Suspicious
Suspect

9734792ad870c24383830cbb1dc401fd

PE Executable
|
MD5: 9734792ad870c24383830cbb1dc401fd
|
Size: 851.97 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
9734792ad870c24383830cbb1dc401fd
Sha1
c03c820c6fc3f23157715d7313984fbcfa44d551
Sha256
407e1cb8e679d920ea7b3369c2528a0a9c63380273e5ae2ef22f2934285c1d6d
Sha384
e9dd454dd8436df34177f9b370ade917851fe92982436a54439ff7e9936dc9d35760ad8bfbe577980325f7b4b31a8f84
Sha512
55d6541d3b2acc639b7487c9f8c7da6fdda269d02adb7fc3adffd15f078aa6c7775e44c8406b61cc198b78cf10f18578b66297a12b2171f9b4732609488c9247
SSDeep
24576:PMyZLW9ihRidThTz1WacJdFwXs9hdhqoxJ:/ZLO3vTz1kdrr7
TLSH
F905F0223394D91BC11906F41651F3B037B46C97B820FE8A6EEA2D9F39A5FC486D6353

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
9734792ad870c24383830cbb1dc401fd
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Сапёр.Main.resources
$this.Icon
[NBF]root.IconData
GameTimer.TrayLocation
LPP
[NBF]root.Data
SettingsButton.Image
[NBF]root.Data
[NBF]root.Data-preview.png
SmileButton.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Сапёр.Properties.Resources.resources
blank_block
[NBF]root.Data
[NBF]root.Data-preview.png
block_1
[NBF]root.Data
[NBF]root.Data-preview.png
block_2
[NBF]root.Data
[NBF]root.Data-preview.png
block_3
[NBF]root.Data
[NBF]root.Data-preview.png
block_4
[NBF]root.Data
[NBF]root.Data-preview.png
block_5
[NBF]root.Data
[NBF]root.Data-preview.png
block_6
[NBF]root.Data
[NBF]root.Data-preview.png
block_7
[NBF]root.Data
[NBF]root.Data-preview.png
block_8
[NBF]root.Data
[NBF]root.Data-preview.png
clicked_bomb_block
[NBF]root.Data
[NBF]root.Data-preview.png
close_button
[NBF]root.Data
[NBF]root.Data-preview.png
close_button_hover
[NBF]root.Data
[NBF]root.Data-preview.png
closed_block
[NBF]root.Data
[NBF]root.Data-preview.png
flagged_block
[NBF]root.Data
[NBF]root.Data-preview.png
iyBx
[NBF]root.Data
[NBF]root.Data-preview.png
minimize_button
minimize_button_hover
not_clicked_bomb_block
[NBF]root.Data
[NBF]root.Data-preview.png
not_flagged_block
[NBF]root.Data
[NBF]root.Data-preview.png
settings
[NBF]root.Data
[NBF]root.Data-preview.png
settings_hover
[NBF]root.Data
[NBF]root.Data-preview.png
smile
[NBF]root.Data
[NBF]root.Data-preview.png
smile_click
[NBF]root.Data
[NBF]root.Data-preview.png
smile_cool
[NBF]root.Data
[NBF]root.Data-preview.png
smile_sad
[NBF]root.Data
[NBF]root.Data-preview.png
Сапёр.Settings.resources
Informations
Name
 Value
Module Name

BZyF.exe
Full Name

BZyF.exe
EntryPoint

System.Void Сапёр.Program::Main()
Scope Name

BZyF.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

BZyF
Assembly Version

0.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

237
Main Method

System.Void Сапёр.Program::Main()
Main IL Instruction Count

6
Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Сапёр.Main::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Artefacts
Name
 Value
PDB Path

?
9734792ad870c24383830cbb1dc401fd (851.97 KB)
File Structure
9734792ad870c24383830cbb1dc401fd
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Сапёр.Main.resources
$this.Icon
[NBF]root.IconData
GameTimer.TrayLocation
LPP
[NBF]root.Data
SettingsButton.Image
[NBF]root.Data
[NBF]root.Data-preview.png
SmileButton.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Сапёр.Properties.Resources.resources
blank_block
[NBF]root.Data
[NBF]root.Data-preview.png
block_1
[NBF]root.Data
[NBF]root.Data-preview.png
block_2
[NBF]root.Data
[NBF]root.Data-preview.png
block_3
[NBF]root.Data
[NBF]root.Data-preview.png
block_4
[NBF]root.Data
[NBF]root.Data-preview.png
block_5
[NBF]root.Data
[NBF]root.Data-preview.png
block_6
[NBF]root.Data
[NBF]root.Data-preview.png
block_7
[NBF]root.Data
[NBF]root.Data-preview.png
block_8
[NBF]root.Data
[NBF]root.Data-preview.png
clicked_bomb_block
[NBF]root.Data
[NBF]root.Data-preview.png
close_button
[NBF]root.Data
[NBF]root.Data-preview.png
close_button_hover
[NBF]root.Data
[NBF]root.Data-preview.png
closed_block
[NBF]root.Data
[NBF]root.Data-preview.png
flagged_block
[NBF]root.Data
[NBF]root.Data-preview.png
iyBx
[NBF]root.Data
[NBF]root.Data-preview.png
minimize_button
minimize_button_hover
not_clicked_bomb_block
[NBF]root.Data
[NBF]root.Data-preview.png
not_flagged_block
[NBF]root.Data
[NBF]root.Data-preview.png
settings
[NBF]root.Data
[NBF]root.Data-preview.png
settings_hover
[NBF]root.Data
[NBF]root.Data-preview.png
smile
[NBF]root.Data
[NBF]root.Data-preview.png
smile_click
[NBF]root.Data
[NBF]root.Data-preview.png
smile_cool
[NBF]root.Data
[NBF]root.Data-preview.png
smile_sad
[NBF]root.Data
[NBF]root.Data-preview.png
Сапёр.Settings.resources
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
PDB Path

?

9734792ad870c24383830cbb1dc401fd
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙