popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2021-04-12 04:47:16

PE Imphash

af8753316c8bd6593c14e06885ed90b1

PEiD Signatures

Armadillo v1.71

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00001d72 0x00002000 5.87110807899
.rdata 0x00003000 0x00000f80 0x00001000 4.68402128772
.data 0x00004000 0x0004be94 0x0004c000 2.6913843724
.rsrc 0x00050000 0x0004db28 0x0004e000 3.76454538456

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0009c828 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0009c828 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0009c828 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0009c828 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0009c828 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0009c828 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0009c828 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0009c828 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_MENU 0x0009cd08 0x00000122 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x0009ce88 0x00000102 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x0009daa0 0x00000086 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ACCELERATOR 0x0009ce30 0x00000058 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x0009cc90 0x00000076 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x0009cf90 0x000002e4 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library MFC42.DLL:
• 0x403010 None
• 0x403014 None
• 0x403018 None
• 0x40301c None
• 0x403020 None
• 0x403024 None
• 0x403028 None
• 0x40302c None
• 0x403030 None
• 0x403034 None
• 0x403038 None
• 0x40303c None
• 0x403040 None
• 0x403044 None
• 0x403048 None
• 0x40304c None
• 0x403050 None
• 0x403054 None
• 0x403058 None
• 0x40305c None
• 0x403060 None
• 0x403064 None
• 0x403068 None
• 0x40306c None
• 0x403070 None
• 0x403074 None
• 0x403078 None
• 0x40307c None
• 0x403080 None
• 0x403084 None
• 0x403088 None
• 0x40308c None
• 0x403090 None
• 0x403094 None
• 0x403098 None
• 0x40309c None
• 0x4030a0 None
• 0x4030a4 None
• 0x4030a8 None
• 0x4030ac None
• 0x4030b0 None
• 0x4030b4 None
• 0x4030b8 None
• 0x4030bc None
• 0x4030c0 None
• 0x4030c4 None
• 0x4030c8 None
• 0x4030cc None
• 0x4030d0 None
• 0x4030d4 None
• 0x4030d8 None
• 0x4030dc None
• 0x4030e0 None
• 0x4030e4 None
• 0x4030e8 None
• 0x4030ec None
• 0x4030f0 None
• 0x4030f4 None
• 0x4030f8 None
• 0x4030fc None
• 0x403100 None
• 0x403104 None
• 0x403108 None
• 0x40310c None
• 0x403110 None
• 0x403114 None
• 0x403118 None
• 0x40311c None
• 0x403120 None
• 0x403124 None
• 0x403128 None
• 0x40312c None
• 0x403130 None
• 0x403134 None
• 0x403138 None
• 0x40313c None
• 0x403140 None
• 0x403144 None
• 0x403148 None
• 0x40314c None
• 0x403150 None
• 0x403154 None
• 0x403158 None
• 0x40315c None
• 0x403160 None
• 0x403164 None
• 0x403168 None
• 0x40316c None
• 0x403170 None
• 0x403174 None
• 0x403178 None
• 0x40317c None
• 0x403180 None
• 0x403184 None
• 0x403188 None
• 0x40318c None
• 0x403190 None
• 0x403194 None
• 0x403198 None
• 0x40319c None
• 0x4031a0 None
• 0x4031a4 None
• 0x4031a8 None
• 0x4031ac None
• 0x4031b0 None
• 0x4031b4 None
• 0x4031b8 None
• 0x4031bc None
• 0x4031c0 None
• 0x4031c4 None
• 0x4031c8 None
• 0x4031cc None
• 0x4031d0 None
• 0x4031d4 None
• 0x4031d8 None
• 0x4031dc None
• 0x4031e0 None
• 0x4031e4 None
• 0x4031e8 None
• 0x4031ec None
• 0x4031f0 None
• 0x4031f4 None
• 0x4031f8 None
• 0x4031fc None
• 0x403200 None
Library MSVCRT.dll:
• 0x403208 _XcptFilter
• 0x40320c exit
• 0x403210 _acmdln
• 0x403214 __getmainargs
• 0x403218 _initterm
• 0x40321c __setusermatherr
• 0x403220 _adjust_fdiv
• 0x403224 __p__commode
• 0x403228 __p__fmode
• 0x40322c __set_app_type
• 0x403230 _except_handler3
• 0x403234 _controlfp
• 0x40323c _onexit
• 0x403240 __dllonexit
• 0x403244 _CxxThrowException
• 0x403248 __CxxFrameHandler
• 0x40324c _setmbcp
• 0x403250 _exit
Library KERNEL32.dll:
• 0x403000 GetProcAddress
• 0x403004 GetStartupInfoA
• 0x403008 GetModuleHandleA
Library USER32.dll:
• 0x403258 UpdateWindow
• 0x40325c SendMessageA
• 0x403260 LoadCursorA
• 0x403264 EnableWindow
!This program cannot be run in DOS mode.
`.rdata
@.data
D$0RPj
T$<QRj
L$LQPj
D$$RPj
D$0RPj
T$<QRj
L$ PQj
D$,RPj
D$(RPj
D$HRPW
L$`PQW
VPQhL@@
MFC42.DLL
__CxxFrameHandler
_CxxThrowException
MSVCRT.dll
__dllonexit
_onexit
??1type_info@@UAE@XZ
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
GetProcAddress
GetModuleHandleA
GetStartupInfoA
KERNEL32.dll
LoadCursorA
SendMessageA
IsClipboardFormatAvailable
EnableWindow
UpdateWindow
USER32.dll
_setmbcp
CMainFrame
www.xy999.com
SSSSq]
22222222
222222
222222
y"gudL
Gz^?kb
sAuwel
NgJA^BOM
!~:IXY
<czQ6\
,theI5
]~/cB("(
m=-k9.
N!D61I6
* IR44
* 'UBT
:S%NH6S'VB(
KRBD)H<O
82+UNH6S<S9
+,NH6SD"
IJ?7*4NH6S
NH6SAG
.";V,>0?
NHHQ0?
NHHQ0?
:*A"B(
1=,>0?
5ED!1ID<
041ID<
?15[1ID<
1=D<N*
.71ID<
?VN-3AC
NH6S,>0?
B+*&821SNH'N
fuckyou
Local AppWizard-Generated Applications
.?AVtype_info@@
Ctrl+N
Ctrl+Z
Ctrl+X
Ctrl+C
&Paste
Ctrl+V
&Delete
&About MyPad...
About MyPad
MS Sans Serif
MyPad Version 1.0
Copyright (C) 1998
VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
FileDescription
MyPad MFC Application
FileVersion
1, 0, 0, 1
InternalName
LegalCopyright
Copyright (C) 1998
LegalTrademarks
OriginalFilename
MyPad.EXE
ProductName
MyPad Application
ProductVersion
1, 0, 0, 1
VarFileInfo
Translation
?Display program information, version number and copyright
About4Quit the application; prompts to save documents
(Switch to the next window pane
Next Pane5Switch back to the previous window pane
Previous Pane
(Split the active window into panes
Erase the selection
Erase everything
Erase All3Copy the selection and put it on the Clipboard
Copy1Cut the selection and put it on the Clipboard
Find the specified text
FindInsert Clipboard contents
Repeat the last action
Repeat1Replace specific text with different text
Replace%Select the entire document
Select All
Undo the last action
Undo&Redo the previously undone action
Change the window size
Change the window position
Reduce the window to an iconEnlarge the window to full size"Switch to the next document window&Switch to the previous document window9Close the active window and prompts to save the documents
!Restore the window to normal size
Activate Task List
Antivirus Signature
Bkav W32.AIDetect.malware2
Elastic malicious (high confidence)
MicroWorld-eScan DeepScan:Generic.Rincux2.7BEE49EF
FireEye Generic.mg.d213c25eb7528fbc
CAT-QuickHeal Trojan.Rincux2
Qihoo-360 Clean
McAfee GenericRXAA-AA!D213C25EB752
Cylance Unsafe
Zillya Trojan.GenKryptik.Win32.84484
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 0057b02c1 )
BitDefender DeepScan:Generic.Rincux2.7BEE49EF
K7GW Trojan ( 0057b02c1 )
CrowdStrike win/malicious_confidence_100% (W)
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/GenKryptik.ESRI
APEX Malicious
Avast Win32:Trojan-gen
ClamAV Win.Trojan.Farfli-9790741-0
Kaspersky HEUR:Backdoor.Win32.Farfli.gen
Alibaba Backdoor:Win32/Farfli.be3dd9b8
NANO-Antivirus Trojan.Win32.Farfli.iuhdwg
ViRobot Trojan.Win32.Z.Farfli.647168.B
AegisLab Clean
Rising Trojan.Kryptik!1.D241 (CLOUD)
Ad-Aware DeepScan:Generic.Rincux2.7BEE49EF
Emsisoft DeepScan:Generic.Rincux2.7BEE49EF (B)
Comodo TrojWare.Win32.Magania.A@5wdy5u
F-Secure Clean
DrWeb Trojan.DownLoader38.37318
VIPRE Trojan.Win32.Generic!BT
TrendMicro Backdoor.Win32.ZEGOST.SMAL02
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Sophos Mal/Generic-S
SentinelOne Clean
GData DeepScan:Generic.Rincux2.7BEE49EF
Jiangmin Backdoor.Farfli.eua
Webroot Clean
Avira HEUR/AGEN.1142366
MAX malware (ai score=84)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Win32.Kryptik.oa!s1
Arcabit DeepScan:Generic.Rincux2.7BEE49EF
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Farfli.DSK!MTB
Cynet Malicious (score: 99)
AhnLab-V3 Backdoor/Win.ZEGOST.C4430098
Acronis Clean
BitDefenderTheta Gen:NN.ZexaF.34690.Nq0@ae5qMJii
TACHYON Clean
VBA32 Backdoor.Lotok
Malwarebytes Generic.Trojan.Malicious.DDS
Panda Trj/CI.A
Zoner Clean
TrendMicro-HouseCall Backdoor.Win32.ZEGOST.SMAL02
Tencent Clean
Yandex Trojan.GenKryptik!atMgb7KRYiw
Ikarus Trojan.Win32.Farfli
eGambit Clean
Fortinet W32/GenKryptik.EOZH!tr
AVG Win32:Trojan-gen
Cybereason malicious.eb7528
Paloalto generic.ml
MaxSecure Trojan.Malware.73947863.susgen
No IRMA results available.