Malware Archive


Home | Objdump info | Perdr info | Strings info

MD5 : 04af7239845601e9d785a7824b6ca34e
SHA1SUM : cf7a3cdd13fa5afdfa87dae96727374e71959db7
File format not recognized
PeRdr by Frediano Ziglio. Build Dec 27 2007
Runtime Error: Invalid RVA
++++++++++++++++++++++++ FILE HEADER INFORMATION +++++++++++++++++++++++++

TimeStamp: 463901F0 Wed May 2 23:26:08 2007
Subsystem: 2 (Windows GUI)
Image Base: 003D0000 Size: 00067000
Code Base: 00001000 Size: 00016000
Data Base: 0000000C Size: 00008200
Entry Point: 0000F0FB (file offset 0000F0FB)

++++++++++++++++++++++++++++++++ SECTIONS ++++++++++++++++++++++++++++++++

1: BrattyUS RVA: 00001000 Offset: 00001000 Size: 0000E400 Flags: E00000E0 (CDUERW)

++++++++++++++++++++++++++++++++ IMPORTS +++++++++++++++++++++++++++++++++

DLL: KERNEL32.DLL
Addr: 0000F261 hint: 0(0000) Name: LoadLibraryA
Addr: 0000F265 hint: 0(0000) Name: GetProcAddress

MZfarbrauschPE
BrattyUSJ^
dwBn
lK?R
!fnjUj
^r.klwL
JPZq
L]L^
g[9q
e}=hqXx}
D_rQ
jgjH
H`hZG
>X%Ye
[~WO
(&1S@k
JM/P
C7}$
7\0H
O&z;}
rj5;p
\RU;_
@n1}o_
{+?j
Th-1
Ny5j
mT6@
Ko'V
.nyL:
{]3
Go.y
s?o"
28^P
S!B}
[:'%t(
EV^v
d|'|
7N;/
+`ZMI
|~!}
p>:V
&6Mj
w]$*
wykN
gFkWo
0\P,
?XtLX
Lyf14
:hF+^
bdbJ
C+Lj
I{M9
TbdL
cx%.
Qv_R
t6zmX
b@OdnA
0<Ez
gC &
rK>$
.: 'Ph
YMV4
#X%v
n<+s
.j0i
3FVOU
P+L+
[UPg
TT&S/
3WjU
8R36
,"y#
#2=e
mg^p
~w h!
u1GB"
7X3J
AFRr?\
WIhmw
.0sI
fb0_0D
:VUv
tZ}t
\8O!s
?j+JsZf
9xF9
+Iup~-
CiK:
;4 :
dBfx
kaF4=
="m
m;5p
r*l!4
ftB`
c!!v'
a0rA
}f U
-}|~
rEs^#
oJ97
*/AH
0+F)
eG!P
Ot2m
7h_f
>X? y$
r\'s
YN5L3
^^XrVl-'
AC!#U~%=e
G=A1
p:3 MM
e.g/
Mqk9
F=\w
xxbM
G|hI6t
!!u)
/F,q
hds48n
_l"ioN
(tx>
g_;+Z+
cr$B
lyiTz
dYvpR,,
7YxV
rwU^
v"&8
MA n&
NN!n%
V-H64-g
llj
v;8x7
abPF
yB"S
&vy
JD:\
92 D
eYn[
Cthq
+621mJ
?Q3+>
jCfCm
j[W}
U#9'
O3@
eU38C
e,Va
iblX
;K66
Z:4f
Mg I
g3dJ
+.D_K
G<kr
l,&t
qgM=
M'27
`]k/
]6OzT
K\Wz
S+s`
;n2G
"{!}
jbC{
Tg[T
wDRi{c
<?m+
q\`A
j7&+
s;yE
oH>AN
'o5o
pW0^
-_??
Xpg(
M,=b
gI(sQ
2`Q{
NPTU
LzUT=Xh
%IHbc
>%5@
\\(
QW~)h!
82,4;
Sl2&
/Ft|
^zM36!
4([Lkf
W/?`
foYR
PXX%a
YGZsz
PpK?
F},O`
6e]J
/'i'
8g%_
,T{8
7qXS
]}}4
4hz-K
?Y|o
N5C!
/g/"
g}+U
ym^<R
XHH5g
5yWcn
D8%U
:r_ ZC
B@k.
ni7!%
Z_hplz5
Fyfg
6v+8
V9S6
MfF,
Tf0k
Y=@3
zjL`
GQ (
vC{m
Y,T;
zD%
?_/Jg
):!^
i]+d
F(4:"
(i
[]TSo
U 2y>
OOaq
l$(h~
WC!9?
d.?*^
'07cJd
O- i
Ad?!
L: 7P%9'_
nd9$
Uda
Qtk'}
c>W#
M&S+z<1
~VR;S
gc3\
kBr/5x
%,Ye
Qx_'
$\O&
M|=B~pQ
\KYG
-f/n~
[/x6`F
[y!M
~6.U
Z8@[
6 I#
^Ba;
y?F\
=5J
RlI}1>doi
AMi"
N)-Mq
tTz*
H8dJ
w+S#
0(~o[oi
S'4x
kT;s
ctJ?
|'!c
,:|MU
2G9$
$*AT\m
og#CFk
02?Zem_
A=O7|
maSL
22N!4
*;dm;
;&bdLvp
AP4v
i:x%`:Z
lTbe3
+!{7?
g85B
g4N7
rO&9
qQA7` X
djN%
8G;;_
*V1H
J<+&
)3El
(#_~5
UTaJ
.c1@
V`:6
#rA 5
V`o?
j2jky
JGs@
j+\r
#`Lj
9A;T
1%$>
wtIU
4ELr
GOqM
Yg-B:
3~? U
|r'}W
)BT[
vD3[
<ZLuWKU
y@R\
C6s)
5?'`I
3GdN
twfn
QDKD
0M,z
eLGC[n
F7`)
g6m&Cx
~p_i
"TDJ
wqCS
3\[
eVbSQ
-!kY.
PoVt
`|?-s'
^\YC
Pk;6
XIXe-
H!~Q
OB%m
Os t
H"Iz
rRe1
}.R[
~vkWJ2
lg1S
mf2~Mm&V
i8".4
Ey,;@F[
~mep|
8oee@
6Xy&
oN;/Jc
4_6TD
W/v")
s,i-
,)^k
Xl=YMs
y<nW
Sh32
fgr/<
3?n|!
OvN{
p;w
4, D
b&&X
R*U?
Owpb
bh&Z
hc7n
@nXP
o6v}
q'q:
^M8"
{?|9
qsU:]
4K9)
X}_s
~jSB
|CS&
8<)U`
(B(S
C9a`
Y[@p
q"t2,
:htr
.:"FC y
)2hr
$fbJ
wN!X
hkSF
RZ*M
< ".
:lu.
lZFu
;szv
|]a!Lb
tBfzc;
m-+eh
}9g
7Nng
f"=1
SkfV
8?vG
b*'+
iE`
d6J_
FG9p
ZJL'L
x7 !
!85E
0-&/
q9C
:^y1
/Y\5s
*pN
Hi]>i
uu;aUw
|2f]
MDC]
V8 \
W^U=
>[Ww
?Vj-H
~lECW
Bs{`a
'zw6
hLuR
H_};
0CPh
RieE
UNIz
!^k
[q|~
GIAb
]3]-
?4:2~
Y*S~9
XrNK
yq/5
ADx@
!*Zm
3vE[
6 Ic
vhZ%
t'0u
YYo`
/Jtb
SN~'P
*VQF/
2(Ce2/0
i_T)y"w
Rd"K
~rpe
ePcR
/S8f
l4;w
dkUwz}
Z('!
i}E$D
A+rR
kvBAm
8D<5c
L^[m
<><D
~&?:
W.{uA6
czOG]
{`Ah!XH/
xioH
fu_25
H:YW4l&
w@`!=;
=P@N2
*3;
r"y.
"pw
O,/I
6Onx
0][mS
duUp
9dgZ
s{U'nQ
6y;+D
K$-$7
bmO1
(25Q
KYJM
cDl?
3(lV
B-uKs
?6,h
q{V,}
XfB:i
Rap3
4a8a
G=sM
x`HL
cr^f^
hB~{V
l%.%
g(4&2oK
eI&>g
1J[a
>}'?r
/ ;[\
) ]S
X\ 7
5{Xdu
&NB6
=^21;
J*~A\
[,K`
G-"S{C
4zZ`6
/B-z
{:s :
cuGb9
E'b"
D;F9
wK#0l]B
AW*\&>8
F/mI
~-\tq
e-Ba
D7s0
-#EG
1HV~
wS{(N
`D\}:
hyL=
KkaC55
d$12
E ES
\)W\v
\Gkv
"mAK
/*%`
Y,Q
O5u!js
3|o_
0CiTm7%
9mTK
MG.kr
o-?Y
@$v#
DZroe[
s|kY
WPr}
jq|*7Gu>
0yQU
)kD`E
zSq`
^q%,SG71k
FbE{{(
R sQ
n?#z
qT.^"
95M2
ID-X^
nC&m
\g13
%X1V3
1"+.
#{C_
G|B/
Ympj
;g%]Sy
b"lx
8l4v
5(2y
$A.N
Y-wa3
Li_- n
iY\b
a|7h
Lvy+JE
1E3,
`LMm
#0=fEL
NNu
)0`D
IoF
#T9HH
lDZOW
weh-q|?
/qji
2&HD!
(G{/[
z^cD
0;dW
:7b9'
Foh_
lY>rIY
_~r}E @
!3$a2
yBe\
n FS.
<'i+
nlD5
7<WA}
vV[_yYg[3Z*
&ZE-
hDKt
nH,eCO
r^~J
6_NZ
6E$w@
ix Y
FWFh
#qyX
"?Z"Rw
u|V<
[x9t
y4*8
$Tj4
VaDNMy
x+=lw
/C@A}
5_qW
eS'b25 .
|$fTkl
5 VH
cb>`
:k*w
4}/ C5
5G!!
| Q#7v
8}B?
/R"`:
o4o;6
>7S:
oVKNJ
]xND
{B8'A
:h[v\
!BAi
"Bg?-
Tu[U
>6Wc
*]{M
5F#[V8
Ay{,
~>GtP
wf/M
fH<&|
x=ts
PBa 0o?4
n]@l%b
>jK$
MrA[
h4bCi$
F<EbcE
z=l"|h
}V2r
[_77&
^c+9
#LWC(
lz_=
4CJ\
q:Ux
\>BO
MV"n
&<H0,
u:c;
^"h-
]1\'
oz@!
O'Am/
irY\~SM
\@(]J
q%wa
.R`V
zmAHq(
y/ny
j4a;
@[8<
!;2y*Q
nyO6
lX/2#
u#K2
7Tl,
w(gM
;*oT
"Y[=
L]B>9
izm\l
B#G$
{fWiS
=K0 <~
WdzozVZ.
ODGn&
%/AZx
IIx@
KERNEL32.DLL
LoadLibraryA
GetProcAddress