Suspect
a90039a887c3e38a506d5d3a424d89ab
PE Executable | MD5: a90039a887c3e38a506d5d3a424d89ab | Size: 789.5 KB | application/x-dosexec
PE Executable
MD5: a90039a887c3e38a506d5d3a424d89ab
Size: 789.5 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics
Symbol Ofbuscation Score
Medium
|
Hash | Hash Value |
|---|---|
| MD5 | a90039a887c3e38a506d5d3a424d89ab
|
| Sha1 | 9aed701b3e2f18bff37a14bb93e69167020f7709
|
| Sha256 | 2e3c410728b3564bd615f8e6c64a7fc82fd5385542d02d7134d07bcbbc3f9f09
|
| Sha384 | d2e25b9f5f48e820af8ad1b3096d0d07dc30f60a146913a4bbb198bb2973042762935480e681963c0fe0bd791fd989e8
|
| Sha512 | 4d0f5231a43d4925b6e2746a40e6d9e21611d735b0835f82538c658e66bd3991baa3b1bfa8ddc5ec4093261528bb470cf1d1643031bc0bb9d0bf4ba5e4aaaf7d
|
| SSDeep | 24576:VHgPkAIJ/aSjQiwpemXkSeHJz6mRycq5p:VUoaSjQiwYhS66dc+p
|
| TLSH | 21F412802352DD07E1F76BB51872D2B01BB47EC9A512D33B8ED17CEBB2267520994793
|
File Structure
a90039a887c3e38a506d5d3a424d89ab
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PrimeNumberGenerator.Forms.MainForm.resources
PrimeNumberGenerator.Properties.Resources.resources
YVrn
[NBF]root.Data
[NBF]root.Data-preview.png
crc
[NBF]root.Data
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: zwbz.pdb |
| Module Name | zwbz.exe |
| Full Name | zwbz.exe |
| EntryPoint | System.Void PrimeNumberGenerator.Program::Main() |
| Scope Name | zwbz.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | zwbz |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 187 |
| Main Method | System.Void PrimeNumberGenerator.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void PrimeNumberGenerator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null> |
a90039a887c3e38a506d5d3a424d89ab (789.5 KB)
File Structure
a90039a887c3e38a506d5d3a424d89ab
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PrimeNumberGenerator.Forms.MainForm.resources
PrimeNumberGenerator.Properties.Resources.resources
YVrn
[NBF]root.Data
[NBF]root.Data-preview.png
crc
[NBF]root.Data
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.