a8dbdd139004f53c60500db3286f7cae9919a4d8bd0e890cc34f8222ac3f4be2

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-May-30 07:33:56
Comments Thi lý thuyết sát hạch lái xe
CompanyName Tổng cục đường bộ với sự tài trợ của Công ty cổ phần kỹ thuật công nghệ Ecotek
FileDescription Thi lý thuyết sát hạch lái xe
FileVersion 4.2.5.7
InternalName TuluyenSathachLyThuyet.exe
LegalCopyright Copyright © 2020 DRVN
OriginalFilename TuluyenSathachLyThuyet.exe
ProductName Thi lý thuyết sát hạch lái xe
ProductVersion 4.2.5.7
Assembly Version 1.3.0.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
Info Interesting strings found in the binary: Contains domain names:
  • http://schemas.microsoft.com
  • http://schemas.microsoft.com/SQLServer/reporting/reportdesigner
  • http://schemas.microsoft.com/sqlserver/reporting/2008/01/reportdefinition
  • http://tempuri.org
  • http://www.w3.org
  • http://www.w3.org/2001/XMLSchema
  • inkscape.org
  • microsoft.com
  • schemas.microsoft.com
  • tempuri.org
  • www.inkscape.org
  • www.w3.org
Malicious VirusTotal score: 3/71 (Scanned on 2026-08-23 13:39:54) APEX: Malicious
Malwarebytes: Malware.AI.4078174617
MaxSecure: Trojan.Malware.300983.susgen

Hashes

MD5 7baf7b165eb2b835bfaa39cc9ed5bd1a 🔍
SHA1 3af819a38a70da8d72559fe1bbc4e36070692c6d 🔍
SHA256 a8dbdd139004f53c60500db3286f7cae9919a4d8bd0e890cc34f8222ac3f4be2 🔍
SHA3 25a69eaf808cd92ba211524e8adeea6722a72fd1e2c9680dd162b04669f60683 🔍
SSDeep 12288:Cd76e02hKWSP6PEqc5/iREnF4IqanVFeBjAFikwQS6M1nMBC84+XdA/:Qv46S/iREnF4+ylAIkhuss+XW/ 🔍
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2025-May-30 07:33:56
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 11.0
SizeOfCode 0x236e00
SizeOfInitializedData 0x20800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00238CAE (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x23a000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x25e000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c440375bfe3f3f74ff8c182259387ecd 🔍
SHA1 8f66768673fa7592516dc697d575716307518e99 🔍
SHA256 b7f6e317360f32024df43e31b8073210320d59093a457a3525a3ad4f5a054b66 🔍
SHA3 ecaf05a247b1d1fb4f8b398f003673341d170a7ac329510bfee1c0f29ce19e05 🔍
VirtualSize 0x236cb4
VirtualAddress 0x2000
SizeOfRawData 0x236e00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.08499

.rsrc

MD5 9a2f991d5c1d9b2ab9f70aa83cde3f87 🔍
SHA1 fc408021083d089794d172569e59dcccec431a2f 🔍
SHA256 2f7d814afd51ff58172d1317b64b85e2f9765d381ea5c0168bb5f7979746cb05 🔍
SHA3 2dc7ff6245d8e4b8156a83ef78161eb1e03394a6e6b2bf83dde5c142e417ec4b 🔍
VirtualSize 0x20538
VirtualAddress 0x23a000
SizeOfRawData 0x20600
PointerToRawData 0x237000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.0208

.reloc

MD5 bf7ddf62c9d746ef1e1ee5cfbad4bc79 🔍
SHA1 714ab1c9f1c92eda6cf149a3e84bee2db661e4e1 🔍
SHA256 57912552b64e1558aa4c065d64dc93e79a72916cdf68b02eac77c03fc9ec3572 🔍
SHA3 930b6083e361cf7988438c2ced749d2e877c37421303afd5347cc563ff01b46b 🔍
VirtualSize 0xc
VirtualAddress 0x25c000
SizeOfRawData 0x200
PointerToRawData 0x257600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x7766
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98413
Detected Filetype PNG graphic file
MD5 01a22bec8bee63421c8cc82840b0c5d9 🔍
SHA1 71ab1cc391a18e57ce56c256c818a3d7792fed91 🔍
SHA256 96361298a535d1fc9dbdf910f2610de24e6c2943d04bc06e2d167114d1a6c3a4 🔍
SHA3 fa9c54fc75a530a0d168d9c9da4f9358e195246681454746f9ea458c410d6712 🔍

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.38378
MD5 4fd9aaf9f5a353011d768f9ddf14e840 🔍
SHA1 5a454490e150120ec11ae99fbccfce4b1bd3ebb0 🔍
SHA256 2e60793b496a8045fb0aad63f4067a55ad28f44cdcc67d5947d0558dc486c165 🔍
SHA3 6ad9bcf873f13e5bc74ba8b9e6966220ef696b560476cf1bdd29f62ff7c282a7 🔍

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.66476
MD5 0781bdd3eafc0003f0f5d4eaa4266d59 🔍
SHA1 dff6186de7c313d1917fc72e892b2ccbd9f862cc 🔍
SHA256 054ba5ddc44a6e08ec8e65b374a05d0833b0819cf976de7aa7e6991a3e47a55c 🔍
SHA3 eff96bd0f362a71768b723bfa1d2b6e3dc1ab77a4fe5b4416dc8c8cde6113296 🔍

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.72823
MD5 3a329e73445988865e04f4c7f2f741c8 🔍
SHA1 afb609bdea8bd6fbbc46549392adeb0df40f7bc5 🔍
SHA256 3e9577f04d161d16ccc71deeb4bea7af74ad1e497cbdb3ab5798ad109a190040 🔍
SHA3 26b3b2aab0b0940b3aa2ff65513e3150fb91ff92cc1a58cc0d8483595368e4fe 🔍

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.10031
MD5 71e923c8406db894756199eb5354f034 🔍
SHA1 9b71ec4a147b14f8455e59160d338af84f404e2d 🔍
SHA256 63e534f38564c6d373b2b9da9d21c035c4df2632b84896a87ddfb5ce25ea37b1 🔍
SHA3 34dcd712a2cea3a1f98b33f9a3687d516a044d604d0e1c072d658593288e9eb4 🔍

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.46472
MD5 266bf8e395791f279ce4e8a2577fd92d 🔍
SHA1 f80dfabc0e8652358fcdafd5d9a2cd662fe89bb9 🔍
SHA256 8e6f97c1dc70d9dc6fdcd6ef681d9f5ce42e45594e03542cfb75c9f854dba948 🔍
SHA3 e010d49315607307b78b85346537f1e769034a238c89041bd7ab1aa1c53c1a6f 🔍

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.8494
Detected Filetype Icon file
MD5 1589ae406e86880d561c4cff2b18c750 🔍
SHA1 3d7a2f6cdaa07e7e3ad6271c7a5670a429a32f93 🔍
SHA256 0ba805836af1795cd11f4e7f5ec3bfd20d219b0175dc08175a8900fef437ac02 🔍
SHA3 b667fcc55bf4e8f52de407bf7c9f35d8cd41cf80c089386e84ec31332e2f1b1a 🔍

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x454
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.66459
MD5 ab088f6fe473307495144621d51dbc19 🔍
SHA1 e0c9b9d1a51dd04d9b3864e7f5e81919711a9962 🔍
SHA256 aac4b45194334a403823b2458194581af89fa3b432d3b38e2c70fd9589910086 🔍
SHA3 41ae00800ad9c2b1fe0c0a99472ac34d54f08c7689b0935db090114d030a6abc 🔍

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ea
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.00112
MD5 a19a2658ba69030c6ac9d11fd7d7e3c1 🔍
SHA1 879dcf690e5bf1941b27cf13c8bcf72f8356c650 🔍
SHA256 c0085eb467d2fc9c9f395047e057183b3cd1503a4087d0db565161c13527a76f 🔍
SHA3 93cbaf236d2d3870c1052716416ddf1c34f21532e56dd70144e9a01efcd0ce34 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 4.2.5.7
ProductVersion 4.2.5.7
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments Thi lý thuyết sát hạch lái xe
CompanyName Tổng cục đường bộ với sự tài trợ của Công ty cổ phần kỹ thuật công nghệ Ecotek
FileDescription Thi lý thuyết sát hạch lái xe
FileVersion (#2) 4.2.5.7
InternalName TuluyenSathachLyThuyet.exe
LegalCopyright Copyright © 2020 DRVN
OriginalFilename TuluyenSathachLyThuyet.exe
ProductName Thi lý thuyết sát hạch lái xe
ProductVersion (#2) 4.2.5.7
Assembly Version 1.3.0.0
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.