Suspicious
Suspect

12bcbe99dec3caec1e9c98b192bd8740

PE Executable
|
MD5: 12bcbe99dec3caec1e9c98b192bd8740
|
Size: 27.65 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
12bcbe99dec3caec1e9c98b192bd8740
Sha1
f6576afa9492d4c061d332b71a2578eb3ae531fc
Sha256
8820442245e2139c7da613f33710c874cb901902acd5d45b9fe515f001a3fc8b
Sha384
a3c537adc79edb6f1010cc6b4dd677321424f049e3f4f40129a7243019a175c52a42b1f71b34e07666b12ce623c33ccb
Sha512
0c1a24c7f8c8f76b5e60579b3336e0450689eaf5177ed55335f17776917d8b3e31571ec78850a8557aa67b745f2190c432ae649785412c230f76850cc498bb60
SSDeep
384:cVhBTzi6elnbPAUEQf1zELc2hCyiWSR2jKCzZVBhF+b1pjoJAlp/ylCPL3x6Frfd:uTlecArKOzMpuQKfNVSE7BuZ
TLSH
75C2170CB66C5A3BCA9D5A7C589A73010374E2272CD3E757ECC0A0A71D57BD10943AEE

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ILRepack.List
      ​  
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Eknuwlgts

Full Name

Eknuwlgts

EntryPoint

System.Void  ::()

Scope Name

Eknuwlgts

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Eknuwlgts

Assembly Version

1.0.4186.27371

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

0

Main Method

System.Void  ::()

Main IL Instruction Count

48

Main IL

ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4 -1588955389 call System.String ::(System.Int32) newobj System.Void System.Version::.ctor(System.String) stloc.s V_5 ldnull <null> ldloc.s V_5 newobj System.Void  ::.ctor(System.String,System.Version) stloc.1 <null> newobj System.Void  ::.ctor() stloc.2 <null> newobj System.Void  ::.ctor() stloc.3 <null> newobj System.Void  ::.ctor() stloc.s V_4 ldloc.2 <null> ldloc.3 <null> ldloc.s V_4 newobj System.Void  ::.ctor( , , ) stloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Void  ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void  ::(System.EventHandler`1< >) ldloc.2 <null> ldloc.0 <null> ldftn System.Void  ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void  ::(System.EventHandler`1< >) ldloc.3 <null> ldloc.0 <null> ldftn System.Void  ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void  ::(System.EventHandler`1< >) ldloc.s V_4 ldloc.0 <null> ldftn System.Void  ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void  ::(System.EventHandler`1< >) ldloc.1 <null> callvirt System.Void  ::() leave.s IL_0099: ret ldloc.0 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ret <null>

Module Name

Eknuwlgts

Full Name

Eknuwlgts

EntryPoint

System.Void  ::()

Scope Name

Eknuwlgts

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Eknuwlgts

Assembly Version

1.0.4186.27371

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

0

Main Method

System.Void  ::()

Main IL Instruction Count

48

Main IL

ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4 -1588955389 call System.String ::(System.Int32) newobj System.Void System.Version::.ctor(System.String) stloc.s V_5 ldnull <null> ldloc.s V_5 newobj System.Void  ::.ctor(System.String,System.Version) stloc.1 <null> newobj System.Void  ::.ctor() stloc.2 <null> newobj System.Void  ::.ctor() stloc.3 <null> newobj System.Void  ::.ctor() stloc.s V_4 ldloc.2 <null> ldloc.3 <null> ldloc.s V_4 newobj System.Void  ::.ctor( , , ) stloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Void  ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void  ::(System.EventHandler`1< >) ldloc.2 <null> ldloc.0 <null> ldftn System.Void  ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void  ::(System.EventHandler`1< >) ldloc.3 <null> ldloc.0 <null> ldftn System.Void  ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void  ::(System.EventHandler`1< >) ldloc.s V_4 ldloc.0 <null> ldftn System.Void  ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void  ::(System.EventHandler`1< >) ldloc.1 <null> callvirt System.Void  ::() leave.s IL_0099: ret ldloc.0 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ret <null>

12bcbe99dec3caec1e9c98b192bd8740 (27.65 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙