Suspicious
Suspect

2039e2b2a542b216d3e2fa979c47340e

PE Executable
|
MD5: 2039e2b2a542b216d3e2fa979c47340e
|
Size: 896.51 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
2039e2b2a542b216d3e2fa979c47340e
Sha1
edaae8e1af00add763d33e28be29ea85bf08b470
Sha256
88fc0ee9287443da3f60088a825600b81fd8548cd4a2dda386e9d3b0eaab2522
Sha384
8680c89287a40b7ec46892ae8b26faa7990dc095385fdabf05dd5c8af248305c875d88d49097b6958c5a6b028a8e92cc
Sha512
2ec5bd8a55be9cc9b743b98fecf04d0712035447c4e770f0c5be1b5c9f5098786d21e4d1f30f17a82c4d61f84a6a80aef9c820a5d923f40381b41a69a69f7995
SSDeep
24576:gNSBcKr6eRt4Z64Cj8R45yT/bG3K6tYq/XA:gNSBcKr6eRt4Z6488RznaXY4XA
TLSH
8A15BE26679C6FE4E67F9F758465421087F0B507C323DA0D7AA4F2F9CEA2B848512723

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
TetraSite.demandflatteningrules
nw9ZfWy.Yi8f_3CsB.resources
0abf57a4f0cd0f.Resources.resources
5f0481930
[NBF]root.Data
5f0481931
[NBF]root.Data
5f04819310
[NBF]root.Data
5f04819311
[NBF]root.Data
5f04819312
[NBF]root.Data
5f04819313
[NBF]root.Data
5f04819314
[NBF]root.Data
5f04819315
[NBF]root.Data
5f04819316
[NBF]root.Data
5f04819317
[NBF]root.Data
5f04819318
[NBF]root.Data
5f04819319
[NBF]root.Data
5f0481932
[NBF]root.Data
5f04819320
[NBF]root.Data
5f04819321
[NBF]root.Data
5f0481933
[NBF]root.Data
5f0481934
[NBF]root.Data
5f0481935
[NBF]root.Data
5f0481936
[NBF]root.Data
5f0481937
[NBF]root.Data
5f0481938
[NBF]root.Data
5f0481939
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

nw9ZfWy

Full Name

nw9ZfWy

EntryPoint

System.Void nw9ZfWy.6Dgpnz4/Kp9ej8.6aqYf::Tf4jktL7J2o()

Scope Name

nw9ZfWy

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

nw9ZfWy

Assembly Version

4.20.11.233

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1175

Main Method

System.Void nw9ZfWy.6Dgpnz4/Kp9ej8.6aqYf::Tf4jktL7J2o()

Main IL Instruction Count

32

Main IL

nop <null> nop <null> ldc.i4.s 20 stloc.0 <null> newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor() stloc.1 <null> ldloc.0 <null> stloc.2 <null> ldc.i4.1 <null> stloc.3 <null> br.s IL_001D: ldloc.3 ldloc.1 <null> ldloc.3 <null> callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32) nop <null> ldloc.3 <null> ldc.i4.1 <null> add.ovf <null> stloc.3 <null> ldloc.3 <null> ldloc.2 <null> ble.s IL_0011: ldloc.1 ldstr demandflatteningrules call System.Void nw9ZfWy.6Rarn0jL::Dsc7d2jG4Zs(System.String) nop <null> leave.s IL_003B: nop call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_003B: nop nop <null> ret <null>

Module Name

nw9ZfWy

Full Name

nw9ZfWy

EntryPoint

System.Void nw9ZfWy.6Dgpnz4/Kp9ej8.6aqYf::Tf4jktL7J2o()

Scope Name

nw9ZfWy

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

nw9ZfWy

Assembly Version

4.20.11.233

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1175

Main Method

System.Void nw9ZfWy.6Dgpnz4/Kp9ej8.6aqYf::Tf4jktL7J2o()

Main IL Instruction Count

32

Main IL

nop <null> nop <null> ldc.i4.s 20 stloc.0 <null> newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor() stloc.1 <null> ldloc.0 <null> stloc.2 <null> ldc.i4.1 <null> stloc.3 <null> br.s IL_001D: ldloc.3 ldloc.1 <null> ldloc.3 <null> callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32) nop <null> ldloc.3 <null> ldc.i4.1 <null> add.ovf <null> stloc.3 <null> ldloc.3 <null> ldloc.2 <null> ble.s IL_0011: ldloc.1 ldstr demandflatteningrules call System.Void nw9ZfWy.6Rarn0jL::Dsc7d2jG4Zs(System.String) nop <null> leave.s IL_003B: nop call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_003B: nop nop <null> ret <null>

2039e2b2a542b216d3e2fa979c47340e (896.51 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙