Suspicious
Suspect

25596412be7a34c82c30f4652ae38cf3

PE Executable
|
MD5: 25596412be7a34c82c30f4652ae38cf3
|
Size: 749.57 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
25596412be7a34c82c30f4652ae38cf3
Sha1
972a5a39e24cb820b5a2c08e600ffe80c261e5f3
Sha256
7d7789f9e30220d886bf7c37f3dbc7be0adc361a451ffad333e087ee72d92ece
Sha384
8230c8b31bcceb0153c7dd487b8af5c1c75540272a3cd40c19654787c51bbddc30c3408797b190ef370525d01a8f656e
Sha512
fc1bf9ac8de203c4713848edd46179dea11710428bd3f0d20ae04aa69f5dc75c6ef740f939753cc3169f77908b6df45ff39752df44f154316493e1189a772bb1
SSDeep
12288:w977l/7kqjVnl36ud0zR/6CtQ9PUHIG8DXjAGq2amJYeQabdLdlLUwi:w9ZkqjVnlqud+/2P+ATAS/JYellLUx
TLSH
89F4DF68B3F84A01F1FF5B7194B19951AB34B513A961E71E15C080CC1EB2B919F8AF3B

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual C++ v6.0 DLL
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Stub.Properties.Resources.resources
costura.costura.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.costura.pdb.compressed
costura.newtonsoft.json.dll.compressed
[Authenticode]_220cad77.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.icsharpcode.sharpziplib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.icsharpcode.sharpziplib.pdb.compressed
costura.icsharpcode.sharpziplib.pdb
costura.system.diagnostics.diagnosticsource.dll.compressed
[Authenticode]_50c89911.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metadata
Resources.ProductVersion
Resources.CompanyName
Resources.ProductName
Resources.LegalCopyright
Resources.FileDescription
Resources.OriginalFilename
Resources.InternalName
Resources.BuildVersion
Resources.PrivateBuild
Resources.SYS_SVC_START
Resources.SYS_SVC_STOP
Resources.SYS_SVC_PAUSE
Resources.SYS_SVC_RESUME
Resources.SYS_NET_CONNECT
Resources.SYS_UPDATE_CHECK
Resources.SYS_SEC_SCAN
Resources.AppIcon
Resources.AppIcon-preview.png
Resources.Manifest
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: ?

Module Name

stub.exe

Full Name

stub.exe

EntryPoint

System.Void Stub.Program::<Main>()

Scope Name

stub.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

stub

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

3155

Main Method

System.Void Stub.Program::<Main>()

Main IL Instruction Count

6

Main IL

call System.Threading.Tasks.Task Stub.Program::Main() callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>

Module Name

stub.exe

Full Name

stub.exe

EntryPoint

System.Void Stub.Program::<Main>()

Scope Name

stub.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

stub

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

3155

Main Method

System.Void Stub.Program::<Main>()

Main IL Instruction Count

6

Main IL

call System.Threading.Tasks.Task Stub.Program::Main() callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>

25596412be7a34c82c30f4652ae38cf3 (749.57 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙