Suspicious
Suspect

0b6072907789a43331a3bd7a997c0365

PE Executable
|
MD5: 0b6072907789a43331a3bd7a997c0365
|
Size: 806.4 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
0b6072907789a43331a3bd7a997c0365
Sha1
27406ac926b21377604b69ac3054d9710651badf
Sha256
544fa321969a10c456ceb6429b96f24ddc64a5ee9b220646083ed3e9d0b5badd
Sha384
f0d7e5d0ed639500606437f629f1df0878caa79ff00212525a350dec18e9746ed6dc3e1e26be041ba7bc29a8d9a18669
Sha512
0525ff4b02ff90fa829d73e2c2b84175c577f558e4ae6b382d1572f39f5ca63d7d0babe4df22fecd7b2bfd6cbc064ec8bab2bd1179dd307ba9d7e93649b47a0c
SSDeep
12288:CNavar2GST4CU8wTqohP8/xA3BloxaPqm9HmpyakwBQZdqOXm6xSE5sh6sljH2jC:RThLdYPSA3Blox+UpyauO/sUVN2jEn
TLSH
FD050124AB94C511D5AA17785870E1780735BE9BE920E30E8FC8BDDF7DB2B804C567A3
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CustomTips.Forms.MainForm.resources
CustomTips.Properties.Resources.resources
KR
[NBF]root.Data
ntASN
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Module Name

SBseE.exe

Full Name

SBseE.exe

EntryPoint

System.Void CustomTips.Program::Main()

Scope Name

SBseE.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

SBseE

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

841

Main Method

System.Void CustomTips.Program::Main()

Main IL Instruction Count

40

Main IL

nop <null> nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) nop <null> ldnull <null> ldftn System.Void CustomTips.Program::Application_ThreadException(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) nop <null> call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void CustomTips.Program::CurrentDomain_UnhandledException(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) nop <null> newobj System.Void CustomTips.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> nop <null> leave.s IL_0070: ret stloc.0 <null> nop <null> ldstr Fatal error starting application: ldloc.0 <null> callvirt System.String System.Exception::get_Message() call System.String System.String::Concat(System.String,System.String) ldstr Application Error ldc.i4.0 <null> ldc.i4.s 16 call System.Windows.Forms.DialogResult System.Windows.Forms.MessageBox::Show(System.String,System.String,System.Windows.Forms.MessageBoxButtons,System.Windows.Forms.MessageBoxIcon) pop <null> nop <null> leave.s IL_0070: ret ret <null>

Artefacts
Name
Value
PDB Path

SBseE.pdb

0b6072907789a43331a3bd7a997c0365 (806.4 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙