Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 43b6cde53ef3ad50b5558b6853edbfe7
|
| Sha1 | 0adfabe0387d75c19f6645507367d3c8590cb576
|
| Sha256 | 8f59ab17a29c57035493103d83e22f6f1ee15d33df4164fc69f47918f177cc1e
|
| Sha384 | db8283c8f1c3efd60da01052757883e6e525ecff2b96eedc6c80c32a545a8a1d95e289d55b9b02f04cd3fe76d6c7f079
|
| Sha512 | 9978788c515eb778032213b6e2a27d654ec35b6744edba11fefd142c9ad1b640c4ba88a95028c65384bbb69539829983fbde0570685ff3317bff8dd52144670f
|
| SSDeep | 12288:Zce/3plPkj/EmEdCD5bTfZYaEsXW3AHsxNF5dwDT11Tz9snvaJFVhijzHa/UAiW:ZcC5lPsLEdCfYaXXWhNPITr6nSFTCLaQ
|
| TLSH | 65F4021822AAEB05C4AB0BB51672D3B013F5AE1EB512D30EDEDA2EDF7D267016705353
|
PeID
|
Name0 | Value |
|---|---|
| Module Name | LIHB.exe |
| Full Name | LIHB.exe |
| EntryPoint | System.Void HTA_pharmacy.Program::Main() |
| Scope Name | LIHB.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | LIHB |
| Assembly Version | 2.8.5.1 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0 |
| Total Strings | 351 |
| Main Method | System.Void HTA_pharmacy.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void HTA_pharmacy.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null> |
| Module Name | LIHB.exe |
| Full Name | LIHB.exe |
| EntryPoint | System.Void HTA_pharmacy.Program::Main() |
| Scope Name | LIHB.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | LIHB |
| Assembly Version | 2.8.5.1 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0 |
| Total Strings | 351 |
| Main Method | System.Void HTA_pharmacy.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void HTA_pharmacy.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null> |
|
Name0 | Value |
|---|---|
| PDB Path | LIHB.pdb |
| Embedded Resources | 10 |
| Suspicious Type Names (1-2 chars) | 0 |
|
Name0 | Value | Location |
|---|---|---|
| PDB Path | LIHB.pdb |
shipping.exe |
| Embedded Resources | 10 |
shipping.exe |
| Suspicious Type Names (1-2 chars) | 0 |
shipping.exe |