Suspicious
Suspect

6a9d334c6107a9f9575d52932c5b9263

PE Executable
|
MD5: 6a9d334c6107a9f9575d52932c5b9263
|
Size: 748.54 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
6a9d334c6107a9f9575d52932c5b9263
Sha1
aa8f27d260a8895765b98e6899be6a8cb2b8162a
Sha256
2e6ea2095b92809d61b9033fea61c32f672aedda1d736b6a38925ca19d27c16d
Sha384
e02e1d545393986c95027ccd5c5700f978b510bfad688a65a09986a2bb6dad9efb985d15823da120ceb14e827321c0ac
Sha512
376ad4d8eb897cbff7d5d49b5b851ec53a7d560174a15ca8612a6e332c2c5cbe23947713af14833949b7e7dd07ab67e07684c9e96677558319a68b44a6d9beb7
SSDeep
12288:0aSG840TYA0Tu00eFB4v5ae+DrtPa1rjkExofkevVVaS8nJE4KnBMhan2E:R8snT2eFyEVC1vHq8oQyB
TLSH
02F412A526A9E702D5B6ABF418B1D37443BD2E9D3801C3065FEABCDF7C25B50A940393

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
UPolyX 0.3 -> delikon
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
DailyPlanner.MainForm.resources
DailyPlanner.Properties.Resources.resources
kggX
[NBF]root.Data
[NBF]root.Data-preview.png
shu
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: OykB.pdb

Module Name

OykB.exe

Full Name

OykB.exe

EntryPoint

System.Void DailyPlanner.Program::Main()

Scope Name

OykB.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

OykB

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

294

Main Method

System.Void DailyPlanner.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void DailyPlanner.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

OykB.exe

Full Name

OykB.exe

EntryPoint

System.Void DailyPlanner.Program::Main()

Scope Name

OykB.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

OykB

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

294

Main Method

System.Void DailyPlanner.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void DailyPlanner.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

6a9d334c6107a9f9575d52932c5b9263 (748.54 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙