2585f435f46837c4c63f5fa2d77bad37

PE Executable
|
MD5: 2585f435f46837c4c63f5fa2d77bad37
|
Size: 1.21 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	2585f435f46837c4c63f5fa2d77bad37
Sha1	65f73b516e22c90026fb3b01a5fcff5ff558450e
Sha256	1d3503024dac1912e72edf790d131836587725548f1ceb5863f176c51eda234f
Sha384	e831ccebbd177966602f0300712a12ec345a62141c728543460c93779ec8b3324ff5003a8ddaab11045c1ff7d595f668
Sha512	506f4e664083107beeeaf6fba3992c9795c50befc23e4b7f3ea9c97199c3262ade575df747176287ab6bae413698714ab3bf30df7ce6386948f707cdab393618
SSDeep	24576:6Wa5Ck//TU6C+hXb2W+Vc7CoLViHXlPMknY5QDJ:6Wakk//w6CtW+cC5H1PMQDJ
TLSH	5E4512185794F912C5A627F019B0E9301B793DA9E832C60E5EDABEEF35E1F604D50393

PeID

UPolyX 0.3 -> delikon

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x125000 size 13832 bytes
Info	PDB Path: EFzb.pdb
Module Name	EFzb.exe
Full Name	EFzb.exe
EntryPoint	System.Void NimGame.Program::Main()
Scope Name	EFzb.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	EFzb
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	231
Main Method	System.Void NimGame.Program::Main()
Main IL Instruction Count	10
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void NimGame.MainMenuForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

2585f435f46837c4c63f5fa2d77bad37 (1.21 MB)

File Structure

Characteristics

No malware configuration were found at this point.

You must be signed in to post a comment.