Suspicious
Suspect

cca3b63b7101389add0672dd17daf9a5

PE Executable
|
MD5: cca3b63b7101389add0672dd17daf9a5
|
Size: 735.74 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
Hash Value
MD5
cca3b63b7101389add0672dd17daf9a5
Sha1
8dddcb3f2b7070d66b1eb5fb578a6bcdd99891f5
Sha256
939adafee7fd3b294a363969520389b8390412da3869677d34feeed44062abf2
Sha384
a6c8908618cb1e75f7304f30b51ce87f2535bf1d02077693d9f27efa6f7b602fcbf93a56f552101eef0dd235c54a66a7
Sha512
2c6fa33e84c7aae6f4a08edf2a80c1285e3a747ba5e058efcef3b243676b21a39221cff2cd05c6468e158733028c22dda045dfff6f79e4f4c350b8283bf8a04b
SSDeep
12288:5frsJd/3plPxXTwzOX15Cw/8vZrUwMIbfCni7vb0TTjt7tm7uJbPN/lBuVV:VrsJ95lPxXTwzOXOw+ZrdMjw0nZ7wmb6
TLSH
B3F4014061399F22C5BE07F21912D1B017FB4DEEB021E3574EDAACEB7964B841E42B67

PeID

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PharmacyProject.Form1.resources
PharmacyProject.FrmDoktorKaydol.resources
pictureBox1.Image
[NBF]root.Data
[NBF]root.Data-preview.png
PharmacyProject.Properties.Resources.resources
MR
[NBF]root.Data
QFxr
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Module Name

Wmsa.exe

Full Name

Wmsa.exe

EntryPoint

System.Void PharmacyProject.Program::Main()

Scope Name

Wmsa.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Wmsa

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

537

Main Method

System.Void PharmacyProject.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void PharmacyProject.FrmAnaGiris::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

Wmsa.exe

Full Name

Wmsa.exe

EntryPoint

System.Void PharmacyProject.Program::Main()

Scope Name

Wmsa.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Wmsa

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

537

Main Method

System.Void PharmacyProject.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void PharmacyProject.FrmAnaGiris::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts
Name
Value
PDB Path

Wmsa.pdb

Embedded Resources

18

Suspicious Type Names (1-2 chars)

0

cca3b63b7101389add0672dd17daf9a5 (735.74 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙