Suspicious
Suspect

77167ba9e92e8e42c9e779c3eae961c2

PE Executable
|
MD5: 77167ba9e92e8e42c9e779c3eae961c2
|
Size: 4.08 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
77167ba9e92e8e42c9e779c3eae961c2
Sha1
7fd426083cd9150a18422e421ba16e04c6eff50a
Sha256
6e2c497b5ba8031212a6ec66f84c2483a35e124ba96db701679b480e8e56d0e0
Sha384
56c689a172a03148430a628466e4f7c4d00e3a1ae47755fcda500708273d77b8309102b24995403136c115f0b8c82f70
Sha512
fc73cd79f2c09033993b594cbfe8c075ac6d8c3c20b1196c94fe9d3deb4a48f1a6083b0a800b454e451c14c1e39a4618a24d0eb6a835cdb25cc4c8e1cd7f0252
SSDeep
98304:K6W+HZ53Yso6gThklhbdrqjjJ6ZdE375EDLqoUeeT:Kr253TVUklhojjYI7qDLqoqT
TLSH
F81623C835A030EED457DD3241681D78A6161D767B1BA103AC2378ABBB7F8DB8E540E7
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
$ZeR
@R
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

server1.exe

Full Name

server1.exe

EntryPoint

System.Void ‍​​‌​‏‎‮‮‭‏‌‎‫‍​‬‬‌‍‮‮‬‏‪‏‮::‎‍‌‏‬‫​‌‌‮‎‍‫‏‭‭‫‎‭‭‌‍‏‍‭‮‮()

Scope Name

server1.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

server1

Assembly Version

7.8.8.9

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

4

Main Method

System.Void ‍​​‌​‏‎‮‮‭‏‌‎‫‍​‬‬‌‍‮‮‬‏‪‏‮::‎‍‌‏‬‫​‌‌‮‎‍‫‏‭‭‫‎‭‭‌‍‏‍‭‮‮()

Main IL Instruction Count

0

Main IL

77167ba9e92e8e42c9e779c3eae961c2 (4.08 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙