Deep Malware Analysis of e96f0fe2debe07f730258a3a553021f1 | md5: e96f0fe2debe07f730258a3a553021f1 | Executable | PE (Portable Executable) | Win 32 Exe | x86 | .Net | SOS: 0.13

PE Executable

MD5: e96f0fe2debe07f730258a3a553021f1

Size: 802.82 KB

application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	e96f0fe2debe07f730258a3a553021f1
Sha1	4704b7f4b581cb4f79e20774ab4082143af4e654
Sha256	140e2bbb3ae25648d8993155ca60f6dac9369dc41ad2eb4fa87cf6104ab938e0
Sha384	12c3c462e3d7f31ab88d49e41f4e48c1036402fff2d002cd6b7cb64b05a760af6cafa1bd35d23d14548f20933adc673b
Sha512	b95a7e208f876c4527e47be6475e03042a8bf3a8ff923a3850a06a3b76fccae36b7556b5c38e6766efd9c3bfe618e6783f876129247526becb2ec3e3af956712
SSDeep	24576:qy0UnyrfWgXjRuq5bhdsiLVt/BMgLNj5R:d0OAXXNjPsiLv/CON
TLSH	3005DFAD3254B5EFC897C5B1CA64DD75EA216CAA5317C20780D708AFB94CA87DF240F2

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name	Value
Module Name	bIww.exe
Full Name	bIww.exe
EntryPoint	System.Void ProjectWindowsForms.Program::Main()
Scope Name	bIww.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	bIww
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	527
Main Method	System.Void ProjectWindowsForms.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void ProjectWindowsForms.Program::⁯⁯⁬‍⁪⁫⁫‍‭‬⁯⁪⁭⁪‎⁫⁪‪⁯‬⁭‪‏‏⁮‫‭‍⁫‍‬⁭‍‏⁪‫‍⁪‭‮() ldc.i4.0 <null> call System.Void ProjectWindowsForms.Program::‭‏‍⁪‫‫‫⁯‮‍‪⁮‌⁯⁮⁪⁮⁯‫⁫‮⁪‮‮‎⁪⁪⁫‮⁮‮‏‭⁮‭‬‎‮(System.Boolean) newobj System.Void ProjectWindowsForms.SmartForm13::.ctor() call System.Void ProjectWindowsForms.Program::⁮‪⁭⁫‪‭⁬‎‌‬‍‌⁬‌⁮‬‭⁬‭⁯‮⁭‪‭⁮⁯‏⁫⁭‎‏⁫‬‌⁮‏‬‪‍‮(System.Windows.Forms.Form) ret <null>
Module Name	bIww.exe
Full Name	bIww.exe
EntryPoint	System.Void ProjectWindowsForms.Program::Main()
Scope Name	bIww.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	bIww
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	527
Main Method	System.Void ProjectWindowsForms.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void ProjectWindowsForms.Program::⁯⁯⁬‍⁪⁫⁫‍‭‬⁯⁪⁭⁪‎⁫⁪‪⁯‬⁭‪‏‏⁮‫‭‍⁫‍‬⁭‍‏⁪‫‍⁪‭‮() ldc.i4.0 <null> call System.Void ProjectWindowsForms.Program::‭‏‍⁪‫‫‫⁯‮‍‪⁮‌⁯⁮⁪⁮⁯‫⁫‮⁪‮‮‎⁪⁪⁫‮⁮‮‏‭⁮‭‬‎‮(System.Boolean) newobj System.Void ProjectWindowsForms.SmartForm13::.ctor() call System.Void ProjectWindowsForms.Program::⁮‪⁭⁫‪‭⁬‎‌‬‍‌⁬‌⁮‬‭⁬‭⁯‮⁭‪‭⁮⁯‏⁫⁭‎‏⁫‬‌⁮‏‬‪‍‮(System.Windows.Forms.Form) ret <null>

Artefacts

Name	Value
Embedded Resources	2huhuhuhu
Suspicious Type Names (1-2 chars)	0huhuhuhu

Full artefact values (URLs, paths, registry keys…) are available with Essential.

Unlock with Essential

e96f0fe2debe07f730258a3a553021f1 (802.82 KB)