Deep Malware Analysis of 65aca0cc01bdf5713286f6c6159179a1 | md5: 65aca0cc01bdf5713286f6c6159179a1 | Executable | PE (Portable Executable) | Win 32 Exe | x86 | .Net

PE Executable

MD5: 65aca0cc01bdf5713286f6c6159179a1

Size: 584.7 KB

application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	65aca0cc01bdf5713286f6c6159179a1
Sha1	f09a906875c0f218a67ba0a6996696ef851adc59
Sha256	90962ba0ec6ebcb4c4100da132db67bab29c86eed1f3b3bd7f20d71ebae630f6
Sha384	ed7e48c8c1a08a614bfe04db3fd88919afe96155e894428777be25ac190639d4661ca55b90f0b6b4ac83a250925d6e22
Sha512	0ea1e41dbacda9a546326c9a7a18f9e9b7c88512387746a1eabe74eb011a231eb325e63793ef49bc0b7212d63a93513030ba3e7b54e503c1df69010f0b22e76c
SSDeep	12288:IjbuSxRTB02Z59VJu5SWu/Ifv6Pjtd59T2JYoeMa:IjbuMjNZ/Ifv6PjtzJr
TLSH	48C4F0569653CE02E0A71BBC276AD1752A326FDE6821CB0F9FD23DD778B73851290B01

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

Private EXE Protector V2.30-V2.3X -> SetiSoft Team

File Structure

Informations

Name	Value
Module Name	AHYE.exe
Full Name	AHYE.exe
EntryPoint	System.Void WindowsFormsApp51.Program::Main()
Scope Name	AHYE.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	AHYE
Assembly Version	5.6.14.2
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	218
Main Method	System.Void WindowsFormsApp51.Program::Main()
Main IL Instruction Count	10
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WindowsFormsApp51.StudentsManagerForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Module Name	AHYE.exe
Full Name	AHYE.exe
EntryPoint	System.Void WindowsFormsApp51.Program::Main()
Scope Name	AHYE.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	AHYE
Assembly Version	5.6.14.2
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	218
Main Method	System.Void WindowsFormsApp51.Program::Main()
Main IL Instruction Count	10
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WindowsFormsApp51.StudentsManagerForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts

Name	Value
Embedded Resources	6huhuhuhu
Suspicious Type Names (1-2 chars)	0huhuhuhu

Full artefact values (URLs, paths, registry keys…) are available with Essential.

Unlock with Essential

65aca0cc01bdf5713286f6c6159179a1 (584.7 KB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name	Value	Location
Embedded Resources	6huhuhuhu	65aca0cc01bdf5713286f6c6159179a1
Suspicious Type Names (1-2 chars)	0huhuhuhu	65aca0cc01bdf5713286f6c6159179a1

Full artefact values (URLs, paths, registry keys…) are available with Essential.

Unlock with Essential

You must be signed in to post a comment.