Suspicious
Suspect

a5eeaa806a6d39a1f43ae03d423a69ba

PE Executable
|
MD5: a5eeaa806a6d39a1f43ae03d423a69ba
|
Size: 580.1 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
a5eeaa806a6d39a1f43ae03d423a69ba
Sha1
73bed0f676e135ddd5b3adaa8eebe441a5d02918
Sha256
1e0df0b7ddd6821d54ecf37db6a67d267387bf56751a8dfc036896b266c2d1bd
Sha384
b3139348aeea8db40d840daed53a3f110b8362579c1ff0e3dfb67cf36955c4bc456cca0c3fd989260e13e2e014eafd0b
Sha512
0810488b5ffc92d4f37c21b5b9d302dc12be35f8e849442c52ddc756121999c64a59496ef3843f95e2ed2dbfacdd308ea49c4f754057d885c4693f368df32929
SSDeep
12288:7a4w9K+bCtGqzBrgIr1srx7ZJPPP6VvfDzz1OryDLed+/L:7os0qzBUIr1srx7ZJSVT316daL
TLSH
49C401D01E69BB12CD751BB0A935DD7463B00E682104FED78CEEBFE772A93419608B52

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
AnagramRace.FormPrincipal.resources
AnagramRace.Properties.Resources.resources
CELU
[NBF]root.Data
[NBF]root.Data-preview.png
F6
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: wlea.pdb

Module Name

wlea.exe

Full Name

wlea.exe

EntryPoint

System.Void AnagramRace.Program::Main()

Scope Name

wlea.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

wlea

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

129

Main Method

System.Void AnagramRace.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void AnagramRace.FormPrincipal::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

wlea.exe

Full Name

wlea.exe

EntryPoint

System.Void AnagramRace.Program::Main()

Scope Name

wlea.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

wlea

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

129

Main Method

System.Void AnagramRace.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void AnagramRace.FormPrincipal::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

a5eeaa806a6d39a1f43ae03d423a69ba (580.1 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙