Malware Archive


Home | Objdump info | Perdr info | Strings info

MD5 : 364389256ea74bb06d6825e7ee1689d9
SHA1SUM : d09e9ef1415d25d0c70555138f3b0998d0dbe197
File format not recognized
PeRdr by Frediano Ziglio. Build Dec 27 2007
Runtime Error: Invalid RVA
++++++++++++++++++++++++ FILE HEADER INFORMATION +++++++++++++++++++++++++

TimeStamp: 46DFF03C Thu Sep 6 14:19:08 2007
Subsystem: 2 (Windows GUI)
Image Base: 003E0000 Size: 00B75000
Code Base: 00001000 Size: 00016000
Data Base: 0000000C Size: 00008200
Entry Point: 00007D52 (file offset 00007D52)

++++++++++++++++++++++++++++++++ SECTIONS ++++++++++++++++++++++++++++++++

1: liberate RVA: 00001000 Offset: 00001000 Size: 00007400 Flags: E00000E0 (CDUERW)

++++++++++++++++++++++++++++++++ IMPORTS +++++++++++++++++++++++++++++++++

DLL: KERNEL32.DLL
Addr: 000082B8 hint: 0(0000) Name: LoadLibraryA
Addr: 000082BC hint: 0(0000) Name: GetProcAddress

MZfarbrauschPE
liberateW8
\g!b
\S9g
7Gp{
iwdKa0
E W"
8.eq
,}f!
NRL.
<`s1
oPzBZ
HpiP`
/n9X.
\z.R
2s>;
!P^k[F
11;]
w/dB*a0k
5q3[tM
t(M<
0nE*
6Nl'%
@z/`
=R_
2j\*
''+D
1iA2
~U/_
2cruK09
,@l7
lw_q4
zMpF
N6jB
7`(ZI).5*
c!`O
@Aw}
0xlg=v
:={H
NKwN
)HY!
{WTU
!6/E
;+2:
KC#8u{
+]T:]
yT1Pe
C@6J
eNVl
vW$>
AtH/{
PK3B
YjO
;zSP
d`2%
kM;"
,}Hp
Ib+~
yGSz*
RR.8
8]:'
aKGD
"- m
Y3kU
Wqp:
>|Ba
A0P?
18yF
>_V(Ps
K\inD9K
jI'UA}y
.|oC
l_OO
T4S[>Y
kg)o0W=B2
^K7M
'Su5n
QUu{
paPO
;an(
d1(m\
*TMQ
Tw_w
t|f+
Jb.Lo<P
]&8g
3dTy{)
yq /zYgbi
X.Zk
GPD^E
EIj#
^+O
I&te
;((R8q
;{W
IX.*o
{R13|
E_IZ
4+Wo
?JvT[-
70(
.c<)A
S7!y
q+*d
zb_k
@s4X
[fkht
~^Oy
-HWy*v*D
6gf*
v)za
2QQ,
g0yD}
%Nh*
9cFx
&Q/)K&
M+;~
19@]`<<
=h],D
:!38B
=Qvh
Mq|#x
50[M@
.p[Q
|s<^
{=&c[
o,iQ
?oWU
jp+'F
RW-S9
-_D.
8dcL
Jo^o5
}]x,
R7cd}
i"5Q_D
woty
l6 x
F:WOg
hV&]
X2;*
?TVO
)0jS
uTHW
>q$/
B!*i7
65Ui
5tmM
Gu3e
HY S
}-ucd/
%2k Q
z&][
^UIr
H,MD
<);`.~
rD~Eap(
Ux6o
g\Q8TIL
hi#W
7G\@
T,V:]
wlt~
|}sF=
|L!;
:52P
r@aI
# D
dKR]
Y*kF
HVmj
D7`)h^k
yRt*
H,/]
`OQb
f2fB
b'Nq
F|x5
hM^;DBQ2
?XJL:
Z\*X
.$yt
+_uZ`
m;a
4zs@
U0w=^
Yre4V
V:av
`%Pu7
lKB==v
x X #
"w3l
kzzcc
q|y[
|qo&
JOI5S*a G
zd9.
cyRV
8nj75
\zR9
gBZM
?X]g
#R6'
Ux&*q
o-%QqI
5L3:
+q%SJ$
G+&s@
nW59x
8^.a
/aTJ
wfyS
qehBY#K
T'qFn
2+1H
'#>:N
1ddk
"#QM
,k"/`
p3FH:U+
WmWC
T0i1
;W`ES
50?bC
}!I)
<\*X
Ae>%Kk2
+y;|
FGA-Z
o&z^
3bU
CUgU
7"O>
DIj$
u_T3U
]WTN
XFvd
K5Hw
s#V`U
;F/#
z.~L[zoBF
U #,2
QO$[
tG~S
f<JA
.bMc
%e!(
M~yT_
)u8&
t K1
9=U|
hkVv/
zkNJf
b7%o,
}l~}
!jb7
.4@9E
sDWdiq
LdkL.
J*bp
;oG +
t%Re
-^w=yD%
kqw|v
1cdV
>pA^
,->H
!{=]4}
\IF13
lLL8
R52#
h`b7
S3mCNmJB0ff
j 9b
2,(@
-R.f
r ]/
YF;[\
4kR@
F8T#_U
,Ms)
Dl^)w
4wR*
ZMxv
t[2(
B![jeYb\<
RoX:
!QvWMO
b:Av
|9')P
T-j4
q,zi
-kD>
)-WG
gB/g
&S?n
?J=M)C
+LM*o
< {
<tp]
kc~j
'BnHHk
H(4KN
=C4H
tw1@
f?aP
:(/q
F|K>
uciy
=F4N
G3Gs
D<wA4>
O!dAQ
yF4`
{!#sl
A!r2
YN7)D
D6:99
o_5+7Tbx
6!?(V
IMvQ7*O
)Z.g
6U5^
V3@:&
u!FQ
)x$XgG
YN7T
+}oa/]
?AMa
@57P
FeAH
9lM|C
b#GO4U
}&Bu
^6x/
9NbL
^yKY"j
nd4P
?>Kv
S"[s
$"V'
2'swh
Yuvc
7hzG
q:2m
/"9w
jIM.
5<Oa.r{
_mQ5
e_UcR
sE5fz
NOcu
A38o
[Q1}
87zb
^TKF]
'omyg
q?Xd
x()p
Vlmd
EcY#X
y1z^x
D@PB
0H_H
~&3;7R
--I
"4#!q
,|/}
#GQ lk{
)^F?
lTw\
()L&
{Y3{
{9?Fc
9K IixB
oF/@
Q&~ j`
aX%3
s}_*
}"\Sm
qB@o*
r[ssh
d.;<
[^gj
[yWs
uMzx
~A-7
%kLU:w
]tMQ
>r/Gg'
}u]#
D')g
MG}{
]joTdy,
L5F;lh
%j_"
^n'nP
rJV6
Tu3;
tZiFv
Wz^oB
.C&&
`lDR&l;
&'4Dv
&yR;
[)kv
N2Is}l
ir&f
R(pe
:Q[+H\k7
9RtPeUlv/
1$jmi
_CQo
9fC
4~^^GC
)Yyji*
E`5S
qy=nX01
fv"#
T .=
nRK#
@<(v
;E`u,
;E(t
KERNEL32.DLL
LoadLibraryA
GetProcAddress