86871eb716c12569ba777894274cfd28
This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date | 2025-Oct-21 04:49:46 |
| Debug artifacts |
C:\Users\Soumalya\Downloads\ABDM\Compressed\CrackedLunarAccountTool-release\src\CrackedLunarAccountTool\obj\Release\CrackedLunarAccountTool.pdb
|
| Comments | |
| CompanyName | Whatify |
| FileDescription | CrackedLunarAccountTool |
| FileVersion | 1.0.0.0 |
| InternalName | CrackedLunarAccountTool.exe |
| LegalCopyright | Copyright © Whatify 2024 |
| LegalTrademarks | Whatify |
| OriginalFilename | CrackedLunarAccountTool.exe |
| ProductName | CrackedLunarAccountTool |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Malicious | VirusTotal score: 23/72 (Scanned on 2025-12-20 14:47:35) |
ALYac:
IL:Trojan.MSILZilla.211878
APEX: Malicious Arcabit: IL:Trojan.MSILZilla.D33BA6 BitDefender: IL:Trojan.MSILZilla.211878 CTX: exe.trojan.msilzilla DeepInstinct: MALICIOUS Emsisoft: IL:Trojan.MSILZilla.211878 (B) GData: IL:Trojan.MSILZilla.211878 K7AntiVirus: Trojan ( 700000201 ) K7GW: Trojan ( 700000201 ) Lionic: Trojan.Win32.Generic.4!c Malwarebytes: Generic.Malware/Suspicious MaxSecure: Trojan.Malware.241401018.susgen McAfeeD: ti!046C0E3B3E01 MicroWorld-eScan: IL:Trojan.MSILZilla.211878 Microsoft: Trojan:Win32/Yomal!rfn Paloalto: generic.ml Sangfor: Trojan.Win32.Agent.V8on Sophos: Mal/Generic-S Symantec: Trojan.Gen.MBT TrellixENS: Artemis!86871EB716C1 TrendMicro-HouseCall: TROJ_GEN.R002H09LD25 VIPRE: IL:Trojan.MSILZilla.211878 |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 3 |
| TimeDateStamp | 2025-Oct-21 04:49:46 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 48.0 |
| SizeOfCode | 0xcfc00 |
| SizeOfInitializedData | 0x28c00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000D1ADE (Section: .text) |
| BaseOfCode | 0x2000 |
| BaseOfData | 0 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xfe000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rsrc
.reloc
Imports
| mscoree.dll |
_CorExeMain
|
|---|
Delayed Imports
1
2
3
4
5
6
7
8
32512
1 (#2)
1 (#3)
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.0 |
| ProductVersion | 1.0.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | |
| CompanyName | Whatify |
| FileDescription | CrackedLunarAccountTool |
| FileVersion (#2) | 1.0.0.0 |
| InternalName | CrackedLunarAccountTool.exe |
| LegalCopyright | Copyright © Whatify 2024 |
| LegalTrademarks | Whatify |
| OriginalFilename | CrackedLunarAccountTool.exe |
| ProductName | CrackedLunarAccountTool |
| ProductVersion (#2) | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
| Resource LangID | UNKNOWN |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Oct-21 04:49:46 |
| Version | 0.0 |
| SizeofData | 168 |
| AddressOfRawData | 0xd19e0 |
| PointerToRawData | 0xcfbe0 |
| Referenced File | C:\Users\Soumalya\Downloads\ABDM\Compressed\CrackedLunarAccountTool-release\src\CrackedLunarAccountTool\obj\Release\CrackedLunarAccountTool.pdb |