baa5d8474ecb375a61fe4690b8474481

PE Executable
|
MD5: baa5d8474ecb375a61fe4690b8474481
|
Size: 586.24 KB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	baa5d8474ecb375a61fe4690b8474481
Sha1	d8b7a71781590784b7411da9dfc054414a0fa949
Sha256	8f8421c7da42684b2bc1303af26cc656851ddb17facd21ef55c6173af960664e
Sha384	97029c852b1ebcdc1f1afd1fb00511826f43fc225229935835ae5c70446f0065adfab16802fa5d01b317ad62425f59c8
Sha512	1ff06f6c52c37d56c02dff2597d201835be47395d901cdeb2efa60222354801e938903b7f039627335c5dab394848440cd837e24123f879b409bbcbd8825c557
SSDeep	12288:p1juyojGYZ8S56eU5ZMWEPXA/IVdK7yM9Pn5Kg5K8N6:p14jGYZ8FiWEPQ01M9P5x5h
TLSH	7DC4F1AC2A5FEA23CD455FB689D3F37251B44F88B512C3CBC9E9BC973C5D6562810282

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	RGjy.exe
Full Name	RGjy.exe
EntryPoint	System.Void serverapp.Program::Main(System.String[])
Scope Name	RGjy.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	RGjy
Assembly Version	4.0.2.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	99
Main Method	System.Void serverapp.Program::Main(System.String[])
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void serverapp.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	RGjy.exe
Full Name	RGjy.exe
EntryPoint	System.Void serverapp.Program::Main(System.String[])
Scope Name	RGjy.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	RGjy
Assembly Version	4.0.2.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	99
Main Method	System.Void serverapp.Program::Main(System.String[])
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void serverapp.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name0	Value
PDB Path	C:\Users\Administrator\Desktop\Client\Temp\sVuTKSHqEn\src\obj\Debug\RGjy.pdb
Embedded Resources	2
Suspicious Type Names (1-2 chars)	0

baa5d8474ecb375a61fe4690b8474481 (586.24 KB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
PDB Path	C:\Users\Administrator\Desktop\Client\Temp\sVuTKSHqEn\src\obj\Debug\RGjy.pdb	baa5d8474ecb375a61fe4690b8474481
Embedded Resources	2	baa5d8474ecb375a61fe4690b8474481
Suspicious Type Names (1-2 chars)	0	baa5d8474ecb375a61fe4690b8474481

You must be signed in to post a comment.

baa5d8474ecb375a61fe4690b8474481

PE Executable | MD5: baa5d8474ecb375a61fe4690b8474481 | Size: 586.24 KB | application/x-dosexec

PE Executable
|
MD5: baa5d8474ecb375a61fe4690b8474481
|
Size: 586.24 KB
|
application/x-dosexec