6f858816b9b2b65ba0122339b16254db

PE Executable
|
MD5: 6f858816b9b2b65ba0122339b16254db
|
Size: 903.68 KB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	6f858816b9b2b65ba0122339b16254db
Sha1	ef36416ed63bafde6eea610f4f29be90dad7b4a2
Sha256	368c3f4373be7b2de2adb08b623315e12d69d4d3f174c6a5d5b3e892a85fee51
Sha384	d84193d0808fd23e723061b121a45c0e283a8edd3bc79e7f2ef958a549e54b3e58045d8755513a378965f9112218b537
Sha512	1044fb371f8cf4f89177f96dcc1aaf14d3d28982210a2485eb13737c9288590fe81a4e65943268fce830a462bb0929cf697c754e261a33752f55a8f5ab08e74d
SSDeep	24576:oh72Ql9JZ0hwFhnFz+jxCtS7YSj2SF/GtCGZhWsBD:2Z9b0KrnFMxCcE0D/GtGsBD
TLSH	6B15E01027249F16EA7A8BF60421E13203B85E9DA96DE2456FC1BCDF3C79F506990F27

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	qyaY.exe
Full Name	qyaY.exe
EntryPoint	System.Void QLDTDD_FPT.Program::Main()
Scope Name	qyaY.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	qyaY
Assembly Version	5.2.1024.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	998
Main Method	System.Void QLDTDD_FPT.Program::Main()
Main IL Instruction Count	10
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void QLDTDD_FPT.Mainform::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Module Name	qyaY.exe
Full Name	qyaY.exe
EntryPoint	System.Void QLDTDD_FPT.Program::Main()
Scope Name	qyaY.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	qyaY
Assembly Version	5.2.1024.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	998
Main Method	System.Void QLDTDD_FPT.Program::Main()
Main IL Instruction Count	10
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void QLDTDD_FPT.Mainform::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts

Name0	Value
Embedded Resources	18
Suspicious Type Names (1-2 chars)	0

6f858816b9b2b65ba0122339b16254db (903.68 KB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
Embedded Resources	18	6f858816b9b2b65ba0122339b16254db
Suspicious Type Names (1-2 chars)	0	6f858816b9b2b65ba0122339b16254db

You must be signed in to post a comment.

6f858816b9b2b65ba0122339b16254db

PE Executable | MD5: 6f858816b9b2b65ba0122339b16254db | Size: 903.68 KB | application/x-dosexec

PE Executable
|
MD5: 6f858816b9b2b65ba0122339b16254db
|
Size: 903.68 KB
|
application/x-dosexec