rekt.zip
- SHA256 821ac8f20263f3b553d8bab48754e1eefa9550983d7fe110150f70dbd1a572f7
Overview
overview
7Static
static
7A180.exe
windows10-2004-x64
3A180.exe
windows11-ltsc_2024-x64
3ASPEKT.exe
windows10-2004-x64
3ASPEKT.exe
windows11-ltsc_2024-x64
3CONJ.exe
windows10-2004-x64
3CONJ.exe
windows11-ltsc_2024-x64
3Project4.exe
windows10-2004-x64
3Project4.exe
windows11-ltsc_2024-x64
3Project5.exe
windows10-2004-x64
3Project5.exe
windows11-ltsc_2024-x64
3Project7.exe
windows10-2004-x64
3Project7.exe
windows11-ltsc_2024-x64
3Project9.exe
windows10-2004-x64
3Project9.exe
windows11-ltsc_2024-x64
3SWEDLL32.dll
windows10-2004-x64
5SWEDLL32.dll
windows11-ltsc_2024-x64
5asp.exe
windows10-2004-x64
3asp.exe
windows11-ltsc_2024-x64
3moon.exe
windows10-2004-x64
3moon.exe
windows11-ltsc_2024-x64
3rekt.exe
windows10-2004-x64
3rekt.exe
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
A180.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
A180.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ASPEKT.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
ASPEKT.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
CONJ.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
CONJ.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
Project4.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
Project4.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
Project5.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
Project5.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
Project7.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Project7.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
Project9.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
Project9.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
SWEDLL32.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
SWEDLL32.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
asp.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
asp.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
moon.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
moon.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
rekt.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
rekt.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target rekt.zip
- Size 732KB
- Sample260801-ph47ysae36
- SHA256 821ac8f20263f3b553d8bab48754e1eefa9550983d7fe110150f70dbd1a572f7
- MD5 58dde4ce470241b40074f97875b8c674
- SHA1 b8f6f8769b0bf2a24a4390e0e48f47e4a264a06e
- SHA512 f3c226e9c762d95656aba8f507b6a8f2f3d7e3b8ce24f13bb58dbbb8d689362a776039ae85787b09b9ee3862cb628e0735033b61cc0c5e1b285cf30131523f09
- SSDEEP 12288:01PTKJvMXFlEE4XixX3/ykAbGzYeeYaqWTjJq5SsM7fYYfEtwigoor49vZ8EgvpQ:0dTwUL4XSXPykCkeyWnJCSs85KJHorUT
- TLSH T102F433394DF1DC59C669B43A3B3F158B92B25303731D26B06ADC8F417ED882E161DE8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/SWEDLL32.DLL acprotect -
resource yara_rule static1/unpack001/SWEDLL32.DLL upx - Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
resource unpack001/A180.EXE unpack001/ASPEKT.EXE unpack001/CONJ.EXE unpack001/Project4.exe unpack001/Project5.exe unpack001/Project7.exe unpack001/Project9.exe unpack001/SWEDLL32.DLL unpack001/asp.exe unpack001/moon.exe unpack001/rekt.exe
File Explorer
-
rekt.zip.zip 732KB
-
A180.EXE.exe 36KB
-
AF.TXT448B
-
ASPEKT.EXE.exe 28KB
-
CHIRON.TXT199KB
-
CONJ.EXE.exe 64KB
-
DATKOS.TXT629B
-
DATKS.TXT64B
-
DATSTIH.TXT32B
-
DATVVL.TXT50B
-
DATZNS.TXT34B
-
EKZ.TXT739B
-
Project4.exe.exe 80KB
-
Project5.exe.exe 64KB
-
Project7.exe.exe 56KB
-
Project9.exe.exe 60KB
-
SWEDLL32.DLL.dll 180KB
-
asp.exe.exe 88KB
-
moon.exe.exe 260KB
-
rekt.exe.exe 1.5MB
A180.EXE
- IMPHASH 69d2c72fd976dc9771aecc7c09a928c7
- SHA256 a8c14270e79c66fbcb9c922ed6cec3a32fdc0ba54d8330261188169e6496b49a
- MD5 acce36da41e3b8920272a088490b2e79
- SHA1 ad76ff3d45999bfb643120cf8bd21f185991e5d8
- SHA512 52886a9369af53db8c9b87280a74e5bab016548290c3295b703b54b391a38b679bc12c587826df65ea84935bac9e4503c929135a5b76329c9a200bddb71821ad
- SSDEEP 384:/TrJIHMV53YDPf7/iOywPVBZT8fapiwwZUSQSeQbNds:/3l5qnOOyeVBh8fapiwwKST37
- TLSH T188F2FC1FF858692BF04641323A15969658973F352632AE09FB6F3B2826770F395F070B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarSub
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaPut3
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarTstLt
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaVarAbs
__vbaGet3
__vbaVarTstEq
__vbaVarOr
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
ord607
__vbaFPException
__vbaVarCat
_CIlog
__vbaFileOpen
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
__vbaVarCopy
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeStr
Name
.text
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
AF.TXT
- SHA256 ccea92806a5efb0c148f070211622109e7b2e6f0bcfaea7be7ec18a76a9fc6f2
- MD5 e75de6312937cfcafcdebc1b28a639d0
- SHA1 fea4ad8ce6573a405a2aac845631bdb5533eab43
- SHA512 bfd2c53b3f2589c6c91ef7f822f049232d8184bdee2c2a543963c68ca3694f5eb2c0345441b9d4086e18c863bf5f4156013a7420e80527353857f28b0c527c39
- TLSH T142F012171BA446A723C8D15805E8D00B69D98503B9EC592CFE77086F542EB83B8F8672
- MD5 SHA1 SHA512 TLSH
ASPEKT.EXE
- IMPHASH 03cb79c64c94b3ca6d70697a85f70c85
- SHA256 4ce8230739e0e9afeba12322c18d4b93540d6d9d76283559ad35111b7c9f211a
- MD5 fc35b166bd906f8c8c39e34606e50b1c
- SHA1 e5369b2d4cddf411291564de870f97bcb3572e2c
- SHA512 faa1ac2cbb64d384a96f20e56a7b05259fe37321714c0881423a193ea2d6c82538e80a6045ac187271a82f785741bba04c0ce06c02f485580337ba295ef7b172
- SSDEEP 768:/+mgwb1KoOOHaU/IbejhVjaOraIES3J4ILmS8:/+mgPUD8
- TLSH T1F9D22219FE68542BF14A4977366186D69D707C342A46FC1AFB0A7B6C38781E398F0B07
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4748
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarSub
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaPut3
_adj_fdiv_m64
_adj_fprem1
__vbaVarCmpNe
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaVarAbs
__vbaGet3
__vbaVarTstEq
__vbaVarOr
_adj_fpatan
ord600
_CIsqrt
__vbaVarAnd
__vbaVarMul
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
ord607
__vbaFPException
__vbaVarCat
_CIlog
__vbaFileOpen
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarDup
__vbaVarCopy
_CIatan
__vbaI2ErrVar
__vbaStrMove
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeStr
Name
.text
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
CHIRON.TXT
- SHA256 0a5b55e37521c5bc4b8c2c1c551f8c404977e16a9d7fbd43218d8e3b273d633e
- MD5 bf9e29254757661a0825c12ae727415a
- SHA1 7568037e9ae2bceabd45ac6e5920b7f519c4a7d4
- SHA512 b3dcf32ff640f4bb113883a7f003efb28f5546d87fac641cd3de9d074012af42eecd16ccdeeb08299919a0a6cb23e844aa55eff43e42bf8fde28c5d3870d8803
- SSDEEP 1536:72yL4QXt4J0nznWR/zYe2GsNOL/ksaOHHF7maZ2X7udzdxijwAe/8LKqI/t1xaPP:1y/kskizdxijwAelswKc/HIKtfdO
- TLSH T1611411AB8B051194224BC3C3A10E7482E4BF95335BD9E49D7EBD2CEE613B785FC05998
- MD5 SHA1 SHA512 SSDEEP TLSH
CONJ.EXE
- IMPHASH bda25e23acfd10eb20268821fd489456
- SHA256 2ea22e74988a743f63fa780e5742e5eee55cccf2176512b8bf1606cfb00d35ca
- MD5 71911170be7bd389a87e62e553bf0beb
- SHA1 f650513337dff725d8bd0aefeb3959a9db47f6ad
- SHA512 212f5d74b77999f135543154d61c8e1aa89cb78e38374f2475bf001b7408fd4525c0aae5e86b5e081adbfef8bfba37d7d53c36dd8e4c04fede32aced6bb6690d
- SSDEEP 768:/QLLCnedljngLe0i85py2E4+dcBX1xFOtLlLOB8ZlKd9NoVJZMJPiSxQGMUnU7BV:/QLGn45ngJnFMaXv3XHPmxu6
- TLSH T1E453EA1FF6A4A52AF58582723E1582CA04463F305320E996FB8F3E2971791F762F4B47
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4628
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarSub
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarFix
_adj_fprem1
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
__vbaVarTstLt
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaVarAbs
__vbaVarTstEq
__vbaVarOr
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarCopy
_CIatan
_allmul
_CItan
__vbaVarForNext
_CIexp
Name
.text
Size
52KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
DATKOS.TXT
- SHA256 5786001c1db9efb43f8398c3760c45d758a1b767022deccb53b78f84a07534ea
- MD5 87b251da634e436319cb23869bdbd43f
- SHA1 a221b30b29b517e7cb60d324bbe937b594e91aff
- SHA512 51d63284012377a42f4bb9c50ce95535a5f9714c97526a768fe7c1c6de94ba3f07c390c904fe6db1496618cf3435920af8499d96b7d4e381bb65cf0f08b2dd9b
- TLSH T10AF0B1821F588ADAC02DD31F017D7C0BA9E9C98D00150B8FB0633407AAAC90D51B1B5C
- MD5 SHA1 SHA512 TLSH
DATKS.TXT
- SHA256 a5a3b19e9bc62d14e75cdaa71aa75cb89d1f0caea99384f36c1c9459892f8b7e
- MD5 179bb0249be36bab57f885341e173b2d
- SHA1 29e987a9a746a7cc67845ff125f0a825686c7705
- SHA512 ba3484748ccc27d022259602287fbcce29689add4450f57658fe2d880e77d97adc3dcea079c96aa2b177c25f589a1056337f0d9b00b7cd021b663f6d7fa9ffc7
- MD5 SHA1 SHA512
DATSTIH.TXT
- SHA256 6bcb36ddcf298ff3b4d71406774091d81241b244a8e3bd4ce5b1a5ae8aa58506
- MD5 086406740564650f67a7301ddfc86a36
- SHA1 266deaf4dc7b6b6aeabfb672ac3895a9455632f8
- SHA512 c61d5b196191a7d1145d38979cbbc04fa2d792d4f3e98eac521483962791abaf9712f7dfaba4849bfe5e8f80f5dd8373d98a1d87854af1fd4f2c0b7cae6d44e6
- MD5 SHA1 SHA512
DATVVL.TXT
- SHA256 0731e6f8010908022208bcf75dc0e76b611bf8132f83503c4c1cc9a922984ba2
- MD5 7eef6ea9b70022a3f37025742708d14b
- SHA1 c394482deb900a47fbc34bc1dc9b635d26f86108
- SHA512 ab285c4e4f6b95d077f85e0554754e05d1406ef1f10806be9bb38ee694e86b35a191553f010ca1869439950f03e6b2509e167f1ebe6d0df0bd1efcb0ee4994a5
- MD5 SHA1 SHA512
DATZNS.TXT
- SHA256 1c0663d36fb631200edbc3c0392a1b9059321992a5b279389d8a1438983a59f4
- MD5 5e3005b902ecefdc542ff09f1b3ab92b
- SHA1 d49477b79ac78f78174272992134d3f40a824bd8
- SHA512 32c4c988e80439d3f57a3905d8984d7b5565c605652247390a2ebfffd3bdaa89e25f787139044eb1e2a550dee8ecbfffee2dbf0a84983592b218daafb12cb075
- MD5 SHA1 SHA512
EKZ.TXT
- SHA256 da0d88f5ef6d2d703bc5ff5ded3d214ec2b1af7449fdafb79324cb51d9b98e53
- MD5 0a4b12f4ec5f55e274f4d84bdb028244
- SHA1 22955b3bc6eb56f470d03919845a0cc0a7f3c7a5
- SHA512 119e700f5130f97a33cba2306cc3d6c6c8cf3b0c3d8d71dabc517317cac93d91a76491be5434007fb14a4b8cf123cd58cae31194f5cc3c7282c4ad79b218c89d
- TLSH T14B01749707C947DC86D9F53F58B70C1A6ED5C96D010962CF2102E42BE43E8045E6AF8B
- MD5 SHA1 SHA512 TLSH
Project4.exe
- IMPHASH 0dfde4485e767f5c871fb21f5b634118
- SHA256 7997b4226cc87f3e797c45d0dcb50ba1c5ebce38bbb454efde41699e349b4054
- MD5 97272fb4412f7030be297ac2ebb0d0a7
- SHA1 2287aa5bd9da011feb3663486f1c029bfa7e35dd
- SHA512 3d67f8c3c5a81d872261c5ffcdb18c9413f6de2ab7e80b41eaf9cbbe305637b2a055796e76eef42bfe87f6b14c6fb78d2f028a29b0fee6b3d00d70ad05fbcf2e
- SSDEEP 768:/v30rOKpaNVoVCafUdiUvK2JwRDezaT7uHcGJhbd8cgiJLtez+OW90fiPdt3:/v30F6QUd0AwAd2iJLtVPnP33
- TLSH T11D83400AE2E49409F4F69771397487DA197B3C35A938E84CF78B1A2C25346F296F4723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4740
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaPut3
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarFix
_adj_fprem1
__vbaVarCmpNe
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaVarAbs
__vbaGenerateBoundsError
__vbaGet3
__vbaVarTstEq
__vbaVarOr
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaPrintFile
__vbaInputFile
_adj_fprem
_adj_fdivr_m64
ord607
__vbaVarDiv
__vbaFPException
__vbaVarCat
_CIlog
__vbaFileOpen
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarCopy
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeStr
Name
.text
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
Project5.exe
- IMPHASH bda25e23acfd10eb20268821fd489456
- SHA256 660ef604ed625b2bfcf5bda532929e5a9ebb426c5ad72ce349d00cdefa841f92
- MD5 8fd977bd2098bb3c9cba08703f243938
- SHA1 7b93bd231dedc2c2c6d72411a54773fa12192da3
- SHA512 530c12113c15009ee2e60ac071cf1c652eeacdec3319e85c6fc800702ae98bdc575676b1cd08a815bfe7394dc9ebff16f61d2b49533ede1abf505b4eedaf3a4d
- SSDEEP 768:/ZZFw2ok9mXSE9QB+W0WW4HDyJGmckXKNCVfM4q3HqqrSHZVg313djYo31if7ELV:/ZZF3IoUKNui3HbGLi+gLrD0NBi/2fy
- TLSH T12B53EE1EEA94E61AF48582723B15C2CE59593E341214FD92FB8F2E5930782F326F8747
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4628
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarSub
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarFix
_adj_fprem1
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
__vbaVarTstLt
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaVarAbs
__vbaVarTstEq
__vbaVarOr
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarCopy
_CIatan
_allmul
_CItan
__vbaVarForNext
_CIexp
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
Project7.exe
- IMPHASH 4967f519e09d88097135d65ed6a65104
- SHA256 5f4b79d44190ad1a12be3c367f5fd15e62ec521254d68bb9edbc786f7c2b2ae8
- MD5 98360268afa060b5308a92c42874a12f
- SHA1 2e51211dd3f85d521e9dbc3f209ab69f123a5a9f
- SHA512 e39e1cbe7e3f2f046856f4c68a41a70565a99293abd1f61204209e0660abeca252b841b9658c395439e2d26b36697734a8db27916f67c4c23a87cbc9fc9a7f41
- SSDEEP 1536:/Vh08UdxtZlutTA0X8rF4cSoeOfVrlrrsw3Nzq8vyisx:o8cbZlutTA0X854cSoeOfVrlrrsw3Nzq
- TLSH T1E8431F2FAA24D51DF4998231271585EB08563E305314EE8AFB8F2F5860785F3AAF474B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4616
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarFix
_adj_fprem1
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
__vbaVarTstLt
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaVarAbs
__vbaVarTstEq
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarCopy
_CIatan
_allmul
_CItan
__vbaVarForNext
_CIexp
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
Project9.exe
- IMPHASH 87b404f1cc466df7763d9a172c036620
- SHA256 cd4d1b9e7d0d7f3c023330384e6070c63cb66ae51bddbb30428eaf2541577b70
- MD5 9dda1b0d9a41064c2eb6f2e68503641c
- SHA1 53e6f95c0e2448941185b099fb64ed148300950d
- SHA512 77fedad547cb1e651d3a37edee3bfa0bb93d6263b6c4e22128fa09c953dd8de914effcc6c4eb7211790e7d04e682a80797d7c58ed32134e8de3eb2f2c713b2b9
- SSDEEP 768:/gtA2ovxvCFN3+yM2md0czb5hiw+M2OT+er6Lm2W/cg:/gtCJvCFN3+6miSj72w+86/W//
- TLSH T11753FC1FFAA89159E460C2722A1585CB145B3B3123246C8AFB8F7F6861395F7B6F4343
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4588
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarFix
_adj_fprem1
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaVarTstEq
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarCopy
_CIatan
_allmul
_CItan
__vbaVarForNext
_CIexp
Name
.text
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
SWEDLL32.DLL
- SHA256 72dd5e1e21c0fd0de0d670c0f63dfcbc88b7c2b50079d7516b206363b581b687
- MD5 5102de3b9eb5da1e3250dcedbc22314a
- SHA1 ddba155d1d8f93d8e0bd4789f0ac9c048d677b0f
- SHA512 365e4c0dcd39fdff872c5dfafb867b3816b270f6b35e1a6864a1fd0fe3ac5fbe15706f165ba7266bdf1af410d35707e279fc4a347a0a55fa14b139bc751ac914
- SSDEEP 3072:OZfT0k+k22xfjPgWjS+kURJIF9sBBa/EERIEJrJ4ozjq/fnrNl++XkM0psiDkQwK:2b0kJVjHVJK/Jj6/frNl3Azwq
- TLSH T1010412BBB62DDC23C19E51F24AB1284C9A47E78DDA804EC67C18391084DB13DD93BBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
419936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
_swe_azalt@40
_swe_azalt_d@28
_swe_azalt_rev@24
_swe_azalt_rev_d@20
_swe_calc@24
_swe_calc_d@20
_swe_calc_ut@24
_swe_calc_ut_d@20
_swe_close@0
_swe_close_d@4
_swe_cotrans@16
_swe_cotrans_d@12
_swe_cotrans_sp@16
_swe_cotrans_sp_d@12
_swe_cs2degstr@8
_swe_cs2degstr_d@8
_swe_cs2lonlatstr@16
_swe_cs2lonlatstr_d@16
_swe_cs2timestr@16
_swe_cs2timestr_d@16
_swe_csnorm@4
_swe_csnorm_d@4
_swe_csroundsec@4
_swe_csroundsec_d@4
_swe_d2l@8
_swe_d2l_d@4
_swe_date_conversion@28
_swe_date_conversion_d@24
_swe_day_of_week@8
_swe_day_of_week_d@4
_swe_deg_midp@16
_swe_degnorm@8
_swe_degnorm_d@4
_swe_deltat@8
_swe_deltat_d@8
_swe_difcs2n@8
_swe_difcs2n_d@8
_swe_difcsn@8
_swe_difcsn_d@8
_swe_difdeg2n@16
_swe_difdeg2n_d@12
_swe_difdegn@16
_swe_difdegn_d@12
_swe_difrad2n@16
_swe_fixstar@24
_swe_fixstar_d@20
_swe_fixstar_ut@24
_swe_fixstar_ut_d@20
_swe_gauquelin_sector@52
_swe_get_ayanamsa@8
_swe_get_ayanamsa_d@8
_swe_get_ayanamsa_name@4
_swe_get_ayanamsa_ut@8
_swe_get_ayanamsa_ut_d@8
_swe_get_planet_name@8
_swe_get_planet_name_d@8
_swe_get_tid_acc@0
_swe_get_tid_acc_d@4
_swe_house_pos@36
_swe_house_pos_d@28
_swe_houses@36
_swe_houses_armc@36
_swe_houses_armc_d@24
_swe_houses_d@24
_swe_houses_ex@40
_swe_houses_ex_d@28
_swe_julday@24
_swe_julday_d@24
_swe_lun_eclipse_how@24
_swe_lun_eclipse_how_d@20
_swe_lun_eclipse_when@28
_swe_lun_eclipse_when_d@24
_swe_lun_occult_when_glob@36
_swe_lun_occult_when_loc@40
_swe_lun_occult_where@32
_swe_nod_aps@40
_swe_nod_aps_d@36
_swe_nod_aps_ut@40
_swe_nod_aps_ut_d@36
_swe_pheno@24
_swe_pheno_d@20
_swe_pheno_ut@24
_swe_pheno_ut_d@20
_swe_rad_midp@16
_swe_radnorm@8
_swe_refrac@28
_swe_refrac_d@20
_swe_revjul@28
_swe_revjul_d@24
_swe_rise_trans@52
_swe_rise_trans_d@40
_swe_set_ephe_path@4
_swe_set_ephe_path_d@4
_swe_set_jpl_file@4
_swe_set_jpl_file_d@4
_swe_set_sid_mode@20
_swe_set_sid_mode_d@12
_swe_set_tid_acc@8
_swe_set_tid_acc_d@4
_swe_set_topo@24
_swe_set_topo_d@12
_swe_sidtime0@24
_swe_sidtime0_d@16
_swe_sidtime@8
_swe_sidtime_d@8
_swe_sol_eclipse_how@24
_swe_sol_eclipse_how_d@20
_swe_sol_eclipse_when_glob@28
_swe_sol_eclipse_when_glob_d@24
_swe_sol_eclipse_when_loc@32
_swe_sol_eclipse_when_loc_d@28
_swe_sol_eclipse_where@24
_swe_sol_eclipse_where_d@20
_swe_split_deg@32
_swe_split_deg_d@28
_swe_time_equ@16
_swe_time_equ_d@12
Name
UPX0
Size
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
175KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX2
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=223, productName=Unmarked objects (old),
count=1, id=2, version=7303,
asp.exe
- IMPHASH 3c2329d2008a3e8ebc73f2435483dd20
- SHA256 acf869709ca1253be1c886c84fe5fba5089081fda25389da4dd188f3d3972af8
- MD5 ea0a0069ac6b11913a89bc45e46dab62
- SHA1 a909b3c0dbc4bf10b368bae4371c73364d173932
- SHA512 0f7b135df082d81ce6ec8afb9d80053074d40b16ff81183ab117d5cdc2b2d2912a9032247e6f4ee911f72b14e90bf1c30c8fb28f5e9776f7f414ce401bd485f7
- SSDEEP 1536:/V/yIe2bK/TJ2e74PO8IKTy5z0M0VtMZ7gDB3tYrNhhGPA0XFrDR1vrLAZK85VCh:9/BeAKbJ2e74PO8IKTy5z0M0VtMdgDBx
- TLSH T17093FA1FAB56D41CF4C942703A1686F744563E301218ED85FB8F6F9860B827BB6B4B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4688
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarSub
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarFix
_adj_fprem1
__vbaVarCmpNe
_adj_fdiv_m32
__vbaVarCmpGe
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarTstLt
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
__vbaVarAbs
__vbaVarTstEq
__vbaVarOr
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarCopy
_CIatan
_allmul
_CItan
__vbaVarForNext
_CIexp
Name
.text
Size
76KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
moon.exe
- IMPHASH 5d23048ee1aaa8cc3238efdd4b3632a7
- SHA256 af2d0ccacf5f9ee1463d7e183c6a6da149612a45ec239157459195bfa312faab
- MD5 1b411d53c26ece61c403f50e1788acbe
- SHA1 244245f58f6a6fc8fba1e55f48efde5fe72fff4f
- SHA512 010d23fe448495ddf2982dfa89e86dae1e4496300445d0e22e133f3303867fca5af8f3421dc5ee98d339f00297fcaf56a8d4ece13043d06f8dd9de1b8098da59
- SSDEEP 6144:cs1y9znqbwpz0gishz6CeoxNJ0TW5z8tMRscBFSivc1Tx2iiEminSJ/fOi8q/VjN:l1y9znqbwpz0gishz6CeoxNJ0TW5z8tO
- TLSH T182449B2FE5B8E01AE494C2713A12C5DA10AE37745764DD85F78F2EB860682F23BF5643
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4648
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarSub
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarFix
_adj_fprem1
__vbaVarCmpNe
_adj_fdiv_m32
__vbaVarForInit
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarTstLt
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
__vbaVarAbs
__vbaGenerateBoundsError
__vbaVarTstEq
__vbaVarOr
_adj_fpatan
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
__vbaPrintFile
__vbaInputFile
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaVarCopy
_CIatan
_allmul
_CItan
__vbaVarForNext
_CIexp
Name
.text
Size
248KB
Virtual Size
247KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=9, version=8041,
count=1, id=13, version=8169,
rekt.exe
- IMPHASH 38e23b3e6c7810c107beffaac2ac6866
- SHA256 ef9b4f42cbfd9709d000cd2c4d0bca21dc64ef04725660ce4fe23149819e8946
- MD5 f7ed92263d4e2359306be4afee9085b5
- SHA1 1b2809f6771a4a59ac9037267a9bc54cf43043b2
- SHA512 1112087481673dd905f07affb061f0a2a53063fdf54edfabe8a18fc68315a5ae27a1b6d2f2b9929faf4b93c447ce91b90d52c9d90bf637f22b8e508079994b3f
- SSDEEP 24576:d4ujttyeSwM3Nzx5YQ1hQ562TA1npKvYBASw2D9:d4ottyfJzx5YQ
- TLSH T14A65715FBA14E415E482A6703A05DBD714663B706610EC8BFB8F2F6960252F3B6F9307
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11996
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaVarSub
__vbaVarTstGt
__vbaR8FixI4
ord582
ord690
__vbaStrI2
__vbaR8ForNextCheck
ord584
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
ord585
__vbaFreeVar
__vbaStrVarMove
__vbaGosubReturn
__vbaLenBstr
__vbaFreeVarList
__vbaPut3
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
__vbaR8Sgn
ord516
__vbaVarFix
_adj_fprem1
__vbaVarCmpNe
__vbaStrCat
ord660
__vbaWriteFile
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaVarTstLe
__vbaVarCmpGe
__vbaAryDestruct
__vbaExitProc
__vbaVarForInit
__vbaFileCloseAll
__vbaOnError
ord595
__vbaObjSet
ord596
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaFpR4
__vbaFPFix
__vbaBoolVarNull
__vbaVarTstLt
__vbaFpR8
_CIsin
__vbaVarCmpGt
ord632
__vbaChkstk
__vbaFileClose
__vbaGosubFree
ord526
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaVarAbs
__vbaStrCmp
ord529
__vbaGet3
__vbaAryConstruct2
__vbaVarTstEq
__vbaR4Str
__vbaI2I4
__vbaObjVar
__vbaPrintObj
DllFunctionCall
__vbaVarLateMemSt
__vbaVarOr
__vbaFpUI1
__vbaStrR4
_adj_fpatan
__vbaLateIdCallLd
__vbaStrR8
EVENT_SINK_Release
__vbaNew
ord600
__vbaUI1I2
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaUI1I4
__vbaVarMul
__vbaExceptHandler
__vbaPrintFile
__vbaInputFile
__vbaStrToUnicode
ord606
__vbaDateStr
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
__vbaGosub
ord607
__vbaVarDiv
ord608
__vbaVarCmpLe
ord609
__vbaFPException
__vbaStrVarVal
__vbaVarCat
ord534
__vbaDateVar
__vbaI2Var
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaNew2
ord570
__vbaR8Str
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
__vbaFreeStrList
__vbaVarCmpLt
__vbaVarNot
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
ord689
ord610
__vbaVarAdd
__vbaLateMemCall
__vbaVarDup
__vbaStrToAnsi
__vbaFpI2
ord614
__vbaVarMod
__vbaFpI4
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaVarTstGe
ord617
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaI2ErrVar
__vbaR8IntI4
__vbaStrVarCopy
__vbaVarNeg
ord650
_allmul
_CItan
__vbaFPInt
__vbaUI1Var
__vbaVarForNext
_CIexp
__vbaR8FixI2
__vbaFreeStr
__vbaFreeObj
ord581
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=8, id=9, version=8041,
count=1, id=13, version=8169,