242fe0e346c853ca08cbbb9edb5afb3c

PE Executable
|
MD5: 242fe0e346c853ca08cbbb9edb5afb3c
|
Size: 97.79 KB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	242fe0e346c853ca08cbbb9edb5afb3c
Sha1	3dfdc3fd5a6355ad13f0dba01d8f4aa30774214c
Sha256	844e4c466954278d395f6e8a14f0dce60052f683ea921e147fc756abba4c82a5
Sha384	87975bb2ca704c86552fda0b97f16c14b498610b32b67ac778fb17331faecb4afe285564559e132055fdf554e60a8182
Sha512	cb925cdfe5c31f8b4e7c9c0d82d09b91134c3fd579e20022fe1e7d5e71b0523a6c287c2c502444b594b40af80b3ccb728119e8bbd8571846e2b0521c708dfe6e
SSDeep	1536:9qs+XqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2l3tmulgS6pY:r0gzWHY3+zi0ZbYe1g0ujyzdZY
TLSH	0BA35D3067AC9F19EAFD1B74B4B2012043F0E48A9091FB4A4DC154E71FA7B866957EF2

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Malware Configuration - RedLine Config.

Config. Field0	Value
[Configuration Module Name]	EntryPoint
[Configuration Module Full Name]	EntryPoint

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Happy.exe
Full Name	Happy.exe
EntryPoint	System.Void Program::Main(System.String[])
Scope Name	Happy.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Happy
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	234
Main Method	System.Void Program::Main(System.String[])
Main IL Instruction Count	3
Main IL	newobj System.Void EntryPoint::.ctor() call System.Void Program::Execute(EntryPoint) ret <null>
Module Name	Happy.exe
Full Name	Happy.exe
EntryPoint	System.Void Program::Main(System.String[])
Scope Name	Happy.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Happy
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	234
Main Method	System.Void Program::Main(System.String[])
Main IL Instruction Count	3
Main IL	newobj System.Void EntryPoint::.ctor() call System.Void Program::Execute(EntryPoint) ret <null>

242fe0e346c853ca08cbbb9edb5afb3c (97.79 KB)