![]() Name RT_ICON RVA 0x18500 Size 0x2e8 Type dBase IV DBT of block length 512, next free block index 40, next free block 2290649224, next used block 8423560 Language JapaneseĭBase IV DBT of block length 512, next free block index 40, next free block 2290649224, next used block 8423560 CRT Entropy 0 Virtual Address 0x17000 Virtual Size 0x8 Raw Size 0x200 MD5 bf619eac0cdf3f68d496ea9344137e8b Pattern match: "Pattern match: " Pattern match: "" Source Hybrid Analysis Technology relevance 10/10 Which is directly followed by "cmp dword ptr, 01h" and "ret ". +26 call dword ptr GetVersionExAįound API call (Target: "CnsMin.dll.685991486" Stream UID: "4338147D") ![]() Which is directly followed by "cmp dword ptr, 02h" and "jne 37221FBFh". ![]() Which is directly followed by "cmp dword ptr, 06h" and "push dword ptr ". Which is directly followed by "cmp dword ptr, 02h" and "xor ecx, ebp". ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |