Suspicious
Suspect

3380369803fa715bd6b67e3764a41314

PE Executable
|
MD5: 3380369803fa715bd6b67e3764a41314
|
Size: 448.51 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
3380369803fa715bd6b67e3764a41314
Sha1
ac92f0ccd06ea4e90950f461c2936b9b3e5df74a
Sha256
1e6a20beefa219a71e74f86c55a894b9ba5b69e078e7dc0b0ae65bf5a115489a
Sha384
20dabb35725f48d389c147f38c60c5091df12b5bc1055996b47abc9cd3a0f5588c8c7e538fc5381e6e419df176b6a54a
Sha512
916ce39303b86da7f60de8dd0f23db90b0930043eb2a58eb0d5e9213cbaa69e221a83cbf48c9e0219b550a84e166509c790d2f40e9e0e14592d34e89333e57d9
SSDeep
12288:UKApO0M39yf3g3J8X9IQEvvM8zMeFaXXlEhEIKhV6PE906Gb3b:5Ak0M3Qf3g3JUgvM8z0qhfyiE906Gz
TLSH
CB9402943641ED21D88A6BB054B2D3B2537CDFCDA423E3138BDCBDDBBA2965634942D0

PeID

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CatFeeder.Properties.Resources.resources
cgi
[NBF]root.Data
sqSz
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Module Name

OCLa.exe

Full Name

OCLa.exe

EntryPoint

System.Void CatFeeder.Program::Main()

Scope Name

OCLa.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

OCLa

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

91

Main Method

System.Void CatFeeder.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CatFeeder.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

OCLa.exe

Full Name

OCLa.exe

EntryPoint

System.Void CatFeeder.Program::Main()

Scope Name

OCLa.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

OCLa

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

91

Main Method

System.Void CatFeeder.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CatFeeder.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts
Name
Value
PDB Path

OCLa.pdb

3380369803fa715bd6b67e3764a41314 (448.51 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙