957989b99576646c7d9954eda633c270

PE Executable
|
MD5: 957989b99576646c7d9954eda633c270
|
Size: 572.42 KB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	957989b99576646c7d9954eda633c270
Sha1	708aa71e4be65f1557ace3927c01b07ac805f6fd
Sha256	8ff46bf774cf4df83894570294999b7f02f67014a4d3280c092f41a049097f4a
Sha384	4e6b93700b97130cfcce97d7067786d8c487e9ad1d12e48a833b80c982786c04d31db2b05e8ff92826bf5419d8f41d62
Sha512	7a87b16a54d1a5e0ffd19d344665726d8c6d82e9520ad8b792b12fea021440e0dae2b85e3000230539685eefa485e497e721b07f10bec60d1330572e688e4e89
SSDeep	12288:Tuga53wa1/nkJshldLDsHr+MucaeOAtKsQaI/ASrol1cI:0JFkJshIgAtKsQaIfrolr
TLSH	46C4AC903FB9AEC1D86407F10621EAF512B9AF9A4C20D3DA6ECCBFDB74387452954253

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	RzOt.exe
Full Name	RzOt.exe
EntryPoint	System.Void AtYarışıOyunu.Program::Main()
Scope Name	RzOt.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	RzOt
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	288
Main Method	System.Void AtYarışıOyunu.Program::Main()
Main IL Instruction Count	13
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void AtYarışıOyunu.Form3::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> newobj System.Void AtYarışıOyunu.frm1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Module Name	RzOt.exe
Full Name	RzOt.exe
EntryPoint	System.Void AtYarışıOyunu.Program::Main()
Scope Name	RzOt.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	RzOt
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	288
Main Method	System.Void AtYarışıOyunu.Program::Main()
Main IL Instruction Count	13
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void AtYarışıOyunu.Form3::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> newobj System.Void AtYarışıOyunu.frm1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts

Name0	Value
PDB Path	RzOt.pdb
Embedded Resources	4
Suspicious Type Names (1-2 chars)	0

957989b99576646c7d9954eda633c270 (572.42 KB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
PDB Path	RzOt.pdb	957989b99576646c7d9954eda633c270
Embedded Resources	4	957989b99576646c7d9954eda633c270
Suspicious Type Names (1-2 chars)	0	957989b99576646c7d9954eda633c270

You must be signed in to post a comment.

957989b99576646c7d9954eda633c270

PE Executable | MD5: 957989b99576646c7d9954eda633c270 | Size: 572.42 KB | application/x-dosexec

PE Executable
|
MD5: 957989b99576646c7d9954eda633c270
|
Size: 572.42 KB
|
application/x-dosexec