Suspicious
Suspect

073a0f541decb775dc2a2388ca2b78e4

PE Executable
|
MD5: 073a0f541decb775dc2a2388ca2b78e4
|
Size: 672.77 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
Hash Value
MD5
073a0f541decb775dc2a2388ca2b78e4
Sha1
650169269b7cf943fcdc21b4ef51ecb5f8204950
Sha256
ca19a908064885c92f2ac7e4d12e95d359f35ba13cea4352906fc993b3ff24dd
Sha384
54771d0a5d93b9740da61f26e5e7b3186b6b20025979ee599dcd4dc0efc9fc63fcdf03e98b4459514813c2c0fee0d880
Sha512
d606e486ff5b6e5b78dd3db6258d6ab60fd02824865006ad6cc942fe277e2044412848ac5886e4e8041d1aabf9c3ff22820d1f382ee07557e19b9950f433ce49
SSDeep
12288:f0WWcqfH+tMBTFAMei6utYFFzJhvs0DMqGphdTRcWFdI22CyZSLWImQ8R:0H+tMBRABjFFFhlDMdTFcWP2HSKH/
TLSH
9FE41218AB40D142CC501B764E76F2B90B7D6F99F212F7069FEA7CEFF8226446E04256

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
JuegoPong.Properties.Resources.resources
Arch
[NBF]root.Data
KWF
[NBF]root.Data
[NBF]root.Data-preview.png
LOg_outd
[NBF]root.Data
[NBF]root.Data-preview.png
logout
[NBF]root.Data
[NBF]root.Data-preview.png
logout_1
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: FCk.pdb

Module Name

FCk.exe

Full Name

FCk.exe

EntryPoint

System.Void JuegoPong.Program::Main()

Scope Name

FCk.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

FCk

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

74

Main Method

System.Void JuegoPong.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void JuegoPong.FormMenuPrincipal::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

FCk.exe

Full Name

FCk.exe

EntryPoint

System.Void JuegoPong.Program::Main()

Scope Name

FCk.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

FCk

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

74

Main Method

System.Void JuegoPong.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void JuegoPong.FormMenuPrincipal::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

073a0f541decb775dc2a2388ca2b78e4 (672.77 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙