Suspicious
Suspect

9fe20b85e9f9f3d9ee075ee5764a7078

PE Executable
|
MD5: 9fe20b85e9f9f3d9ee075ee5764a7078
|
Size: 324.35 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

High

Hash
 Hash Value
MD5
9fe20b85e9f9f3d9ee075ee5764a7078
Sha1
36be48a8165536973b72b6eca8386e842d258d6d
Sha256
cb7793147566cb0cbd2d60918e4825389c549d8a9b89cec611c12ecb028593f5
Sha384
c5306b731224c8f78c3f7c2255fec3af6396b3fa9b046ce655ee733ebbe523072ceeb86d305423f59a5a2210be08a69f
Sha512
7343a54a5177632a739aef4e3f701a3717260e69d34a97d303ad78d320dd9b60cf5b66584ec1e0b2a44aa5d1965d14e7e4cadba38d9f0f33be0fa979d0cb1dce
SSDeep
6144:e1UCSzZlEZDFf6D3EQ4SeH3kXSV3+/NFFyToVpzASGOZ9ANM2AvhcEqrVw:eF3Zt64QNNQCryToPzASsMRhzqrVw
TLSH
FD642B15135CBE0AD5AE6A33E4F6214D63F4A075E8D7CB4B2840DB681FC1790AD32B6E
File Structure
9fe20b85e9f9f3d9ee075ee5764a7078
[Authenticode]_d124d679.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
whatsapp.Properties.Resources.resources
         ​
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x4C400 size 12032 bytes
Module Name

whatsapp.exe
Full Name

whatsapp.exe
EntryPoint

System.Void  ::()
Scope Name

whatsapp.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

whatsapp
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

144
Main Method

System.Void  ::()
Main IL Instruction Count

0
Main IL

9fe20b85e9f9f3d9ee075ee5764a7078 (324.35 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙