Suspicious
Suspect

052b967fdd2a0e8ff6290800d2c59d93

PE Executable
|
MD5: 052b967fdd2a0e8ff6290800d2c59d93
|
Size: 1.91 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
052b967fdd2a0e8ff6290800d2c59d93
Sha1
d30a9e0d610880ec540633ff910eec0299091b45
Sha256
8989c105f6a548982cbf744de60417d0d3137e2559335e43ba0ea1355b93b163
Sha384
da7ae08960f843942a24a351bfe330b30ab0e9727cae6619f6cb9551b02332163a15dc13d5a6ccdf4f49ef98099da244
Sha512
5366027c9b3a13aa486020f5e788e939c27bd210377481625825e070bfb40aab8b84011c0ecc6cc57883bb96def836ec12d53573e68b1de60f28de1d03d29d89
SSDeep
12288:UHR3m4AY6XlqjGHoGuSHFlk/uXj/0a+PVqD:XNqjGHoGuzGXj/rx
TLSH
C395C83CEEC83272E5B7967AC9F505CABE517843365A9C0E449B03860D53F97BE8211E

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
052b967fdd2a0e8ff6290800d2c59d93
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Nf3ig.oKj5w.resources
476e482d190f30.Resources.resources
a5101b1f0
[NBF]root.Data
a5101b1f1
[NBF]root.Data
a5101b1f10
[NBF]root.Data
a5101b1f11
[NBF]root.Data
a5101b1f12
[NBF]root.Data
a5101b1f13
[NBF]root.Data
a5101b1f14
[NBF]root.Data
a5101b1f15
[NBF]root.Data
a5101b1f16
[NBF]root.Data
a5101b1f17
[NBF]root.Data
a5101b1f18
[NBF]root.Data
a5101b1f19
[NBF]root.Data
a5101b1f2
[NBF]root.Data
a5101b1f20
[NBF]root.Data
a5101b1f3
[NBF]root.Data
a5101b1f4
[NBF]root.Data
a5101b1f5
[NBF]root.Data
a5101b1f6
[NBF]root.Data
a5101b1f7
[NBF]root.Data
a5101b1f8
[NBF]root.Data
a5101b1f9
[NBF]root.Data
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Nf3ig
Full Name

Nf3ig
EntryPoint

System.Void Nf3ig.zq9Sp2Nof::aj8B9zPw()
Scope Name

Nf3ig
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Nf3ig
Assembly Version

28.25.13.49
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

2245
Main Method

System.Void Nf3ig.zq9Sp2Nof::aj8B9zPw()
Main IL Instruction Count

4
Main IL

nop <null> newobj System.Void Nf3ig.8Taiw7Kc3Wkbr4::.ctor() stloc.0 <null> ret <null>
Module Name

Nf3ig
Full Name

Nf3ig
EntryPoint

System.Void Nf3ig.zq9Sp2Nof::aj8B9zPw()
Scope Name

Nf3ig
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Nf3ig
Assembly Version

28.25.13.49
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

2245
Main Method

System.Void Nf3ig.zq9Sp2Nof::aj8B9zPw()
Main IL Instruction Count

4
Main IL

nop <null> newobj System.Void Nf3ig.8Taiw7Kc3Wkbr4::.ctor() stloc.0 <null> ret <null>
052b967fdd2a0e8ff6290800d2c59d93 (1.91 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙