Suspicious
Suspect

277503fde45f21e84a8c7d7bacc21fab

PE Executable
MD5: 277503fde45f21e84a8c7d7bacc21fab
Size: 1.23 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
Hash Value
MD5
277503fde45f21e84a8c7d7bacc21fab
Sha1
4dafd831aeab30223a6ca2fe9b03b27f182231ad
Sha256
d8f8aadc01f71d730f7d969a602cb08e410480635409b2c305a5294aeec84429
Sha384
785cb5e0ad5948fd1bc58f040c6a287b0b7496835811ce8026c308060063e22e4d377a60d4d74e9b2d391bbf83a62e32
Sha512
7388f33df851c1ba3fa287cd3a40607ac6d9017df0136d782a01c7d90894087d12b036f06cec22847ef79d68000666b54b81c06c09fd473a7b792888bbbb84ca
SSDeep
24576:fNTadL/9GUN5AidLVkzQU/Q3RvIvWoHEQCvoGFeYi//:st1G0bhmzI3R0HOvvFej
TLSH
2645CF397B83468DE564E7B8C5333FD21B70D52AD96AC306BFF84274992B7619830B12

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Zibaniga.nimga.iso
2mgGnSk6o.Resources.resources
398669ade3f055.Resources.resources
9d86b3740
[NBF]root.Data
9d86b3741
[NBF]root.Data
9d86b37410
[NBF]root.Data
9d86b37411
[NBF]root.Data
9d86b37412
[NBF]root.Data
9d86b37413
[NBF]root.Data
9d86b37414
[NBF]root.Data
9d86b37415
[NBF]root.Data
9d86b37416
[NBF]root.Data
9d86b37417
[NBF]root.Data
9d86b37418
[NBF]root.Data
9d86b37419
[NBF]root.Data
9d86b3742
[NBF]root.Data
9d86b37420
[NBF]root.Data
9d86b3743
[NBF]root.Data
9d86b3744
[NBF]root.Data
9d86b3745
[NBF]root.Data
9d86b3746
[NBF]root.Data
9d86b3747
[NBF]root.Data
9d86b3748
[NBF]root.Data
9d86b3749
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

2mgGnSk6o

Full Name

2mgGnSk6o

EntryPoint

System.Void Hfc32Et.ib7E4NtwSd/bTs8x7ZqMip.4BmyLig9c::iNk2S_5c9a()

Scope Name

2mgGnSk6o

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

2mgGnSk6o

Assembly Version

26.8.10.173

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

0

Main Method

System.Void Hfc32Et.ib7E4NtwSd/bTs8x7ZqMip.4BmyLig9c::iNk2S_5c9a()

Main IL Instruction Count

75

Main IL

ldc.i4.1 <null> stloc.s V_5 ldloc.s V_5 switch dnlib.DotNet.Emit.Instruction[] nop <null> ldc.r8 1 stloc.0 <null> ldc.i4.1 <null> stloc.1 <null> ldc.i4.0 <null> stloc.s V_5 br.s IL_0003: ldloc.s V_5 ldloc.1 <null> conv.r8 <null> ldc.r8 2 call System.Double System.Math::Pow(System.Double,System.Double) stloc.0 <null> ldloc.1 <null> ldc.i4.1 <null> add.ovf <null> stloc.1 <null> ldloc.1 <null> ldc.i4 10000 ble.s IL_0056: ldc.i4.0 ldc.i4.4 <null> stloc.s V_5 br.s IL_0003: ldloc.s V_5 ldc.i4.0 <null> br.s IL_0052: stloc.s V_5 ldloc.0 <null> box System.Double call System.Void System.GC::KeepAlive(System.Object) nop <null> br.s IL_0067: br.s IL_0069 br.s IL_0069: nop nop <null> nop <null> ldc.i4 850932460 ldtoken Hfc32Et.ib7E4NtwSd/bTs8x7ZqMip.4BmyLig9c/9mxWTr7y5R.3mnPjYf48gzMT1/o_3H5.my2P6 call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldc.i4.s 16 ldc.i4.8 <null> call System.String dRr5Px4oic.rc8Y5Zzak/2ixFdJc.6jkTqP0yH3itpr::Ebe23QgyYji4(System.Int32,System.Type,System.Byte,System.Int32) call System.Void Hfc32Et.ib7E4NtwSd::3XecifJ7(System.String) nop <null> leave.s IL_00D1: br.s IL_00D3 br.s IL_008C: dup dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> nop <null> call System.Boolean System.Environment::get_HasShutdownStarted() ldc.i4.0 <null> ceq <null> stloc.3 <null> ldloc.3 <null> brfalse.s IL_00CA: call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() ldc.i4.4 <null> stloc.s V_7 ldloc.s V_7 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> ldc.i4.2 <null> stloc.s V_7 br.s IL_00A3: ldloc.s V_7 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00D1: br.s IL_00D3 br.s IL_00D3: nop nop <null> ret <null> ldtoken System.Void Hfc32Et.ib7E4NtwSd/bTs8x7ZqMip.4BmyLig9c::iNk2S_5c9a() pop <null> ret <null>

Module Name

2mgGnSk6o

Full Name

2mgGnSk6o

EntryPoint

System.Void Hfc32Et.ib7E4NtwSd/bTs8x7ZqMip.4BmyLig9c::iNk2S_5c9a()

Scope Name

2mgGnSk6o

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

2mgGnSk6o

Assembly Version

26.8.10.173

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

0

Main Method

System.Void Hfc32Et.ib7E4NtwSd/bTs8x7ZqMip.4BmyLig9c::iNk2S_5c9a()

Main IL Instruction Count

75

Main IL

ldc.i4.1 <null> stloc.s V_5 ldloc.s V_5 switch dnlib.DotNet.Emit.Instruction[] nop <null> ldc.r8 1 stloc.0 <null> ldc.i4.1 <null> stloc.1 <null> ldc.i4.0 <null> stloc.s V_5 br.s IL_0003: ldloc.s V_5 ldloc.1 <null> conv.r8 <null> ldc.r8 2 call System.Double System.Math::Pow(System.Double,System.Double) stloc.0 <null> ldloc.1 <null> ldc.i4.1 <null> add.ovf <null> stloc.1 <null> ldloc.1 <null> ldc.i4 10000 ble.s IL_0056: ldc.i4.0 ldc.i4.4 <null> stloc.s V_5 br.s IL_0003: ldloc.s V_5 ldc.i4.0 <null> br.s IL_0052: stloc.s V_5 ldloc.0 <null> box System.Double call System.Void System.GC::KeepAlive(System.Object) nop <null> br.s IL_0067: br.s IL_0069 br.s IL_0069: nop nop <null> nop <null> ldc.i4 850932460 ldtoken Hfc32Et.ib7E4NtwSd/bTs8x7ZqMip.4BmyLig9c/9mxWTr7y5R.3mnPjYf48gzMT1/o_3H5.my2P6 call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldc.i4.s 16 ldc.i4.8 <null> call System.String dRr5Px4oic.rc8Y5Zzak/2ixFdJc.6jkTqP0yH3itpr::Ebe23QgyYji4(System.Int32,System.Type,System.Byte,System.Int32) call System.Void Hfc32Et.ib7E4NtwSd::3XecifJ7(System.String) nop <null> leave.s IL_00D1: br.s IL_00D3 br.s IL_008C: dup dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> nop <null> call System.Boolean System.Environment::get_HasShutdownStarted() ldc.i4.0 <null> ceq <null> stloc.3 <null> ldloc.3 <null> brfalse.s IL_00CA: call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() ldc.i4.4 <null> stloc.s V_7 ldloc.s V_7 switch dnlib.DotNet.Emit.Instruction[] ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> ldc.i4.2 <null> stloc.s V_7 br.s IL_00A3: ldloc.s V_7 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00D1: br.s IL_00D3 br.s IL_00D3: nop nop <null> ret <null> ldtoken System.Void Hfc32Et.ib7E4NtwSd/bTs8x7ZqMip.4BmyLig9c::iNk2S_5c9a() pop <null> ret <null>

277503fde45f21e84a8c7d7bacc21fab (1.23 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Zibaniga.nimga.iso
2mgGnSk6o.Resources.resources
398669ade3f055.Resources.resources
9d86b3740
[NBF]root.Data
9d86b3741
[NBF]root.Data
9d86b37410
[NBF]root.Data
9d86b37411
[NBF]root.Data
9d86b37412
[NBF]root.Data
9d86b37413
[NBF]root.Data
9d86b37414
[NBF]root.Data
9d86b37415
[NBF]root.Data
9d86b37416
[NBF]root.Data
9d86b37417
[NBF]root.Data
9d86b37418
[NBF]root.Data
9d86b37419
[NBF]root.Data
9d86b3742
[NBF]root.Data
9d86b37420
[NBF]root.Data
9d86b3743
[NBF]root.Data
9d86b3744
[NBF]root.Data
9d86b3745
[NBF]root.Data
9d86b3746
[NBF]root.Data
9d86b3747
[NBF]root.Data
9d86b3748
[NBF]root.Data
9d86b3749
[NBF]root.Data
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙