Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.Net Resources
FxResources.System.Buffers.SR.resources
FxResources.System.Memory.SR.resources
FxResources.System.Numerics.Vectors.SR.resources
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
SthtbMexprVacu.exe
Full Name
SthtbMexprVacu.exe
EntryPoint
System.Void Program::Main(System.String[])
Scope Name
SthtbMexprVacu.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
SthtbMexprVacu
Assembly Version
4.14.798.7400
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
1479
Main Method
System.Void Program::Main(System.String[])
Main IL Instruction Count
22
Main IL
nop <null>
ldarg.0 <null>
ldlen <null>
brtrue.s IL_0011: ldarg.0
call System.AppDomain OsticalHionerte::TermstttySkptiserde()
call System.String OsticalHionerte::IguRetridede(System.AppDomain)
br.s IL_0018: call System.Void NhetureiSomequnnt::set_GegeGemypsorin(System.String)
ldarg.0 <null>
ldc.i4.0 <null>
ldelem System.String
call System.Void NhetureiSomequnnt::set_GegeGemypsorin(System.String)
nop <null>
br.s IL_002E: ldc.i4.1
nop <null>
ldc.i4.1 <null>
call System.TimeSpan SicepprFshie::BuparyGueterr(System.Int32)
call System.Void OsticalHionerte::GeuendenXidhaliere(System.TimeSpan)
nop <null>
nop <null>
ldc.i4.1 <null>
stloc.0 <null>
br.s IL_0020: nop
An error has occurred. This application may no longer respond until reloaded. Reload 🗙