Suspicious
Suspect

7abf5fe1be102b24f50a778a4a707a41

PE Executable
|
MD5: 7abf5fe1be102b24f50a778a4a707a41
|
Size: 713.22 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
7abf5fe1be102b24f50a778a4a707a41
Sha1
de417388f0eef6857e41ab0b1cb653a84ef2c2b6
Sha256
d0434e247474e854773c4577c0e139af063665c3c71dbf012628b89f2b42d3a2
Sha384
019aee41e00479dca4e0491e23022841cc48dca7096273893263bd112071d3f4d5af7a6205d03713cf2e117770adec63
Sha512
a1fdae2ca65f7d40ed3ab06418a67e74170bd2bab01fd97a7f6bf796b7cf0c76a586fcc4340dfb28ea335d32e42e76f6f6d5649fe28921284ad21f716f7e06d0
SSDeep
12288:C6AC8L6WdL+cUe0wzWGau/WM5svTx3x6Hnaa9/hNHT2m0Art/ESskpu:3AlL/dLPe8Zau/D5+3xGnaa9/hNH6m0S
TLSH
2BE41258625AE822D4A32BF448B1E3F923718DDCB417D313DFDDACE779562A130A4392

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PharmacyManager.Properties.Resources.resources
gr
[NBF]root.Data
rfVD
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Module Name

vfdA.exe

Full Name

vfdA.exe

EntryPoint

System.Void PharmacyManager.Program::Main()

Scope Name

vfdA.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

vfdA

Assembly Version

2.8.5.1

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

96

Main Method

System.Void PharmacyManager.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void PharmacyManager.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

vfdA.exe

Full Name

vfdA.exe

EntryPoint

System.Void PharmacyManager.Program::Main()

Scope Name

vfdA.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

vfdA

Assembly Version

2.8.5.1

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

96

Main Method

System.Void PharmacyManager.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void PharmacyManager.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts
Name
Value
PDB Path

vfdA.pdb

7abf5fe1be102b24f50a778a4a707a41 (713.22 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙