53e1c3989efd076c76766d348e89a152

PE Executable
|
MD5: 53e1c3989efd076c76766d348e89a152
|
Size: 97.79 KB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	53e1c3989efd076c76766d348e89a152
Sha1	6604340822ec755f7ac2c32464506276da0d05b2
Sha256	58bfa3720639c8e2a31e1e17b8d9ed710725bc1990bc5c654e64f282b7f33eaa
Sha384	efcdb9c4349c086189f17ca26c39d0a8b116ea14917a67f88a9313e3328bebf6d9d986d4e49efce101fe0c49047ca1b3
Sha512	c30c2133debf12a2d5c632d20478ef84fe0f12c004a9f19f16c13ba863c1e5020ebe04b495460ba80442ee3bc28dae657c3ccf785ef56a04dc8fc52803d2458b
SSDeep	1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed273tmulgS6p8l:XEwiYj+zi0ZbYe1g0ujyzdb8
TLSH	64A35D3067AC9F19EAFD1B75B4B2012043F0E08A9091FB4A4DC154E71FA7B865957EF2

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Malware Configuration - RedLine Config.

Config. Field0	Value
[Configuration Module Name]	EntryPoint
[Configuration Module Full Name]	EntryPoint

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Happy.exe
Full Name	Happy.exe
EntryPoint	System.Void Program::Main(System.String[])
Scope Name	Happy.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Happy
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	234
Main Method	System.Void Program::Main(System.String[])
Main IL Instruction Count	3
Main IL	newobj System.Void EntryPoint::.ctor() call System.Void Program::Execute(EntryPoint) ret <null>
Module Name	Happy.exe
Full Name	Happy.exe
EntryPoint	System.Void Program::Main(System.String[])
Scope Name	Happy.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Happy
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	234
Main Method	System.Void Program::Main(System.String[])
Main IL Instruction Count	3
Main IL	newobj System.Void EntryPoint::.ctor() call System.Void Program::Execute(EntryPoint) ret <null>

53e1c3989efd076c76766d348e89a152 (97.79 KB)