Suspicious
Suspect

328305f872f118b7069d39e014ead7cb

PE Executable
|
MD5: 328305f872f118b7069d39e014ead7cb
|
Size: 1.2 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
328305f872f118b7069d39e014ead7cb
Sha1
2cba7c9e995e86496a1b2e6bd45c95939ea84383
Sha256
bef9bad616c16a6fe371b2717c96c530cbc891d6c16a88f288fb44def9588271
Sha384
85f109393121b797ff174d22e6d736ad65e22b28a6763a2d68184dd23ce63e39951cd6ca7734855256362d26b4825b3c
Sha512
9791f8cedcfb2d3aa8e686a90bae48e2a75f73ea4be467c5f22e15ff3c111c03dee1f0bf8ffc0141f4f120b813d19ac7681479017b26f4f5a7824761e2aefc54
SSDeep
24576:G0K5rCX8E+PymRF2xkNzsbd0irq1xEIJaEPu:G0K1CADHl9sbd0ir9VEPu
TLSH
004533601779B8FECAB14C34841B71AB7DA3F8DD5CB387E1C7A153425C18289A4CB5AE

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
UPolyX 0.3 -> delikon
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Dmtwsuaqjn.Properties.Resources.resources
Clhbn
Informations
Name
Value
Module Name

saaaf.exe

Full Name

saaaf.exe

EntryPoint

System.Void Dmtwsuaqjn.Nounydkbo::Main()

Scope Name

saaaf.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

saaaf

Assembly Version

1.0.5278.27756

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

6

Main Method

System.Void Dmtwsuaqjn.Nounydkbo::Main()

Main IL Instruction Count

11

Main IL

ldsfld System.Action`1<System.IO.MemoryStream> Dmtwsuaqjn.Nounydkbo/<>c::<>9__0_0 dup <null> brtrue IL_0022: call System.Void Dmtwsuaqjn.Nounydkbo::Cztfturytpq(System.Action`1<System.IO.MemoryStream>) pop <null> ldsfld Dmtwsuaqjn.Nounydkbo/<>c Dmtwsuaqjn.Nounydkbo/<>c::<>9 ldftn System.Void Dmtwsuaqjn.Nounydkbo/<>c::<Main>b__0_0(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action`1<System.IO.MemoryStream> Dmtwsuaqjn.Nounydkbo/<>c::<>9__0_0 call System.Void Dmtwsuaqjn.Nounydkbo::Cztfturytpq(System.Action`1<System.IO.MemoryStream>) ret <null>

Module Name

saaaf.exe

Full Name

saaaf.exe

EntryPoint

System.Void Dmtwsuaqjn.Nounydkbo::Main()

Scope Name

saaaf.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

saaaf

Assembly Version

1.0.5278.27756

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

6

Main Method

System.Void Dmtwsuaqjn.Nounydkbo::Main()

Main IL Instruction Count

11

Main IL

ldsfld System.Action`1<System.IO.MemoryStream> Dmtwsuaqjn.Nounydkbo/<>c::<>9__0_0 dup <null> brtrue IL_0022: call System.Void Dmtwsuaqjn.Nounydkbo::Cztfturytpq(System.Action`1<System.IO.MemoryStream>) pop <null> ldsfld Dmtwsuaqjn.Nounydkbo/<>c Dmtwsuaqjn.Nounydkbo/<>c::<>9 ldftn System.Void Dmtwsuaqjn.Nounydkbo/<>c::<Main>b__0_0(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action`1<System.IO.MemoryStream> Dmtwsuaqjn.Nounydkbo/<>c::<>9__0_0 call System.Void Dmtwsuaqjn.Nounydkbo::Cztfturytpq(System.Action`1<System.IO.MemoryStream>) ret <null>

328305f872f118b7069d39e014ead7cb (1.2 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙