Suspect
e29ddeebef1fd4ef69698fa2ee7b1d65
PE Executable | MD5: e29ddeebef1fd4ef69698fa2ee7b1d65 | Size: 56.32 KB | application/x-dosexec
PE Executable
MD5: e29ddeebef1fd4ef69698fa2ee7b1d65
Size: 56.32 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics
Symbol Obfuscation Score
Medium
|
Hash | Hash Value |
|---|---|
| MD5 | e29ddeebef1fd4ef69698fa2ee7b1d65
|
| Sha1 | 919b0e3bfc023f595dfb4e83688a96970dc5fa2b
|
| Sha256 | b9abdf181a8746c43cd3665ce5c45ff33ddb8916b400454a26b2cb3e346bc194
|
| Sha384 | 3bdd44314053b7914ac4291518b5bb0944054744dae4ed502e8df94fdf208e23279fbd915882f25823bb1bae8742ee02
|
| Sha512 | 17b2d97a51818f6d26538ce19f964a54f88d9a201a14e41f9c26805173933a32e05c1257fb92d7cacf3b0d12fed86f2432e101fc7cd9a1cb4a55efa7cb564dc8
|
| SSDeep | 1536:wt0rTBOfIIyCUTaK1YUUGtI3k32KBrdOOCS:WuIuTaCUIGOEHS
|
| TLSH | 83433B08BB9E9F23C1BE45FAA0C2755413F0F0B66257E3CB6CCA11D541DAFD65602A93
|
PeID
.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
e29ddeebef1fd4ef69698fa2ee7b1d65
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
CoreForge.GameForm.resources
{2f7b94cc-4e37-4668-b28f-cfd5809c5d46}
Informations
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | CoreForge.dll |
| Full Name | CoreForge.dll |
| Scope Name | CoreForge.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | CoreForge |
| Assembly Version | 14.3.8.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 10 |
| Main Method | Not found or no body |
| Module Name | CoreForge.dll |
| Full Name | CoreForge.dll |
| Scope Name | CoreForge.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | CoreForge |
| Assembly Version | 14.3.8.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 10 |
| Main Method | Not found or no body |
e29ddeebef1fd4ef69698fa2ee7b1d65 (56.32 KB)
File Structure
e29ddeebef1fd4ef69698fa2ee7b1d65
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
CoreForge.GameForm.resources
{2f7b94cc-4e37-4668-b28f-cfd5809c5d46}
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.