b67a09e8b221c752664a9d4870778baa

PE Executable
|
MD5: b67a09e8b221c752664a9d4870778baa
|
Size: 1.22 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	b67a09e8b221c752664a9d4870778baa
Sha1	c6338531e9f03372db0d24e26549dd584501dbe6
Sha256	31067e4964e4e4c454217fd32a1e68221ae3f470be4faf28a85e48eaccf39162
Sha384	10923fc78c2d01d5f0947570631ab73a16dc38195c163d565814ca5322cd763dd5892ce05baf0eb31e3b2c623f819798
Sha512	5012672668c02a5f98bf705280f1329fc0f1b7b3e03138e096be618da5ff3bd136ec9330db6d799f3a83ed74ccd43fd5ea7ff71b2e48a05cb3c6e6d878a7b2fd
SSDeep	24576:nqZnXqyllglglglvRsA9X+I23V/xEPAnk54UhHsmtARKo:u6FR+vcA6HftAKo
TLSH	41457AF122E48B8BE16050B5C42392751FE11F69A901C18ECBADACEB75E7786D5F3843

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x126400 size 13832 bytes
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\JOHdRWHOdn\src\obj\Debug\GIWh.pdb
Module Name	GIWh.exe
Full Name	GIWh.exe
EntryPoint	System.Void IndexApp.Program::Main()
Scope Name	GIWh.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	GIWh
Assembly Version	9.7.9.8
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	749
Main Method	System.Void IndexApp.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void IndexApp.IndexApp::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

b67a09e8b221c752664a9d4870778baa (1.22 MB)

File Structure

Characteristics

No malware configuration were found at this point.

You must be signed in to post a comment.