Static | ZeroBOX

PE Compile Time

2089-09-08 17:25:46

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0003b084 0x0003b200 7.87478253099
.rsrc 0x0003e000 0x00004684 0x00004800 3.28339364253
.reloc 0x00044000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0003e130 0x00004028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00042158 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0004216c 0x0000032c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00042498 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
`^s:
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
RI>,d-O*
|=RwX
sdLuVdX
L^?nIX
N/H9Vt
93$%s`
sdLuVdX
\XHL]O
N/H9V'
L^?nIX
sdLuVdX
XbP8ah
IDEj^<
F>y4k{
S~'c2=/
kX+$_T
CCDJbr=q/
VZ]>OM
BJE)^j
vS1.io
I9::Gg
z~L{Jx
Xf.qYf}
aE*d z
r#a?/S
8-?qb_n
("jWN&
p4NQO=
njd\rj
,+cLi<
Z2DUG
g-=o~G-
;*hn!F
lZ,7k*
h'*Q:j/?
GLvzwS
<duc]D
P-Jg=JW
~N&?#$
H)7s^ob#nN
h>b#h_h
x0<710
bu#|H/
+A):[\
FWbTnW[
]:Ox}?
K:K~D0
;'HPuA/#
_pd7zE
D7e!1YV5\a
i`#^[YM7
o7ZOLDd
^#<_I-f
['c[7R
$R4%a8
}LZ]On
MG313M
M)z_et
[Jmf6ht
z/esn.z
=aF&.gtK
<j)sF}
lNV:p"
^dfV8.r
U9f282)
DQDKvWR7
9aG0-Z
J?c|oA
u>*qVb%AU
fkb+B2
tDc>[1"
Swl-?Qw
Vc}^xF
#Fe'uGJ
@}5">r[
gv/9(S7
y9>OLQ
k'BVK<
D0z#/&
23-}C2
-=Wo\|`
)pSy^
UKlN1[
]L 7B1>Y
c@.IaW
6pAn{ZOmA
[oHFvQA
F0Bj%z
jb#[r$
vD4(?h
xOL`[7
)-sRGW%@
5]VT`nq
b?<%lM
9#Lm"a
6`u!pQ
cLx;6]W
](IjO1I
W;G<W<~Ck`>
%10Q*k
Xu%p&q4
}*L[t7?
Ei&)KH
wQ=P|9
%)ilOAA
3$NI_k
{^ahI-
K(Tu_H
G,M3a{
{p:V"%/
X:QixF[
Shw;,"
tOf#~BbNHm
"U^b?c
yv_Z7q2j
7<dw*+
'pCz*1
B!I8%&
(B#c51
OH'PWS
3O:_3M
Aft?C4\
g]eHZ
Em?]=k
MJC\)B
R\-%e4Y
K:#1`C\
aJ<!FI
*:b~!XN
i_27<,!F
W*VZy+!
;Z*)6H'S0
<H@<V=
rL&c}Ss
K%fz@$
V8I&%79N|
?PAU,0 q[^)
F."CrrS
McdPAD
04wK@P
MzKCvH
~J8o'
P12kf6
H`M9rD
M7<.$T
&K]%N]L/
2|2= v
[|W#Drt
d?/ ryQ
>3Vr{/
}Z Y}w
,T^7Ndh!
gt(6{%z>l
v`JTjJ
kg,:e7%kK
U/ZSg[+
_J^AGY{
F RU_bf=
?dkt:oRd
ROSB%lx
>cJ'O;
5?e|=-
4)7=H&+1
a<AgQ<L_g
oZ%35G*
]EGjDF
I:8#)Q
6n-,QMy=
G]9aR;]
h*"l!T
bbuPCPE
=eT*7X
Y/HNEc
zc7 Fdq7=/
zHwOpx
0ZjKz$
Mf.)h7
liP+ B[
W*KwQZ
M2a}}S
6{92lv
d(6ov6*c
weG*SO
?qa>)(Q
j.WE?'
|M,J(q
j)"#UT
"}'AU6
Wk~g(g
E5`bm,
<jJ@4`
XTp3GNho
P{Rn%3
)>|!!^
a27nA}k
e\30:S
<R3wkb
%G~VPM
V7$M(*%
iy;gWp@
OGFV!,
f@v\A8
{@K7{2
`urJ11
GbZb4P_
B:Jc+$
Z}aY_.
HhBf%jG
t-)b}Q
gVLV9J:^
0)i{C'
Qn*I-\a
]:ji64
'|rQQ
X6xeI=
^{j3e"45~
EwCx?T
PZ?m5mM
s.m/o/
|(URv)
M7*)&
co\;r~y
+A'V{Em
wdhl9)
#o>H?>
8XiR4H
`#/z=^!
n`BX,4n
/#fofI"
sT7qI7
5fXbl%
|h?Gqm
O P$(5
2u&kI%
V2YuwL
Y[UI#w
)g`w%D
o[%`hy
@gK[8W
05L8?O
/sn[Z-v9
]sAO@8}
#`lHZd'
z._mJA
%S=J7[2H
X0wA`E
rXHg+m~
xs%Nj>
!EK?=8
z*.1@ii=
rD3}T?
LQ(2)0N0
SUN#^Qwqz
|]31%o
.'3/77
akv2X
VRu`?@
ypZ0XA
1qX[}gg1
2-<*max]
RZF+MZ
13n<A9
Yqg8q(xZ
vvuj=+
k.Pz,,6KF>
%G:eZ",su
}=:@5F;
w,mGhNE~
ob%Y2?I
L&&Sw(W
KUo\[Md!t
}F?y]f
Iw}-qe
\l7(WJ
O;\sQgq
m<CJMY:$
`Z0b1|B
I;PcIsiS
\uP!O{
$Le6my
E,$_YZ
E?_yJ3
.##./Cn^
;_bxb%
;u4{xalXF
Gc}s!'t
YrHDFJ
8GZ[G`
1ZK!19
*<X,CQ
uT~|8*
Q?A#IC
'o:rij
Ky#u#O
tZX.kK
]n$T;6
yLISL6
'n;T\C
Xm.(9
Z=f"$U,
/&#fv:
ZkGJb|I
?N7/D1
'Bvy&]5
{yY!M@N
*Pkn?MUbYc
_'JH#z`6
*Pkn?MUbYc
&qKOBIh
oY0GR`
]G-&-
$~>R[&
iAy,?R
R`"P%wo
XIlWmy
zB5/}s
FcR~GLxIM
HJh+r
fj7Th?C
zZ/N9^
lC>VYS:
Az%I+w
;vyAAFc
J*%[(G
BzNr8
!l+^kW
mY&;Rt
]Gst`Lq"P
'-RaXi
nMfAja{
eQLg9u
RMZyM8
r [b=]p
;~aFtsV
*<rc.i81dR
\k|PNV
.$^x+u
M;t^{
c^HApn*H
JB]EZ_
'u4Xc~
#tT6Qp
>!<F[
\tEwy-
CBs?Gj"
~AUMQ
DYFM&Z
EJ}ix
K'jqT3
EJ}ix
v4.0.30319
#Strings
<SignUp>b__8_0
<TrySignUp>b__9_0
<TryEnter>b__9_0
HMACSHA1
label1
toolStripMenuItem1
button1
menuStrip1
dataGridView1
checkBox1
richTextBox1
textBox1
label2
button2
richTextBox2
textBox2
label3
button3
textBox3
label4
button4
get_UTF8
<Module>
System.IO
System.Data
mscorlib
get_DataBasePracticalJob
Microsoft.VisualBasic
add_Load
MainForm_Load
Registration_Load
add_CheckedChanged
get_Checked
add_FormClosed
Synchronized
UserValid
DbCommand
SQLiteCommand
RegistrationBoard
AutorizationBoard
DbDataRecord
get_Password
set_Password
HidePassword
password
defaultInstance
GetHashCode
set_Mode
set_AutoScaleMode
set_ColumnHeadersHeightSizeMode
DataGridViewColumnHeadersHeightSizeMode
CipherMode
set_AutoSizeColumnsMode
DataGridViewAutoSizeColumnsMode
get_BigEndianUnicode
get_Message
message
AddRange
strange
IDisposable
set_ColumnHeadersVisible
set_RowHeadersVisible
RuntimeTypeHandle
GetTypeFromHandle
OpenFile
opening_file
set_BorderStyle
set_FormBorderStyle
set_Name
get_FileName
get_Username
set_Username
username
ReadLine
WriteLine
DbType
GetType
System.Core
get_Culture
set_Culture
resourceCulture
ButtonBase
ApplicationSettingsBase
TextBoxBase
Database
database
Dispose
TryParse
StrReverse
Create
EditorBrowsableState
System.Data.SQLite
get_White
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
DefaultMemberAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
get_Value
set_Value
get_FormattedValue
HillCipher.exe
get_Size
set_Size
DecreaseSize
IncreaseSize
set_ImageScalingSize
set_AutoSize
set_ClientSize
ISupportInitialize
current_size
get_Conf
set_Conf
Padding
Encoding
System.Runtime.Versioning
ToBase64String
ToString
disposing
add_CellValidating
System.Drawing
SaveFileDialog
OpenFileDialog
CommonDialog
ShowDialog
ComputeHash
getHash
dbPath
get_StartupPath
set_RowHeadersWidth
get_Length
button1_Click
button2_Click
button3_Click
button4_Click
add_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
TransformFinalBlock
set_Cancel
System.ComponentModel
DataGridViewCell
CipherHill
ContainerControl
FileStream
get_Item
set_Item
ToolStripDropDownItem
ToolStripItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
System
SymmetricAlgorithm
HashAlgorithm
confirm
MainForm
ICryptoTransform
resourceMan
Boolean
set_TextAlign
set_Margin
Application
set_Location
Registration
System.Configuration
System.Globalization
Autorization
op_Subtraction
System.Reflection
ControlCollection
ToolStripItemCollection
DataGridViewColumnCollection
SQLiteParameterCollection
DataGridViewRowCollection
DbConnection
SQLiteConnection
op_Addition
Exception
System.Data.Common
Button
CultureInfo
TrySignUp
ToolStrip
set_MainMenuStrip
set_PasswordChar
set_UseSystemPasswordChar
InvokeMember
DbDataReader
SQLiteDataReader
ExecuteReader
StreamReader
TextReader
SHA256CryptoServiceProvider
AesCryptoServiceProvider
StringBuilder
sender
Binder
get_ResourceManager
TaskManager
HillCipher
FormClosedEventHandler
DataGridViewCellValidatingEventHandler
DataGridViewCellEventHandler
System.CodeDom.Compiler
IContainer
CreateUser
CorrectUser
DbParameter
SQLiteParameter
StreamWriter
TextWriter
set_Filter
TryEnter
ToLower
set_BackColor
set_UseVisualStyleBackColor
IEnumerator
GetEnumerator
Cofactor
.cctor
Vector
CreateDecryptor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
HillCipher.MainForm.resources
HillCipher.Registration.resources
HillCipher.Autorization.resources
DebuggingModes
HillCipher.Properties
GetExportedTypes
GetBytes
BindingFlags
Strings
Settings
FormClosedEventArgs
DataGridViewCellValidatingEventArgs
CancelEventArgs
DataGridViewCellEventArgs
get_Controls
get_Items
get_DropDownItems
System.Windows.Forms
get_Columns
set_AutoScaleDimensions
System.Collections
get_Chars
set_Chars
get_Parameters
components
Exists
op_Modulus
get_Rows
set_AllowUserToAddRows
set_AllowUserToDeleteRows
Concat
Format
GetObject
current_det
add_CellEndEdit
EndInit
BeginInit
get_Default
DialogResult
ContentAlignment
InitializeComponent
get_Current
get_ColumnCount
set_ColumnCount
get_RowCount
set_RowCount
AESDecrypt
hill_decrypt
Encrypt
hill_encrypt
Convert
UsernameExist
SuspendLayout
ResumeLayout
PerformLayout
output
MoveNext
System.Text
get_Text
set_Text
DataGridView
set_TabIndex
get_ColumnIndex
get_RowIndex
TransposeCofactorMatrix
current_matrix
MessageBox
set_MaximizeBox
CheckBox
RichTextBox
confirm_password_box
name_box
set_Key
System.Security.Cryptography
get_Assembly
set_ReadOnly
op_Multiply
ExecuteNonQuery
set_InitialDirectory
op_Equality
op_Inequality
IsNullOrEmpty
HillCipher.Properties.Resources.resources
WrapNonExceptionThrows
HillCipher
Copyright
2023
$8bd7898d-707b-4322-baec-8dafbbdba33c
1.0.0.0
.NETFramework,Version=v4.8
FrameworkDisplayName
.NET Framework 4.8
3System.Resources.Tools.StronglyTypedResourceBuilder
17.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
17.5.0.0
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
DataBasePracticalJob
users.db
Data Source={0};
DROP TABLE IF EXISTS users; CREATE TABLE usersInfo(id INTEGER PRIMARY KEY AUTOINCREMENT, username TEXT,password TEXT);
SELECT * FROM 'usersInfo';
username
password
Data Source={0};
INSERT INTO 'usersInfo' ('username', 'password') VALUES(@username, @password);
@username
@password
EhsMCpLEkrOfkDrpUhiwfxv
new key
textBox1
label1
label2
textBox2
label3
checkBox1
button1
button2
textBox3
label4
Registration
Autorization
menuStrip1
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
toolStripMenuItem1
ToolStripMenuItem
dataGridView1
richTextBox1
The version of the Euclidean algorithm described above (and by Euclid) can take many subtraction steps to find the GCD when one of the given numbers is much bigger than the others.
richTextBox2
button3
button4
MainForm
rotavitcA.metsyS
ecnatsnIetaerC
(*.dat)|*.dat
HillCipher.Properties.Resources
DataBasePracticalJob
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
HillCipher
FileVersion
1.0.0.0
InternalName
HillCipher.exe
LegalCopyright
Copyright
2023
LegalTrademarks
OriginalFilename
HillCipher.exe
ProductName
HillCipher
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Stealer.12!c
Elastic malicious (high confidence)
DrWeb Trojan.PackedNET.2065
MicroWorld-eScan IL:Trojan.MSILZilla.28153
FireEye Generic.mg.59ed8fb12afa93b7
CAT-QuickHeal Clean
McAfee Artemis!59ED8FB12AFA
Cylance unsafe
VIPRE Gen:Variant.Zusy.470763
Sangfor Infostealer.Msil.Kryptik.Vdfc
K7AntiVirus Clean
BitDefender IL:Trojan.MSILZilla.28153
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZemsilF.36250.pm0@aaCQnLd
VirIT Clean
Cyren W32/MSIL_Agent.FMB.gen!Eldorado
Symantec Trojan Horse
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AIYL
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Stealer.gen
Alibaba TrojanPSW:MSIL/Stealer.59f534e8
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.98 (RDM.MSIL2:RagsZeCn+vEYxwlD+qDbkw)
Emsisoft IL:Trojan.MSILZilla.28153 (B)
F-Secure Trojan.TR/AD.LokiBot.rwran
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.dc
Trapmine Clean
CMC Clean
Sophos Mal/Generic-S
Ikarus Trojan.MSIL.Crypt
GData IL:Trojan.MSILZilla.28153
Jiangmin Clean
Webroot W32.Trojan.Gen
Google Detected
Avira TR/AD.LokiBot.rwran
MAX malware (ai score=84)
Antiy-AVL Trojan/MSIL.Kryptik
Gridinsoft Ransom.Win32.LokiBot.bot
Xcitium Clean
Arcabit IL:Trojan.MSILZilla.D6DF9
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Stealer.gen
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 99)
AhnLab-V3 Trojan/Win.Generic.C5435514
Acronis Clean
ALYac Gen:Variant.Lazy.347899
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Malwarebytes Malware.AI.1867732528
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CEV23
Tencent Msil.Trojan-QQPass.QQRob.Vwhl
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Kryptik.AIVP!tr
AVG Win32:TrojanX-gen [Trj]
Cybereason malicious.7a52df
Avast Win32:TrojanX-gen [Trj]
No IRMA results available.