9102aaecaa9cfc4af9958c84cb7ebad8

PE Executable
|
MD5: 9102aaecaa9cfc4af9958c84cb7ebad8
|
Size: 890.89 KB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	9102aaecaa9cfc4af9958c84cb7ebad8
Sha1	c3f4828347929220d7b76bae29c1ab2899af48ae
Sha256	5d15d1f4fc9001ab14cfd8fc7acc86aaaf6ddd51e1054dd6cdc387544b657559
Sha384	0897581447ffcfb90afc69ac8d5d5ec49eeb10b2b61d4dcd7cffa541330cddcc29a4257de7497a7a8ecdb904e0bc9bec
Sha512	6c8edc958c6e2acdf3ebe7051cb53f8481e89f4dcca619634176a318bce19ff74631fb90192c0d1c4d4a5338984a5654dadd1bb37b466d933ef488f1961df8fa
SSDeep	24576:aUy41He/V1CuJs+weZH1EGIEbeUXNo8lx44gs:aUycHenvOw1EGS8i8
TLSH	ED15DF4FB20C9B1FD9B846B03B71C23107A59F8F6216E285B8D5FCAF71B1B5A29115C2

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

UPolyX 0.3 -> delikon

File Structure

Informations

Name0	Value
Module Name	qDIB.exe
Full Name	qDIB.exe
EntryPoint	System.Void Micro_ToolKit.Program::Main()
Scope Name	qDIB.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	qDIB
Assembly Version	0.8.5.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	396
Main Method	System.Void Micro_ToolKit.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Micro_ToolKit.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	qDIB.exe
Full Name	qDIB.exe
EntryPoint	System.Void Micro_ToolKit.Program::Main()
Scope Name	qDIB.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	qDIB
Assembly Version	0.8.5.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	396
Main Method	System.Void Micro_ToolKit.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Micro_ToolKit.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name0	Value
PDB Path	C:\Users\Administrator\Desktop\Client\Temp\IplpbNpPkQ\src\obj\Debug\qDIB.pdb

9102aaecaa9cfc4af9958c84cb7ebad8 (890.89 KB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
PDB Path	C:\Users\Administrator\Desktop\Client\Temp\IplpbNpPkQ\src\obj\Debug\qDIB.pdb	9102aaecaa9cfc4af9958c84cb7ebad8

You must be signed in to post a comment.

9102aaecaa9cfc4af9958c84cb7ebad8

PE Executable | MD5: 9102aaecaa9cfc4af9958c84cb7ebad8 | Size: 890.89 KB | application/x-dosexec

PE Executable
|
MD5: 9102aaecaa9cfc4af9958c84cb7ebad8
|
Size: 890.89 KB
|
application/x-dosexec