Deep Malware Analysis of e6376836a52a4fd5f55dc9ef299d7c8d | md5: e6376836a52a4fd5f55dc9ef299d7c8d | Executable | PE (Portable Executable) | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.30

PE Executable

MD5: e6376836a52a4fd5f55dc9ef299d7c8d

Size: 859.14 KB

application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	e6376836a52a4fd5f55dc9ef299d7c8d
Sha1	ee5f4ccad30eca71c891ef48154e87edb5f13d84
Sha256	160fe75f8db44c72ff8f98df4238f196d783d78b605eafee68a9bf48224dee98
Sha384	8816e75eb5521c0815df29dfbd828056744883dda0867cf6f5b442f91c5fc4b556eae5ec679b60fdc9977d3c013aa34b
Sha512	bed5b5f87eb5496927f1f0a6e4d9c91fd6cf7b3b8c6ed495f99c91e48d29df8f40d2437ac300a25b3107b9042410e8cae874054208aadbfc35dcf60353a5ad8f
SSDeep	24576:2Ce41He/V1/Hd8XMzQEOLdKczh5HH2C1lMP:2CecHenqXfh52CTMP
TLSH	E205F15CB288C823E4B556F807A2E33143B25E8E632ED3855CD97DDBB2B5F53260461B

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name	Value
Module Name	Skpp.exe
Full Name	Skpp.exe
EntryPoint	System.Void Micro_ToolKit.Program::Main()
Scope Name	Skpp.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Skpp
Assembly Version	0.8.5.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	396
Main Method	System.Void Micro_ToolKit.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Micro_ToolKit.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	Skpp.exe
Full Name	Skpp.exe
EntryPoint	System.Void Micro_ToolKit.Program::Main()
Scope Name	Skpp.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Skpp
Assembly Version	0.8.5.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	396
Main Method	System.Void Micro_ToolKit.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Micro_ToolKit.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name	Value
PDB Path	C:\Usehuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys…) are available with Essential.

Unlock with Essential

e6376836a52a4fd5f55dc9ef299d7c8d (859.14 KB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name	Value	Location
PDB Path	C:\Usehuhuhuhuhuhuhuhuhuhuhu	e6376836a52a4fd5f55dc9ef299d7c8d

Full artefact values (URLs, paths, registry keys…) are available with Essential.

Unlock with Essential

You must be signed in to post a comment.