Suspicious
Suspect

3247d255769215052417ad32e532421f

PE Executable
|
MD5: 3247d255769215052417ad32e532421f
|
Size: 522.25 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
3247d255769215052417ad32e532421f
Sha1
fc27d0bc32a2682c3e2109617e80050d2cd414ec
Sha256
8cafe02ae7050245022e1afdd9552286c7d3cf944d15cea2d4c7f74fe909e2ec
Sha384
b1bb23be5b771caa3b3adecc1506ece8c94ce7179b523a6335331ec0d468cfbad840dc700957aab001b7982070e541c2
Sha512
48aff7ea4826a8e5bc800ea9d92a48996adb04566c93948f375a22f57425ace09427c0595c485a5a87639e1104ee708f9d647bd09ab784ac13d7a1ca76e64700
SSDeep
12288:8LpsbCG2YopDqELlpH0xL9XozpnMCuOP1Cei93203k7han2OdkR:8Lpu2tpDqA8L9Xoz6LW1G3203k
TLSH
4CB412DA2219D511C9E527B408B2D3B653BD6ED8B822C3178AFABDFB7D077612940343

PeID

.NET executable
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual Studio .NET
File Structure
[Authenticode]_a32ace3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
WorldClock.Form1.resources
WorldClock.Properties.Resources.resources
YvbN
[NBF]root.Data
[NBF]root.Data-preview.png
shu
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x7C200 size 13832 bytes

Info

PDB Path: wIex.pdb

Module Name

wIex.exe

Full Name

wIex.exe

EntryPoint

System.Void WorldClock.Program::Main()

Scope Name

wIex.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

wIex

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

165

Main Method

System.Void WorldClock.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WorldClock.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

wIex.exe

Full Name

wIex.exe

EntryPoint

System.Void WorldClock.Program::Main()

Scope Name

wIex.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

wIex

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

165

Main Method

System.Void WorldClock.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WorldClock.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

3247d255769215052417ad32e532421f (522.25 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙