Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Very high
91 files
EXE0799647e12f7c7cad1bc211009632394
Structure
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
Ns2mytF93wjDK1
Full Name
Ns2mytF93wjDK1
EntryPoint
System.Void Ns2mytF93wjDK1.Jag6s8Aiyw2KPb/xWw4j.jo0XpYb5P::bd1R4S()
Scope Name
Ns2mytF93wjDK1
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Ns2mytF93wjDK1
Assembly Version
23.20.4.294
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1175
Main Method
System.Void Ns2mytF93wjDK1.Jag6s8Aiyw2KPb/xWw4j.jo0XpYb5P::bd1R4S()
Main IL Instruction Count
32
Main IL
nop <null>
nop <null>
ldc.i4.s 20
stloc.0 <null>
newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor()
stloc.1 <null>
ldloc.0 <null>
stloc.2 <null>
ldc.i4.1 <null>
stloc.3 <null>
br.s IL_001D: ldloc.3
ldloc.1 <null>
ldloc.3 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.1 <null>
add.ovf <null>
stloc.3 <null>
ldloc.3 <null>
ldloc.2 <null>
ble.s IL_0011: ldloc.1
ldstr demandflatteningrules
call System.Void Ns2mytF93wjDK1.Mqj2cW3i::Gm7kr8qF3zYj_b(System.String)
nop <null>
leave.s IL_003B: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_003B: nop
nop <null>
ret <null>
Module Name
Ns2mytF93wjDK1
Full Name
Ns2mytF93wjDK1
EntryPoint
System.Void Ns2mytF93wjDK1.Jag6s8Aiyw2KPb/xWw4j.jo0XpYb5P::bd1R4S()
Scope Name
Ns2mytF93wjDK1
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Ns2mytF93wjDK1
Assembly Version
23.20.4.294
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1175
Main Method
System.Void Ns2mytF93wjDK1.Jag6s8Aiyw2KPb/xWw4j.jo0XpYb5P::bd1R4S()
Main IL Instruction Count
32
Main IL
nop <null>
nop <null>
ldc.i4.s 20
stloc.0 <null>
newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor()
stloc.1 <null>
ldloc.0 <null>
stloc.2 <null>
ldc.i4.1 <null>
stloc.3 <null>
br.s IL_001D: ldloc.3
ldloc.1 <null>
ldloc.3 <null>
callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.1 <null>
add.ovf <null>
stloc.3 <null>
ldloc.3 <null>
ldloc.2 <null>
ble.s IL_0011: ldloc.1
ldstr demandflatteningrules
call System.Void Ns2mytF93wjDK1.Mqj2cW3i::Gm7kr8qF3zYj_b(System.String)
nop <null>
leave.s IL_003B: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_003B: nop
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙