General
Structural Analysis
Config.0
Yara Rules25
Sync
Community
Summary by MalvaGPT
Characteristics
Symbol Ofbuscation Score
Medium
|
Hash | Hash Value |
|---|---|
| MD5 | 8a76d43b7373b7ed9efdfd0821abf9c9
|
| Sha1 | 6b594650d677ffe56c38a8e4aa5523064f67eb70
|
| Sha256 | ba2a2c97aa6063219a193955655bfacf086832a83bbf711826396ecd60c8d0ad
|
| Sha384 | 5c260026732b9febe16a098fe1b8886eb84ffb937e36b655fe949d1620a58aeaf4811dfa025f49aef36897ceffe8fac3
|
| Sha512 | 6c3a020c13317702c4520e4ca2947e4bc999640952e5a00d4cab85391f6b0eb53a252ffccaadabf1f7117c3223c06b4ad0c89ff80c60ac60021d2f9fc05ff7d3
|
| SSDeep | 24576:nfYUEGMryp4A+CbK8OSbl1nqTFaYAQ5VOg6yUQX:fYpJ26AffOit6aWiTyU
|
| TLSH | 632522AE5781BC73E0AB1936E4F23399C731D4104BA7E3021C8953E94E7EBE215D3666
|
PeID
Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
8a76d43b7373b7ed9efdfd0821abf9c9
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
{a74a6857-3525-4ea9-9ba0-d635b672db69}
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Ekbspwx.exe |
| Full Name | Ekbspwx.exe |
| EntryPoint | System.Void .::() |
| Scope Name | Ekbspwx.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Ekbspwx |
| Assembly Version | 1.0.2732.23865 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6 |
| Total Strings | 157 |
| Main Method | System.Void .::() |
| Main IL Instruction Count | 6 |
| Main IL | nop <null> br.s IL_0005: call System.Void .::() nop <null> ret <null> call System.Void .::() br.s IL_0003: nop |
8a76d43b7373b7ed9efdfd0821abf9c9 (997.38 KB)
File Structure
8a76d43b7373b7ed9efdfd0821abf9c9
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
{a74a6857-3525-4ea9-9ba0-d635b672db69}
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.