Suspicious
Suspect

b0c499a5d09753feefce74da0f1d58fd

PE Executable
|
MD5: b0c499a5d09753feefce74da0f1d58fd
|
Size: 974.34 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
b0c499a5d09753feefce74da0f1d58fd
Sha1
617c17f2b0c741106d2597ca8b848792c0d4bae9
Sha256
dec24a14f83ed2a0c6fdb82fc2e3e08ee48fc0b3c2d2ddef2cdb4450c9930202
Sha384
76602339fccb313322dc017993ddb1d260903a4dd76bc0f6ab829402f88dacd8d8bbee93faeb72bb31d9301aeffb78bb
Sha512
67a746a1a946ae83440e8db6277349ae7414f3c09f7f2c981c477e09792c5c5667c721261eff839aad95aa0bcf31ca67fa5813db2cb42784984c3a8c5ad1aeaa
SSDeep
24576:299NW1AZUjW/A6NDui+vpGdCwGzTRZqpGiF8fWS7:2/N8SLNqw4pnRZq7F6WC
TLSH
DA25228143A8D803D4532FB069B1C1B07738BEDCDE61E74BEFC92EEBB46E6185549216

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Mancala.HauptmenuForm.resources
Mancala.Properties.Resources.resources
BPP
[NBF]root.Data
QJRJb
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: kDwbs.pdb

Module Name

kDwbs.exe

Full Name

kDwbs.exe

EntryPoint

System.Void Mancala.Program::Main()

Scope Name

kDwbs.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

kDwbs

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

84

Main Method

System.Void Mancala.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Mancala.HauptmenuForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

kDwbs.exe

Full Name

kDwbs.exe

EntryPoint

System.Void Mancala.Program::Main()

Scope Name

kDwbs.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

kDwbs

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

84

Main Method

System.Void Mancala.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Mancala.HauptmenuForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

b0c499a5d09753feefce74da0f1d58fd (974.34 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Mancala.HauptmenuForm.resources
Mancala.Properties.Resources.resources
BPP
[NBF]root.Data
QJRJb
[NBF]root.Data
[NBF]root.Data-preview.png
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙