Suspicious
Suspect

cad66d19cff1ff0f984c64633579f581

PE Executable
|
MD5: cad66d19cff1ff0f984c64633579f581
|
Size: 672.26 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
cad66d19cff1ff0f984c64633579f581
Sha1
41c9bab360fd0a7f771a3b4a44abec38a3a9c82e
Sha256
3d0dc5e78a43a3651e144c2eb3b05b1268580895b2458b2a8bee4779189d6203
Sha384
08fb5c14b5050a84d64d833fe1c7fb86974b618931f0c38d1de00a8b7bf1d59b956f7f3874da79c5b2df7ec25865167b
Sha512
07f628565dac13a830995bcbb32fd894d5d4145e166a31f4840bc6ab07c2d1cf06350c21e01cbc487e1da07c372a81441bf9bc09d7dcd4d0d93eb5cf4212b196
SSDeep
12288:Xt6F1wTgMNbtXUuBqXpBh4cqGjDKFyrNPvwbYLWh08l1Z5Hn:96sTgMnSI3+N3MQWV95H
TLSH
04E4124929ADDB17CA272BF42AB2D17813743CA8A416E607DFD97CCF7879B808341643

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
TipCalculator.Forms.MainForm.resources
TipCalculator.Properties.Resources.resources
Math
[NBF]root.Data
bDgX
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: JVqn.pdb

Module Name

JVqn.exe

Full Name

JVqn.exe

EntryPoint

System.Void TipCalculator.Program::Main()

Scope Name

JVqn.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

JVqn

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

207

Main Method

System.Void TipCalculator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void TipCalculator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

JVqn.exe

Full Name

JVqn.exe

EntryPoint

System.Void TipCalculator.Program::Main()

Scope Name

JVqn.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

JVqn

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

207

Main Method

System.Void TipCalculator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void TipCalculator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

cad66d19cff1ff0f984c64633579f581 (672.26 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙