Suspect
1a3b64fb427061df323ef9ab5bb56b6f
PE Executable | MD5: 1a3b64fb427061df323ef9ab5bb56b6f | Size: 1.88 MB | application/x-dosexec
PE Executable
MD5: 1a3b64fb427061df323ef9ab5bb56b6f
Size: 1.88 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics
Symbol Ofbuscation Score
Low
|
Hash | Hash Value |
|---|---|
| MD5 | 1a3b64fb427061df323ef9ab5bb56b6f
|
| Sha1 | 36f3af88ee490e46c8bb1576a985f8d376f775aa
|
| Sha256 | 627dd55ec29e98ae676e1af5a12ec9b7a5c234fdc6c290ac8ab8b1a748b0f213
|
| Sha384 | 074a9aac8c9d6d5e070d43344c74d4cd78f08a198f6513f0b684c2082063ef003c4e641d6e4fb798360c389872fa69fa
|
| Sha512 | ab658f1881f060cb7786eb95d406a787dbc4e54243b73790a9437eb61c3727747851e8dbb3d7de06a668d58e184d3b8bcd9f74cb9aab1bf4a02f25a02727fcba
|
| SSDeep | 49152:HVf+5NzI4H1Fu06fh6mxzFMF/pt5hQus:HVyzI4f6pps/pt56
|
| TLSH | 1B952353CA94D303D4906BF60A63DFB127693F0C9251A2FB5AE39DEB7E246205CC8547
|
PeID
Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
1a3b64fb427061df323ef9ab5bb56b6f
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CrosswordMini.AboutBox1.resources
logoPictureBox.Image
[NBF]root.Data
[NBF]root.Data-preview.png
CrosswordMini.FormMenu.resources
CrosswordMini.Properties.Resources.resources
NH
[NBF]root.Data
eAeZw
[NBF]root.Data
[NBF]root.Data-preview.png
image_1832
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | AsAnyMarsha |
| Full Name | AsAnyMarsha |
| EntryPoint | System.Void HostExecutionCont.FileStreamReadWriteT::Main() |
| Scope Name | AsAnyMarsha |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | vJUng |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 167 |
| Main Method | System.Void HostExecutionCont.FileStreamReadWriteT::Main() |
| Main IL Instruction Count | 10 |
| Main IL | nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void ResolveEventA.MethodRen::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null> |
1a3b64fb427061df323ef9ab5bb56b6f (1.88 MB)
File Structure
1a3b64fb427061df323ef9ab5bb56b6f
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CrosswordMini.AboutBox1.resources
logoPictureBox.Image
[NBF]root.Data
[NBF]root.Data-preview.png
CrosswordMini.FormMenu.resources
CrosswordMini.Properties.Resources.resources
NH
[NBF]root.Data
eAeZw
[NBF]root.Data
[NBF]root.Data-preview.png
image_1832
[NBF]root.Data
[NBF]root.Data-preview.png
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.