Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 1313996429cbe0ddb1f0c4d7f3a40980
|
| Sha1 | c1cd2053d4f4fcd5c75f628167b14aeaedee0cb5
|
| Sha256 | 52606af87db4f804abc2acc4d07ef73f7dd1687defe42e33a5a7e6b674923b23
|
| Sha384 | 9b1011e399048437b880d3b6b1b9a96e986dc0d5976e28de2b512410cc3ba6331d09e6064e75c3e54a0efad36b84b3a3
|
| Sha512 | 216bbf6edeaad03b555f424fda844b69ce0c4e82cbd82928fc5f1e5106240cf3e27a09a491267a31de83499bf4ddaf4e59048fc6246b1d3b7d8866deac1ba80c
|
| SSDeep | 3072:QzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIkB6d6+Il1c3rxbivlpf0:QLV6Bta6dtJmakIM5XXT6rxmg
|
| TLSH | 0714C02677A94A2FE2DE8679712212139378C2E39CD3F3EE18D415B68F667E406070D7
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | NanoCore Client.exe |
| Full Name | NanoCore Client.exe |
| EntryPoint | System.Void ClientLoaderForm::Main() |
| Scope Name | NanoCore Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | NanoCore Client |
| Assembly Version | 1.2.2.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 2 |
| Main Method | System.Void ClientLoaderForm::Main() |
| Main IL Instruction Count | 4 |
| Main IL | call #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw== #=q_jQLaNdtSDa6ovA0VGw50w==::#=qqROT7DfncW7strhZvp0iRQ==() callvirt ClientLoaderForm #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw==::#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> |
| Module Name | NanoCore Client.exe |
| Full Name | NanoCore Client.exe |
| EntryPoint | System.Void ClientLoaderForm::Main() |
| Scope Name | NanoCore Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | NanoCore Client |
| Assembly Version | 1.2.2.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 2 |
| Main Method | System.Void ClientLoaderForm::Main() |
| Main IL Instruction Count | 4 |
| Main IL | call #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw== #=q_jQLaNdtSDa6ovA0VGw50w==::#=qqROT7DfncW7strhZvp0iRQ==() callvirt ClientLoaderForm #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw==::#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> |