Suspicious
Suspect

be0c77902488097202cdb5123dc4dfd3

PE Executable
|
MD5: be0c77902488097202cdb5123dc4dfd3
|
Size: 768.51 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
be0c77902488097202cdb5123dc4dfd3
Sha1
bb9a0b2373525fba60fcdbb3d34427686da0fd6e
Sha256
76f6c3dfccd81b1324ddfef44d931d296ead4767d5844d51d5eee6f35c8366f0
Sha384
b183d0aa0dd546ec8edd4ff96b3d8de1d55048ee568d55d42821f2f1eca3f6c0e0c6ac8c09f48fafc3794dca00a84fcd
Sha512
04f48b1f5e53086a89f9f83f7f83bec76c25220f372bdbbe6fd2de2ae8c2079e2d97329a6628631e30dab7f423045066ec5e0855c1650963b6bf2fb10640e5bb
SSDeep
12288:Laf75BWEw/ugQQ3Ht/E3MVrngsN8q0CxuY3Zlou2MCKGpSJ+:Laf7U/x9d/E8lnbDzuY3ZloiR7J
TLSH
8AF40244672EDF12E8A25BF04AB0E2B52374AD9DAC14D3068FE9BCDBB079F141518B53
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SpaceCalculator.MainForm.resources
SpaceCalculator.Properties.Resources.resources
CHT
[NBF]root.Data
XxtL
[NBF]root.Data
[NBF]root.Data-preview.png
fabrica24
[NBF]root.Data
[NBF]root.Data-preview.png
fabrica25
[NBF]root.Data
[NBF]root.Data-preview.png
fabrica26
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: mthT.pdb

Module Name

mthT.exe

Full Name

mthT.exe

EntryPoint

System.Void SpaceCalculator.Program::Main()

Scope Name

mthT.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

mthT

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

414

Main Method

System.Void SpaceCalculator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SpaceCalculator.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

be0c77902488097202cdb5123dc4dfd3 (768.51 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SpaceCalculator.MainForm.resources
SpaceCalculator.Properties.Resources.resources
CHT
[NBF]root.Data
XxtL
[NBF]root.Data
[NBF]root.Data-preview.png
fabrica24
[NBF]root.Data
[NBF]root.Data-preview.png
fabrica25
[NBF]root.Data
[NBF]root.Data-preview.png
fabrica26
[NBF]root.Data
[NBF]root.Data-preview.png
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙