Suspicious
Suspect

20d324c73d617622b0c89f49b0177376

PE Executable
|
MD5: 20d324c73d617622b0c89f49b0177376
|
Size: 680.45 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
20d324c73d617622b0c89f49b0177376
Sha1
7411478c17b9dc52e64ba5b75f46da2a1146dbf4
Sha256
f569cdb6756554284367297ac45ab98bc87c32a9b0e05a7d6d4001c390dbf102
Sha384
be4fff020d6f91c69f58354ff681898534445e005a9b9536cb1a11a68b30a1f4bdeb8f7e2477cf45e352b21c07db1ac4
Sha512
01cbe569935e9151d1c27615fd7262e8874697e27524619e6a8aefe3c510180471c41d6ea168a105ed574490d9e19f4aab5fcac2b22e24c52e5cc78314c14d06
SSDeep
12288:XamRsA9b5QoBD+/ePJFzQAo7KgS21D1Bcpn9pl2Mn0joaYt:BRsA9b5QoBlPO7FjhclN
TLSH
F6E41251530AC507E9A20BF59962E3B433789DEEB121E34799EE7CEB793530178A0393
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PassGenerator.Forms.MainForm.resources
PassGenerator.Properties.Resources.resources
Ce
[NBF]root.Data
gold_bars
[NBF]root.Data
[NBF]root.Data-preview.png
kExJ
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: ShaC.pdb

Module Name

ShaC.exe

Full Name

ShaC.exe

EntryPoint

System.Void PassGenerator.Program::Main()

Scope Name

ShaC.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

ShaC

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

99

Main Method

System.Void PassGenerator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void PassGenerator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

20d324c73d617622b0c89f49b0177376 (680.45 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙