Suspicious
Suspect

07fb5ce9f1f567ac571fe4cf86d2a65c

PE Executable
|
MD5: 07fb5ce9f1f567ac571fe4cf86d2a65c
|
Size: 3.27 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
07fb5ce9f1f567ac571fe4cf86d2a65c
Sha1
b7c3a849f47b38c1552b40703204722598010ba7
Sha256
436575800b95744469c08b2b05fcd3bda915278c57d1d890ce3288e82a88c32a
Sha384
42d7a51cde1d7c4a5ab1373e3e2d0b444ad0b47c56d4057a8ede3cadb19bdaa27da206c0c47760c3fdd2aa160e6518e7
Sha512
cca28af3c4f284171a0085dae4ceed509b57f25c752f219abfbf580bc0210f85f493b77f144330cdf4b09cf4a4d462b419bf1face38b1d28a12942e6344ab8fb
SSDeep
49152:mvBt62XlaSFNWPjljiFa2RoUYIhgmAmzyNoGd0THHB72eh2NT:mvr62XlaSFNWPjljiFXRoUYIhgm2
TLSH
93E55A0577F85E62E1ABD3B2D5F0541363F0F82AF3A3EB0B5191677A1C93B4098426A7

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
07fb5ce9f1f567ac571fe4cf86d2a65c
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Client
Full Name

Client
EntryPoint

System.Void 촂ጀ롼ᄿ탳ꢿ镢嗗悾瞆ꤢⵀΡ朣퐤䡠ꕓ趉Ϧ펞::Main(System.String[])
Scope Name

Client
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.4.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5.2
Total Strings

11123
Main Method

System.Void 촂ጀ롼ᄿ탳ꢿ镢嗗悾瞆ꤢⵀΡ朣퐤䡠ꕓ趉Ϧ펞::Main(System.String[])
Main IL Instruction Count

19
Main IL

ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void 촂ጀ롼ᄿ탳ꢿ镢嗗悾瞆ꤢⵀΡ朣퐤䡠ꕓ趉Ϧ펞::婟ꈟ灭䏵אָ쵪ء蟀ꉚ죂⏄䤟䍲ꌯ惍᳉衦㈹Ɜ(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void 촂ጀ롼ᄿ탳ꢿ镢嗗悾瞆ꤢⵀΡ朣퐤䡠ꕓ趉Ϧ펞::픝ꀁ捵淏鿤ᗏ竄뾷樻㸥룕职棰߉펗쯩귈䱴詐(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void ﾴ낇禮킬会晴蜍㖟赃ʄൗᢒᎾꗫ慷�紵�::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name

Client
Full Name

Client
EntryPoint

System.Void 촂ጀ롼ᄿ탳ꢿ镢嗗悾瞆ꤢⵀΡ朣퐤䡠ꕓ趉Ϧ펞::Main(System.String[])
Scope Name

Client
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.4.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5.2
Total Strings

11123
Main Method

System.Void 촂ጀ롼ᄿ탳ꢿ镢嗗悾瞆ꤢⵀΡ朣퐤䡠ꕓ趉Ϧ펞::Main(System.String[])
Main IL Instruction Count

19
Main IL

ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void 촂ጀ롼ᄿ탳ꢿ镢嗗悾瞆ꤢⵀΡ朣퐤䡠ꕓ趉Ϧ펞::婟ꈟ灭䏵אָ쵪ء蟀ꉚ죂⏄䤟䍲ꌯ惍᳉衦㈹Ɜ(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void 촂ጀ롼ᄿ탳ꢿ镢嗗悾瞆ꤢⵀΡ朣퐤䡠ꕓ趉Ϧ펞::픝ꀁ捵淏鿤ᗏ竄뾷樻㸥룕职棰߉펗쯩귈䱴詐(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void ﾴ낇禮킬会晴蜍㖟赃ʄൗᢒᎾꗫ慷�紵�::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
07fb5ce9f1f567ac571fe4cf86d2a65c (3.27 MB)
File Structure
07fb5ce9f1f567ac571fe4cf86d2a65c
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙