Suspect
412a9b5043452d00f318015d00dd0b41
PE Executable | MD5: 412a9b5043452d00f318015d00dd0b41 | Size: 525.31 KB | application/x-dosexec
PE Executable
MD5: 412a9b5043452d00f318015d00dd0b41
Size: 525.31 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics
Symbol Ofbuscation Score
Medium
|
Hash | Hash Value |
|---|---|
| MD5 | 412a9b5043452d00f318015d00dd0b41
|
| Sha1 | 8f09c6c07d842fdc1a664cc1c32216516a115374
|
| Sha256 | 5dd5af1e3e58f87e05df02899150dba2b0f4de55f7ca8aca172d9a4a26b7266b
|
| Sha384 | f1ff91a8a83de66dd1a7d638ab9827eb7c28397b50d693077a4271e9730243f9c89268c08daf106c797adb23d6aae5ae
|
| Sha512 | 24562cc394be5133143103f5791f5c961eeca761fc97fd211c342fd76ea4124575fdd777971ec0b73a5e464413c03562289616ae49a36aa6783c5f135d3cbbf2
|
| SSDeep | 6144:LrHM4liuNzh9rk5yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyJcCLBW/pCv6P/7jY:Lznnf4iVg/pegD/sI2J2JK8euQvW
|
| TLSH | 7DB4E0912204C913D4A117F0492EE7FCA2781E9EB820DF46FEE57EDB7839B14994B253
|
File Structure
412a9b5043452d00f318015d00dd0b41
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Calculator_Project.Calculator.resources
$this.Icon
[NBF]root.IconData
greyder
[NBF]root.Data
Login_And_Register_Form.registerForm.resources
pictureBox1.Image
[NBF]root.Data
[NBF]root.Data-preview.png
pictureBox2.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Login_And_Register_Form.frmLogin.resources
Login_And_Register_Form.Properties.Resources.resources
zss
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
|
Name0 | Value |
|---|---|
| Module Name | kmN.exe |
| Full Name | kmN.exe |
| EntryPoint | System.Void Login_And_Register_Form.Program::Main() |
| Scope Name | kmN.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | kmN |
| Assembly Version | 6.3.1.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 174 |
| Main Method | System.Void Login_And_Register_Form.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Login_And_Register_Form.registerForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null> |
Artefacts
|
Name0 | Value |
|---|---|
| PDB Path | kmN.pdb |
412a9b5043452d00f318015d00dd0b41 (525.31 KB)
File Structure
412a9b5043452d00f318015d00dd0b41
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Calculator_Project.Calculator.resources
$this.Icon
[NBF]root.IconData
greyder
[NBF]root.Data
Login_And_Register_Form.registerForm.resources
pictureBox1.Image
[NBF]root.Data
[NBF]root.Data-preview.png
pictureBox2.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Login_And_Register_Form.frmLogin.resources
Login_And_Register_Form.Properties.Resources.resources
zss
[NBF]root.Data
[NBF]root.Data-preview.png
Characteristics
No malware configuration were found at this point.
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| PDB Path | kmN.pdb |
412a9b5043452d00f318015d00dd0b41 |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.