Suspicious
Suspect

16c08b0342326c830948ffc952eb00ac

PE Executable
|
MD5: 16c08b0342326c830948ffc952eb00ac
|
Size: 1.11 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
16c08b0342326c830948ffc952eb00ac
Sha1
a835014267c24457851bd0b8ec8d3eaf9043e6be
Sha256
3212906152763c51f2811d562a17ae17fceebf25ab201d2d485306e206e87650
Sha384
62cad250203819abddc79dbf6db4e5778bb878e8d171747d5d187a97bb906c2d330a5aa31bb2eb96eb0947892cbae4a7
Sha512
006e95d57bca37e5ef65eca2a16e107852a80dca4bf88771cad1d60da09698d998db34b92705ef9230a2151b17ed96f6e7d1a640f49925b82e2c8c9dd8613e62
SSDeep
24576:wBMNJ7ZvSJUsEQ+JcaCoBTqxcpKVNZDm33oQRPjV:wihZvSJ2QGcQScpKVzDU9P
TLSH
BF352356A6898E64DD92C67EC5C10D548368D20BBB5BCE4E3D0DA36D48433E7C28A3D7

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Dbqpyiucd.Properties.Resources.resources
Moawvdhfyf
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Payment  information Confirmationh.exe

Full Name

Payment  information Confirmationh.exe

EntryPoint

System.Void HarfBuzzSharp.Selections.LocalSelector::AdaptSelector()

Scope Name

Payment  information Confirmationh.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Payment  information Confirmationh

Assembly Version

1.0.1700.26260

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

9

Main Method

System.Void HarfBuzzSharp.Selections.LocalSelector::AdaptSelector()

Main IL Instruction Count

18

Main IL

ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0057: ret newobj System.Void PaymentinformationConfirmationh.Fields.FieldRecommender::.ctor() call System.Byte[] PaymentinformationConfirmationh.Fields.FieldRecommender::AccessExternalField() call System.Byte[] HarfBuzzSharp.Concurrency.CustomWorker::DetachWorker(System.Object) call System.Void HarfBuzzSharp.Metadata.DynamicDefinition::RemoveDefinition(System.Object) ldc.i4 0 ldsfld <Module>{f8dd61be-3bd2-4844-9230-c1bb74e908a0} <Module>{f8dd61be-3bd2-4844-9230-c1bb74e908a0}::m_5d1c3e06bfa646fea1187c0dd9b201a3 ldfld System.Int32 <Module>{f8dd61be-3bd2-4844-9230-c1bb74e908a0}::m_71ad051c74fc4164bf6e38df83df9a71 brtrue IL_0012: switch(IL_0057,IL_0024) pop <null> ldc.i4 0 br IL_0012: switch(IL_0057,IL_0024) ret <null>

Module Name

Payment  information Confirmationh.exe

Full Name

Payment  information Confirmationh.exe

EntryPoint

System.Void HarfBuzzSharp.Selections.LocalSelector::AdaptSelector()

Scope Name

Payment  information Confirmationh.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Payment  information Confirmationh

Assembly Version

1.0.1700.26260

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

9

Main Method

System.Void HarfBuzzSharp.Selections.LocalSelector::AdaptSelector()

Main IL Instruction Count

18

Main IL

ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0057: ret newobj System.Void PaymentinformationConfirmationh.Fields.FieldRecommender::.ctor() call System.Byte[] PaymentinformationConfirmationh.Fields.FieldRecommender::AccessExternalField() call System.Byte[] HarfBuzzSharp.Concurrency.CustomWorker::DetachWorker(System.Object) call System.Void HarfBuzzSharp.Metadata.DynamicDefinition::RemoveDefinition(System.Object) ldc.i4 0 ldsfld <Module>{f8dd61be-3bd2-4844-9230-c1bb74e908a0} <Module>{f8dd61be-3bd2-4844-9230-c1bb74e908a0}::m_5d1c3e06bfa646fea1187c0dd9b201a3 ldfld System.Int32 <Module>{f8dd61be-3bd2-4844-9230-c1bb74e908a0}::m_71ad051c74fc4164bf6e38df83df9a71 brtrue IL_0012: switch(IL_0057,IL_0024) pop <null> ldc.i4 0 br IL_0012: switch(IL_0057,IL_0024) ret <null>

16c08b0342326c830948ffc952eb00ac (1.11 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Dbqpyiucd.Properties.Resources.resources
Moawvdhfyf
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙