Deep Malware Analysis of df0ae3ba9082494f021020c75db6b033 | md5: df0ae3ba9082494f021020c75db6b033 | Executable | PE (Portable Executable) | Win 32 Exe | x86 | .Net

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	df0ae3ba9082494f021020c75db6b033
Sha1	59f49891cb60685741e0fa06eb0c01c46dfe8fd3
Sha256	d2313ef1f45b7418fe9d3df134801f5fdfced3da2e626551ac13a7a37f19648d
Sha384	1760e6b32e691e9500beba5fa57a84c23e8f3239feb8bb9b4c65dec0a532b01534c83e5a47327e6a566bf556d2290ec9
Sha512	d3fad188bb747d5f62ef7755f295c0da8b74d07057948431bb2b7f489f9470bc3acfcf72eae4ed7c2d01c6ba7567c8a4e8fc67add356b34aeafce21a83e6ddf8
SSDeep	12288:VjbyNsm5ZT9PqJUoHsRdqREi1pXtkp66ob2UMRt8ugsolifmG5:VjbyNsm5ZT9PoHkZwpO6puJol8
TLSH	F5F40191D643DD12D0AB1BBC2B6AC2762A361FCE542AC70E5EC63CF7B9B33411595B02

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

Private EXE Protector V2.30-V2.3X -> SetiSoft Team

File Structure

Informations

Name	Value
Module Name	uvPp.exe
Full Name	uvPp.exe
EntryPoint	System.Void WindowsFormsApp51.Program::Main()
Scope Name	uvPp.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	uvPp
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	218
Main Method	System.Void WindowsFormsApp51.Program::Main()
Main IL Instruction Count	10
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WindowsFormsApp51.StudentsManagerForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Module Name	uvPp.exe
Full Name	uvPp.exe
EntryPoint	System.Void WindowsFormsApp51.Program::Main()
Scope Name	uvPp.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	uvPp
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	218
Main Method	System.Void WindowsFormsApp51.Program::Main()
Main IL Instruction Count	10
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WindowsFormsApp51.StudentsManagerForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts

Name	Value
Embedded Resources	6huhuhuhu
Suspicious Type Names (1-2 chars)	0huhuhuhu

Full artefact values (URLs, paths, registry keys…) are available with Essential.

Unlock with Essential

df0ae3ba9082494f021020c75db6b033 (735.74 KB)