General
Structural Analysis
Config.0
Yara Rules33
Sync
Community
Summary by MalvaGPT
Characteristics
Symbol Ofbuscation Score
Low
|
Hash | Hash Value |
|---|---|
| MD5 | 7e37c52b146f4856df6eda03978c7070
|
| Sha1 | fbbbfc72c1e992b8c871f9df4fa32656d4921503
|
| Sha256 | 971c47e1602e19ed5c2d65992bbd8ed9d8480e60849c355dd2e6909ae83dcfba
|
| Sha384 | c1a0b1b0e6b432ec68b5e03a038b1ce4800600f4bfae60ddcc68e1e919d28a85eb7bf3dd475d938bb46ff9d659664c35
|
| Sha512 | 1915f8e55f7a95953e783c1ef9906fed91ca931303a829c49cd9c51d7883bf24780f962554239efa7b2c997882cd3fa889509f40953a6f425e09c1a2ae46384e
|
| SSDeep | 24576:GOc+IftxDb+WvZIQhdcs0Na6HiinVIu0Pob1:qd9b5ZJQsInVIxPo
|
| TLSH | 41759D00BFAC5716E53C28FE266649375B722B039418F0DAF8BD52CE9FA5B05463B352
|
PeID
.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
UPolyX 0.3 -> delikon
File Structure
7e37c52b146f4856df6eda03978c7070
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0.exif
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CafeOtomasyon.frmPackage.resources
btnBack.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnExit.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
CafeOtomasyon.frmCustomerAdd.resources
CafeOtomasyon.frmMenu.resources
btnCustomer.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnKitchen.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnLock.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnPackageOrder.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnPayment.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnReport.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnReservation.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnSettings.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnTableOrder.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
CafeOtomasyon.frmPayment.resources
printPreviewDialog1.Icon
[NBF]root.IconData
CafeOtomasyon.frmSignIn.resources
btnSignIn.Image
[NBF]root.Data
[NBF]root.Data-preview.png
CafeOtomasyon.frmOrderControl.resources
$this.AutoScaleDimensions
$this.BackgroundImageLayout
$this.ClientSize
$this.Margin
$this.StartPosition
btnBack.Location
btnBack.Size
btnExit.Location
btnExit.Size
label1.Font
label1.Location
label1.Margin
label1.Size
label2.ImeMode
label2.Location
label2.Size
label4.Location
label4.Size
lblLastOrderDate.Location
lblLastOrderDate.Size
lblTotalOrder.Location
lvControl.Location
lvControl.Size
lvCustomerDetails.Location
lvCustomerDetails.Size
lvOrderDetails.Location
lvOrderDetails.Size
tbxTotalPrice.Font
tbxTotalPrice.Location
tbxTotalPrice.Size
CafeOtomasyon.frmTableOperations.resources
CafeOtomasyon.Properties.Resources.resources
Household-Table-icon
[NBF]root.Data
[NBF]root.Data-preview.png
Household-Table-icon (1)
[NBF]root.Data
[NBF]root.Data-preview.png
Ljqg
[NBF]root.Data
[NBF]root.Data-preview.png
cikis
[NBF]root.Data
[NBF]root.Data-preview.png
refresh
[NBF]root.Data
[NBF]root.Data-preview.png
tableopenreserve
[NBF]root.Data
[NBF]root.Data-preview.png
CafeOtomasyon.Report1.rdlc
CafeOtomasyon.Report2.rdlc
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: C:\Users\Administrator\Desktop\Client\Temp\ERjPfwwFdH\src\obj\Debug\xzIN.pdb |
| Module Name | xzIN.exe |
| Full Name | xzIN.exe |
| EntryPoint | System.Void CafeOtomasyon.Program::Main() |
| Scope Name | xzIN.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | xzIN |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 1539 |
| Main Method | System.Void CafeOtomasyon.Program::Main() |
| Main IL Instruction Count | 6 |
| Main IL | call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void CafeOtomasyon.frmSignIn::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> |
| Module Name | xzIN.exe |
| Full Name | xzIN.exe |
| EntryPoint | System.Void CafeOtomasyon.Program::Main() |
| Scope Name | xzIN.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | xzIN |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 1539 |
| Main Method | System.Void CafeOtomasyon.Program::Main() |
| Main IL Instruction Count | 6 |
| Main IL | call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void CafeOtomasyon.frmSignIn::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> |
7e37c52b146f4856df6eda03978c7070 (1.68 MB)
File Structure
7e37c52b146f4856df6eda03978c7070
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0.exif
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CafeOtomasyon.frmPackage.resources
btnBack.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnExit.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
CafeOtomasyon.frmCustomerAdd.resources
CafeOtomasyon.frmMenu.resources
btnCustomer.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnKitchen.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnLock.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnPackageOrder.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnPayment.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnReport.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnReservation.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnSettings.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
btnTableOrder.BackgroundImage
[NBF]root.Data
[NBF]root.Data-preview.png
CafeOtomasyon.frmPayment.resources
printPreviewDialog1.Icon
[NBF]root.IconData
CafeOtomasyon.frmSignIn.resources
btnSignIn.Image
[NBF]root.Data
[NBF]root.Data-preview.png
CafeOtomasyon.frmOrderControl.resources
$this.AutoScaleDimensions
$this.BackgroundImageLayout
$this.ClientSize
$this.Margin
$this.StartPosition
btnBack.Location
btnBack.Size
btnExit.Location
btnExit.Size
label1.Font
label1.Location
label1.Margin
label1.Size
label2.ImeMode
label2.Location
label2.Size
label4.Location
label4.Size
lblLastOrderDate.Location
lblLastOrderDate.Size
lblTotalOrder.Location
lvControl.Location
lvControl.Size
lvCustomerDetails.Location
lvCustomerDetails.Size
lvOrderDetails.Location
lvOrderDetails.Size
tbxTotalPrice.Font
tbxTotalPrice.Location
tbxTotalPrice.Size
CafeOtomasyon.frmTableOperations.resources
CafeOtomasyon.Properties.Resources.resources
Household-Table-icon
[NBF]root.Data
[NBF]root.Data-preview.png
Household-Table-icon (1)
[NBF]root.Data
[NBF]root.Data-preview.png
Ljqg
[NBF]root.Data
[NBF]root.Data-preview.png
cikis
[NBF]root.Data
[NBF]root.Data-preview.png
refresh
[NBF]root.Data
[NBF]root.Data-preview.png
tableopenreserve
[NBF]root.Data
[NBF]root.Data-preview.png
CafeOtomasyon.Report1.rdlc
CafeOtomasyon.Report2.rdlc
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.