Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | b4c85514bc1bdfc89c9f207bb0aec06e
|
| Sha1 | 9b82d54067a1eb92eed55711ac9d7b78fc221d66
|
| Sha256 | ee5c5ba42032ee6a64f4fe4e3bf490c96275a6e4f7f53299286357f5c0adbed9
|
| Sha384 | c2c3ccd668b7bd4fea39f02858e81562cad0e817e6c3d4897c64830f2faad819a5ef4e9d2250769bd15540eb4bfac4d3
|
| Sha512 | 108d005e6af1e65671c499fbd09e2ac120ad769afb85376d344bfcd5d56c5225f35da292ce775a201f5b116cfdef4abbbf6d644e9a68cf4631f0ac6f741b4eee
|
| SSDeep | 3072:gzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIk/T9cx77B7aqetQ0XdeMBma1U:gLV6Bta6dtJmakIM5Mx79PEQ8QVPt
|
| TLSH | 0514CF5677A84A2FE2DE8679612252028339C2E3ACC3F3DF28D455B75F667E4060B1D3
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | NanoCore Client.exe |
| Full Name | NanoCore Client.exe |
| EntryPoint | System.Void ClientLoaderForm::Main() |
| Scope Name | NanoCore Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | NanoCore Client |
| Assembly Version | 1.2.2.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 2 |
| Main Method | System.Void ClientLoaderForm::Main() |
| Main IL Instruction Count | 4 |
| Main IL | call #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw== #=q_jQLaNdtSDa6ovA0VGw50w==::#=qqROT7DfncW7strhZvp0iRQ==() callvirt ClientLoaderForm #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw==::#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> |
| Module Name | NanoCore Client.exe |
| Full Name | NanoCore Client.exe |
| EntryPoint | System.Void ClientLoaderForm::Main() |
| Scope Name | NanoCore Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | NanoCore Client |
| Assembly Version | 1.2.2.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 2 |
| Main Method | System.Void ClientLoaderForm::Main() |
| Main IL Instruction Count | 4 |
| Main IL | call #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw== #=q_jQLaNdtSDa6ovA0VGw50w==::#=qqROT7DfncW7strhZvp0iRQ==() callvirt ClientLoaderForm #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw==::#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> |