Suspicious
Suspect

24e286d78c505dc91e49193dfd645b88

PE Executable
|
MD5: 24e286d78c505dc91e49193dfd645b88
|
Size: 7.68 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
24e286d78c505dc91e49193dfd645b88
Sha1
41dea99169efd9bf5b90aaa749b9d0eceb9a93a6
Sha256
3a137b71007144ad53b5b37513af0a9b2341cb118b928524e1297266e6413b0a
Sha384
d40cdbfe86be617e19dfd5bb23bf68ad1de3b08375fc90547e628bce8ce7b0e2bbd69393bdab985f5de88c1cd501ea35
Sha512
406175a77b81de8a5964f3576de3832a3a062579e129ed980129bc09382979ba7bfc48376f5180e80791b26c4113d3ff1cfe900895f6010318c161280e48756e
SSDeep
192:iw2w8ahaHNwJEaji501Sk9ZkzMeJNsYCja:QaUtwfjE0UGKzM4sYCj
TLSH
4FF1D61093E8533ACA7A4FB6ECBBD3405278E745A957DF2D288421075CA279984A3731

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Solosllmam.exe

Full Name

Solosllmam.exe

EntryPoint

System.Void .::()

Scope Name

Solosllmam.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Solosllmam

Assembly Version

1.0.8969.9903

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

5

Main Method

System.Void .::()

Main IL Instruction Count

48

Main IL

ldc.i4.0 <null> brtrue.s IL_0009: ldstr "qMt+pZbxVYiF1ZRn+UkF3w==" br.s IL_003C: newobj System.Void .::.ctor() ldc.i4.0 <null> brfalse.s IL_0043: stloc.0 pop <null> ldstr qMt+pZbxVYiF1ZRn+UkF3w== br.s IL_0046: stloc.1 ldstr MEHY2f5SWbU= ldc.i4.1 <null> brtrue.s IL_0049: stloc.2 pop <null> ldstr PGowaLqF1MxeWTBICK.rsTaodkn70E4nkrpjb br.s IL_004C: stloc.3 ldstr i89u3qP1N br.s IL_004F: stloc.s V_4 ldc.i4.0 <null> brtrue.s IL_0009: ldstr "qMt+pZbxVYiF1ZRn+UkF3w==" br.s IL_0053: ldloc.s V_4 br.s IL_0057: ldloc.2 br.s IL_005A: ldloc.3 ldloc.1 <null> ldloc.0 <null> call System.Void .::(System.String,System.String,System.String,System.String,.) ldc.i4.0 <null> brtrue.s IL_0009: ldstr "qMt+pZbxVYiF1ZRn+UkF3w==" leave.s IL_0060: ret newobj System.Void .::.ctor() br.s IL_0005: ldc.i4.0 stloc.0 <null> br.s IL_0009: ldstr "qMt+pZbxVYiF1ZRn+UkF3w==" stloc.1 <null> br.s IL_0010: ldstr "MEHY2f5SWbU=" stloc.2 <null> br.s IL_0019: ldstr "PGowaLqF1MxeWTBICK.rsTaodkn70E4nkrpjb" stloc.3 <null> br.s IL_0020: ldstr "i89u3qP1N" stloc.s V_4 br.s IL_0027: ldc.i4.0 ldloc.s V_4 br.s IL_002C: br.s IL_0057 ldloc.2 <null> br.s IL_002E: br.s IL_005A ldloc.3 <null> br.s IL_0030: ldloc.1 pop <null> leave.s IL_0060: ret ret <null>

Module Name

Solosllmam.exe

Full Name

Solosllmam.exe

EntryPoint

System.Void .::()

Scope Name

Solosllmam.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Solosllmam

Assembly Version

1.0.8969.9903

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

5

Main Method

System.Void .::()

Main IL Instruction Count

48

Main IL

ldc.i4.0 <null> brtrue.s IL_0009: ldstr "qMt+pZbxVYiF1ZRn+UkF3w==" br.s IL_003C: newobj System.Void .::.ctor() ldc.i4.0 <null> brfalse.s IL_0043: stloc.0 pop <null> ldstr qMt+pZbxVYiF1ZRn+UkF3w== br.s IL_0046: stloc.1 ldstr MEHY2f5SWbU= ldc.i4.1 <null> brtrue.s IL_0049: stloc.2 pop <null> ldstr PGowaLqF1MxeWTBICK.rsTaodkn70E4nkrpjb br.s IL_004C: stloc.3 ldstr i89u3qP1N br.s IL_004F: stloc.s V_4 ldc.i4.0 <null> brtrue.s IL_0009: ldstr "qMt+pZbxVYiF1ZRn+UkF3w==" br.s IL_0053: ldloc.s V_4 br.s IL_0057: ldloc.2 br.s IL_005A: ldloc.3 ldloc.1 <null> ldloc.0 <null> call System.Void .::(System.String,System.String,System.String,System.String,.) ldc.i4.0 <null> brtrue.s IL_0009: ldstr "qMt+pZbxVYiF1ZRn+UkF3w==" leave.s IL_0060: ret newobj System.Void .::.ctor() br.s IL_0005: ldc.i4.0 stloc.0 <null> br.s IL_0009: ldstr "qMt+pZbxVYiF1ZRn+UkF3w==" stloc.1 <null> br.s IL_0010: ldstr "MEHY2f5SWbU=" stloc.2 <null> br.s IL_0019: ldstr "PGowaLqF1MxeWTBICK.rsTaodkn70E4nkrpjb" stloc.3 <null> br.s IL_0020: ldstr "i89u3qP1N" stloc.s V_4 br.s IL_0027: ldc.i4.0 ldloc.s V_4 br.s IL_002C: br.s IL_0057 ldloc.2 <null> br.s IL_002E: br.s IL_005A ldloc.3 <null> br.s IL_0030: ldloc.1 pop <null> leave.s IL_0060: ret ret <null>

24e286d78c505dc91e49193dfd645b88 (7.68 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙