Suspicious
Suspect

68609ae500ca4504ca3fae245aaeea3d

PE Executable
MD5: 68609ae500ca4504ca3fae245aaeea3d
Size: 1.46 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Medium

Hash
Hash Value
MD5
68609ae500ca4504ca3fae245aaeea3d
Sha1
02e3c05f091fe819d2cdbb6fdcb5ec1063000b9b
Sha256
197c9b2fe8116d8e9329c5ab49f7fa2a900d27704bb8d36da9d1bc77f2239b07
Sha384
d25388faeb28dad3e00a767231c2fc98bbf7b691a1220e17a3155b2da71959bcdf42dd1e2764469a31b067c7510b56b2
Sha512
a23411638cdc72c596c8fef6855cd33f4161414d6319f7af543847680103e0b6c2d7d10f0120518a38a6c64a2db728cefb592a09e554f2a968b65a93e9ae4688
SSDeep
24576:LiQCmMMHyq9mNYCTyjbowoiqvhuBSdUKONgdmJ4hfPgSoDf:LymMqVM1T5RjuSHmJ4hfPu
TLSH
576523D60BA5E847D05107B10AB1F3B2A6950D8DA500D326EDFFDCFF7428B69A81C6D2

PeID

UPolyX 0.3 -> delikon
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
AtmosphericNetwork.Properties.Resources.resources
EDDO
[NBF]root.Data
[NBF]root.Data-preview.png
Siu
[NBF]root.Data
AtmosphericNetwork.Form1.resources
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

ViVm.exe

Full Name

ViVm.exe

EntryPoint

System.Void AtmosphericNetwork.Program::Main()

Scope Name

ViVm.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

ViVm

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

54

Main Method

System.Void AtmosphericNetwork.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void AtmosphericNetwork.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

68609ae500ca4504ca3fae245aaeea3d (1.46 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙