Static | ZeroBOX

PE Compile Time

2021-05-07 04:25:17

PE Imphash

d9015199fc550f4d12cfbd6fab74e595

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00000fad 0x00001000 6.07703715877
.rdata 0x00002000 0x00000b8e 0x00000c00 4.18839727173
.data 0x00003000 0x00000060 0x00000000 0.0
.reloc 0x00004000 0x00000200 0x00000200 6.32573095406

Imports

Library KERNEL32.dll:
0x402000 LoadLibraryW
0x402004 GetProcAddress
0x402008 WaitForSingleObject
0x40200c CloseHandle
0x402010 ExitProcess
0x402014 CreateProcessW
0x402018 CopyFileW
0x40201c Sleep
0x402020 GlobalFree
Library SHELL32.dll:
0x402028 SHGetFolderPathW

!This program cannot be run in DOS mode.
`.rdata
@.data
.reloc
xfh4(@
XSVWjD_W3
QSVWjl[
"uZj0V
jcYjb[
uPj1Xf9F
nuRf9^
"u]j0V
"uZj0V
+udjlXf9
tuUjcXf9F
>auFjdXf9F
ru0j1Xf9F
jD_f9>
LoadLibraryW
GetProcAddress
GetModuleFileNameW
CreateDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
lstrlenW
StrChrW
StrStrW
StrStrIW
StrToIntExW
PathIsDirectoryW
CoInitialize
HeapFree
CreateMutexA
CreateMutexW
GetLastError
SHGetFolderPathA
PathAppendW
StringCbPrintfW
memset
wmemset
memcpy
OpenClipboard
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
.text$mn
.idata$5
.rdata
.rdata$zzzdbg
.idata$2
.idata$3
.idata$4
.idata$6
LoadLibraryW
GetProcAddress
WaitForSingleObject
CloseHandle
ExitProcess
CreateProcessW
CopyFileW
GlobalFree
KERNEL32.dll
SHGetFolderPathW
SHELL32.dll
0 0&0.030:0C0H0Q0V0^0c0k0p0y0~0
1#1)1/141:1@1E1K1Q1V1]1b1i1n1t1z1
2 2%2+21262<2B2G2M2S2X2^2d2k2
2!343Q3a3q3v3
515N5\5i5v5
6!6L6Y6f6
7+777D7]7i7
818J8c8|8
949U9`9g9q9y9
;9;C;S;^;)<6<G<h<
D9H9L9P9T9X9\9`9d9h9l9p9t9x9
G2A/CLP/05/RYS
1ACJ7tAwFCKFyZ7dqqdjmEujaHmf1os7z4
34FKrh3G48vSBKd2qJxUPDpQQXFYVYPjQK
bc1qx69y2vk5jujx5jgl9f3r8fryu8tua35wjxh566
LU6XH5FK9KBWQgM1zTLUoonytp9J2ktRvR
MDWxxChn4C9iWUR6hYrqvdnXhpE2Q9Hgd7
ltc1qlaxlywhszlpjqcv8yt2jh6j0vu0al03rczpv84
0x5d61bBc33feE5bfc37b15E02c064BAF46A1284b2
00000L0000T00MON00000000000000000000000LU6XH5FK9KBWQgM1zTLUoonytp9J2ktRvR00000000000000W0000000
85Y45vaBPdTLcfUEVhrrCK3TBedpFFYSwTKyvLYLDuszXkbW6prBw9zU1Wj4zxtrujEp7cwxC7WmyRWWCeH2Vu6rAcX249p
DJo13g6p7edu8fvGf6rMafi1V2YrVt7a1Y
addr1q834nehytegrr2ywcchpjxfwgfppfwp4uwl9slzz6cvv0whrt8nwghjsxx5ga33wryvjusjzzjurtca7tp7y94scc7aqwel2j2
Ae2tdPwUPEYzTpvqqkeWmGVNGCZtEdghpy2pmAcDDKTFGmSntf214LuE1pH
bnb1ltl6z348dk0f2chgs4rskc57jw3g2wsd3flw33
kernel32.dll
Shlwapi.dll
ntdll.dll
Shell32.dll
Ole32.dll
User32.dll
\Microsoft\Network
\sqlcmd.exe
/C /create /F /sc minute /mo 1 /tn "
Azure-Update-Task
" /tr "
C:\Windows\System32\schtasks.exe
Antivirus Signature
Bkav W32.AIDetect.malware2
Elastic Clean
MicroWorld-eScan Gen:Variant.Fugrafa.136849
FireEye Gen:Variant.Fugrafa.136849
CAT-QuickHeal Trojan.Generic
Qihoo-360 Clean
ALYac Gen:Variant.Fugrafa.136849
Cylance Unsafe
Zillya Trojan.ClipBanker.Win32.10330
SUPERAntiSpyware Clean
Sangfor Trojan.Win32.Generic.ky
K7AntiVirus Trojan ( 0057c4751 )
Alibaba Trojan:Win32/ClipBanker.f90fe489
K7GW Trojan ( 0057c4751 )
Cybereason Clean
Arcabit Trojan.Fugrafa.D21691
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/ClipBanker.ND
APEX Malicious
Avast Win32:Trojan-gen
ClamAV Clean
Kaspersky HEUR:Trojan.Win32.Generic
BitDefender Gen:Variant.Fugrafa.136849
NANO-Antivirus Clean
Paloalto generic.ml
AegisLab Clean
Tencent Win32.Trojan.Generic.Wrga
Ad-Aware Gen:Variant.Fugrafa.136849
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Trojan.MulDrop17.10469
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Sophos Clean
SentinelOne Clean
Jiangmin Trojan.Generic.gwvzt
Webroot Clean
Avira TR/Crypt.XPACK.Gen8
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Ransom.Win32.Banker.vb
Microsoft Trojan:Win32/Bomitag.D!ml
ViRobot Trojan.Win32.Z.Fugrafa.8704.B
ZoneAlarm Clean
GData Gen:Variant.Fugrafa.136849
Cynet Malicious (score: 100)
AhnLab-V3 Suspicious/Win.Generic.C4496218
Acronis Clean
McAfee Clean
MAX malware (ai score=100)
VBA32 BScope.Trojan.Tasker
Malwarebytes Malware.AI.1517648553
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R06CH0CET21
Rising Clean
Yandex Clean
Ikarus Trojan.Win32.Clipbanker
eGambit Clean
Fortinet W32/ClipBanker.ND!tr
BitDefenderTheta Gen:NN.ZexaE.34692.aqW@aexmQl
AVG Win32:Trojan-gen
Panda Trj/GdSda.A
CrowdStrike Clean
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.