Suspicious
Suspect

04d83a891a63e240914f20221648bca9

PE Executable
|
MD5: 04d83a891a63e240914f20221648bca9
|
Size: 146.94 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
04d83a891a63e240914f20221648bca9
Sha1
b3641e4659fd3e23d997a0093c4d24fc5cc73c81
Sha256
8886b0e1b3912483d2cf4da4b3b47ec4dca609388e7e4bd8b055cdbbc43691e6
Sha384
83992324ed9d6c89211186e35e5fe75540e4389afab6ae5df72a81febea4b29b2b7244da7249c192fbe30bbe088fc310
Sha512
b4799b3247490678513e0239b7f99177c138d0af4a82cdaebbec42478843647b94d2998b4be112012561b03fce955891babeac3c3d407167a3c6607d012c866d
SSDeep
3072:aLR0kbdxhIOOXBz65/M6If+3Js+3JFkKeTnL:G9bzhSxBt25
TLSH
02E33942F751C2A1E4B94A33D0A7E5F10F32BD5AEF0A691F3580BB473973141AD13A6A

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Module Name

athenis_windows_1.4.exe

Full Name

athenis_windows_1.4.exe

EntryPoint

System.Void Stub.u3qJJrcaSzhv::8D8R1Tak7Lhu()

Scope Name

athenis_windows_1.4.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

athenis_windows_1.4

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

238

Main Method

System.Void Stub.u3qJJrcaSzhv::8D8R1Tak7Lhu()

Main IL Instruction Count

58

Main IL

ldsfld System.Int32 u0DyoGaRalp8::XHNCFHFkoeCw ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String u0DyoGaRalp8::lWo9xCXU1Igg call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::lWo9xCXU1Igg ldsfld System.String u0DyoGaRalp8::YwMVrt3zO0Tv call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::YwMVrt3zO0Tv ldsfld System.String u0DyoGaRalp8::sF08Lq2heS08 call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::sF08Lq2heS08 ldsfld System.String u0DyoGaRalp8::AvKQeoOiMjVC call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::AvKQeoOiMjVC ldsfld System.String u0DyoGaRalp8::LXwD2uItHW1C call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::LXwD2uItHW1C ldsfld System.String u0DyoGaRalp8::QT6mHvzu9EUA call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::QT6mHvzu9EUA leave.s IL_009E: call System.Boolean Stub.rXOg3Ka8FyJs::6Z9INxQZVm8S() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_009E: call System.Boolean Stub.rXOg3Ka8FyJs::6Z9INxQZVm8S() call System.Boolean Stub.rXOg3Ka8FyJs::6Z9INxQZVm8S() brtrue.s IL_00AB: call System.Void Stub.rXOg3Ka8FyJs::CuOrTlk0MOMM() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.rXOg3Ka8FyJs::CuOrTlk0MOMM() ldnull <null> ldftn System.Void Stub.u3qJJrcaSzhv::nFmbggp69V2R() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void Stub.u3qJJrcaSzhv::6hVGVNIq8fOG() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>

Module Name

athenis_windows_1.4.exe

Full Name

athenis_windows_1.4.exe

EntryPoint

System.Void Stub.u3qJJrcaSzhv::8D8R1Tak7Lhu()

Scope Name

athenis_windows_1.4.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

athenis_windows_1.4

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

238

Main Method

System.Void Stub.u3qJJrcaSzhv::8D8R1Tak7Lhu()

Main IL Instruction Count

58

Main IL

ldsfld System.Int32 u0DyoGaRalp8::XHNCFHFkoeCw ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String u0DyoGaRalp8::lWo9xCXU1Igg call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::lWo9xCXU1Igg ldsfld System.String u0DyoGaRalp8::YwMVrt3zO0Tv call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::YwMVrt3zO0Tv ldsfld System.String u0DyoGaRalp8::sF08Lq2heS08 call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::sF08Lq2heS08 ldsfld System.String u0DyoGaRalp8::AvKQeoOiMjVC call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::AvKQeoOiMjVC ldsfld System.String u0DyoGaRalp8::LXwD2uItHW1C call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::LXwD2uItHW1C ldsfld System.String u0DyoGaRalp8::QT6mHvzu9EUA call System.Object Stub.dx4fy4U7XfI3::gXafFRmcUlet(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String u0DyoGaRalp8::QT6mHvzu9EUA leave.s IL_009E: call System.Boolean Stub.rXOg3Ka8FyJs::6Z9INxQZVm8S() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_009E: call System.Boolean Stub.rXOg3Ka8FyJs::6Z9INxQZVm8S() call System.Boolean Stub.rXOg3Ka8FyJs::6Z9INxQZVm8S() brtrue.s IL_00AB: call System.Void Stub.rXOg3Ka8FyJs::CuOrTlk0MOMM() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.rXOg3Ka8FyJs::CuOrTlk0MOMM() ldnull <null> ldftn System.Void Stub.u3qJJrcaSzhv::nFmbggp69V2R() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void Stub.u3qJJrcaSzhv::6hVGVNIq8fOG() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>

04d83a891a63e240914f20221648bca9 (146.94 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙