Manalyze report for 5260ca73902f3f6de6b9670ff5bc8f21

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2020-Nov-24 23:19:03
Comments
CompanyName
FileDescription
FileVersion	`1.0.0.0`
InternalName	Stub.exe
LegalCopyright
LegalTrademarks
OriginalFilename	Stub.exe
ProductName
ProductVersion	`1.0.0.0`
Assembly Version	1.0.0.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET` `.NET executable -> Microsoft`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`5260ca73902f3f6de6b9670ff5bc8f21`
SHA1	`00cd80c746ad4180440fc86dfb6d4d7fb387eec8`
SHA256	`cae5cf20e7adc94721a2bd09598fa39502c33848a50f58def1f589915535d0af`
SHA3	`5b8d3f1b24d6b1182907f075331ff825abdc09320f3204eb9712db52254ebb5e`
SSDeep	`3072:uVSvrgzBApl/m+uDrg350dq3oeXFYEdaDLQxT:bJh3WdgSEYDGT`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2020-Nov-24 23:19:03
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`8.0`
SizeOfCode	`0x1c800`
SizeOfInitializedData	`0x1d000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0001E752 (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x20000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x24000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`82f4dade7af5f2031d617a3365c683fd`
SHA1	`e85e427f9ba9fd9814f8e186e1afbb90a1c9f8f7`
SHA256	`8664c9b981ecd8ae3bc973f914ab010dcd6b542072b898428f3f67b134e795e4`
SHA3	`37542c8202e2c8f300e65e5385107b0129953dd0aafce28a59ae666c8072f4c4`
VirtualSize	`0x1c758`
VirtualAddress	`0x2000`
SizeOfRawData	`0x1c800`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.92794`

.reloc

MD5	`2c74fad01b1f18cc035585a52d89b744`
SHA1	`193f6a0ca1ae8b47942fe5a2dfafc959ecef5c86`
SHA256	`16570bf28f1210fd7bc308d90cac4ee372e9d752e89f6979163ff4131af138ff`
SHA3	`3792a47dfd2f357aa57c39d93a2eda1f4ddbc4094ffa7bc94399c0860dd63906`
VirtualSize	`0xc`
VirtualAddress	`0x20000`
SizeOfRawData	`0x200`
PointerToRawData	`0x1ca00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.10191`

.rsrc

MD5	`e2d7a3ccc9b84794eb0445b6f62f916a`
SHA1	`13f26aa37cf0186b5048b12dae5bdc11b9db3373`
SHA256	`6fd4164e80d1b43f793f5007fe8cbe401163eccc6c6300292657ea3c2476d1cd`
SHA3	`982e2c216c8559f0118027a60abb5e10fe035d052d3f31126fa457e282c2ee51`
VirtualSize	`0x800`
VirtualAddress	`0x22000`
SizeOfRawData	`0x800`
PointerToRawData	`0x1cc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.88719`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x2cc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.15228`
MD5	`16ec11406456535d1de48d96513667e8`
SHA1	`a60ebbbcae868abd27fc96e22701fae48940e53c`
SHA256	`23202710be8c5fc9672495b0b62bebcf29a087cc7e07236f6bb155efb6e499ad`
SHA3	`ec347df0db7e63c15cad3d1f9d2b5b4d497473b5992bd681fc145eb5057ecb7d`

1 (#2)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x493`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.22615`
MD5	`f3d7095de1636559aa56ad81b25bbff9`
SHA1	`6a55e1445c1c915664fba385828c5a0078fe460d`
SHA256	`4ff1c75a93b2280dabe75acecade82d644388c9f4412565d846aeb396bfdc133`
SHA3	`66d420e8633fd20ebea3048e5ed6afe3cf66dcb6d5041729ab7c7faa44b0a1b0`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.0
ProductVersion	1.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName
FileDescription
FileVersion (#2)	1.0.0.0
InternalName	Stub.exe
LegalCopyright
LegalTrademarks
OriginalFilename	Stub.exe
ProductName
ProductVersion (#2)	1.0.0.0
Assembly Version	1.0.0.0

Resource LangID	UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

5260ca73902f3f6de6b9670ff5bc8f21

Summary

Plugin Output

Hashes

DOS Header

PE Header

Image Optional Header

.text

.reloc

.rsrc

Imports

Delayed Imports

1

1 (#2)

Version Info

TLS Callbacks

Load Configuration

RICH Header

Errors