81f085b4c164d0b6d303e0c762a9c9a1

PE Executable
|
MD5: 81f085b4c164d0b6d303e0c762a9c9a1
|
Size: 11.09 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	81f085b4c164d0b6d303e0c762a9c9a1
Sha1	6b1052da2540db7ba59933bad76c6a4b7048ee77
Sha256	0a4aeb4dd0aa51ddbf5be869e05ca9cd3670d66d3ec43889c42cf32d791f2c27
Sha384	70121c8ef64bf9caf87d1db79aec1317ba505235d48ea8002ffb8ce38d88e090fd41ea0565047d5030256e46beefca5e
Sha512	eb8711744a070acf6930f9353eada772104fb06c16eb6b5acc32b8d25b629d851bc3f1a274bdf3d3cf664375d1d24e6ecfca77bf0fd0e08902fb8caa53b503ef
SSDeep	49152:zwXkp+UqhFIZGpGq9Ts8+f0zzuQnKdm87PqvYocA+SnyX5emyoBLGnEBaxdk+otV:zwXkoUqhFFzXnQo48myrx8x5OS
TLSH	C9B66B51F3B4C2A5C0268134A9A3A313F730B8594705A7CB5BD4AEA52FB73D06DAF316

PeID

Microsoft Visual C++ v6.0 DLL

Pe123 v2006.4.4-4.12

Private EXE Protector V2.30-V2.3X -> SetiSoft Team

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: u K?\|?
Module Name	PolarsYeaoman.exe
Full Name	PolarsYeaoman.exe
EntryPoint	System.Void A.VY::B()
Scope Name	PolarsYeaoman.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	PolarsYeaoman
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	2327
Main Method	System.Void A.VY::B()
Main IL Instruction Count	24
Main IL	ldc.i4.0 <null> stloc.0 <null> ldc.i4.0 <null> stloc.1 <null> ldc.i4.0 <null> stloc.1 <null> nop <null> ldloc.1 <null> ldc.i4.1 <null> bne.un.s IL_000F: nop ldc.i4.0 <null> stloc.1 <null> br.s IL_0024: nop nop <null> ldloca.s V_0 ldloca.s V_1 ldloca.s V_2 ldsfld System.IntPtr[] A.VY::B ldloc.0 <null> ldelem.i <null> calli System.Void (System.Int32&,System.Int32&,System.Int32&) br.s IL_0006: nop nop <null> ret <null>

81f085b4c164d0b6d303e0c762a9c9a1 (11.09 MB)

File Structure

Characteristics

No malware configuration were found at this point.

You must be signed in to post a comment.