Manalyze report for 405dafc78770a2405aa6c4f58bd7ffb8d9965572035ef3468b5ff1f8d9f636a3

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2098-Jul-23 09:40:03
Debug artifacts	C:\all\work\com_terminal\com_terminal\obj\Release\com_terminal.pdb
Comments
CompanyName
FileDescription	com_terminal
FileVersion	`1.0.0.0`
InternalName	com_terminal.exe
LegalCopyright	Copyright Â© 2020
LegalTrademarks
OriginalFilename	com_terminal.exe
ProductName	com_terminal
ProductVersion	`1.0.0.0`
Assembly Version	1.0.0.0

Plugin Output

Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`61882810b0f8ab61b5c5d93c9265fd20`
SHA1	`3e49c004f4e93a13ff7bda2983833c8ae25685eb`
SHA256	`405dafc78770a2405aa6c4f58bd7ffb8d9965572035ef3468b5ff1f8d9f636a3`
SHA3	`89fafd9b0dba5ff6f5125e7b3462d7b0923170430c731b8f2dd5e7114183c1d3`
SSDeep	`768:j0DWADT98w3v9P+b/dkkIBWB1LOGTDUN+6QM3QGQODBVjCi:QDRDZ8ovZ+blkkIoB1LOE2QKQIBP`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2098-Jul-23 09:40:03
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0xca00`
SizeOfInitializedData	`0x800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000E6CE (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x10000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x14000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`da1aab5d9f701a7e2fcbdd64fc9c1bfa`
SHA1	`3858d38d5dafd2ae9923802229f2195c3c8bd156`
SHA256	`e40a8a51b567d0b7768c504472f8acb5a53fccb8861002c91ab0606a649b74ca`
SHA3	`b85801a11a7b722432daea99d872f2639e02e9a4b29bff37aafa10e8b72c0275`
VirtualSize	`0xc8f4`
VirtualAddress	`0x2000`
SizeOfRawData	`0xca00`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`7.1676`

.rsrc

MD5	`c46b89eaad79e2e60bff9342c41a2896`
SHA1	`b3e7d82c373d2abc59f28483109eed4125f87257`
SHA256	`58f144b72cf7e5dc669f8c6888864de77dd20a5090f694bd85d7244cf078d00f`
SHA3	`94252391ca538395e958955dd2004ba0ea4f27f62d9c20668ed247a3ddb067e6`
VirtualSize	`0x5cc`
VirtualAddress	`0x10000`
SizeOfRawData	`0x600`
PointerToRawData	`0xcc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.08799`

.reloc

MD5	`f6b42dfb608f0c98c08d74e06731af69`
SHA1	`19d8afe46a21e2e55c859564eed03f02d873fddc`
SHA256	`466593217c062ac1424b6fa9726b42cd658c221f8d22344ce7e77c2a13c7f070`
SHA3	`120ca6104802d763a8f61735a36882b7b599c75edb154f19d6e819a25919cb24`
VirtualSize	`0xc`
VirtualAddress	`0x12000`
SizeOfRawData	`0x200`
PointerToRawData	`0xd200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0815394`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x33c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.23416`
MD5	`1fa5aff0eb4984825a5ca896b92baea9`
SHA1	`fccff736dd604df60ff24fc9513dcf3cd1cb22a2`
SHA256	`fe0d38fe0893994e75471f008dc64027a36d6fae443e26c9ce030304a93d5687`
SHA3	`2d829ad8d62cc4cf4fff69a092326f71827e7d9ab0d55a9a461550b31732c981`

1 (#2)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.0
ProductVersion	1.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName
FileDescription	com_terminal
FileVersion (#2)	1.0.0.0
InternalName	com_terminal.exe
LegalCopyright	Copyright Â© 2020
LegalTrademarks
OriginalFilename	com_terminal.exe
ProductName	com_terminal
ProductVersion (#2)	1.0.0.0
Assembly Version	1.0.0.0

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2069-Aug-12 12:42:32
Version	`0.0`
SizeofData	`91`
AddressOfRawData	`0xe620`
PointerToRawData	`0xc820`
Referenced File	C:\all\work\com_terminal\com_terminal\obj\Release\com_terminal.pdb

UNKNOWN

Characteristics	`0`
TimeDateStamp	1970-Jan-01 00:00:00
Version	`0.0`
SizeofData	`0`
AddressOfRawData	`0`
PointerToRawData	`0`

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.