Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 7dc273f2d142a0ae866dbcc4bce2bc00
|
| Sha1 | 3965d65a30f471d631af16e029027b14687874ca
|
| Sha256 | b384e6f84bccc53a991f32dddc1dba815ba912295ac204ce488c85fb8b91be9a
|
| Sha384 | 43754af061410e74f3ce0c8cfd7fe5d10d563213b2f9ac9b048f64a54d32ae71f095ef50b82981c6a7947e6938ddca66
|
| Sha512 | 7b72aea7f5a70f620a1f172668fedc2f042a01a81c8225495561748b8fd1ca96380501eb3e2c6bdda51bf0371d36070390b0dc5aaccc1fb5185e846b5deb260b
|
| SSDeep | 384:m8Lca9nA+NmAbazJLAZMTEEERkWiFk98Vr2ib3ApS1TgIN9f+XqUo+nJwL:Pc8A+lclnEERWipPfgOCotL
|
| TLSH | DAE217A977B34222D1AD5AB5A87297600179E3135837F73E0CD910DA5F23B80C688FE2
|
PeID
|
Config. Field0 | Value |
|---|---|
| packet_size [b] | 5121 |
| BD [BD] | False |
| directory [DR] | AppData |
| executable_name [EXE] | Microsoft\Windows\explorer.exe |
| isConnecting | 0 |
| is_dir_defined [Idr] | False |
| is_startup_folder [IsF] | False |
| is_user_reg [Isu] | False |
| reg_path [sf] | Software\Microsoft\Windows\CurrentVersion\Run |
| victim_name [VN] | HacKed |
| version [VR] | 0.7d |
| splitter [Y] | |'|'| |
|
Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | explorer.exe |
| Full Name | explorer.exe |
| EntryPoint | System.Void explorer.j.A::main() |
| Scope Name | explorer.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | explorer |
| Assembly Version | 6.1.7800.8900 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 210 |
| Main Method | System.Void explorer.j.A::main() |
| Main IL Instruction Count | 2 |
| Main IL | call System.Void explorer.j.OK::ko() ret <null> |
| Module Name | explorer.exe |
| Full Name | explorer.exe |
| EntryPoint | System.Void explorer.j.A::main() |
| Scope Name | explorer.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | explorer |
| Assembly Version | 6.1.7800.8900 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 210 |
| Main Method | System.Void explorer.j.A::main() |
| Main IL Instruction Count | 2 |
| Main IL | call System.Void explorer.j.OK::ko() ret <null> |
|
Config. Field0 | Value |
|---|---|
| packet_size [b] | 5121 |
| BD [BD] | False |
| directory [DR] | AppData |
| executable_name [EXE] | Microsoft\Windows\explorer.exe |
| isConnecting | 0 |
| is_dir_defined [Idr] | False |
| is_startup_folder [IsF] | False |
| is_user_reg [Isu] | False |
| reg_path [sf] | Software\Microsoft\Windows\CurrentVersion\Run |
| victim_name [VN] | HacKed |
| version [VR] | 0.7d |
| splitter [Y] | |'|'| |