General
Structural Analysis
Config.0
Yara Rules22
Sync
Community
Summary by MalvaGPT
Characteristics
Symbol Ofbuscation Score
Medium
|
Hash | Hash Value |
|---|---|
| MD5 | e22d440d7902ed7b41bba8e2f95d9e8c
|
| Sha1 | d604bdb445244c154f166447fb711f699e58aa5c
|
| Sha256 | f1cec63b046372dedf586d066be1dfe15fb07e3e6f40db03705e18f45d11b706
|
| Sha384 | c757491425ad0ef8254d579ec009f4e68a016fc8201ec8c9e02457f86539bb208dacc09537728f0c6db07364790912f6
|
| Sha512 | 161e1a54987c096d9b9893243abab4dccf9f19432bbde1a59fac5e0991577472eb99407ac1c9d70404d5a5c5829230961cb037d95b91b4842699459d4285972a
|
| SSDeep | 24576:m07AfgjotCkob+8rC4/dvfSKJ2K95/64SmaK6ybIRN0:m0AgjeC/b+Q/5kiV64Smx6y8RN0
|
| TLSH | A24523901654D211DE205BF06AB2E37807BD1ECAE810E70B9FD9BDEF79B6B459804317
|
File Structure
e22d440d7902ed7b41bba8e2f95d9e8c
[Authenticode]_a32ace3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SortingComparisons.Forms.AlgorithmSelectorForm.resources
SortingComparisons.Properties.Resources.resources
Eat_Other
[NBF]root.Data
[NBF]root.Data-preview.png
Oh
[NBF]root.Data
[NBF]root.Data-preview.png
Sort1
[NBF]root.Data
yEvz
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x131800 size 13832 bytes |
| Info | PDB Path: LVnS.pdb |
| Module Name | LVnS.exe |
| Full Name | LVnS.exe |
| EntryPoint | System.Void SortingComparisons.Program::Main() |
| Scope Name | LVnS.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | LVnS |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 261 |
| Main Method | System.Void SortingComparisons.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SortingComparisons.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null> |
e22d440d7902ed7b41bba8e2f95d9e8c (1.27 MB)
File Structure
e22d440d7902ed7b41bba8e2f95d9e8c
[Authenticode]_a32ace3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SortingComparisons.Forms.AlgorithmSelectorForm.resources
SortingComparisons.Properties.Resources.resources
Eat_Other
[NBF]root.Data
[NBF]root.Data-preview.png
Oh
[NBF]root.Data
[NBF]root.Data-preview.png
Sort1
[NBF]root.Data
yEvz
[NBF]root.Data
[NBF]root.Data-preview.png
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.