Suspicious
Suspect

be1dc7337240e07a9c84d1328d5c8117

PE Executable
|
MD5: be1dc7337240e07a9c84d1328d5c8117
|
Size: 752.64 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
be1dc7337240e07a9c84d1328d5c8117
Sha1
cdbe430ec5133046c88c341aa7387d68b997e5e6
Sha256
2cf509961fdf76bdce189a3216b441dca91f858527062699d2ed55487aba80a4
Sha384
f45b1ba815b38fb4863a81017b17eb82ffa636dca0dee62f75300ef647cf549877da75e948c35237668c3b06e8687469
Sha512
75148b6fd642fee6fd403357a9ad2cc74bd3116454b49760b666ed6f1b90941b5f0fed6e140c5864e822382ab7e7ba13450a64bc0f38101c4c7b24cd31c04835
SSDeep
12288:cTWpDKq22T+eNzQAuY4Ay0SOKjDbS8d+YrLZ+j/aYyVXOLZBUQMTgZt6fSJRuQPD:cTuDKR2TV4eDj8d+CLZ+jN0XOMQpXxE0
TLSH
5AF41229325AED52D8651BF69460E3F183B04EEDE423D3679EDA7CDBF876300252424B

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
be1dc7337240e07a9c84d1328d5c8117
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Jogo_da_memoria.cf.resources
Jogo_da_memoria.Form1.resources
$this.Icon
[NBF]root.IconData
whey
[NBF]root.Data
Jogo_da_memoria.Properties.Resources.resources
QlHc
[NBF]root.Data
[NBF]root.Data-preview.png
fundo
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
 Value
Module Name

sihS.exe
Full Name

sihS.exe
EntryPoint

System.Void Jogo_da_memoria.Program::Main()
Scope Name

sihS.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

sihS
Assembly Version

1.1.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

120
Main Method

System.Void Jogo_da_memoria.Program::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Jogo_da_memoria.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

?
be1dc7337240e07a9c84d1328d5c8117 (752.64 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙