c34fff2f19aae9e62792e7a7a9246f78

PE Executable
|
MD5: c34fff2f19aae9e62792e7a7a9246f78
|
Size: 4.93 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	c34fff2f19aae9e62792e7a7a9246f78
Sha1	97825f838c2af588e4db737efc245d154ada3345
Sha256	67a2ead75d204b7175dbd4d6c2afed6f6962c48892f5f05053409c9f7d84d887
Sha384	f7ac099c26c494a9d5a9cb65590de4caa75a1ab2e350a2ee8c99546a2e6f9803cafcdfae34df4d2a90605582558bf2ef
Sha512	11e5ca4bde876ba031a8d69551df4df52841490a629494e77df55816e0f84249e1cf68ecfe89e240d93cd5a9d91691c72bfe5e0337878ec568f29acb78b6b69b
SSDeep	98304:Ia7im/aONhe2med0+8upI7ntB1PsH30qWlkGKDAdJUAbw3W7AKSj:Ia7faksPed2uAt7Pg3PWmMJNgWA
TLSH	EA36330E2D91C9BEE9C5D4B61D19E432F3E64FE98CA081824684191BDD97FEC33762C5

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual C++ v6.0 DLL

Microsoft Visual Studio .NET

RPolyCryptor V1.4.2 -> Vaska

File Structure

Informations

Name0	Value
Module Name	Hwid Spoofer.exe
Full Name	Hwid Spoofer.exe
EntryPoint	System.Void Hwid_Spoofer.Program::Main()
Scope Name	Hwid Spoofer.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Hwid Spoofer
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	38
Main Method	System.Void Hwid_Spoofer.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Hwid_Spoofer.Menu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	Hwid Spoofer.exe
Full Name	Hwid Spoofer.exe
EntryPoint	System.Void Hwid_Spoofer.Program::Main()
Scope Name	Hwid Spoofer.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Hwid Spoofer
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	38
Main Method	System.Void Hwid_Spoofer.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Hwid_Spoofer.Menu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name0	Value
PDB Path	C:\Users\Boot\source\repos\[PUBLIC] Astra Hwid Spoofer\Hwid Spoofer\obj\Release\Hwid Spoofer.pdb
PDB Path	C:\CI_WS\Ws\274459\Source\Costura_Fody\src\Costura\obj\Release\netstandard2.0\Costura.pdb

c34fff2f19aae9e62792e7a7a9246f78 (4.93 MB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
PDB Path	C:\Users\Boot\source\repos\[PUBLIC] Astra Hwid Spoofer\Hwid Spoofer\obj\Release\Hwid Spoofer.pdb	c34fff2f19aae9e62792e7a7a9246f78
PDB Path	C:\CI_WS\Ws\274459\Source\Costura_Fody\src\Costura\obj\Release\netstandard2.0\Costura.pdb	c34fff2f19aae9e62792e7a7a9246f78 > .Net Resources > costura.costura.dll

You must be signed in to post a comment.

c34fff2f19aae9e62792e7a7a9246f78

PE Executable | MD5: c34fff2f19aae9e62792e7a7a9246f78 | Size: 4.93 MB | application/x-dosexec

PE Executable
|
MD5: c34fff2f19aae9e62792e7a7a9246f78
|
Size: 4.93 MB
|
application/x-dosexec