Malware Archive


Home | Objdump info | Perdr info | Strings info

MD5 : 0ae1ee20c65b4bfd5bfe4cb90260a3aa
SHA1SUM : 1e48d1190f97a9a07c2eec63a3f809a4fa7a81ea
File format not recognized
PeRdr by Frediano Ziglio. Build Dec 27 2007
Runtime Error: Invalid RVA
++++++++++++++++++++++++ FILE HEADER INFORMATION +++++++++++++++++++++++++

TimeStamp: 46C77D61 Sun Aug 19 01:14:41 2007
Subsystem: 2 (Windows GUI)
Image Base: 003E0000 Size: 005F5000
Code Base: 00001000 Size: 00016000
Data Base: 0000000C Size: 00008200
Entry Point: 0000812D (file offset 0000812D)

++++++++++++++++++++++++++++++++ SECTIONS ++++++++++++++++++++++++++++++++

1: kkrunchy RVA: 00001000 Offset: 00001000 Size: 00007800 Flags: E00000E0 (CDUERW)

++++++++++++++++++++++++++++++++ IMPORTS +++++++++++++++++++++++++++++++++

DLL: KERNEL32.DLL
Addr: 000085FC hint: 0(0000) Name: LoadLibraryA
Addr: 00008600 hint: 0(0000) Name: GetProcAddress

MZfarbrauschPE
kkrunchy*8_
|Y@+
bU\ *?
DWVVOH
[`"
0SHH.
"A?K
`FbnP
St9i
&5@l
*x+Y:<
dJ@h
5&s1)
h6{4
pU_^1
4l?lE
?#e8
7 hB`
YIAZ
,B0S
W:a({
OwJh
K \u=O
Xv8?
aVz/
b;%+T
N4?>Z
siZ&
z]h_]Q
"bXQ#
8t@P
@(Pn
|<qM
8Y '=9
Gd[J
PrpKEL
|7.w[z
DU/2=
f= jZ
Djs|?
IDPT
v-Cy
uet$
T?"+
CpjQ
*|&_M_%
3c/M
<Dc'
7%8d
ZE4}
Pf",
1=K,UN
C;1\
jXd,
>2Ds
yBCeE
c:kEk
z2Z~H
R7frrV6
HWM57
0^w_
gI"F3
;92^
cZ(d#
eQb>`
-{U?
OT;Z
U:RZ
$kI6
uX7w,%(
\LLnN;
>dN65
p J;)
DmlA3
Jw+^_
Jke 1
I)Ot!
1&_V`D
g(Kw1~
O-\Be3%
Glc4
$rRM
hwE"
zD_S
+nJ]
2*Y1
:ln7
U:<^g?;
~@E@M
_?%Z+
-[=8
hiCc&
bF%4n,
' <m@
"bC,n
|^#:
QR P
'Hd~
BZL.Q
"&7`k
N(_ibDS
g#uY}&
Tgp\
AK:r
llPO
.QmK
#0u
0O35GO
AIn$
l**E
:KdG
cry
n3i~
<-ui-]
cB>'v)
K0qlg
w^\{
65RK?
HpQ@
RY01.
S1'sS
Yfp<v
XV' *o
@nZS
?f s
A$hNl
s{*g2
+z.G
%~Ey
BND~
ed]j
b*&K
U[p
'w(A
'GkI
uh'p,
t.kbu
cT|
C:a[2A`
b.!2
G_ws
g )#
fx( +
/#k]
W1iF
zU|D
Y> P
u5}#_$
X>Guf
8>jG
ZJsm
}eI?Ri
/W2J
FK]m
Q1X 0g
.Ob;
C1&^
R+HI)sf
{S3,ik
%Q\%
R!`}
tM*AI
V,N&F
}Es5
(Z65
ECT,
D);Z_
TPu83W
6]D^
2o{(
$cdr
QOo`W
xCem
f|Y|
nk$[H
!Dv.
p9`e
uFcj
bL8s
l6W4
~u9/S
_=au
BZviQz_
ba 1
?*Wq
<j97i
=:%%
JvVEp
B T|
;h_P
E+T=
~(D
!8;<
|z:~
Um(V
;-f}i
Sqb/
#$*T
SG2q
~A[{y
G_?\
)b[^
~*6c
x:nyi,=
b~qN
8}N2
h1YO
Ao".
#Dk~])
|OFo{e
Q>H,
iYw|
YCGH!
Jp*K
rj^|[]3
}5Ed
o ;|
@4B:
fow`
jGpl
kh=w
S!(#
yYdW
tW'J
bwH+:/
8]WOY+
^2.<'
>]$R
VO'l*
e@$8
nZ+;
!J~3
JYpK
rKD=3g
%@ E
WzaLM
+>,z
rUu!L@@I
wGu0
$w5%
fXen
-9u)9
05YC
D3.!
# +&
r8,q
(PiaP
^o o
{GF,
z{(V
.aW-
+@i3"L
}2a
B)m`_D
a1f(
^)F`
vROg
, o[k
`g70
\o5$
K=_G
F?`x
!QKQ
vB|VD @jqR/Q*
N8N`
Lk81@N
!+*P
Edn
({zK
!D)@
Zfat
+$DV
SVMr
7IeA
& p\7
{ (QT
4osP
+{4G
b0Z.`2S
MG:S
LqXA
PSM1
J9XBp
i1/]
ZAoP
Y.L&p
S@j!Y
m&_<
Vk!x
Ye*=Jt
s@LT
4XmY
r-+)
+`be]
}Oy)
AOD7
S9L:
iz8{q
ubHH7
HvLyv
d)?+
;*Ku
V0i#0
*Kt%ijUB
7,y3/
rknou\85
&\-yu*
'[bPo
3>\c
@A#W#
kw+s
G8"U~
_9#F
Qbe<
0>'G
~'x,o
qa2r
Fw*Qg@
/3(a)
V-lH_8
";F
5ZR^{N
4b;P%
=>vX
%!3v
Fu}&o
#cXBG'DxaH
NnDk
& U>
M,9Z
{T'i
x2`l
n#*\
-Vy,/
O@I
oJDL
8uhHt5
rKx]X
:s}K
"X{g
Nq^l
,?CM3N
u+*'
IvU*
^_'/ _ 4C
O@y.
zgzH
7LGq
|xO i
#F5@
+d/p=
}NO'
hy)!
GhL\
E,',
xA<2
fvIx
Nta36
GP.
T5Jw0/
3MT u
\cmdB
@-6z
r=<~
/-2n
B5x<
+4'
jn[w
3ING
gC$7&
1)t*
#y.`)
p*vV<
%GP%J0
4k=^
AZcb~
npJRI
*1vYj
? /N(0C
wvax
1<K>>
X0x#
"W5g
SiPf
sfR/
v"iyc
'8Di
@=S|`
&\t`
Bzqtg
]Alb
pEe`
0j,Q
fx2`
yX'V
NFEc
YiR8
VfWv
<[b:
b,,
EIk F
fFcXi
}p^d4
,|yN
/u{e
WJ3h="P~
!EHs
BYGB
ud~cxF<
OE.E
3 3s
\Ha(
l`?k
0HhR
.X~l
sGHa
eP;:S
!K~2)y
}vl!1
"-,'
>Y.!oz<=
wrV1
@<(v
;E\u,
;E(t
EHj YQ
KERNEL32.DLL
LoadLibraryA
GetProcAddress