TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
General
-
Target
Overthinker1877 Wordpress Mass Shell uploader.zip
-
Size
3.9MB
-
MD5
d238addc1fabf01fd67d10cc716520fa
-
SHA1
46d528edb9724f9f0c6453040f6623ca9ddbda5a
-
SHA256
ab719d9b5c1c1e6baeeda13ad522c771c8f2d9bc39657fe69d4c6e19dd0f73b4
-
SHA512
e7a135f369f8d9efcfe7a25f82562efb250a3f18d03b5590c4b42f625129c26a48fa0ef97ef87c8b1fb3567e98b97a080ea8ef0a427cfe7833b7d4707c8f546f
-
SSDEEP
98304:ewDiG0ZzgIa1vcup3D1/qNTLO9MvbQjk3ydsmnvyU:rF0q1vcYoT+MvYDs+vyU
Score
3/10
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
Files
-
Overthinker1877 Wordpress Mass Shell uploader.zip
-
Overthinker1877 Shell Uploader.exe
f5d4be825330b75e879af961193dc202
Headers
Imports
Exports
Sections
-
db.php
-
libeay32.dll
96c4f4e8917dc64df4c59957846701ef
Headers
Imports
Exports
Sections
-
linkpreview.zip
-
linkpreview/css/admin.css
-
linkpreview/css/jquery-ui.min.css
-
linkpreview/css/jquery-ui.theme.min.css
-
linkpreview/css/style-rtl.css
-
linkpreview/css/style.css
-
linkpreview/db.php
-
linkpreview/images/favicon-32x32.png
-
linkpreview/images/loading.gif
-
linkpreview/includes/admin.php
-
linkpreview/includes/class.php
-
linkpreview/includes/tooltip.php
-
linkpreview/index.php
-
linkpreview/js/tooltipster/css/themes/tooltipster-light.css
-
linkpreview/js/tooltipster/css/themes/tooltipster-noir.css
-
linkpreview/js/tooltipster/css/themes/tooltipster-punk.css
-
linkpreview/js/tooltipster/css/themes/tooltipster-shadow.css
-
linkpreview/js/tooltipster/css/tooltipster.css
-
linkpreview/js/tooltipster/js/jquery.tooltipster.min.js
-
linkpreview/linkpreview.php
-
linkpreview/readme.txt
-
linkpreview/uninstall.php
-
linkpreview/view/admin.php
-
linkpreview/view/static-rtl.php
-
linkpreview/view/static.php
-
linkpreview/view/tooltip-rtl.php
-
linkpreview/view/tooltip.php
-
pridmag.zip
-
pridmag/404.php
-
pridmag/archive.php
-
pridmag/comments.php
-
pridmag/css/editor-style.css
-
pridmag/css/font-awesome.css
-
pridmag/db.php
-
pridmag/fonts/FontAwesome.otf
-
pridmag/fonts/fontawesome-webfont.eot
-
pridmag/fonts/fontawesome-webfont.svg
-
pridmag/fonts/fontawesome-webfont.ttf
-
pridmag/fonts/fontawesome-webfont.woff
-
pridmag/fonts/fontawesome-webfont.woff2
-
pridmag/footer.php
-
pridmag/functions.php
-
pridmag/header.php
-
pridmag/images/featured-big.png
-
pridmag/images/featured-small.png
-
pridmag/inc/class-meta-boxes.php
-
pridmag/inc/custom-header.php
-
pridmag/inc/customizer/assets/customizer.css
-
pridmag/inc/customizer/assets/imgs/1c.png
-
pridmag/inc/customizer/assets/imgs/1cc.png
-
pridmag/inc/customizer/assets/imgs/2cl.png
-
pridmag/inc/customizer/assets/imgs/2cr.png
-
pridmag/inc/customizer/assets/js/customize-controls.js
-
pridmag/inc/customizer/custom-controls/class-radio-image-control.php
-
pridmag/inc/customizer/custom-controls/class-upsell-customize.php
-
pridmag/inc/customizer/custom-controls/section-pro.php
-
pridmag/inc/customizer/customizer.php
-
pridmag/inc/customizer/styles.php
-
pridmag/inc/jetpack.php
-
pridmag/inc/template-functions.php
-
pridmag/inc/template-tags.php
-
pridmag/inc/widgets/block-posts-dual.php
-
pridmag/inc/widgets/block-posts-grid.php
-
pridmag/inc/widgets/block-posts-single.php
-
pridmag/inc/widgets/featured-content.php
-
pridmag/inc/widgets/popular-tags-comments.php
-
pridmag/inc/widgets/sidebar-posts.php
-
pridmag/index.php
-
pridmag/js/customizer.js
-
pridmag/js/navigation.js
-
pridmag/js/skip-link-focus-fix.js
-
pridmag/languages/pridmag.pot
-
pridmag/languages/readme.txt
-
pridmag/page.php
-
pridmag/readme.txt
-
pridmag/screenshot.png
-
pridmag/search.php
-
pridmag/sidebar.php
-
pridmag/single.php
-
pridmag/style-rtl.css
-
pridmag/style.css
-
pridmag/template-magazine.php
-
pridmag/template-parts/content-none.php
-
pridmag/template-parts/content-page.php
-
pridmag/template-parts/content-search.php
-
pridmag/template-parts/content-single.php
-
pridmag/template-parts/content.php
-
settings.ini
-
shells/mini_shell.php
-
ssleay32.dll
bd6491c5c6ba4207cec8336a4d4007e8
Headers
Imports
Exports
Sections