Suspicious
Suspect

b996017366db577d2b45231378122264

PE Executable
|
MD5: b996017366db577d2b45231378122264
|
Size: 1.06 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
Hash Value
MD5
b996017366db577d2b45231378122264
Sha1
e64df55048d241d860f341b0a897b88d9a36e1c2
Sha256
ac1f767bad90f41ea9aec4d549ab5f839951119dc9e6a1c8300fc7893cb2431a
Sha384
87c23b637b4ab68e90eda6381849b95b1924209afb883b3a9799034cf699f24e7289f1111a23e76cce5456eed8a1c232
Sha512
683d7964f046b1befc52fe631b90d48dac8a05f6dc47595ab0d8d4412f3cc895e3219b1a87cb628df796c368500ce50754f6b6f2ae1238529199f4f5d4f17150
SSDeep
12288:TPdDjU/o84JJuCH3H86PV5uLjvzBJgjvlPdDjU/o84JJuCH3H86PV5uLjvzBJgjv:zdDk4JrH3H8coEv9dDk4JrH3H8coEv
TLSH
2535D055D660816EDD8E60FF150ADBDB063C4278831AA2C3B9BD7D479B70CF01E6E982

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
372PgaXLg584
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Dones.exe

Full Name

Dones.exe

EntryPoint

System.Void SoveReign.Machiavelli::Main(System.String[])

Scope Name

Dones.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Dones

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

6

Main Method

System.Void SoveReign.Machiavelli::Main(System.String[])

Main IL Instruction Count

8

Main IL

call System.Void SoveReign.ExtractDaemon::ExtractResources() call System.Void SoveReign.RuntimeDaemon::AppRuntime() leave.s IL_0015: ret pop <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) leave.s IL_0015: ret ret <null>

Module Name

Dones.exe

Full Name

Dones.exe

EntryPoint

System.Void SoveReign.Machiavelli::Main(System.String[])

Scope Name

Dones.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Dones

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

6

Main Method

System.Void SoveReign.Machiavelli::Main(System.String[])

Main IL Instruction Count

8

Main IL

call System.Void SoveReign.ExtractDaemon::ExtractResources() call System.Void SoveReign.RuntimeDaemon::AppRuntime() leave.s IL_0015: ret pop <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) leave.s IL_0015: ret ret <null>

b996017366db577d2b45231378122264 (1.06 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙