Motocrossbanerne37.pif
First submission 2024-10-15 16:47:07
File details
| File type: | PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive |
| Mime type: | application/x-dosexec |
| File size: | 5204.8 KB (5329718 bytes) |
| Compile time: | 2019-12-16 01:50:29 |
| MD5: | f3a3332b13baa50c41644b86efdf0fe4 |
| SHA1: | f3b91aa55b8dce62cb614e2a43d8e3973b1d47b6 |
| SHA256: | 7fd5435121f2cb4320b1bc49400152ec3fecce7f5ce0acce56f32c327126c970 |
| Import Hash : | e9c0657252137ac61c1eeeba4c021000 |
| Sections 5 | .text .rdata .data .ndata .rsrc |
| Directories 2 | import resource |
File features detected
URLs, FQDN and IP indicators 1
| URL | Host (FQDN/IP) | Date Added |
|---|---|---|
hXXps://apslline.com/Motocrossbanerne37.pif  |
apslline.com |
2024-10-15 16:47:07 |
PE Sections 1 suspicious
| Name | VAddress | VSize | Size | SHA1 | MD5 | Suspicious |
|---|---|---|---|---|---|---|
| .text | 0x1000 | 0x60d8 | 25088 | 61e3e4997880ff35c2bd287ee45157005e80b7cc | e59663060e65803bb6474d2af98f8aa9 | |
| .rdata | 0x8000 | 0x123e | 5120 | 2a583b50770b09ec923cd9483bbe882a8b38f671 | 7969015d02b2f673463f43156b28cdb4 | |
| .data | 0xa000 | 0x399058 | 1024 | d6d745ab1a69364f028d7950031ae96e350c7caa | 2d383339e780dfc9691f30584bbd0766 | |
| .ndata | 0x3a4000 | 0x12000 | 0 | da39a3ee5e6b4b0d3255bfef95601890afd80709 | d41d8cd98f00b204e9800998ecf8427e | |
| .rsrc | 0x3b6000 | 0x3ad78 | 241152 | ecf1b140fb75a7c969f279e4f266bfe892a892e8 | a32d901976697d7bbce42d8596684b1d |
PE Resources 5
| Name | Language | Sublanguage | Offset | Size | Data |
|---|---|---|---|---|---|
| RT_ICON | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0x3eff90 | 1128 | |
| RT_DIALOG | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0x3f0760 | 96 | |
| RT_GROUP_ICON | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0x3f07c0 | 132 | |
| RT_VERSION | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0x3f0848 | 496 | |
| RT_MANIFEST | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0x3f0a38 | 830 |
Meta infos 8
| LegalCopyright: | |
| FileVersion: | 1.0.0.0 |
| CompanyName: | |
| Translation: | 0x0409 0x04e4 |
| FileDescription: | |
| LegalTrademarks: | |
| Comments: | |
| ProductName: |
Anti debug functions 2
| FindWindowExA |
| GetLastError |
Strings analysis - File found
| Library |
| ADVAPI32.dll |
| SHELL32.dll |
| %s%s.dll |
| USER32.dll |
| KERNEL32.dll |
| COMCTL32.dll |
| ole32.dll |
| GDI32.dll |
Strings analysis - Possible URLs found 1
| http://nsis.sf.net/NSIS_Error |
Import functions
| Name | Latest seen | MD5 |
|---|---|---|
| wininit.exe | 2023-06-06 11:26:02 | 7339f323191432260e5a33cfd681adec |
| hkcmd.exe | 2023-06-08 06:53:02 | c6d2ae33edf3d67a0c2abe42836c2874 |
| hkcmd.exe | 2023-06-08 08:30:02 | bb82589608f2312e9bf9d0c63c8a3d68 |
| hkcmd.exe | 2023-06-08 10:02:02 | a413d04a39c86bd0b4ca116227d20a30 |
| hkcmd.exe | 2023-06-08 14:09:02 | d2a06a7386680bc248d79c2974f9b0cf |
| cleanmgr.exe | 2023-06-12 03:26:08 | 21d050c21197079204d5b24526522bb2 |