Suspect
03e0f03e467671c8bba22e29c3789814
PE Executable | MD5: 03e0f03e467671c8bba22e29c3789814 | Size: 1.05 MB | application/x-dosexec
PE Executable
MD5: 03e0f03e467671c8bba22e29c3789814
Size: 1.05 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics
Symbol Ofbuscation Score
Medium
|
Hash | Hash Value |
|---|---|
| MD5 | 03e0f03e467671c8bba22e29c3789814
|
| Sha1 | 19f81237c8fe8701d67a97a304918486a5b9edc2
|
| Sha256 | 96a0774fc25c036056be449766e6829678457f642381dbbd99525f4866e55f70
|
| Sha384 | 71c2c8192c93b71f6d02e9f55bf9da4cd99586b09fd8123be2783402da4ac913a237e722b424221c5087ac78db337a95
|
| Sha512 | d2135ff4b26c7a4c42a4fd5c929a8c56a2c5475fa32ec2d35b30943e36e4216f470f8ebc3c2abb58193911c9b413d4373845b6b5ee2c99aebbe687a9d03dedfc
|
| SSDeep | 24576:tnnf4iFp42go6zYyhaYF23R2s9J1pXoQ38MFw2kRgOhUy68SXw:Bf9F22gnRzF23ZtYmnkRgOhUy68a
|
| TLSH | DA2501D56206D903C99553F04869E7FC62782EAFB530EE4ABEE47CCB7835700994B263
|
File Structure
03e0f03e467671c8bba22e29c3789814
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Calculator_Project.Calculator.resources
$this.Icon
[NBF]root.IconData
greyder
[NBF]root.Data
Login_And_Register_Form.registerForm.resources
pictureBox1.Image
[NBF]root.Data
[NBF]root.Data-preview.png
pictureBox2.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Login_And_Register_Form.frmLogin.resources
Login_And_Register_Form.Properties.Resources.resources
lko
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: xDg.pdb |
| Module Name | xDg.exe |
| Full Name | xDg.exe |
| EntryPoint | System.Void Login_And_Register_Form.Program::Main() |
| Scope Name | xDg.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | xDg |
| Assembly Version | 6.3.1.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 174 |
| Main Method | System.Void Login_And_Register_Form.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Login_And_Register_Form.registerForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null> |
03e0f03e467671c8bba22e29c3789814 (1.05 MB)
File Structure
03e0f03e467671c8bba22e29c3789814
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Calculator_Project.Calculator.resources
$this.Icon
[NBF]root.IconData
greyder
[NBF]root.Data
Login_And_Register_Form.registerForm.resources
pictureBox1.Image
[NBF]root.Data
[NBF]root.Data-preview.png
pictureBox2.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Login_And_Register_Form.frmLogin.resources
Login_And_Register_Form.Properties.Resources.resources
lko
[NBF]root.Data
[NBF]root.Data-preview.png
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.