Suspicious
Suspect

06ea56d1b543348e35d4390e4a3b44f4

PE Executable
|
MD5: 06ea56d1b543348e35d4390e4a3b44f4
|
Size: 744.45 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
06ea56d1b543348e35d4390e4a3b44f4
Sha1
d16b4fcbd241137e72ea993819b2b4c6fd8b0dc5
Sha256
5ad7ee9c5a5165a10dbc330483b45ab27e26ebf8023e8f8c2bd4d8529feb5dc1
Sha384
16139429da9fdbdb6ff3eb39e5ad2b66939ba41b37e7e9849c70081ae8113611048ed8c366be9296c8ee495ab15c6be5
Sha512
6afc1215469d827bf2d7462587b64ea2ab1db953a3d0a39770469cebcac034149a53af7fe96fef4cae57daa7b3e4ca292bbab31738df44dc5f9b98d1dbe6ed7b
SSDeep
12288:rapppppppppjHpppppppppp3j3S2SGF9RJq5Nutvc4ZLsMyehN5jG9auZlEvdm2a:rapppppppppjHpppppppppp3j3iGF9RK
TLSH
15F4121C39A7FD22F4E8277805A2D37143399ECCB421E7064BEDFCE73A366166458286
File Structure
06ea56d1b543348e35d4390e4a3b44f4
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
usercontrolwithdatabinding.Form1.resources
$this.Icon
[NBF]root.IconData
bsCustomer.TrayLocation
engh
[NBF]root.Data
errorProvider1.TrayLocation
usercontrolwithdatabinding.Properties.Resources.resources
pCxx
[NBF]root.Data
[NBF]root.Data-preview.png
usercontrolwithdatabinding.UserControls.AddressControl.resources
Informations
Name
 Value
Module Name

KBeo.exe
Full Name

KBeo.exe
EntryPoint

System.Void usercontrolwithdatabinding.Program::Main()
Scope Name

KBeo.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

KBeo
Assembly Version

1.2.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

106
Main Method

System.Void usercontrolwithdatabinding.Program::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void usercontrolwithdatabinding.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

C:\Users\Administrator\Desktop\Client\Temp\RGazPfzxsV\src\obj\Debug\KBeo.pdb
06ea56d1b543348e35d4390e4a3b44f4 (744.45 KB)
File Structure
06ea56d1b543348e35d4390e4a3b44f4
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
usercontrolwithdatabinding.Form1.resources
$this.Icon
[NBF]root.IconData
bsCustomer.TrayLocation
engh
[NBF]root.Data
errorProvider1.TrayLocation
usercontrolwithdatabinding.Properties.Resources.resources
pCxx
[NBF]root.Data
[NBF]root.Data-preview.png
usercontrolwithdatabinding.UserControls.AddressControl.resources
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
PDB Path

C:\Users\Administrator\Desktop\Client\Temp\RGazPfzxsV\src\obj\Debug\KBeo.pdb

06ea56d1b543348e35d4390e4a3b44f4
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙