00e227148475218407643d6a4ce6c983

PE Executable
|
MD5: 00e227148475218407643d6a4ce6c983
|
Size: 97.79 KB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	00e227148475218407643d6a4ce6c983
Sha1	48e9387e35a239059b70b91f212a5294d07c6604
Sha256	e71bced33c4b3ae3da623e020ffce573f241cf3486318e4a29e70a8f1901e86b
Sha384	24e154cf4c79625f88ff351ed5d8cf736b52463a0468644b6aebbdadc7dceac488e59891a42038d022015d9e3980d29e
Sha512	ed6937ba72ab7cbd540019bcb3fee6e56c544935ccfc2bef35f5edabd2baa45e84e425e3572151449a2027e8f9739cf010710f11dad3b1da1ce97d3274d9e627
SSDeep	1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2g3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzduY
TLSH	E0A35D20679C9F19EAFD1B75B4B2012043F0E08A9091FB4B4DC1A4E71FA7B865957EF2

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Malware Configuration - RedLine Config.

Config. Field0	Value
[Configuration Module Name]	EntryPoint
[Configuration Module Full Name]	EntryPoint

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Happy.exe
Full Name	Happy.exe
EntryPoint	System.Void Program::Main(System.String[])
Scope Name	Happy.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Happy
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	234
Main Method	System.Void Program::Main(System.String[])
Main IL Instruction Count	3
Main IL	newobj System.Void EntryPoint::.ctor() call System.Void Program::Execute(EntryPoint) ret <null>
Module Name	Happy.exe
Full Name	Happy.exe
EntryPoint	System.Void Program::Main(System.String[])
Scope Name	Happy.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Happy
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	234
Main Method	System.Void Program::Main(System.String[])
Main IL Instruction Count	3
Main IL	newobj System.Void EntryPoint::.ctor() call System.Void Program::Execute(EntryPoint) ret <null>

00e227148475218407643d6a4ce6c983 (97.79 KB)