Suspicious
Suspect

a7b12d4f98ed6ff812e44dd0f0490571

PE Executable
|
MD5: a7b12d4f98ed6ff812e44dd0f0490571
|
Size: 744.96 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
a7b12d4f98ed6ff812e44dd0f0490571
Sha1
4b6e3cfd7332b79d1d71df54715e972718a452a2
Sha256
b8a9598e5ab9a3cc65d1e011d01223128c6e6ce2dafe3409d33ac212a5192b82
Sha384
101e5c65e1bba53496fb8a6240bd138c4b89490cc8ef12db44725885a8c9f2d36c83503bc380d5e8f20aab44a6a85035
Sha512
58475d83c574ad5ef7d0ac32b44d4fdd92da267a3359a12394b6c5d6899dcc89f7cc2741fb8aeea7ef5061c05d7f72b6b007c36386d76b8596d39cef2b2e7f67
SSDeep
12288:a6l9Cq0Z7FfBrhR2L62zMtWIzraBQd0At7SHd5lpcsz:ayNI7FpVyKWtWd0At7SHdXm
TLSH
F4F412513BADE917D1A11BF45DB1E3F807B88E89B402E3879DE9BCD73C66B442580392

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
DirectoryPlus.MainForm.resources
DirectoryPlus.Properties.Resources.resources
KXHn
[NBF]root.Data
[NBF]root.Data-preview.png
gilek
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: wvJd.pdb

Module Name

wvJd.exe

Full Name

wvJd.exe

EntryPoint

System.Void DirectoryPlus.Program::Main()

Scope Name

wvJd.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

wvJd

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

161

Main Method

System.Void DirectoryPlus.Program::Main()

Main IL Instruction Count

6

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void DirectoryPlus.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Module Name

wvJd.exe

Full Name

wvJd.exe

EntryPoint

System.Void DirectoryPlus.Program::Main()

Scope Name

wvJd.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

wvJd

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

161

Main Method

System.Void DirectoryPlus.Program::Main()

Main IL Instruction Count

6

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void DirectoryPlus.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

a7b12d4f98ed6ff812e44dd0f0490571 (744.96 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙