Suspicious
Suspect

a90039a887c3e38a506d5d3a424d89ab

PE Executable
|
MD5: a90039a887c3e38a506d5d3a424d89ab
|
Size: 789.5 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
a90039a887c3e38a506d5d3a424d89ab
Sha1
9aed701b3e2f18bff37a14bb93e69167020f7709
Sha256
2e3c410728b3564bd615f8e6c64a7fc82fd5385542d02d7134d07bcbbc3f9f09
Sha384
d2e25b9f5f48e820af8ad1b3096d0d07dc30f60a146913a4bbb198bb2973042762935480e681963c0fe0bd791fd989e8
Sha512
4d0f5231a43d4925b6e2746a40e6d9e21611d735b0835f82538c658e66bd3991baa3b1bfa8ddc5ec4093261528bb470cf1d1643031bc0bb9d0bf4ba5e4aaaf7d
SSDeep
24576:VHgPkAIJ/aSjQiwpemXkSeHJz6mRycq5p:VUoaSjQiwYhS66dc+p
TLSH
21F412802352DD07E1F76BB51872D2B01BB47EC9A512D33B8ED17CEBB2267520994793
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PrimeNumberGenerator.Forms.MainForm.resources
PrimeNumberGenerator.Properties.Resources.resources
YVrn
[NBF]root.Data
[NBF]root.Data-preview.png
crc
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: zwbz.pdb

Module Name

zwbz.exe

Full Name

zwbz.exe

EntryPoint

System.Void PrimeNumberGenerator.Program::Main()

Scope Name

zwbz.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

zwbz

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

187

Main Method

System.Void PrimeNumberGenerator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void PrimeNumberGenerator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

a90039a887c3e38a506d5d3a424d89ab (789.5 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PrimeNumberGenerator.Forms.MainForm.resources
PrimeNumberGenerator.Properties.Resources.resources
YVrn
[NBF]root.Data
[NBF]root.Data-preview.png
crc
[NBF]root.Data
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙