Suspicious
Suspect

3d93088de48469a4491ad6d87cf2c360

PE Executable
|
MD5: 3d93088de48469a4491ad6d87cf2c360
|
Size: 576 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
3d93088de48469a4491ad6d87cf2c360
Sha1
3501fba08b5fb390fa6fef0401f637c32b2148a5
Sha256
35609862a6c28f3fa0e24dfc564dd3515c539cd1f8387de051055abbaef90ff5
Sha384
e264b4807f44025251f2663629aabddcd9736c5d9460d75a4070b511977cb4d07e1b2bc9eae5bb534b4757301cf36bf9
Sha512
148c67da055581a6bef37f1aa17a3a31f8f7bbf463318cb0c79e4b4984b35519925a2fa51831dc9624b427bde6690f31b11d0bbcff13a1584655f7d89d9109b5
SSDeep
12288:L9FDSNgNfbHxT9X7FO1zVAb7waU8yuxFp9fkDL1wOCOBXvMayN:L9xNfbHxT9X7FgAH7UJuxFp9fyR1BX0d
TLSH
10C423402A5DDB13C4A35BF02E30F2311BB8AE5E9851E5139FD92DDF766B78029047AB

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CoinFlipSimulator.MainFlipForm.resources
CoinFlipSimulator.Properties.Resources.resources
SC
[NBF]root.Data
cIzH
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: nLKB.pdb

Module Name

nLKB.exe

Full Name

nLKB.exe

EntryPoint

System.Void CoinFlipSimulator.Program::Main()

Scope Name

nLKB.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

nLKB

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

128

Main Method

System.Void CoinFlipSimulator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CoinFlipSimulator.MainFlipForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

nLKB.exe

Full Name

nLKB.exe

EntryPoint

System.Void CoinFlipSimulator.Program::Main()

Scope Name

nLKB.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

nLKB

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

128

Main Method

System.Void CoinFlipSimulator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CoinFlipSimulator.MainFlipForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

3d93088de48469a4491ad6d87cf2c360 (576 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙