c5460701f45d70e8b7255195ee08d15d87aa7847562ca27a6b5cd0c803418f5d
This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2095-Oct-13 19:27:34 |
| Debug artifacts |
DevExpress_Patch_Keygen_DFoX.pdb
|
| Comments | Patch and Keygen for all DevExpress Component |
| CompanyName | DeFconX |
| FileDescription | DevExpress_Patch_Keygen_DFoX |
| FileVersion | 2.5.0.0 |
| InternalName | DevExpress_Patch_Keygen_DFoX.exe |
| LegalCopyright | Copyright © 2022 |
| LegalTrademarks | DeltaFoX |
| OriginalFilename | DevExpress_Patch_Keygen_DFoX.exe |
| ProductName | DevExpress_Patch_Keygen_DFoX |
| ProductVersion | 2.5.0.0 |
| Assembly Version | 2.5.0.0 |
Plugin Output
| Info | Matching compiler(s): | Microsoft Visual C# v7.0 / Basic .NET |
| Info | Cryptographic algorithms detected in the binary: | Uses constants related to MD5 |
| Malicious | VirusTotal score: 36/67 (Scanned on 2022-06-25 17:28:57) |
Bkav:
W32.AIDetectNet.01
Lionic: Riskware.Win32.Generic.1!c FireEye: Gen:Heur.MSIL.HackTool.54 McAfee: RDN/Generic PUP.z Malwarebytes: Malware.AI.4004521453 Sangfor: Backdoor.Win32.Bladabindi.ml Alibaba: Trojan:Win32/MalwareX.4b6f2df0 Cybereason: malicious.793923 Cyren: W32/ABRisk.PPKA-8603 Elastic: malicious (high confidence) APEX: Malicious Paloalto: generic.ml BitDefender: Gen:Heur.MSIL.HackTool.54 MicroWorld-eScan: Gen:Heur.MSIL.HackTool.54 Avast: Win32:MalwareX-gen [Trj] Ad-Aware: Gen:Heur.MSIL.HackTool.54 Emsisoft: Gen:Heur.MSIL.HackTool.54 (B) TrendMicro: TROJ_GEN.R002C0PCP22 McAfee-GW-Edition: RDN/Generic PUP.z SentinelOne: Static AI - Suspicious PE GData: Gen:Heur.MSIL.HackTool.54 Webroot: W32.HackTool.Gen MAX: malware (ai score=81) Arcabit: Trojan.MSIL.HackTool.54 Microsoft: Trojan:Win32/Casur.A!cl AhnLab-V3: Trojan/Win.Hacktool.R268820 ALYac: Gen:Heur.MSIL.HackTool.54 Cylance: Unsafe TrendMicro-HouseCall: TROJ_GEN.R002C0PCP22 Rising: Trojan.Generic/MSIL@AI.90 (RDM.MSIL:ucR2AY28VrMElz6Gy1vIbw) MaxSecure: Trojan.Malware.11903493.susgen Fortinet: PossibleThreat BitDefenderTheta: Gen:NN.ZemsilF.34742.jm0@aeki7Io AVG: Win32:MalwareX-gen [Trj] Panda: Trj/GdSda.A CrowdStrike: win/grayware_confidence_60% (W) |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 3 |
| TimeDateStamp | 2095-Oct-13 19:27:34 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 48.0 |
| SizeOfCode | 0x21600 |
| SizeOfInitializedData | 0x6600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0002340E (Section: .text) |
| BaseOfCode | 0x2000 |
| BaseOfData | 0x24000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x2e000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0x2ed33 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 15 |
.text
.rsrc
.reloc
Imports
| mscoree.dll |
_CorExeMain
|
|---|
Delayed Imports
1
2
3
4
32512
1 (#2)
1 (#3)
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.5.0.0 |
| ProductVersion | 2.5.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | Patch and Keygen for all DevExpress Component |
| CompanyName | DeFconX |
| FileDescription | DevExpress_Patch_Keygen_DFoX |
| FileVersion (#2) | 2.5.0.0 |
| InternalName | DevExpress_Patch_Keygen_DFoX.exe |
| LegalCopyright | Copyright © 2022 |
| LegalTrademarks | DeltaFoX |
| OriginalFilename | DevExpress_Patch_Keygen_DFoX.exe |
| ProductName | DevExpress_Patch_Keygen_DFoX |
| ProductVersion (#2) | 2.5.0.0 |
| Assembly Version | 2.5.0.0 |
| Resource LangID | UNKNOWN |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| SizeofData | 57 |
| AddressOfRawData | 0x23384 |
| PointerToRawData | 0x21584 |
| Referenced File | DevExpress_Patch_Keygen_DFoX.pdb |
TLS Callbacks
Load Configuration
RICH Header
Errors
Leave a comment
No comments yet.