Suspicious
Suspect

4b839744f3da36cf3b8c629df940038e

PE Executable
|
MD5: 4b839744f3da36cf3b8c629df940038e
|
Size: 1.08 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Medium

Hash
Hash Value
MD5
4b839744f3da36cf3b8c629df940038e
Sha1
00a602284372a484294dd60c1f635f9f83cbb814
Sha256
cb6107c4531b230c31244db28ca307058384a7ae968e0f0e41991f35a77b2e72
Sha384
889b12ae219ae444bc7a432a8d684f9bfb4e42534deaab24f64a6c8465c6e71d20dac743b20e9546acbc20f4c2781138
Sha512
123cc73dad8be1eb351a218ce0152429541dd9137c3178ccaa74f36be7569ec16c6cf17f57333cb0794b9251c6b00bbc3026ad88c485435e9ffbf7ed21879231
SSDeep
24576:tj/guQO5Wo5jMbJs7vbPaa2THij4viL3ZvTtT6PjZidtVict:aul1MbJsrs2j4virFTIPqtQc
TLSH
8F3512303799CF65C8B527FA6930E27927B56C6F6512C30ACEE65CEF74AAB015420723

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
TypingMaster.AboutBox1.resources
TypingMaster.Properties.Resources.resources
Clear
[NBF]root.Data
dfwqeerfdwq
[NBF]root.Data
[NBF]root.Data-preview.png
jUKFX
[NBF]root.Data
[NBF]root.Data-preview.png
werwre
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: fNfKG.pdb

Module Name

fNfKG.exe

Full Name

fNfKG.exe

EntryPoint

System.Void TypingMaster.Program::Main()

Scope Name

fNfKG.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

fNfKG

Assembly Version

4.0.2.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

437

Main Method

System.Void TypingMaster.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void TypingMaster.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

fNfKG.exe

Full Name

fNfKG.exe

EntryPoint

System.Void TypingMaster.Program::Main()

Scope Name

fNfKG.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

fNfKG

Assembly Version

4.0.2.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

437

Main Method

System.Void TypingMaster.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void TypingMaster.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

4b839744f3da36cf3b8c629df940038e (1.08 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙