Suspicious
Suspect

c1031f7c7791278bdbb0df8e4d6fd980

PE Executable
|
MD5: c1031f7c7791278bdbb0df8e4d6fd980
|
Size: 14.78 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
c1031f7c7791278bdbb0df8e4d6fd980
Sha1
057e4e2876451027e7dba2c3ab8e461f09a1e3ed
Sha256
5d8df26f099aacb1a96263d727316b05fd2a218a35d4853e7a17cca5fc348420
Sha384
b7a76679a13446df0d7cf0a544fa6a2859468488ec8dc74dfb42732c4950f2ebd465ce1cea3b3aa56ff087cff6b1ecf9
Sha512
cce74db39f345193c6cf6efb3bc2b57e89ebfbfa5580dcd9c5f2c2f8e182282995d365a5e6bc55a2b3b846541e7feb56920a27e7f0e3022c64606750481696a6
SSDeep
98304:NGJewsoa5i2hOmmi2C7hb7KpEKQklwOJJdzIix8ZcLHGpX4wLm4KBqOUQHOO8Sn1:NGJewsj5iSfhbThklwSJhw4wi4/Hts
TLSH
93E6E510A8D85A07FD3EDFBC959E72500FBAB1A52501BB388F5209D92BD1B58C8439F7

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
achieve.Properties.Resources.resources
aYoNhgcIQySQepLmUfKbF
jiuMJpSxlkdQQYZnLvKlQ
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: C:\Users\Administrator\Desktop\Debug\Canva_Project\Canva\bin\Debug\KeyScramblerIE.pdb

Module Name

KeyScramblerIE.dll

Full Name

KeyScramblerIE.dll

Scope Name

KeyScramblerIE.dll

Scope Type

ModuleDef

Kind

Dll

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

KeyScramblerIE

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.2

Total Strings

100863

Main Method

Not found or no body

c1031f7c7791278bdbb0df8e4d6fd980 (14.78 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
achieve.Properties.Resources.resources
aYoNhgcIQySQepLmUfKbF
jiuMJpSxlkdQQYZnLvKlQ
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙