Manalyze report for a065817031812d10d74c9702cf869d56

This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2055-Jan-07 11:55:37
Debug artifacts	C:\CruceroGratis\CruceroGratis\obj\Release\CruceroGratis.pdb
Comments
CompanyName
FileDescription	CruceroGratis
FileVersion	`1.0.0.0`
InternalName	CruceroGratis.exe
LegalCopyright	Copyright © 2021
LegalTrademarks
OriginalFilename	CruceroGratis.exe
ProductName	CruceroGratis
ProductVersion	`1.0.0.0`
Assembly Version	1.0.0.0

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C# v7.0 / Basic .NET`
Suspicious	VirusTotal score: 2/68 (Scanned on 2021-06-10 06:52:36)	`APEX: Malicious` `MaxSecure: Trojan.Malware.300983.susgen`

Hashes

MD5	`a065817031812d10d74c9702cf869d56`
SHA1	`cdfd4fb8ffbd262401db521dbaad60856fac816c`
SHA256	`b08883ce91f6c62ba6ecf360524d0f4d2e083c4e9aa0592fd5255bee57a05774`
SHA3	`5669c933509f5f5076ea937155ff659fba93096387a7713c552af2d222a95e9e`
SSDeep	`96:t2q2Qhbdl2bis+laOIR+SklsW+cSuZK8n8ZzNt:EO/FaTXW+cS2bm`
Imports Hash	`f34d5f2d4577ed6d9ceec516c1f5a744`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2055-Jan-07 11:55:37
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`48.0`
SizeOfCode	`0x1000`
SizeOfInitializedData	`0x800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00002F4E (Section: .text)`
BaseOfCode	`0x2000`
BaseOfData	`0x4000`
ImageBase	`0x400000`
SectionAlignment	`0x2000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x8000`
SizeOfHeaders	`0x200`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`99b98397450f619444ba2acdc882dfcd`
SHA1	`93368f74e27f7939674f5bbf0a1172c6d1d67759`
SHA256	`d6aff5eff172df581034e237461cbb3dc3bcf8f05c36d88d59ec44ee9a90ee54`
SHA3	`f635e9fb1d3006c9434027a6e9520bd1e209c999ecc2696809645f72b9e390d4`
VirtualSize	`0xf54`
VirtualAddress	`0x2000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.38933`

.rsrc

MD5	`8d5afd57f18cd1b950c67b26a606e8af`
SHA1	`88c35486154c7846a8a08b1eef16fe29de9b4c47`
SHA256	`e1fc14bc067432772ba2fb2d67994d91dc0a9bf45732dc1c53efcaa1bc04967d`
SHA3	`2a02dd5f70a53a52029cea68d3d1c3ce4c2d81eb9a33440a7a99383996da9960`
VirtualSize	`0x5cc`
VirtualAddress	`0x4000`
SizeOfRawData	`0x600`
PointerToRawData	`0x1200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.10814`

.reloc

MD5	`2a01ecdd1b10d488419f57dfc785480e`
SHA1	`840ae99f53f743aafb35bb8c95bc58893ef6e5bc`
SHA256	`dd427866ef8ddcf611db9928ae355e90268961184a6128351cd3bb7524e1c703`
SHA3	`de9665d27b40c8f03cf462766c2d34a67953abfcd1ae3f5642e2ab9d13f6f4b4`
VirtualSize	`0xc`
VirtualAddress	`0x6000`
SizeOfRawData	`0x200`
PointerToRawData	`0x1800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.0815394`

Imports

mscoree.dll	`_CorExeMain`

Delayed Imports

1

Type	`RT_VERSION`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x33c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.26373`
MD5	`bb95f2ea0baf05f8f72205bb9da71b08`
SHA1	`99216f8eaa6a64329f9d3791a089b8d3cef37a81`
SHA256	`ca44f646de0f77ee492935a8a41a7a4e93c1da404944d0b14a54fcafb6d03f0c`
SHA3	`872581e185a3167f38a8addead25c4407c73732a128e3b8f682b52f8b4cd5ea7`

1 (#2)

Type	`RT_MANIFEST`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x1ea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.00112`
MD5	`b7db84991f23a680df8e95af8946f9c9`
SHA1	`cac699787884fb993ced8d7dc47b7c522c7bc734`
SHA256	`539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a`
SHA3	`4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.0
ProductVersion	1.0.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
Comments
CompanyName
FileDescription	CruceroGratis
FileVersion (#2)	1.0.0.0
InternalName	CruceroGratis.exe
LegalCopyright	Copyright © 2021
LegalTrademarks
OriginalFilename	CruceroGratis.exe
ProductName	CruceroGratis
ProductVersion (#2)	1.0.0.0
Assembly Version	1.0.0.0

Resource LangID	UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2044-Jun-09 16:46:03
Version	`0.0`
SizeofData	`85`
AddressOfRawData	`0x2ea4`
PointerToRawData	`0x10a4`
Referenced File	C:\CruceroGratis\CruceroGratis\obj\Release\CruceroGratis.pdb

UNKNOWN

Characteristics	`0`
TimeDateStamp	1970-Jan-01 00:00:00
Version	`0.0`
SizeofData	`0`
AddressOfRawData	`0`
PointerToRawData	`0`

TLS Callbacks

Load Configuration

RICH Header

a065817031812d10d74c9702cf869d56

Summary

Plugin Output

Hashes

DOS Header

PE Header

Image Optional Header

.text

.rsrc

.reloc

Imports

Delayed Imports

1

1 (#2)

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors