Suspicious
Suspect

e0dc1d73fe2a76b56bc818b87a343106

PE Executable
|
MD5: e0dc1d73fe2a76b56bc818b87a343106
|
Size: 3.85 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
e0dc1d73fe2a76b56bc818b87a343106
Sha1
a47664cf43debb1d465af0ee4722731361a3d777
Sha256
0bdc4e6fdc8e32408990cff8e711a21a86e02007d6a1683b7129e76c2bc1ebbd
Sha384
7c0e664acdd0c783a82f3c8bc7e6aa8c3a47997e148ba6002df9d489d420f7de139e7a3071d7139d89edf2e639026831
Sha512
600bbc218720feac2b2b2edcdface649cd5bd2206607f855db89d0e1d5650f9f5406a4b15136e563748b32c445c191c7792266d78c73556019316138eca542ab
SSDeep
98304:uI7B197W44bLNLioAtYC6Vkyfcsyho1kNgn05Cc0p2:uI7XNWrlL+tYz1tkNzI2
TLSH
A40623ED365072AFC81BC0758F989C78EB127CAA434B8513A4673CDAAA3E857DF54071

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
tz V:Q
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Module Name

server1.exe

Full Name

server1.exe

EntryPoint

System.Int32 <Module>::‎‏‍‍‪‪‭‏‌‍‬‫​‏‌‭‎‬‪‫‬‭‏‫‎‮(System.String[])

Scope Name

server1.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

server1

Assembly Version

3.5.5.8

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

5

Main Method

System.Int32 <Module>::‎‏‍‍‪‪‭‏‌‍‬‫​‏‌‭‎‬‪‫‬‭‏‫‎‮(System.String[])

Main IL Instruction Count

15

Main IL

UNKNOWN1 <null> break <null> brtrue.s <null> UNKNOWN1 <null> UNKNOWN1 <null> bge.s <null> UNKNOWN1 <null> ldind.r8 <null> stind.i1 <null> UNKNOWN1 <null> ldarg.1 <null> UNKNOWN1 <null> UNKNOWN1 <null> ldelem.u1 <null> ldfld <null>

Artefacts
Name
Value
Embedded Resources

1

Suspicious Type Names (1-2 chars)

0

e0dc1d73fe2a76b56bc818b87a343106 (3.85 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙