Danger-MultiTool-main.zip
- SHA256 e7b04249c5fcc4a5f1729b0b7bc919b485e2a3b4638760794c08cf523eeef4ff
General
- Target Danger-MultiTool-main.zip
- Size 28.3MB
- Sample260728-vmbzvsdj7w
- SHA256 e7b04249c5fcc4a5f1729b0b7bc919b485e2a3b4638760794c08cf523eeef4ff
- MD5 8781640df220a05444abe84c3d8c52c3
- SHA1 1df2d72343d171ef8dbb0f0a0dd0828623ecee8b
- SHA512 cc96bff77ad3faee2b0dcabb897f5a38cb80ff7d2e387a163bfc6f1b270271e7cd8e55268ba033610c8951f4859b685d1bcc01094acc31d58bc4dbf1a8f2cade
- SSDEEP 786432:C0INyZwUsVDh9webxWTFYpf8/UlIfw9IURifwAp4bOlpHi:V0yZkDrbxWpYpfjd9IdfhubEi
- TLSH T114573380F31508AFC684F22864D71D1BEB231F59A3F671A86C5CA34315EE1BB463666F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: blankgrabber
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
- A stealer written in Python and packaged with Pyinstaller 2 IoCs
resource yara_rule static1/unpack001/Danger-MultiTool-main/src/utils/__pycache__/cpython-311.pyc blankgrabber_exe static1/unpack002/�4o.��_.pyc blankgrabber_exe - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/Danger-MultiTool-main/src/utils/__pycache__/cpython-311.pyc - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Danger-MultiTool-main/src/utils/upx.exe
File Explorer
-
Danger-MultiTool-main.zip.zip 28.3MB
-
Danger-MultiTool-main/README.md1KB
-
Danger-MultiTool-main/requirements.txt261B
-
Danger-MultiTool-main/src/main.py13KB
-
Danger-MultiTool-main/src/utils/Data/Amazon_Gift_Card.txt1KB
-
Danger-MultiTool-main/src/utils/Data/Ebay_Cards.txt13KB
-
Danger-MultiTool-main/src/utils/Data/Fortnite_Gift_Card.txt1.8MB
-
Danger-MultiTool-main/src/utils/Data/Roblox_Gift_Card.txt1KB
-
Danger-MultiTool-main/src/utils/Data/Steam_Gift_Card.txt3KB
-
Danger-MultiTool-main/src/utils/__pycache__/cpython-311.pyc.exe 7.4MB
-
�4o.��_.pyc1KB
-
Danger-MultiTool-main/src/utils/upx.exe.exe 21.1MB
-
Danger-MultiTool-main/start.bat121B
Danger-MultiTool-main/README.md
- SHA256 c86adedc84664dbb0daff4ba1593a3280b61cfb55f0c380e4e4f14c19aed66cf
- MD5 77ff88c3907a1086b83791fb54aa54c7
- SHA1 fd6c7e7896651f06dc4cd73c1c13b552f55fbd8d
- SHA512 935c5a02e9be4177ca87eab8fae76dd2d9e73d30e54fc1f2feab001953b8bb3a6765a9d937d8d22ecff53b291ab4af5cb268fa79cbf824a8b2366bdf7d4ac5ee
- TLSH T160310FEBB8BD1847CB8390C4DD8AFE8EFA21726FA0D11705FA288053BD491A70D426D4
- MD5 SHA1 SHA512 TLSH
Danger-MultiTool-main/requirements.txt
- SHA256 6741a5c449f96b03e8f593746283c9fa7313c2adffb13c09eed7fbb76395ad16
- MD5 89116f1c508bfe1d69dfe6c1c3aa7c2e
- SHA1 d2127555fb5e4d5a9de9de23e616494d701e794d
- SHA512 62f3b3c23bb197bb21740563152415f84b4a3e3330f17fa7019a776cee7fe47fae2d991d746c00cdb29cb7bb7d5347f6ae21bdf3f6876f295edf5301a33da481
- TLSH T166D02B65F214F0A3C1D2DC9D54124520402E349B751129CE6B8642FD702F644F61876D
- MD5 SHA1 SHA512 TLSH
Danger-MultiTool-main/src/main.py
- SHA256 984c5a8704a16386a31fb31f903da7c24a7b67c224906be88039ea15ead84286
- MD5 c48f27c10efb969ac31147a787860fb9
- SHA1 611c119923825407e300cc86ec258669b0224ebd
- SHA512 fd23d04786f93d5e2440912b71d83df15b100e2bd286e68e32cfb7ce23eb9f346c531fe822fc953c1eccbaf6395b63acc7697851ebc608834e5852a15056141c
- SSDEEP 384:MG87mbbEB8IXCa7bujRs8pWS+QinACIBadXGxuapdBeYyil4TKl17+Ryf3urqpMG:MG+mba8IXCa7bujRs8pWS+QinACIBad+
- TLSH T1CC525ABF9C5435087ADD450ED193D8ADC703714B48EBA483F1EFA490AF16E3DA898D86
- MD5 SHA1 SHA512 SSDEEP TLSH
Danger-MultiTool-main/src/utils/Data/Amazon_Gift_Card.txt
- SHA256 f8303217ceeaa1d181a78ade7554b57e3cfb8918fb8b706e81f1c61c0f10bac8
- MD5 7a857d2afb2c9b803822c1f4ecfb9be7
- SHA1 67fa6ceee37fa88ccc8089193f0f3b99b1106c91
- SHA512 1527e33be6c221ea91eb6e3a8a36c82a67518a493b2ad2ad9f542aa6ecee7763d0f61b9bb076a1d036910f8cc1230ec6f4c9bc51b89fda79a2dce28408ddaff0
- TLSH T1E341083BC33943E6CC2D393C3D6074662BE843C2D9E083A5BD17EB191CA411687798C6
- MD5 SHA1 SHA512 TLSH
Danger-MultiTool-main/src/utils/Data/Ebay_Cards.txt
- SHA256 0bd4c12c3571df3c9071f8770d18b33205e29ceaf606fef8c94cb3456b57d780
- MD5 a75c084867cb7ea90b1809d73e997428
- SHA1 60d0c9c05f6e56d0f7039a8301215b0298a9cfc4
- SHA512 ecb3946a1c9b4122c975745eb8e23149c66035d9a46808914e32b1e8783d3c6536bcd0255e7c10a19ffd86cabc8acc5f0094765d10a72d07b928e08374ed5061
- SSDEEP 384:sXRJ8bxeTlrt9nhX0oZHR6VZ2uIxg4Okgh/voRd:SR2bxQD/HR6V0ur4zaXoRd
- TLSH T16252BF4793CF1D9DE37862C7CA227F149468883B698335DD124560CDA5AE1A00BBEAE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Danger-MultiTool-main/src/utils/Data/Fortnite_Gift_Card.txt
- SHA256 1b975b6b72f8fd7f592f08d15cd79539a92aabd205b14a22f6484b38c8e41463
- MD5 347a97a5fbec1ca04525f7216467e184
- SHA1 b62742a8a013057bdf9df6a1db2abb7fb962ed83
- SHA512 f6ba75ff6e2368713fa48d4070cbedb141337af80b5d36dbec62de215604e8fbcea465bac5d065519125e273f21adcca9c6b3b7436ac68f99af83fba49bcafc8
- SSDEEP 24576:kzDh9nSy4TZzDrW4ZskKtGc668AtBPo5c1YbGvFuxtN1qewnb8xWfXNrHYcR:aDBM0NF9UL1PWfG8
- TLSH T1F185AE69806E83CD4C01B4FE7954B0D23ADE71CBC8DD436A8769CA3239F50E993B5D92
- MD5 SHA1 SHA512 SSDEEP TLSH
Danger-MultiTool-main/src/utils/Data/Roblox_Gift_Card.txt
- SHA256 3c63778bd0caf83f73da7307def2ea96dce114c1c527f4be20ceddb505b996d1
- MD5 882f74e46f473f74fb3172a80c472e6c
- SHA1 6e0c6317f2eb0098e6e0fb20a1c9163cdc9b0ef5
- SHA512 1fd3b5eec61cea8128c19ae685e552cde4b24eb7c822e1a484935f85c3d7797e58bd2afd1e8333385dc7e626da2ad8165fa165bc03660dd79b8590fb2cccec36
- TLSH T1DA31AE15F472A3F99A9C532F854C8ACF2CE547076583205E9373B7902602B2EBA4FA10
- MD5 SHA1 SHA512 TLSH
Danger-MultiTool-main/src/utils/Data/Steam_Gift_Card.txt
- SHA256 1b7145aa1d99303b2211bfc6a8c01a320fb4a4f30998fee458010b923d8ee559
- MD5 5caabfe0e6a2f10e0b0a97f9e683ec26
- SHA1 1d34aa37b17ac4ebdf9e924b33efd97d6ebd8428
- SHA512 e8ee75260b1731c44b964c98e551ac14e56b5ba29a62c4d671e80b199b3bcba70587f4128b98e62a7bb394ef58b9cec92f6eaaba39c49a4618c5bc4aa4cabb73
- TLSH T1A7715DDAC0DC62810E45F0627164B07509D866478EA0432C8B7CCF77BAEDEDDD679E22
- MD5 SHA1 SHA512 TLSH
Danger-MultiTool-main/src/utils/__pycache__/cpython-311.pyc
- IMPHASH 0b5552dccd9d0a834cea55c0c8fc05be
- SHA256 3c09a37412bf3981e5d678b6598c2cdad32fcd6761fc649a50693ba45746e242
- MD5 1a2ff293768d10b8c99d3cd2950164b9
- SHA1 e9123a3d2a53b5f8d008db9608037dd0571f3cae
- SHA512 ff8a853675431bc36d88288546d7f467f239ae2e4e7ef019476ac4ca06f715e88f201753d7201dbfacb3b6dca51be764036372de8a8c0def29e00ae5e9469941
- SSDEEP 98304:FWeYgI6OshoKyDvuIYc5AhV+gEc4kZvRLoI0EJfNA3z5UTfHfyk6LK4dSI23o7yc:FPYmOshoKMuIkhVastRL5Di3tO/ys42O
- TLSH T15C763304B3A808EAE955913EC5C68916C673799613F0E09F0B684BB65F1B2ED4C3BF17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A stealer written in Python and packaged with Pyinstaller
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
5d:bc:37:cf:38:27:4b:e7:25:51:4d:ec:75:c8:98:d3:4b:fb:d6:4c:8f:b8:6a:4c:f8:71:73:f3:78:c7:18:b7
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=407950,CN=Akeo Consulting,O=Akeo Consulting,ST=Donegal,C=IE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024945
Chains
Apr 25, 2023
SERIALNUMBER=407950,CN=Akeo Consulting,O=Akeo Consulting,ST=Donegal,C=IE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024945
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=407950,CN=Akeo Consulting,O=Akeo Consulting,ST=Donegal,C=IE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024945
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
SERIALNUMBER=407950,CN=Akeo Consulting,O=Akeo Consulting,ST=Donegal,C=IE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024945
Serial Number
bf:b1:50:01:bb:f5:92:d4:96:2a:77:97:ea:73:6f:a3
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 29, 2021 - Sep 28, 2024
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
45888
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetStringTypeW
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
IsValidCodePage
GetACP
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
GetOEMCP
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEnvironmentVariableW
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
SetEndOfFile
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=191, id=261, version=30795,
count=10, id=260, version=30795,
count=4, id=253, version=32420,
count=40, id=261, version=32420,
count=17, id=260, version=32420,
count=9, id=259, version=32420,
count=11, id=257, version=30795,
count=139, id=1, productName=Unmarked objects,
count=20, id=260, version=32538,
count=1, id=258, version=32538,
�4o.��_.pyc
- SHA256 85c21e48e59e603126503a1b4ca5645e84305b6045a0dc0210a5a20070c7f1e7
- MD5 5cd2babd20950cb48630fa3b9da3ca36
- SHA1 0393880a2937f9c306ab46d63d8a65638a6c8cac
- SHA512 25536f8de19ca0d3cd1dbc776bd9aa72ebdbf3cf3b71c883761b90e8d08858281c5f79a3ddbf2b4d9406024e89f0410a29c3e32f535f214ac3b418a6a6a8fc3d
- TLSH T1B631E1870262CD3EFCA6D37C903C4C9A77E0D9E0F91D6653290E517D9DA4924B8525FC
- MD5 SHA1 SHA512 TLSH
-
A stealer written in Python and packaged with Pyinstaller
Danger-MultiTool-main/src/utils/upx.exe
- IMPHASH 92d2a489ec2d72c4f68bb91a03ff7498
- SHA256 26bd901862d859d388875500bf516e2b69b081c002f636b35e0c16fa985488ba
- MD5 de5c48dc5970e5fe30263ead1eb1ef63
- SHA1 9d962cf00e7faed2e828d5ec18386b3c9ed60e29
- SHA512 0d80ab77cb45e70c67112a4f95d6b8a52fe0909d90453a63a95b27e35cf9e2f41c8c418b45b7eae3a74b505733323e5780086b74f4b237c461fe3d489de61caa
- SSDEEP 393216:NIu2gY3tX+EUp23T6gDgrUX5wxVz094PUYQvV9rx+DkVM:fNUtX+Hp23mbUpGVy4lQ9PL
- TLSH T15B27338ACCD802F4D7A3C705A2AB168FF3D0623B5A951D1D359958012B73A17978BF3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
32899451
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
shell32
SHFileOperationW
kernel32
LockResource
vcruntime140
wcschr
api-ms-win-crt-runtime-l1-1-0
__p___wargv
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-convert-l1-1-0
mbstowcs
api-ms-win-crt-stdio-l1-1-0
puts
api-ms-win-crt-string-l1-1-0
wcsncmp
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.7BW
Size
Virtual Size
15.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.x%(
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fQ'
Size
21.1MB
Virtual Size
21.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Danger-MultiTool-main/start.bat
- SHA256 8caedbf5a91ed11823eb4d35ac84720e692246a17db1dd70e42d1565540d5842
- MD5 c7bda38ca7b6acff98cfce8e087ece33
- SHA1 d2d7b7c6757870ef3a7ff3a40678e74176a4676e
- SHA512 7732f4fb081f71bb0a8545a033ddfc35ec6901aec49735926718466d7155f623c482a83871fc3cb9c18fae17c9ce3ee008ea4effb74cce33b7034b8ad0ad0b7a
- TLSH T1D8B09206DD1C988D4ABA5C9C1A96A686A4870046A960A7E0B66B5183C9CB889E10E622
- MD5 SHA1 SHA512 TLSH