Suspicious
Suspect

3101ad0382112c513a8faba1e997eb9b

PE Executable
|
MD5: 3101ad0382112c513a8faba1e997eb9b
|
Size: 568.32 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
3101ad0382112c513a8faba1e997eb9b
Sha1
05ed50c8ef7439acc58a719973cfc3f2c358fb03
Sha256
15ece71c06d86e5004ed7831988b3a61a71d0b634a8fe4c6e0ada860c21cbe89
Sha384
a66bec9014653ec2402fcbfe018e647344379193d7368143127a4ed72ab6ba8adb9e6c5e02b73f312df21888d63f6f69
Sha512
0ad8a8d6175c719d439b25bd6186a88b57760a8266581194d0b72b0f2449f7df82c76a3c4c638409c4ad26a119c15f5d29be63f6730313da865aeee891e3ced1
SSDeep
12288:dwr/GcR4JDu7wwBBEy3Cty7UXnv/A6zrGPFD:ybGcRwDu7bBBOty7Ufo62
TLSH
EEC4238883CCDB59C9BAAA3EE4F2E563C752856B9103D8DC256833DD783931C460B59F

PeID

Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
3101ad0382112c513a8faba1e997eb9b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
 Value
Module Name

Gtxkalwm.exe
Full Name

Gtxkalwm.exe
EntryPoint

System.Void Gtxkalwm.Aycvqsap::Main()
Scope Name

Gtxkalwm.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Gtxkalwm
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

4
Main Method

System.Void Gtxkalwm.Aycvqsap::Main()
Main IL Instruction Count

2
Main IL

call System.Void Gtxkalwm.D.Heymwfmja::Ekqphew() ret <null>
Artefacts
Name
 Value
Embedded Resources

0
Suspicious Type Names (1-2 chars)

0
3101ad0382112c513a8faba1e997eb9b (568.32 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙