Suspicious
Suspect

798b7289d20295512246e9ba73b0bcc2

PE Executable
|
MD5: 798b7289d20295512246e9ba73b0bcc2
|
Size: 803.33 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
798b7289d20295512246e9ba73b0bcc2
Sha1
21e656d5ea5d75b552fb2f8225bcb3266324fc2e
Sha256
5d33c27d8d34e9b82c5ade1de375c88ade2a58b11494d803040b05f1569bf22a
Sha384
55f40f1d0c24fe9a5e5bf5642676e9782caaa1d0a0f7644d29e57f2c51fb7f4a0056ae9887a745613dc01e1687029fd4
Sha512
4bc85587e2a88c24ef6b50c6046fa56bcfde64a941fccac2d68beff5974d78ba2045c74913e841344aedde03c45fd9ca03b573b7ecf0f9e1ba75751223b184ba
SSDeep
24576:S0Md41DGm/UwToeLAwJ3IXJp3VPR0vHvxR:KqGZYxEwC5phGvHvxR
TLSH
8D05016463AEDB01E0FA1BF01970C3700BB4BD5AA821E2065FEAADEF79357415D61363

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CrashMonitor.CrashReportForm.resources
CrashMonitor.Properties.Resources.resources
CTT
[NBF]root.Data
dglp
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: WBGD.pdb

Module Name

WBGD.exe

Full Name

WBGD.exe

EntryPoint

System.Void CrashMonitor.Program::Main()

Scope Name

WBGD.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

WBGD

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

474

Main Method

System.Void CrashMonitor.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CrashMonitor.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

WBGD.exe

Full Name

WBGD.exe

EntryPoint

System.Void CrashMonitor.Program::Main()

Scope Name

WBGD.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

WBGD

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

474

Main Method

System.Void CrashMonitor.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CrashMonitor.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

798b7289d20295512246e9ba73b0bcc2 (803.33 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙