/ErrorDraw.exe
windows10-2004-x64
1source/Log...er.exe
windows7-x64
8source/Log...er.exe
windows10-2004-x64
8source/Log...rm1.js
windows7-x64
1source/Log...rm1.js
windows10-2004-x64
1source/Log...m1.vbs
windows7-x64
1source/Log...m1.vbs
windows10-2004-x64
1source/Log...er.vbs
windows7-x64
1source/Log...er.vbs
windows10-2004-x64
1source/Log...es.vbs
windows7-x64
1source/Log...es.vbs
windows10-2004-x64
1source/Log...UI.exe
windows7-x64
1source/Log...UI.exe
windows10-2004-x64
1source/Log...er.exe
windows7-x64
8source/Log...er.exe
windows10-2004-x64
8source/Log...er.exe
windows7-x64
8source/Log...er.exe
windows10-2004-x64
8source/Log...cs.dll
windows7-x64
1source/Log...cs.dll
windows10-2004-x64
1source/MBR...er.exe
windows7-x64
1source/MBR...er.exe
windows10-2004-x64
1source/MrsMjrGui.exe
windows7-x64
1source/MrsMjrGui.exe
windows10-2004-x64
1source/Mrs...er.bat
windows7-x64
1source/Mrs...er.bat
windows10-2004-x64
1Behavioral task
behavioral1
Sample
SuperDeath2.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SuperDeath2.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
source/Bat To Exe Converter/Bat_To_Exe_Converter.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
source/Bat To Exe Converter/Bat_To_Exe_Converter.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
source/Bat To Exe Converter/help.chm
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
source/Bat To Exe Converter/help.chm
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
source/ErrorDraw.exe
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
source/ErrorDraw.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
source/Logon_overwriter.exe
Resource
win7-20240221-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral10
Sample
source/Logon_overwriter.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral11
Sample
source/Logon_overwriter/Logon_overwriter/Form1.js
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
source/Logon_overwriter/Logon_overwriter/Form1.js
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
source/Logon_overwriter/Logon_overwriter/Form1.vbs
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
source/Logon_overwriter/Logon_overwriter/Form1.vbs
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
source/Logon_overwriter/Logon_overwriter/Properties/Resources.Designer.vbs
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
source/Logon_overwriter/Logon_overwriter/Properties/Resources.Designer.vbs
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
source/Logon_overwriter/Logon_overwriter/Properties/Resources.vbs
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
source/Logon_overwriter/Logon_overwriter/Properties/Resources.vbs
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
source/Logon_overwriter/Logon_overwriter/Resources/LogonUI.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
source/Logon_overwriter/Logon_overwriter/Resources/LogonUI.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.exe
Resource
win7-20240220-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral22
Sample
source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral23
Sample
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.exe
Resource
win7-20240221-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral24
Sample
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral25
Sample
source/Logon_overwriter/Logon_overwriter/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
source/Logon_overwriter/Logon_overwriter/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
source/MBR - Image Builder.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
source/MBR - Image Builder.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
source/MrsMjrGui.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
source/MrsMjrGui.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
source/MrsMjrGuiLauncher.bat
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
source/MrsMjrGuiLauncher.bat
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target SuperDeath.2.0.zip
- Size 28.3MB
- Sample240318-a6gz1aca83
- SHA256 c2bbf6fe638c36c001d5d62cc0e49664e446517407a54911db57552adb118aa8
- MD5 6fb74039f789c042f1b8b41e750a356b
- SHA1 65b07018edbf0444167ba12943c1095e98a82226
- SHA512 7f12bbd6245ac49e0368324533d79cbd33ce8ad88abec3a76c2c887b12ddcb87b752cac07d110586036635d0fb2e97eea3cdcfffbfac7d086dc16535725e8037
- SSDEEP 786432:YgztwaY+jgu4fh5Ac6loYlQV50gheWkOJfO3c8Cu5:Yrag5XAPoSQV5dkOlO3zCu5
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/SuperDeath2.exe upx static1/unpack003/Bat_To_Exe_Converter.exe upx static1/unpack001/source/Bat To Exe Converter/Bat_To_Exe_Converter.exe upx - Unsigned PE 22 IoCs
Checks for missing Authenticode signature.
resource unpack001/SuperDeath2.exe unpack003/Bat_To_Exe_Converter.exe unpack001/source/Bat To Exe Converter/Bat_To_Exe_Converter.exe unpack001/source/ErrorDraw.exe unpack001/source/Logon_overwriter.exe unpack001/source/Logon_overwriter/Logon_overwriter/Resources/LogonUI.exe unpack001/source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.exe unpack001/source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.exe unpack001/source/Logon_overwriter/Logon_overwriter/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll unpack001/source/MBR - Image Builder.exe unpack001/source/MrsMjrGui.exe unpack001/source/PatBlt.exe unpack001/source/RSOD/RSOD/bin/Debug/LogonUI.exe unpack001/source/RSOD/RSOD/obj/Debug/RSOD.exe unpack001/source/ScaryBob.exe unpack001/source/ScaryBob/ScaryBob.exe unpack001/source/covid666.exe unpack001/source/covid666/covid666.exe unpack001/source/gotosleep.exe unpack001/source/gotosleep/gotosleep.exe unpack001/source/mbr.exe unpack001/source/mover.exe
File Explorer
-
SuperDeath.2.0.zip.zip 28.3MB
-
SuperDeath2.exe.exe 7.3MB
-
credits.txt159B
-
source/407740.jpg.jpg 445KB
-
source/Bat To Exe Converter.rar.rar 419KB
-
Bat_To_Exe_Converter.exe.exe 444KB
-
help.chm.chm 14KB
-
settings.ini242B
-
source/Bat To Exe Converter/Bat_To_Exe_Converter.exe.exe 444KB
-
source/Bat To Exe Converter/help.chm.chm 14KB
-
source/Bat To Exe Converter/settings.ini242B
-
source/ErrorDraw.cpp315B
-
source/ErrorDraw.exe.exe 104KB
-
source/Logon_overwriter.exe.exe 34KB
-
source/Logon_overwriter/.vs/Logon_overwriter/v16/.suo42KB
-
source/Logon_overwriter/Logon_overwriter.sln1KB
-
source/Logon_overwriter/Logon_overwriter/Form1.Designer.cs1KB
-
source/Logon_overwriter/Logon_overwriter/Form1.cs.js 2KB
-
source/Logon_overwriter/Logon_overwriter/Form1.resx.vbs 5KB
-
source/Logon_overwriter/Logon_overwriter/Logon_overwriter.csproj3KB
-
source/Logon_overwriter/Logon_overwriter/Program.cs508B
-
source/Logon_overwriter/Logon_overwriter/Properties/AssemblyInfo.cs1KB
-
source/Logon_overwriter/Logon_overwriter/Properties/Resources.Designer.cs.vbs 3KB
-
source/Logon_overwriter/Logon_overwriter/Properties/Resources.resx.vbs 6KB
-
source/Logon_overwriter/Logon_overwriter/Properties/Settings.Designer.cs1KB
-
source/Logon_overwriter/Logon_overwriter/Properties/Settings.settings249B
-
source/Logon_overwriter/Logon_overwriter/Resources/LogonUI.exe.exe 11KB
-
source/Logon_overwriter/Logon_overwriter/app.manifest3KB
-
source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.exe.exe 34KB
-
source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.pdb31KB
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs208B
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/DesignTimeResolveAssemblyReferences.cache1KB
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache6KB
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.Logon.resources180B
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.Properties.Resources.resources11KB
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.csproj.CoreCompileInputs.cache42B
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.csproj.FileListAbsolute.txt955B
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.csproj.GenerateResource.cache1KB
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.csprojAssemblyReference.cache2KB
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.exe.exe 34KB
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.pdb31KB
-
source/Logon_overwriter/Logon_overwriter/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll.dll 3KB
-
source/MBR - Image Builder.exe.exe 11.3MB
-
source/MrsMjrGui.exe.exe 71KB
-
source/MrsMjrGuiLauncher.bat48B
-
source/PatBlt.cpp228B
-
source/PatBlt.exe.exe 104KB
-
source/RSOD/.vs/RSOD/v16/.suo30KB
-
source/RSOD/RSOD.sln1KB
-
source/RSOD/RSOD/Form1.Designer.cs2KB
-
source/RSOD/RSOD/Form1.cs484B
-
source/RSOD/RSOD/Form1.resx.vbs 10KB
-
source/RSOD/RSOD/Program.cs495B
-
source/RSOD/RSOD/Properties/AssemblyInfo.cs1KB
-
source/RSOD/RSOD/Properties/Resources.Designer.cs.vbs 2KB
-
source/RSOD/RSOD/Properties/Resources.resx.vbs 5KB
-
source/RSOD/RSOD/Properties/Settings.Designer.cs1KB
-
source/RSOD/RSOD/Properties/Settings.settings249B
-
source/RSOD/RSOD/RSOD.csproj3KB
-
source/RSOD/RSOD/bin/Debug/LogonUI.exe.exe 11KB
-
source/RSOD/RSOD/bin/Debug/RSOD.pdb29KB
-
source/RSOD/RSOD/obj/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs208B
-
source/RSOD/RSOD/obj/Debug/DesignTimeResolveAssemblyReferences.cache1KB
-
source/RSOD/RSOD/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache6KB
-
source/RSOD/RSOD/obj/Debug/RSOD.Properties.Resources.resources180B
-
source/RSOD/RSOD/obj/Debug/RSOD.RSOD.resources3KB
-
source/RSOD/RSOD/obj/Debug/RSOD.csproj.CoreCompileInputs.cache42B
-
source/RSOD/RSOD/obj/Debug/RSOD.csproj.FileListAbsolute.txt630B
-
source/RSOD/RSOD/obj/Debug/RSOD.csproj.GenerateResource.cache1012B
-
source/RSOD/RSOD/obj/Debug/RSOD.csprojAssemblyReference.cache2KB
-
source/RSOD/RSOD/obj/Debug/RSOD.exe.exe 11KB
-
source/RSOD/RSOD/obj/Debug/RSOD.pdb29KB
-
source/ScaryBob.exe.exe 92KB
-
source/ScaryBob/Form1.frm733B
-
source/ScaryBob/Form1.frx75KB
-
source/ScaryBob/Project1.vbp670B
-
source/ScaryBob/Project1.vbw45B
-
source/ScaryBob/ScaryBob.exe.exe 92KB
-
source/ScaryBob/bob.jpg.jpg 75KB
-
source/SuperDeath2.cmd7KB
-
source/bg.bmp10.5MB
-
source/covid666.exe.exe 48KB
-
source/covid666/23311_lores.jpg.jpg 30KB
-
source/covid666/Form1.frm740B
-
source/covid666/Form1.frx30KB
-
source/covid666/Project1.vbp662B
-
source/covid666/Project1.vbw45B
-
source/covid666/covid666.exe.exe 48KB
-
source/deephaze.mp34.7MB
-
source/f11.mp4227KB
-
source/fileico.ico38KB
-
source/gotosleep.exe.exe .ps1 60KB
-
source/gotosleep/Form1.frm719B
-
source/gotosleep/Form1.frx.ps1 42KB
-
source/gotosleep/Project1.vbp671B
-
source/gotosleep/Project1.vbw45B
-
source/gotosleep/die.jpg.jpg .ps1 42KB
-
source/gotosleep/gotosleep.exe.exe .ps1 60KB
-
source/major.vbs.vbs 133B
-
source/mbr.exe.exe 101KB
-
source/mbrlmao.png.png 9KB
-
source/mover.exe.exe 548KB
-
source/musicplayer2.vbs.vbs 228B
-
source/street.mp481KB
SuperDeath2.exe
- SHA256 9c027063879df3d477e9092a187c306c7d20eba956cf7517423d8eb2ad5960f2
- MD5 391942faa157675018a6d26b6c631011
- SHA1 5dd90332e1e1d632fd6e63f9aa2024e667aa5cd5
- SHA512 debba49b7fbab85f099e5ff10bd2c75105166f20eb63b058d580e9043f33f272f80096bbce181f71d2476b1fd8059d386c28435a032bfca7210d2cf36f007e4e
- SSDEEP 196608:GJXjwzfuuvf08BjSDLpiWA/HTIKUI7RVt:KwzfuqBuDLpiWAfbR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17596912
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
9.5MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
7.2MB
Virtual Size
7.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
40KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
credits.txt
- SHA256 ccc54ed393f8e9416adee05f7d5c5924b4fdf5b5c29d5061f80bf2af45c5e795
- MD5 497f9e6c95aad5c7994951197180cf3f
- SHA1 c29148a991c4a8c252c0205e7cfc888bbc96da49
- SHA512 a1da7f30ff2ae1bc5129466c6322977a82f410e982337910e06e57cd8f7b7310cb8c988dfa92b7762767fd38639267190bf69164b5f6443db5eff2c02bacd4f4
- MD5 SHA1 SHA512
source/407740.jpg
- SHA256 6dea8dc18950f7269a9cd237c3f69e5af3e8f5e0ffd6ac873c3f0016bc8239b1
- MD5 9c8f18a96574536acad9bde9b391b95b
- SHA1 035ed6a7d559a337c675f43303de8ba9fb5a6a30
- SHA512 21cd5ebbfbaeca5d1c4de193ed413fba39524a4a0ee93ae082abab64335f96fef311238977266e9c853c2633e25f07e53d53825b0e12865ceffb340aca3e2d56
- SSDEEP 6144:XROy8rRXyUZotvkEjP6qXfFF7Y1W7mnivz0gNefhgU1G8gHCcLhaZb8EGk3gew:hOVVXyyodLBF7WnivnuggGoc1We
- MD5 SHA1 SHA512 SSDEEP
source/Bat To Exe Converter.rar
- SHA256 180771c0c9a08aec09130dc669fba44a4e9f3b51ea0c916be8edcc8663667fc2
- MD5 fa608c076144062ebaee398c6afc41a3
- SHA1 929088fa55cb5031a19f9544c08066a57d24d235
- SHA512 475a8af26797d929fdb66abfa69eb6d94969f1e20d541210a2823ecf6e429500bfe33b3595e3fa4f3d5d55b2e1a6238e9bb755a83c5045fd0873229255806f63
- SSDEEP 12288:mA+NeF/BDSjb67KoWhGqNG1R0YS5zq8Jp2PxvP:v6c/NWAahGQG1uYS5qnZ
- MD5 SHA1 SHA512 SSDEEP
Bat_To_Exe_Converter.exe
- SHA256 7adc1f7ff040628a600f99465bd70e71ad83fecfe60b0f1dadc84b5d262ff350
- MD5 76d5900a4adf4c1f2ab8dbfd0a450c4a
- SHA1 6177a27416519564ecb5d38093d61c9a81d3c290
- SHA512 286b05ff09d4e85856c251d56902486738d9b2457d9a56ea8a449195b349f2718816099f4602efba88dad592dd6cecefcd0748382888c3026dd585b3e46f0c6e
- SSDEEP 12288:iYicHMPMDp8WrZtzlqQMB/FS/CiUF7RAfoSBjF:viuMPMDp8mtzbMFFS/CzKF
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
968208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
548KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
396KB
Virtual Size
400KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
47KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
help.chm
- SHA256 00037bfc41afacf262afda160e17d3cca33606276324e99bbd93ad1207e9a7c0
- MD5 ffa8c49b21b077b0dc4b51a1f6f9a753
- SHA1 5fe5b4d96b266b29bd7aaf41b32394f58e7416e2
- SHA512 751eeaef0828ec4416569291ebf3f434208ff43405221339688ec2535cd5947d58ad4d2fd8ea073aa0554f712783f5ec8d5f42dfc4ee935d2905bc541ccd0a9b
- SSDEEP 192:TQ3bVqwNUWqaGA9yb6OmVbelnchhvm2I2S1O:TQLbNJqHA9YYVbCahvm280
- MD5 SHA1 SHA512 SSDEEP
settings.ini
- SHA256 236d6136a9ea4241facb7c459bf0bad6d1fa572d436e6e73c44884d6126e5ab4
- MD5 d3be6c4edea45f5a9a766dd235e4c23a
- SHA1 bc3f164c51e8f9b223b2992688aae2d492a18353
- SHA512 bd2f5cb1316bcc64bbf30b2828d497157129e2013a529be591733a5c900f4d3450e97eed3ba75f057a49884cdb9c0a72dcc2ba5768db33fba7ce9236f5cea6bc
- MD5 SHA1 SHA512
source/Bat To Exe Converter/Bat_To_Exe_Converter.exe
- SHA256 7adc1f7ff040628a600f99465bd70e71ad83fecfe60b0f1dadc84b5d262ff350
- MD5 76d5900a4adf4c1f2ab8dbfd0a450c4a
- SHA1 6177a27416519564ecb5d38093d61c9a81d3c290
- SHA512 286b05ff09d4e85856c251d56902486738d9b2457d9a56ea8a449195b349f2718816099f4602efba88dad592dd6cecefcd0748382888c3026dd585b3e46f0c6e
- SSDEEP 12288:iYicHMPMDp8WrZtzlqQMB/FS/CiUF7RAfoSBjF:viuMPMDp8mtzbMFFS/CzKF
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
968208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
548KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
396KB
Virtual Size
400KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
47KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
source/Bat To Exe Converter/help.chm
- SHA256 00037bfc41afacf262afda160e17d3cca33606276324e99bbd93ad1207e9a7c0
- MD5 ffa8c49b21b077b0dc4b51a1f6f9a753
- SHA1 5fe5b4d96b266b29bd7aaf41b32394f58e7416e2
- SHA512 751eeaef0828ec4416569291ebf3f434208ff43405221339688ec2535cd5947d58ad4d2fd8ea073aa0554f712783f5ec8d5f42dfc4ee935d2905bc541ccd0a9b
- SSDEEP 192:TQ3bVqwNUWqaGA9yb6OmVbelnchhvm2I2S1O:TQLbNJqHA9YYVbCahvm280
- MD5 SHA1 SHA512 SSDEEP
source/Bat To Exe Converter/settings.ini
- SHA256 236d6136a9ea4241facb7c459bf0bad6d1fa572d436e6e73c44884d6126e5ab4
- MD5 d3be6c4edea45f5a9a766dd235e4c23a
- SHA1 bc3f164c51e8f9b223b2992688aae2d492a18353
- SHA512 bd2f5cb1316bcc64bbf30b2828d497157129e2013a529be591733a5c900f4d3450e97eed3ba75f057a49884cdb9c0a72dcc2ba5768db33fba7ce9236f5cea6bc
- MD5 SHA1 SHA512
source/ErrorDraw.cpp
- SHA256 9d3805d5f6bc80aa3e9326d5c1f380d43bcec82a4260c6b9a9397bb874a5636f
- MD5 6ba1513e1fffa9eaa27c41684828d5b9
- SHA1 da4e7d1ae30be4122aa8a3ed0fecfb8ceb027ad6
- SHA512 3c9c87820854d950af31f8a46df7bebf5acddc0c5753cd9910f14bafe331d3ca91846a3c1803e4b7d4a41fc424428aa3ee7b40e34c03719e7183b09dcaf0b041
- MD5 SHA1 SHA512
source/ErrorDraw.exe
- IMPHASH a0a157d03082382106055ce2e44b29e4
- SHA256 6ed2b7ee7193c95ccb7264f6cf026f53faeaab02d8d50c611d3db4c7735ed908
- MD5 630a7f0464569c5286d70506803e3ba3
- SHA1 e67664162918e5e4c3fecae57a313d6f17da7aa7
- SHA512 86f8f02ed5a5764994143ecc516656a371437289157c3adbc80013c5aa6bb6aba94d4d5c99271256da749dc2c3223072fdcc138cea73faaaef9dabf598879325
- SSDEEP 1536:p5iTgocXYpySNFO8u3yUyJCbAV0R7EghC1ed:K8ocKyStOS5ed
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
signal
strncmp
vfprintf
ntdll
memcpy
strlen
user32
DrawIcon
GetCursorPos
GetDC
GetSystemMetrics
LoadIconA
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
1024B
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
1024B
Virtual Size
754B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
source/Logon_overwriter.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ed996aabbbd002aa1d2a26954c64f47072f9388142b85cf273c190ce357597e2
- MD5 942e4fe24043059c647f584cc657c4ab
- SHA1 41e98f66887a4d912a49af32bf164ab9daebf543
- SHA512 dab7a646761a2f547e5e8dee83678c1b30852ad266d03b3408475a65a5a0f3088a5b7e641d78baea697152cea735ece7b9537c7c86b7dc74773cdb336b0ee7f5
- SSDEEP 768:HDubwUSw3vW8j6NUOvW8j6NUZ3tYcFwVc6K:HKbwZMezNUOezNUZPwVcl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Worm\source\repos\Logon_overwriter\Logon_overwriter\obj\Debug\Logon_overwriter.pdb
mscoree
_CorExeMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
source/Logon_overwriter/.vs/Logon_overwriter/v16/.suo
- SHA256 cd03aa41772729704ec64fec57f568b26b42e4901601baf0adbef95743d06a09
- MD5 58c9f221db9ea82d4f0f41f3209e5165
- SHA1 0a0f299fee0ba9b912e09eac43d5a91112f55871
- SHA512 86650959d198d04623896d7cc4d7fb949031e38acfd2dd35a21a72042fd0f781b5be0dbf4c9be7668b46643f8c09bc1db033f5568357115df74a292ea0603935
- SSDEEP 384:JV+iRvsjId7vcBBbya/IdQXRw2iX/S6wS3kfrXRw2iX/S6wS3cDOhG4pp5dgDOhH:JV+iR/NvswqXRZXRVwSw
- MD5 SHA1 SHA512 SSDEEP
source/Logon_overwriter/Logon_overwriter.sln
- SHA256 1f640710e8d6d93ab8321d84ead8d070e38f05b9933d52cef0d2b8093d7f05f2
- MD5 81178a502823cf817a4f42e2910781b9
- SHA1 4a877b4c83d0c463831ada8a9da46dbdafc01f28
- SHA512 665129a18c7d51c1f404c0df42fcb6ca8dde9b2cb0df40900bdd829003c72bbd0ef6099665ae682ae16e21fb151edf028c73f056515ac82dc28813f79d8639f5
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Form1.Designer.cs
- SHA256 ba5de215cba1c4b458f132f48c3c8f3cb5c9e429b81259117a06181e23577cbc
- MD5 9d9eb84643fa948df24b580a695f416d
- SHA1 14b1dc1788f783fd49e10d1b29625c6ece5f98cd
- SHA512 cdcd48c6a0431b32428d5cf0ccabb812fcdee7356b1b21c6860f70c5f066a5c287235ac21a151b05c89cb529cdcb3db63643ef2a6012c7bdab0a437666956f4e
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Form1.cs
- SHA256 25340c0425c0fe9e4aee8a80736142a985b657a979f63e62d79186fd24cf42d6
- MD5 118f8b8e3a75e19fb0ca5cf048e25ed2
- SHA1 75736199677515bc46b11d8b9505eded9a6b7e88
- SHA512 21e47849866e07aa931e71f787788187592de1a215a8e45fe55879770530c9430eba2263f2bd1ed38aa64488843971c8d796aa837fbe59dc5a4389dc83bd29d8
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Form1.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- MD5 SHA1 SHA512 SSDEEP
source/Logon_overwriter/Logon_overwriter/Logon_overwriter.csproj
- SHA256 a4f5749daa6dbdc56fc74ace93acdebd350666419e6050cc04ecc9638431f412
- MD5 65451b9171c08515165abe79b5014c7d
- SHA1 5d829e511a509fdc22b1f4b3fe5876e27172322c
- SHA512 8c0a199a5ca422c12993d993202a718da5c39c18dda721181b753f6a58b869f50e7d203c20c115e8bb36092de0b216f1e67073b4c89c96987197542df9647257
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Program.cs
- SHA256 bf385fd43ba7cfcb058d81ceef51e50aef108df3cde755ed87f3f9000ac6df38
- MD5 72a30e86b107f209cb34565e8267f1f6
- SHA1 94c4662f4c8b571a9157af8355b18bb00f7e11db
- SHA512 0db6a4e7a1737d139fe5f23650dcabb335a2738e7ae214140f850fcb3d8f2063471942b4c7bf4c37e2bcdf7ebff8ef2ef5eac044b4263382b4b18acab29a6089
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Properties/AssemblyInfo.cs
- SHA256 7788a395233e7bd096095e3d7b285baff849c7f70b9c71aa3fe508c4258b2d57
- MD5 0aae29a1184dbd9f98bb5f4c9b6b6812
- SHA1 3765457081ef76b8d0ffdddc5ce7bdd59c328277
- SHA512 70a2ed236a0f533e8753cf3f3418b20321e56763c053f2c4fe74a1d2d52a736f93cf0fe5069ff591d63786fab964069135507644bad4efbee2cbbc0584dd4aff
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Properties/Resources.Designer.cs
- SHA256 f4d8a4a0b6709c0957adce28f713b262fef3102a317cb1e84fd1032405cf59a2
- MD5 26027366c11139b3f209517d13efac34
- SHA1 4c8cd390e890a74a2d2256754df24fe4327ea8e1
- SHA512 8170791d7455177fb073daa32c7884c70b6a2f0fd2556e55197cb5eea4b71a0ccbbf51d97ae1f06da75733fbb7497922930f4f25a0a0dfcb1d3cd4f71bbb2273
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Properties/Resources.resx
- SHA256 7ccb8e3ec12bf3f77979b64c9800e0bdbcd7313ef3e5adf4adce3130006b5cd6
- MD5 9b9712358be625b6ae5b380a3e4fe521
- SHA1 3230bcd98f7672941071e573e3b0ee0f69879d1e
- SHA512 589a0cebc244431519faeefb297d71df2d18a288403386839299000f72c89a76857f757e18f674f27824cd076d327dbcd67e2c6108838cf028d8e866d64e3a36
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuF88jj4:KjrbLPD9sLvIzSvKgIqUyahF8c2l
- MD5 SHA1 SHA512 SSDEEP
source/Logon_overwriter/Logon_overwriter/Properties/Settings.Designer.cs
- SHA256 1a2b3ee7b56ff88d6f12e9d466f509966b8249109a20ca24b31ba85b3c98ce7e
- MD5 f7868b14db3ad8c6ff31488f3de40570
- SHA1 60d02c2befa84ada29cbc0419a00e1cbc6f51b45
- SHA512 b3e61b75b5560eb7f3df5de98cbcc2207ba45b73adfa18f3ab3a0d8c4a6a123a14f348c430706d7bcc132ea1a22761b06233dc6e8f999a99e96bfe401919b3cf
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/Resources/LogonUI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ebcecd72b8bb18ed52787b47bdaabbe4a9cee534b1498b7da8243fff39a685c9
- MD5 2cd94e786a624bf706e3d74f86f1352c
- SHA1 a199fa3dc341e5d8a508a6b87ebde2d7949ade86
- SHA512 cb44edf11e6d253ecda97d85363acbb80da4ac552bc2ea4176765c81de872f5bb70a91082a7235551aacedddc9a4f361cbe1df87ee348199c1c7ab8593399b29
- SSDEEP 192:fLvWzFYYnh9GuIrSjItGCuokwlwAcQfVZyFd+Wz7onDv:fLvWzOElIrSjgPuokwlwAbZyFdN8nD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Worm\source\repos\RSOD\RSOD\obj\Debug\RSOD.pdb
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
source/Logon_overwriter/Logon_overwriter/app.manifest
- SHA256 5cad9422b30296dc60ad088d66bda7fb0b5ce7bd57f780a5e044b68300e7bbd9
- MD5 e0e4a019be8bfcf48b646ce2f98b627c
- SHA1 c96a62055bcf99d90ad8e85f180ff98a2a8e9f72
- SHA512 29faaf69da3d9dd6b367139817fc37cce0b59dedec24b3e12becf8efe1c4d7e4972b8af667f1fa9e116a6ec5b1fa2aa6a8fd8cceb8f197a6282a601f7ffdac48
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ed996aabbbd002aa1d2a26954c64f47072f9388142b85cf273c190ce357597e2
- MD5 942e4fe24043059c647f584cc657c4ab
- SHA1 41e98f66887a4d912a49af32bf164ab9daebf543
- SHA512 dab7a646761a2f547e5e8dee83678c1b30852ad266d03b3408475a65a5a0f3088a5b7e641d78baea697152cea735ece7b9537c7c86b7dc74773cdb336b0ee7f5
- SSDEEP 768:HDubwUSw3vW8j6NUOvW8j6NUZ3tYcFwVc6K:HKbwZMezNUOezNUZPwVcl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Worm\source\repos\Logon_overwriter\Logon_overwriter\obj\Debug\Logon_overwriter.pdb
mscoree
_CorExeMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
source/Logon_overwriter/Logon_overwriter/bin/Debug/Logon_overwriter.pdb
- SHA256 334057acec2df6a18f7ad76fe63e14a9d56c60ce6112633528e96f3e7e3a1a23
- MD5 eea9e843e6bef15888d6c6587f41e3aa
- SHA1 9ff01234da7c35e9b98a9cfce48d9e1736709267
- SHA512 54d0d99fb81ec25c3b0623c6751e398c4906eeed6b533f6bc3c57756b2532b673bc82580b3ad6e55bc9290a519f8c7698d8fb1a57254f8b0b4f036eecb7ac355
- SSDEEP 384:xn3e3Xw+8i01NEJXjxVECzE89yICQvNvmCaTw+8fzKQvNvmCa:xn3e3Xw+8k+2Ngw+8f
- MD5 SHA1 SHA512 SSDEEP
source/Logon_overwriter/Logon_overwriter/obj/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs
- SHA256 a68f8a233f30cf4737696fb94daaf44cb3772d40be168381aefa9059b2d3bcab
- MD5 1d18ab49c88d00ae24bcb32d63af66ab
- SHA1 13b4b0c66f98cd84a7d68126d7c88cbc757da6c7
- SHA512 17c6319c1ba24bb48ca7385f4a9e4a5f1d6346dfc6f6460abc914a43134c703815a3c3cf54597605926af7b29d89c80f410407464915926df27fcb68071fac97
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/obj/Debug/DesignTimeResolveAssemblyReferences.cache
- SHA256 0a84f0533741b68eb3a576215b8df8e96adbca90b54d1eea6c15eb695dca2a05
- MD5 04f579f4955cf8e24d8966e3a67e724d
- SHA1 f51a1f743464f9e793a2983a3ff823153be3b418
- SHA512 0184dda6353f5bbd56fd49af8c3c056d3de8eca423975a428ac227a1d446c4872abc5515e8e7afa8bf00c0086a4d9c09fe3657e52f524e4108b8ad4b4ba450e3
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
- SHA256 f9b7d102c332c37fd906a2625198659ad3ad3bc569b52a06a82d62e58e418d4b
- MD5 641bc9aea92427461672f5a912148ca7
- SHA1 2aba8bda4fdbabbfe9553bc67e0b94210b976fe5
- SHA512 e15275e74d7a238dc3813083daf4bf02fede892a5be4308472009dfa6e295bbaa8f1e1873153075117b8d5052eed75e66aae9835c180f2f14b31a86fbfe0cfa0
- SSDEEP 192:Wig1EA1E6mrFmrFmrFi1EA1E6mrFmrFmrFM1EA1E6mrFmrFmrFQV/hMLzI1EA1EQ:Wig1EA1E6eFeFeFi1EA1E6eFeFeFM1Ei
- MD5 SHA1 SHA512 SSDEEP
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.Logon.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.Properties.Resources.resources
- SHA256 38a626fd1dcf34f6828f4d40af52ebe7edcf6b896807a666381ec2ad59513fc1
- MD5 778316dbfd21d93dfd466e6a760bcd04
- SHA1 99f5d57f45216f6349be564bbc05f039b1abc944
- SHA512 f65fcf5aa75d9cb9eec101b732f6e32d4b141ea2965acc36100f1036ccda73ee45a4af1c9456a151ada72ecaa4e715de0c4ad1d71859658fddbb6a097930e175
- SSDEEP 192:rjLvWzFYYnh9GuIrSjItGCuokwlwAcQfVZyFd+Wz7onDv:rjLvWzOElIrSjgPuokwlwAbZyFdN8nD
- MD5 SHA1 SHA512 SSDEEP
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.csproj.CoreCompileInputs.cache
- SHA256 5abe4d92f953d236aaade6326cff313de7f6344958274a57da654cc2e6f01ae1
- MD5 1bf7c580850d3542baa0915701f994ce
- SHA1 417d484ef6897ab9748a41bfb7a51c1d5cf44330
- SHA512 257848f95a359bd194597d35b0171f62d2d8a55c13d7a32eb92f765663071c9d436e95b07ab1d302c3141c232608329562355e167fc1da40bb53ad5be6b48faa
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.csproj.FileListAbsolute.txt
- SHA256 42b989bb4edf0e14b9fa1bfd6499fae69bb798ad505e5ae12561765930fb730e
- MD5 af170df1238f1cab8766633c1510f0f7
- SHA1 495ad6250cf1bfde5f69928975e54c25feb35fba
- SHA512 aafc760f8823d42acbe5df6bf1286640eca02c7d694a092c6f31984229bae8d0bf8a9d1560a9a7eefd136934cee2ef400d4db1ebe4efc605a9219f1e9bbfc757
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.csproj.GenerateResource.cache
- SHA256 9a68f39420e05b0f3368f5c97ab3dff55e6bcab5d63dde6efeb1b7811252d09c
- MD5 89476d3be782f3218eea8080a6f934b4
- SHA1 9486d052e24c1a1b78934ed273abf9b55013649f
- SHA512 8d994fadce5b6010a26aad23a2bbeb90876f0cddbee0eaa89b04cfa118a96c2fb1ccea243ecb665e1809773d946f9c2211de3a6e122001f9ed1cf8150ea9fabe
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.csprojAssemblyReference.cache
- SHA256 6a6f048d7d510c0312d7eddd40597f7b61d054028e03534ede883f86d17d8fa5
- MD5 de0e9bf2b16fd87f6e432ee2fdb44050
- SHA1 ce82c0e4ab07825d873ec2dcbf36457d36c6897d
- SHA512 f0b794979ce3bc63986b5be75aa74be8b65779e612c1f5755d4abb5ffadc8e4db5ec49a13f38a59a5edc3c49f1193ea066689eb1cd11dce4b1a4d5c8d5dd303b
- MD5 SHA1 SHA512
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ed996aabbbd002aa1d2a26954c64f47072f9388142b85cf273c190ce357597e2
- MD5 942e4fe24043059c647f584cc657c4ab
- SHA1 41e98f66887a4d912a49af32bf164ab9daebf543
- SHA512 dab7a646761a2f547e5e8dee83678c1b30852ad266d03b3408475a65a5a0f3088a5b7e641d78baea697152cea735ece7b9537c7c86b7dc74773cdb336b0ee7f5
- SSDEEP 768:HDubwUSw3vW8j6NUOvW8j6NUZ3tYcFwVc6K:HKbwZMezNUOezNUZPwVcl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Worm\source\repos\Logon_overwriter\Logon_overwriter\obj\Debug\Logon_overwriter.pdb
mscoree
_CorExeMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
source/Logon_overwriter/Logon_overwriter/obj/Debug/Logon_overwriter.pdb
- SHA256 334057acec2df6a18f7ad76fe63e14a9d56c60ce6112633528e96f3e7e3a1a23
- MD5 eea9e843e6bef15888d6c6587f41e3aa
- SHA1 9ff01234da7c35e9b98a9cfce48d9e1736709267
- SHA512 54d0d99fb81ec25c3b0623c6751e398c4906eeed6b533f6bc3c57756b2532b673bc82580b3ad6e55bc9290a519f8c7698d8fb1a57254f8b0b4f036eecb7ac355
- SSDEEP 384:xn3e3Xw+8i01NEJXjxVECzE89yICQvNvmCaTw+8fzKQvNvmCa:xn3e3Xw+8k+2Ngw+8f
- MD5 SHA1 SHA512 SSDEEP
source/Logon_overwriter/Logon_overwriter/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 01e807bce2be16214598aa7766169e07a829c9cc49cbd7ee377153985146f693
- MD5 826bba607d893522d642d8befce38818
- SHA1 736007616a8f85efe36e7324b7e4a831dd62f0df
- SHA512 d16774c1831b0f0eb707e039658c04bbf51a23ca2799af6617adcab931172247e63cfc58770aee71284013adc0670a8d6358d1a999c7dc04e3e9263a76b0c775
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
source/MBR - Image Builder.exe
- SHA256 5221a90748195966f5eda98b3324c518c74e5b0e4c36c4f053b383d3a3e2f535
- MD5 e7c5f0910415edf3aa571e3738b5741e
- SHA1 e8dc1f89f2b08dd4fdc4cc7b9af3d2d7346d0d11
- SHA512 985f80aa39564211e757c28e423da93f02a1ed19d786b358fb6dad4aed30f8f90e015a957792eeb8cdb8cc915f506748cdafacd654e7a3cd2a005f67d6786764
- SSDEEP 196608:ecHPN3uinV2m8ErHQkMih5gHEZkZCh9tzu2NrBaR/N+A82AGONm4uyN1Gg2JapPi:ecHPAincmLb7MEGZ0ti2RIR/8RN1+EXs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
733460
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
712KB
Virtual Size
712KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
36B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10.5MB
Virtual Size
10.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
source/MrsMjrGui.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 087fca40e079746b9c1dfaf777d3994c0321ea8f69d08238cdfc02fb109add1d
- MD5 450f49426b4519ecaac8cd04814c03a4
- SHA1 063ee81f46d56544a5c217ffab69ee949eaa6f45
- SHA512 0cae15d863120f4edc6b6dabfe2f0f3d2e028057025d7d5ffe615cde8144f29bdaf099850e91e101e95d13f8a83cb1410a06172dda25a5f92967abcbc8453cbc
- SSDEEP 1536:M1GJbcJVksz/mYyXki6GHcSVp5l/eq/mh78EZuMdUQL+ZZN24W6yos1:M4I/mYyX16rSVvl/zCQXMdUQLK211
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
78662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
c:\users\guest\documents\visual studio 2015\Projects\WindowsApplication2\WindowsApplication2\obj\Debug\WindowsApplication2.pdb
mscoree
_CorExeMain
Name
.text
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
source/MrsMjrGuiLauncher.bat
- SHA256 d93cdbd6a2d78fe59323a8f76acc982ec196e8207f15eb845499eb84b07ba987
- MD5 e942ab4b591724739122ae2cfadf4e95
- SHA1 e125cf0b7ae0b0b9cfd48ce8d7e3691beaa92d7a
- SHA512 8fc44467ce8f6dd460db053e99d31e89801e51d1e7213fbaae14364e52000c137bc495914fe43f4fe5900f91a938b515a6a90b2999e1a1fb47bd770d0fb5f196
- MD5 SHA1 SHA512
source/PatBlt.cpp
- SHA256 0afcf170e45d8841ce219bda2f4cba89f8d891c4ce038d4b952e20d913b96371
- MD5 adfe54e9312c2dbb8c2f8f49f58fb5bb
- SHA1 eb48f577fb5b284abbab878f4b850f3b23337b3e
- SHA512 ac9f68455542bf0f1a3efe7c55a32d839549ec391f845a78fe45f5132ebfcc2c8e50ac3e8be8fe3caea96de0730ee537e2b08233cfbd5507f99ea5615f8f63bd
- MD5 SHA1 SHA512
source/PatBlt.exe
- IMPHASH fd5a39e3e5cc28d70b95e6ca2d50e947
- SHA256 d6b31049bd394968c5423e0c4413e051d43f881e8d5a2ebf5dca2e1563c048fa
- MD5 0a38dd7a27c52b1374bf9cf18a41159a
- SHA1 29f549c1eb2a7f563432881ca4074fb3f0d2fb66
- SHA512 efbe24d8dd833fb9f850f45f1eb74bf21b6c42ff155885868d37b9043e3c813248b961c8e5c1e7b6ecff603e71ab15387d79d985dacacc2c11324db3ad9bd221
- SSDEEP 1536:5v5iT50crY0Xy4WOsu3yUyJCbcVDG7XLkmEC:K10cXXy4IJuzr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
gdi32
PatBlt
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
signal
strncmp
vfprintf
ntdll
memcpy
strlen
user32
GetDC
GetSystemMetrics
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
1024B
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
1024B
Virtual Size
754B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
source/RSOD/.vs/RSOD/v16/.suo
- SHA256 27de038005b25daa45148c0cb19bd66cc22afda6987effae8e16b1c91f2b5cd3
- MD5 04d7469cebd1c946f548c18f38c35abb
- SHA1 98785998c4ee2802ea1f05098b6e8b9b10dda070
- SHA512 ff500b0f207430a108484d21a9e756cfa5bc0c8e6a3d9206fa0eee040f4949113dac47e77ac61a78ecfc89de5668ce05d099f1aaf27d00ef047223e22e8979fa
- SSDEEP 384:D7KlJwabHIP5v8IPnIKw2iX/S6wSCIKw2iX/S6wS3k/KCI:D7KlRbolLPIKpIKd3I
- MD5 SHA1 SHA512 SSDEEP
source/RSOD/RSOD.sln
- SHA256 31d617deea0fa2a426679f88ec6bfeb35b1212b1aaf7686428a68044ed7026d4
- MD5 a0b301a5d3137b41b7850401abde224d
- SHA1 923310f431a9a30a0a9e1e007f65c31bfddafe9c
- SHA512 42645ff19fcf8e86ccacf0779286e4783f823ff417d38d1d11985cfc5b4c82f9bde95936dda6325035db9421e2e9a9885d54fe2d952b5ed41b1fe637d2c6514d
- MD5 SHA1 SHA512
source/RSOD/RSOD/Form1.Designer.cs
- SHA256 90177bf419f92907a7d4241a4c5ad7a0de5ebc9a29c2fafa5884dcbfa06ca2ed
- MD5 f3416f979c38190337ff426a25d5cf47
- SHA1 c13586b417ae6c6cb01190d647496e187347e92f
- SHA512 897dd0772322620fd3d5cea39067a51621de1d33930970435e5c3c2d751a30d530af92c736a6f31581b37f2776d373df2b76d4c12243c9cf0d9b84af38608c77
- MD5 SHA1 SHA512
source/RSOD/RSOD/Form1.cs
- SHA256 e06a8ce70a390f54e162e020c6380a884511e037e41756ed61234713b1832c2e
- MD5 2428d7cd0307a6773c80ca27b3a9cc8c
- SHA1 c6a28de8e625f96faba9058584e25dfe95508c64
- SHA512 5bc89d6f8864d260ab01e3c0d18f982b456ec9b8dfbb2389917060a6fd8c509710f6448cebd0294c4f098fac3030b9ebeb9c088fdcc58c2cdab519b29ff8165d
- MD5 SHA1 SHA512
source/RSOD/RSOD/Form1.resx
- SHA256 55939986ca32891ebda9057f08b7babb5aca1d8fc7455fd2ef9f788e0708dcab
- MD5 1f905b104dc11994994cf4be39618136
- SHA1 0e423469c4b518139a6e6d57e9b561085b72a125
- SHA512 314362affb191e52da09286233fd2ac53bb8afda22d2d17e624b4757c446013c5472688add1c1c0e6cb45677fa08efb8045e4bdf6f210d9ace2e5688f7959503
- SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahFUgwzokvw4Xj9ZoDvHy6ciJFqcZl:KjrbLPxsLvASvKgwyahFUgwzokY4PoJt
- MD5 SHA1 SHA512 SSDEEP
source/RSOD/RSOD/Program.cs
- SHA256 627cccaeb83516ff0e11db5e63893c5a77058beec7ca45751f5a9609d06e0e42
- MD5 192f35046ef8cd0283d4fc9e39c7848a
- SHA1 801383b698265e5785ebef2491a2ab2bcc084e5e
- SHA512 56b81b240ec4a4c959dd0a56a87d3f12e86c226b1cb03c9c9fa826f3c48643e43b778ec0898a6636c87fb24e59c3d6756d319946aabfd06de98a6213b1c08c9d
- MD5 SHA1 SHA512
source/RSOD/RSOD/Properties/AssemblyInfo.cs
- SHA256 4d1393ef7243cb45a3460b7eddd19ab75f3d5264fa72e266586e67b8088fecef
- MD5 b132466a094f16ae7a671e66f61c8776
- SHA1 531599189ed21068c73856a8194070600d3a577a
- SHA512 d7575ca7572e069f5acb9602d16c71b2fb3d2ded62ee60663122ff1c3e9914c2cf2de360b54f3b0aa633e5cc5ad333dac6d37582c89bfc17d6e16c4a2d295c24
- MD5 SHA1 SHA512
source/RSOD/RSOD/Properties/Resources.Designer.cs
- SHA256 814c5ccf620f5983eaa8cfe070e6d5662f0c808f4258de5dba87399f94fc42cb
- MD5 d51d95303193bafd085bf59e0bd9201b
- SHA1 9836b66b89972410551a59bda7ea1868aa5972d1
- SHA512 95219746e1682c640d6ff961a4c6f449fa9ac81f2952027f623f2703c6e1e77cc51c72ada017faebfad4cdb9d212c74af41e233281774db963d0420ea1d088e5
- MD5 SHA1 SHA512
source/RSOD/RSOD/Properties/Resources.resx
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- MD5 SHA1 SHA512 SSDEEP
source/RSOD/RSOD/Properties/Settings.Designer.cs
- SHA256 e33cf7a5dabeb84e0fa3235388eef06270c30bd9e5961dc6d2d9feb1c733c345
- MD5 46e7ca43de5c09093675c1ebb10eef0d
- SHA1 ff091d3bb1d3afc6781311ec79f756806ca58731
- SHA512 d8c1a2976677033b12f41a47e3e61dd5b64e4f4b0f25d7a3882266cf5af03affcc11f061ba8c39baca6760813ed545cef4b150c4fe4cb810eef98fdc8a34fa44
- MD5 SHA1 SHA512
source/RSOD/RSOD/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- MD5 SHA1 SHA512
source/RSOD/RSOD/RSOD.csproj
- SHA256 a3ca8e566679cc9a71000d062c7b00adb91f82b315b4aa65d5c984732b3c7740
- MD5 0a82c39d5c9ec938366102052a10deee
- SHA1 2fbb5ca2135fdfdb71f25009d1d5bc366cf120e4
- SHA512 cc814d540daf5676b256b120892fc182c71eb612abf1234f1fb9b2af01f54d9e6042ff094cdf7e5ee36b3dc4c1b915339d9aa2fc80d8e0eed622abb3b4bd0bd1
- MD5 SHA1 SHA512
source/RSOD/RSOD/bin/Debug/LogonUI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ebcecd72b8bb18ed52787b47bdaabbe4a9cee534b1498b7da8243fff39a685c9
- MD5 2cd94e786a624bf706e3d74f86f1352c
- SHA1 a199fa3dc341e5d8a508a6b87ebde2d7949ade86
- SHA512 cb44edf11e6d253ecda97d85363acbb80da4ac552bc2ea4176765c81de872f5bb70a91082a7235551aacedddc9a4f361cbe1df87ee348199c1c7ab8593399b29
- SSDEEP 192:fLvWzFYYnh9GuIrSjItGCuokwlwAcQfVZyFd+Wz7onDv:fLvWzOElIrSjgPuokwlwAbZyFdN8nD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Worm\source\repos\RSOD\RSOD\obj\Debug\RSOD.pdb
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
source/RSOD/RSOD/bin/Debug/RSOD.pdb
- SHA256 e06c8eac78cbfbfcbafcaeea6c66d39f4d48d47afb49df932fd6d2de178ec6b6
- MD5 c6f7940492a029ffc5dd7faec8a728b3
- SHA1 c36e7cfe0f854c3581e6d6745fe7ef1f9ecdc7f9
- SHA512 16d78230b2537836194dc6087a37563886c90f72d60a7905a1cc63798eb35783caa7b03b1b32336176fd532a358f52859b33309f12a8977e454a835795dac7a6
- SSDEEP 192:aP+APGAPEDAPGAPdAP5AP1HAPnAPeABdf8ECLfVH9haJTWsiDvb2m2r2VcUd/APY:ShJ3J2aa83df8EChHAtaa83D
- MD5 SHA1 SHA512 SSDEEP
source/RSOD/RSOD/obj/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs
- SHA256 a68f8a233f30cf4737696fb94daaf44cb3772d40be168381aefa9059b2d3bcab
- MD5 1d18ab49c88d00ae24bcb32d63af66ab
- SHA1 13b4b0c66f98cd84a7d68126d7c88cbc757da6c7
- SHA512 17c6319c1ba24bb48ca7385f4a9e4a5f1d6346dfc6f6460abc914a43134c703815a3c3cf54597605926af7b29d89c80f410407464915926df27fcb68071fac97
- MD5 SHA1 SHA512
source/RSOD/RSOD/obj/Debug/DesignTimeResolveAssemblyReferences.cache
- SHA256 0a84f0533741b68eb3a576215b8df8e96adbca90b54d1eea6c15eb695dca2a05
- MD5 04f579f4955cf8e24d8966e3a67e724d
- SHA1 f51a1f743464f9e793a2983a3ff823153be3b418
- SHA512 0184dda6353f5bbd56fd49af8c3c056d3de8eca423975a428ac227a1d446c4872abc5515e8e7afa8bf00c0086a4d9c09fe3657e52f524e4108b8ad4b4ba450e3
- MD5 SHA1 SHA512
source/RSOD/RSOD/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
- SHA256 2ea943bf445bffe7f00cd8e72613dc01f92301719d7a26457ab8a055eb0cd82e
- MD5 bbb1ec8a9835e1739dfa9922f167335c
- SHA1 8b87d614c5a7106ff84f1441dcddb38535403201
- SHA512 5b2266bf83eb6362ec47576a9f8aa458fbc95334b4e9b813472ec4732b57ce871b51c169e8d5ca4c634f30a20ed4d9abf6826abe505c681129dc180872f003dc
- SSDEEP 192:Wig1EA1E6mrFmrFmrFi1EA1E6mrFmrFmrFM1EA1E6mrFmrFmrFQ/2acz1EA1E6mX:Wig1EA1E6eFeFeFi1EA1E6eFeFeFM1EI
- MD5 SHA1 SHA512 SSDEEP
source/RSOD/RSOD/obj/Debug/RSOD.Properties.Resources.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- MD5 SHA1 SHA512
source/RSOD/RSOD/obj/Debug/RSOD.RSOD.resources
- SHA256 9876d711cccbee84d51f6d9c817ebe51c3d422e1d552c1f923aa9f5056b84eec
- MD5 352896954abf91d07eaa58dc95291175
- SHA1 0ccf05c27e6f58973278bdd74c3e6f536c83f436
- SHA512 cdd25aeba01874b08cc1aceb58e92317c713e627d8e44d217307a0f0fb0488c45b18994e095796cf7ce69eb2f88e28c5eb8e78f7c618b74de7f19eaa4c26e43e
- MD5 SHA1 SHA512
source/RSOD/RSOD/obj/Debug/RSOD.csproj.CoreCompileInputs.cache
- SHA256 5abe4d92f953d236aaade6326cff313de7f6344958274a57da654cc2e6f01ae1
- MD5 1bf7c580850d3542baa0915701f994ce
- SHA1 417d484ef6897ab9748a41bfb7a51c1d5cf44330
- SHA512 257848f95a359bd194597d35b0171f62d2d8a55c13d7a32eb92f765663071c9d436e95b07ab1d302c3141c232608329562355e167fc1da40bb53ad5be6b48faa
- MD5 SHA1 SHA512
source/RSOD/RSOD/obj/Debug/RSOD.csproj.FileListAbsolute.txt
- SHA256 caaf0d6fec8424d185a6f53c752885035e22581c15481215639453ee6c72fe97
- MD5 6a3ede80ff13d422377a7e54e8696b98
- SHA1 6f097b84045aa2a00dcbb5f160e2b154971b6f03
- SHA512 80e77407a76472bae69bfad8724218c23097aa94e2d1708864ac8d45831333079374e7622c740e7550d70c6f0fa753c044afe815fdba92d3f3ca123349da2185
- MD5 SHA1 SHA512
source/RSOD/RSOD/obj/Debug/RSOD.csproj.GenerateResource.cache
- SHA256 3fe702ff808d00db3722ee77f5f3ee186684997d55d64af30db2c9fab0bc19eb
- MD5 0a5dd9f22b1c73b2dae04f389366591f
- SHA1 79a778f50781ff2340a4e4662231e0e6473bffb0
- SHA512 ea52d923488c5d6623f48cf620d80662cc2c55939a79995f28c024c6b89e9a1c46211110e8133260e72d6f782a1b6b4022cbc1fa30647f34209ddc5975f8dade
- MD5 SHA1 SHA512
source/RSOD/RSOD/obj/Debug/RSOD.csprojAssemblyReference.cache
- SHA256 5d3760d0e718951a693e76b21cb0f60827f4c27404d00887b66cc233affbaa62
- MD5 b6725dcf2bdb9a89681f51e2ef727ec8
- SHA1 2e4ccf4ac23d95e46edd9ca66764fd12bb4c0237
- SHA512 4b01edca4f80d9c6711eaf32fff1faa09d0db89e00a05b434ca39b9d2b6ea9e987d64ab25d92fd94a51c8334682d9e953f8414a68b4be5559a1c160ec40180f7
- MD5 SHA1 SHA512
source/RSOD/RSOD/obj/Debug/RSOD.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ebcecd72b8bb18ed52787b47bdaabbe4a9cee534b1498b7da8243fff39a685c9
- MD5 2cd94e786a624bf706e3d74f86f1352c
- SHA1 a199fa3dc341e5d8a508a6b87ebde2d7949ade86
- SHA512 cb44edf11e6d253ecda97d85363acbb80da4ac552bc2ea4176765c81de872f5bb70a91082a7235551aacedddc9a4f361cbe1df87ee348199c1c7ab8593399b29
- SSDEEP 192:fLvWzFYYnh9GuIrSjItGCuokwlwAcQfVZyFd+Wz7onDv:fLvWzOElIrSjgPuokwlwAbZyFdN8nD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Worm\source\repos\RSOD\RSOD\obj\Debug\RSOD.pdb
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
source/RSOD/RSOD/obj/Debug/RSOD.pdb
- SHA256 e06c8eac78cbfbfcbafcaeea6c66d39f4d48d47afb49df932fd6d2de178ec6b6
- MD5 c6f7940492a029ffc5dd7faec8a728b3
- SHA1 c36e7cfe0f854c3581e6d6745fe7ef1f9ecdc7f9
- SHA512 16d78230b2537836194dc6087a37563886c90f72d60a7905a1cc63798eb35783caa7b03b1b32336176fd532a358f52859b33309f12a8977e454a835795dac7a6
- SSDEEP 192:aP+APGAPEDAPGAPdAP5AP1HAPnAPeABdf8ECLfVH9haJTWsiDvb2m2r2VcUd/APY:ShJ3J2aa83df8EChHAtaa83D
- MD5 SHA1 SHA512 SSDEEP
source/ScaryBob.exe
- IMPHASH 5c4d602843f54570889588b32f7af650
- SHA256 7989c7e5c2d6277718ac7d529334b0547f428d2e8bbbf0e71ef6ea5161b26320
- MD5 da6ea8c9e8072dd9b07cf18eaca5bf1f
- SHA1 62262030923b6fe7dae82f16f700cf5da3b63476
- SHA512 1d667036c9bba6e710451dfce9869b5f14b881670e5196a4223ea1c95d4b9e256f39494632c537c21959aba244581c2fd1dab39941c9e90d7369b9b9a3443069
- SSDEEP 1536:/y5I1MSx56Hj2UItX85ljPQIe9RoSbGF4q2L6OBIyHwPSYI:KeMSMHj/rj1SbGFl2L6CIIw5I
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4392
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
Name
.text
Size
80KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
source/ScaryBob/Form1.frm
- SHA256 902c0f65cc8b09fc25d022d5254a2023690bfbee935df397fdeccebd8d10527f
- MD5 79bb334a09efe2beb26329b19c207f01
- SHA1 260252d4bdac3b78bc2bac50f754b9b8841eeb3b
- SHA512 36eb2cb911724b6fd6547fe0c31b4cf9e1e0f846603cfbcf21e8bc8de45b17518752b0f231bef249f3bd5e564fe32e45a640312ec11212d9b903ab040c623ff6
- MD5 SHA1 SHA512
source/ScaryBob/Form1.frx
- SHA256 54fce5879e05184b59baf6b58f704aea0cad0b393f6b1a4829817a0bc360e4ac
- MD5 cde47366ca233b23cf4d598bd3ffafac
- SHA1 bc555f8ee610d64f3f5280172ce14fc0040f50be
- SHA512 f8e0505174c691e07ac820414b06b0fcfc8e81adace7ea493b9e007abbffc22990a8215c665898c33b7f3dfeeb4d99811b830008e9ac288128c1b7cca16b144a
- SSDEEP 1536:15I1MSx56Hj2UItX85ljPQIe9RoSbGF4q2L6OBIyHwPSYO:LeMSMHj/rj1SbGFl2L6CIIw5O
- MD5 SHA1 SHA512 SSDEEP
source/ScaryBob/Project1.vbp
- SHA256 3ba3f466586c25da6f899e16cc185f31683e70b9f3e7af4153c2482dc955aef5
- MD5 8a78797f64a0642199ae5987e21adfa2
- SHA1 e04409e963bb26bfd1a68553d7c6edbe2a08f74a
- SHA512 406836ed99f1200941f15a6503f8bc6909c48b71a20ead0db92fd82005d216a5b1e61949a47606ec7aefeca7d87bd30e2b8adfae5e6ff018951f399c09d83460
- MD5 SHA1 SHA512
source/ScaryBob/Project1.vbw
- SHA256 aa198998686412f07e422127bb3f4a1a1228ce62204fc8f5a43bd6863121de65
- MD5 4bc79d0f731d9f8a6a7648f3f8c7b2ed
- SHA1 e1f4ab69a394f78de0633ed8b542e4f98e3b1458
- SHA512 959c87b708ba8ddad4252a35258733c07f1fc1421e7f90abe01dae52d6455303b10c420074bb409ffd7a54617b9a222e7939d511d807f012fc72c0b6c1751d94
- MD5 SHA1 SHA512
source/ScaryBob/ScaryBob.exe
- IMPHASH 5c4d602843f54570889588b32f7af650
- SHA256 7989c7e5c2d6277718ac7d529334b0547f428d2e8bbbf0e71ef6ea5161b26320
- MD5 da6ea8c9e8072dd9b07cf18eaca5bf1f
- SHA1 62262030923b6fe7dae82f16f700cf5da3b63476
- SHA512 1d667036c9bba6e710451dfce9869b5f14b881670e5196a4223ea1c95d4b9e256f39494632c537c21959aba244581c2fd1dab39941c9e90d7369b9b9a3443069
- SSDEEP 1536:/y5I1MSx56Hj2UItX85ljPQIe9RoSbGF4q2L6OBIyHwPSYI:KeMSMHj/rj1SbGFl2L6CIIw5I
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4392
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
Name
.text
Size
80KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
source/ScaryBob/bob.jpg
- SHA256 31becb9a56ff7027315b60e082b1d4adbe20552293f462803502ede2ca89b82c
- MD5 042d1cdfd13656bd82a21639269cedcd
- SHA1 f703f6010b118401676e33fd5e8e56623b444d49
- SHA512 0db82ee29d180843a2ad922e7cb86ee79efee812327026687c15a071b9fd2089948e83cf3bcb36d22c2764a6989fb8a7ad82641a54be3e2089ae4144ec2b9fce
- SSDEEP 1536:J5I1MSx56Hj2UItX85ljPQIe9RoSbGF4q2L6OBIyHwPSYO:HeMSMHj/rj1SbGFl2L6CIIw5O
- MD5 SHA1 SHA512 SSDEEP
source/SuperDeath2.cmd
- SHA256 e0fa759bb269ad38b6ed2008d4c39cd6a1a90193dfb6de08fda3962891e2e7eb
- MD5 0e0804581819d046ebe00f29bdfe77f8
- SHA1 a26e8857bb83dc27ed665a91bceb2d70f34a6f5f
- SHA512 523841566918822f474074e163ca3f9abdfab83b851b1959866757ea0e4d5b08f2d2dd89e807edf8c51655a119b9c0dfb92fb22a7a8e05783b32e326a7f4dc11
- SSDEEP 48:5T25wj5AU2ZzR+8O6zKSR1XR9TApZlzAXSolGDrbwvut3:5T25yazw8jzfXXR9TApZ5WlGnbjt3
- MD5 SHA1 SHA512 SSDEEP
source/bg.bmp
- SHA256 c9d75009579cc12d038eb13b3fba135f0b68f1e9b2c1723f752633eddc17a71e
- MD5 2e13350dc37a3b5a80612cef1f89f1ae
- SHA1 e475cc859ea7beb7611b6e3ef8b8488b24f3be90
- SHA512 6f0ec5c31e44bfdce4a0f3cc1c2c90348cdbc2873ada33e762a0903e07cd3be9f051ee416bbb03348bdbd999029c84a3cf31b6b3bea9a948ba89132678c7ae02
- SSDEEP 49152:42TIbs0ZpFk717cyzdqOwvGULBfy4vRLezkVHa85pYwrEKNPU1s+k1v+doBEKUj6:XKiWNZ1k+R1v+uBEZjB0d3Z2Tu
- MD5 SHA1 SHA512 SSDEEP
source/covid666.exe
- IMPHASH 5c4d602843f54570889588b32f7af650
- SHA256 9c65f53786596c9de6c3c64f936c17990f1fdf446a3b249abd16cd4eccfe7c6d
- MD5 0d51c6cecc5a92698b4a78c5bb1e1d79
- SHA1 85ede094d4b3ac837aa9510c05372975026f207b
- SHA512 5da604784458ea6f75e00742ed7b78719efdc389106939c748705d63c5ab1ed26aefc29af3c6a8253793c13e1e1ea80baba0d129b9271ad4d7bc5dfb4b1a2a9f
- SSDEEP 768:/5jjisU9FR4GNO9OCo0/E9bx0MpO5oO4A2K8iYB0:/5jjiz9FCrTGfmoOTr5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4392
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
source/covid666/23311_lores.jpg
- SHA256 741d2576009640a47733a6c724d56ed1a9cee1014cde047b9384181a1758cd34
- MD5 108fc794e7171419cf881b4058f88d20
- SHA1 dd05defd9fe5fb103db09eb2a3bb72c5ed7d8777
- SHA512 3a1a22217ff636e48612ff3b55ac6611eda6ae0b5a1f4d693440cbd6aef84d6657d3cd076ca828ba828ee556ab64e5bdecb37c1d682590877f3b23345baeb0ea
- SSDEEP 768:VjjisU9FR4GNO9OCo0/E9bx0MpO5oO4A2K8iYB7:Vjjiz9FCrTGfmoOTrU
- MD5 SHA1 SHA512 SSDEEP
source/covid666/Form1.frm
- SHA256 8a90ea7a5ac66203795fc418b4706212c474fc465e4f23df0f8d473af3e2210a
- MD5 a0da56e5135fe70e6c0c32344a77a2f4
- SHA1 fa6284c51edec3ce9df9556e73a89ca71acb6a36
- SHA512 ed976b312e513686e7361668f056e0e8ec3705eef93f3441c50773bb43c2530897c913470acfecf1f5cb6157921dd89a1a04b683a44ec4882c9970d95f592402
- MD5 SHA1 SHA512
source/covid666/Form1.frx
- SHA256 458f33b650a04abbb49bda25ae5a2d7cee6ae26f6450a061c5e8012ab9af16d0
- MD5 654d48ddcf505d1b7c31817d9b8a91f2
- SHA1 3830a65ebbf9bb716fbd99da06eddc1da8f2bd54
- SHA512 7db2fdd00f7deba41e396ee83016621a7937e7438f4e4aa68045c1b7871c0601ad503f926fde054071aa97cd616ff8aadf4b73a09d50eba9e53e82da0e17e0c8
- SSDEEP 768:ZjjisU9FR4GNO9OCo0/E9bx0MpO5oO4A2K8iYB7:Zjjiz9FCrTGfmoOTrU
- MD5 SHA1 SHA512 SSDEEP
source/covid666/Project1.vbp
- SHA256 41f909c8740719043c1c5c6d87523a3ceb0ab28e20000adc3600cf0a74c6d723
- MD5 db2aaf9d79fedfa2d71e237161ce7e50
- SHA1 cde7610c06d2035419742d23244ae0ad3ec81697
- SHA512 cb129b629f8f52b4fd225fd3d4418d683c84adc2b774f72709898672541e605bef6f3ee2fb173029ca640cf9ec2086805f0f50ffe0d52439b9fb2d95e0f31dee
- MD5 SHA1 SHA512
source/covid666/Project1.vbw
- SHA256 8dfd50279e5b702b17afc78b03251d489687af6d1374e87002d822c2a8a3c2c0
- MD5 24cdf21fafdaf62421c0ebd02657c0de
- SHA1 9aad06e5b94299451c359ba0a71ef74bbcb76d8b
- SHA512 ef9b3b2ff9eaf75aec90cfeff9701f1e9f6757afbc6c85d4ac7f19c54d701b819f22c6ed12a07c707a368fa970ebdf2add3aedf2906a1f2508fde83cc963d444
- MD5 SHA1 SHA512
source/covid666/covid666.exe
- IMPHASH 5c4d602843f54570889588b32f7af650
- SHA256 9c65f53786596c9de6c3c64f936c17990f1fdf446a3b249abd16cd4eccfe7c6d
- MD5 0d51c6cecc5a92698b4a78c5bb1e1d79
- SHA1 85ede094d4b3ac837aa9510c05372975026f207b
- SHA512 5da604784458ea6f75e00742ed7b78719efdc389106939c748705d63c5ab1ed26aefc29af3c6a8253793c13e1e1ea80baba0d129b9271ad4d7bc5dfb4b1a2a9f
- SSDEEP 768:/5jjisU9FR4GNO9OCo0/E9bx0MpO5oO4A2K8iYB0:/5jjiz9FCrTGfmoOTr5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4392
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
source/deephaze.mp3
- SHA256 3773f35d30769b56d83e5b86767e0a77cd721f2b35c564ebddde49d0bdac81dc
- MD5 76310ab61fc08777ba6db87eaa945684
- SHA1 796567df3765e948a1c06ef113cda7ec0225cddc
- SHA512 0ce4f432467e05fea49a7b7e3d3b9ff8a3a7a5e39612e1ec74780a7c107ccc2fdec18c4ead75c0b854de70da1323deaf8731454123898c8df173a580aa2786dc
- SSDEEP 98304:56yZKEGWi463yMbplHRxooznQ6YMRBx5lj:7Z5lINbp9FnQ2P5
- MD5 SHA1 SHA512 SSDEEP
source/f11.mp4
- SHA256 a9b0f1f849e0b41924f5e80b0c4948e63fc4b4f335bbdf0f997b03a3aff55424
- MD5 17042b9e5fc04a571311cd484f17b9eb
- SHA1 585d91c69c3f9e3d2e8cb8cf984871d89cc4adbb
- SHA512 709076c6cef8dd61701c93e1fe331d2b1a218498b833db10ee4d2be0816e3444aeebfa092ab1bd10322617cf3385414e8fdb76fd90f25b44ac24d38937b4d47f
- SSDEEP 6144:e9JCN13fXdGjZdst2r99/MxTW6RGS2AVQ9safl/ppFxfBw:5VG6k9OjRGS24qsaN/pFBw
- MD5 SHA1 SHA512 SSDEEP
source/fileico.ico
- SHA256 d13f7fd44f38136dae1cdf147ba9b673e698f77c0a644ccd3c12e3a71818a0cd
- MD5 a62eeca905717738a4355dc5009d0fc6
- SHA1 dd4cc0d3f203d395dfdc26834fc890e181d33382
- SHA512 47ffac6dc37dac4276579cd668fd2524ab1591b594032adbeb609d442f3a28235a2d185c66d8b78b6827ac51d62d97bdc3dffc3ffbaa70cf13d4d5f1dc5f16c2
- SSDEEP 768:NT3jpF8btdcP0pdsNhEGxz+e4HGiFULFkqr+vxYmCTTp5E3QbS8lC4pTqX:NT3j0tjsNmde4HGb2WHmQbvlxpa
- MD5 SHA1 SHA512 SSDEEP
source/gotosleep.exe
- IMPHASH 5c4d602843f54570889588b32f7af650
- SHA256 808970f3cfd46a212a99d3798c8710b87ac5df0192471ac1b521be50e98873cc
- MD5 c23b9c75443feafa9448bd6642d6bbc2
- SHA1 3d5fb1cd212a34eb7a78b250762d07c9db2d12d8
- SHA512 acf619a107c0f4af7d500c5f8fae5374cc1cef5dc11178a7b0d4f60630b3a45482c52ebba1b101eb117f6d72917ec3ffc3a19b09c503fa099e0ad4ef2a7141e7
- SSDEEP 768:/vBVMOP1UxkTz19eBIz1of1Iy85Fngv0F4d+cb69P22IE8BxlzeqfPG:/v33us1dxs6FngMiwB22IE8BxlSF
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4392
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
Name
.text
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
source/gotosleep/Form1.frm
- SHA256 51a259c74cb154a423c6461b4d15ab58ebc736e0f9a85b5d8f17f477d1634e03
- MD5 3c693e2477499dcd4b5b73662634456f
- SHA1 a373d3c4ed5b3d893e8efb08280fac299e3c336c
- SHA512 37dc516b1b14e902175b73dc05dd8ca1e22f0be1b676f6958ee3fb8d1018a4b177bc965ea46bdff276ceb4678ebe7d591296e0581786ec3ae6497e765dd010c8
- MD5 SHA1 SHA512
source/gotosleep/Form1.frx
- SHA256 c0ca30e26474a7537266a0156380123a80c3747f769203bbb31b5c4abc6e67c5
- MD5 214ff24e272a5332cc4d6ff509736b77
- SHA1 56feea28cd7caa6caf3bc8a7dcc3a9f14c8b71c1
- SHA512 5263a208ee1222baf68ed8aacca67d0cd60ffd04309ae0e212ac3dd141fbb2dadc9465ad05995311d5d1c05ca09abf31246ecca6bc443a4e8670505673f7060e
- SSDEEP 768:iBVMOP1UxkTz19eBIz1of1Iy85Fngv0F4d+cb69P22IE8BxlzeqfPn:i33us1dxs6FngMiwB22IE8BxlSk
- MD5 SHA1 SHA512 SSDEEP
source/gotosleep/Project1.vbp
- SHA256 7a16c6ad6ca8448a2beee26e89361e10c660677c2744bc43a3019c8a2a5f632f
- MD5 1ceedafdff745af8feeb9ff8a826550b
- SHA1 53e57ef3eda5a700757c181c97754c627b5b5439
- SHA512 d1564bb7608074948e550528a019448bbc68a16031af3ee7d6d39b8323f80f7f8bee36cd611a68a7312972f6640c8f5d37498c5fe19a6938dc3d3b1be4bd7b69
- MD5 SHA1 SHA512
source/gotosleep/Project1.vbw
- SHA256 2cd2ddf94192358ce14a8d60408a420c25b47202eba36e4f000c63fdccd801e5
- MD5 7cdde19fdf2d6da12e177d3e8eb00a42
- SHA1 1fb7b11d573e1b48fdca120ef22d81450836a84a
- SHA512 c3eb177b982de029a2204289956e87a5b8cec46bdcccfaa971dece79f70137ee4a4943b988686be9c6ddcc54b925cc2f66d2e7be18c409cfd0279e4ef6493b5c
- MD5 SHA1 SHA512
source/gotosleep/die.jpg
- SHA256 75667a1bb4172bcccf2806edb471621c1a5b378773785ec5268d870ab927a5ce
- MD5 1b6a7bf12a9a3018c1f6cb594b796554
- SHA1 9fe3be05b5c4b0f24f9f388a5bb44a6cf2ea12f0
- SHA512 a53704515606c74fce592af8eff1e8e841da8a1804ef3ca83da605ea56632c6d8a17a92a64ade98144c5e365467788a838c6932988eccfb6763ae5e1e5c60b1a
- SSDEEP 768:SBVMOP1UxkTz19eBIz1of1Iy85Fngv0F4d+cb69P22IE8BxlzeqfPn:S33us1dxs6FngMiwB22IE8BxlSk
- MD5 SHA1 SHA512 SSDEEP
source/gotosleep/gotosleep.exe
- IMPHASH 5c4d602843f54570889588b32f7af650
- SHA256 808970f3cfd46a212a99d3798c8710b87ac5df0192471ac1b521be50e98873cc
- MD5 c23b9c75443feafa9448bd6642d6bbc2
- SHA1 3d5fb1cd212a34eb7a78b250762d07c9db2d12d8
- SHA512 acf619a107c0f4af7d500c5f8fae5374cc1cef5dc11178a7b0d4f60630b3a45482c52ebba1b101eb117f6d72917ec3ffc3a19b09c503fa099e0ad4ef2a7141e7
- SSDEEP 768:/vBVMOP1UxkTz19eBIz1of1Iy85Fngv0F4d+cb69P22IE8BxlzeqfPG:/v33us1dxs6FngMiwB22IE8BxlSF
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4392
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
Name
.text
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
source/major.vbs
- SHA256 62a2f34fc0e288701b6d30bb55e7ecc04790f4befa3c1decd1b6a5fa282f9602
- MD5 d6b9c3853b5c2e6f5a7afffa6e790d01
- SHA1 629b6099202a2628a51f66c2e96e46c31e68cd4a
- SHA512 1e609761ff575668069afb7907fd979f66660f759003779803946171eb6d8689a7dd886bf072fdcab794dfec4457e9164fe6196c9d4d83e9720a5494f00fc859
- MD5 SHA1 SHA512
source/mbr.exe
- SHA256 aaf6029ff69d4eddf3442855dffa507f52cfbb73d5b22d9b06cac0915e41fc9c
- MD5 4d56b50156494c20372908a20dad3b34
- SHA1 24d960f4fe3236d7d9cfdc692ea7ed604ccd57b9
- SHA512 25d059b94a5db2fdbd7d51440e31c1cacff04e5086556d6c411961dea98dfbe60dd0a719db6a9b08e4fbe8e536d451786fc6863946042e017ba0837e9761443a
- SSDEEP 3072:wCGPVHzzgd2HPVVf9AebuLFfK9s7I7dPNgDd9:wrak9gorh6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
77280
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
14KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
12B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
source/mbrlmao.png
- SHA256 48ecb191bf4b82943d6a81f891af9b6893987d4bdcf0ffda6d2f973100f29eff
- MD5 6161605d4f118b5fd746faff997d32a1
- SHA1 d335eb7d90046301e215ca0e8d1baaaef2c057c9
- SHA512 3675159ebd99ae7d1e4f5585636fa48e6c3a055b9c055a8058f67bc1a47d044462b4482cf166ae744026136064686f228f3f8516aaf64ac9d3b3d59292958715
- SSDEEP 192:inLSFnd0RekSjHCiZrMxwDMTwuuKMDfCYYUYzyYNMBcmgN/K9Jn5HoXrd:WLSVORehDCifDM6K66LUYfwcmUQJW
- MD5 SHA1 SHA512 SSDEEP
source/mover.exe
- IMPHASH 80af4ee28260afc10b852a42f1578c0f
- SHA256 c9e2a7905501745c304ffc5a70b290db40088d9dc10c47a98a953267468284a8
- MD5 c1978e4080d1ec7e2edf49d6c9710045
- SHA1 b6a87a32d80f6edf889e99fb47518e69435321ed
- SHA512 2de11fdf749dc7f4073062cdd4881cf51b78e56cb27351f463a45c934388da2cda24bf6b71670b432c9fc039e24de9edd0e2d5382b67b2681e097636ba17626e
- SSDEEP 12288:OuxZ9WrtjV86EabvtVMuQE3yv5lbLG0Bh9RqtAetx:DxZ9WrBVjE8vEuQcWH13q+etx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
1197204
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
wsock32
WSACleanup
version
VerQueryValueW
winmm
timeGetTime
comctl32
ImageList_Remove
mpr
WNetUseConnectionW
wininet
FtpOpenFileW
psapi
GetProcessMemoryInfo
iphlpapi
IcmpSendEcho
userenv
LoadUserProfileW
uxtheme
IsThemeActive
user32
GetDC
gdi32
LineTo
comdlg32
GetOpenFileNameW
advapi32
GetAce
shell32
DragFinish
ole32
CoGetObject
oleaut32
UnRegisterTypeLi
Name
�1��ers
Size
539KB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
�2��ers
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
�3��ers
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
source/musicplayer2.vbs
- SHA256 f10b0178b85a421cdcd1e87b12264294c6770064c3a12e9928186ac77f10fbda
- MD5 4cd6ea340444f2c259fccc0e14598fcd
- SHA1 a0906a1ddf202ec506131b0d97cb11d34925aad5
- SHA512 8dae9fa4e403bbed4e2debf259f2f0da477c514eee82033fd8346258b3db5667492f56d6cf3388c859f7e164070e1b6da527a7c495e327900507e11495a21ad9
- MD5 SHA1 SHA512
source/street.mp4
- SHA256 95374cf300097872a546d89306374e7cf2676f7a8b4c70274245d2dccfc79443
- MD5 d2774b188ab5dde3e2df5033a676a0b4
- SHA1 6e8f668cba211f1c3303e4947676f2fc9e4a1bcc
- SHA512 3047a831ed9c8690b00763061807e98e15e9534ebc9499e3e5abb938199f9716c0e24a83a13291a8fd5b91a6598aeeef377d6793f6461fc0247ec4bbd901a131
- SSDEEP 1536:ncypHn1U1VPY2RiCe6ujcvimXqX/IVcKMYXN9WTcTjT/:nLA1++iCeFj0im6X/AXpT/
- MD5 SHA1 SHA512 SSDEEP