Suspicious
Suspect

3bbefdbc28c070a39ab9d6c70b6d6f04

PE Executable
|
MD5: 3bbefdbc28c070a39ab9d6c70b6d6f04
|
Size: 456.7 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
3bbefdbc28c070a39ab9d6c70b6d6f04
Sha1
b73140a0fb6aa85f69dd87d579c21b24241bc983
Sha256
15b064a7d321fa0159ad94abcdf887f1dc641e33c33d6c691af298415e0a20cb
Sha384
9fb5f9594aa0ca526a1aa48a3f2a1f68e72ccc20bd41c11abb804dfe055802435906ded2d7410bd89cec8eac04f82ef0
Sha512
1873956f37227de9904c2434c96d5d2989892534b694e67d13a06c2bc30ef4196f2214f0f30c1c2e51d6838695e808628258a95410e9f862738fa14c33fcfc51
SSDeep
6144:rXv6Bz9vmpwX8Ur9GUe6VlWT8b9X2QQNGkk1RAYHbbWD0j:Tcz8CX8aGUPVle8KF70j
TLSH
70A4C41CFE92F805CD2E3D73CBE614005B7129C12E219256325AAFFD8BA53B658E617C

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
nvxqcqzalbbh
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

nptavesfxjvj.exe

Full Name

nptavesfxjvj.exe

EntryPoint

System.Void EYwsroPe.gzkkupRLaFZF::XDnGpNPFH(System.String[])

Scope Name

nptavesfxjvj.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

nptavesfxjvj

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

1203

Main Method

System.Void EYwsroPe.gzkkupRLaFZF::XDnGpNPFH(System.String[])

Main IL Instruction Count

56

Main IL

ldc.i4 1731 stloc.0 <null> br IL_00BF: br IL_000B nop <null> ldloc.0 <null> ldc.i4 1744 ceq <null> brfalse IL_0024: nop call System.Void EYwsroPe.gzkkupRLaFZF::ThJdDMVSyoa() ldc.i4 1753 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 1756 ceq <null> brfalse IL_003D: nop call System.Void EYwsroPe.RLXMOokES::rgURHkAh() ldc.i4 1763 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 1753 ceq <null> brfalse IL_0097: nop newobj System.Void System.Random::.ctor() nop <null> ldc.r8 8000000 ldc.r8 2000 div <null> call System.Int32 System.Convert::ToInt32(System.Double) nop <null> ldc.r8 5996.522878745281 ldc.r8 3000 call System.Double System.Math::Log10(System.Double) add <null> call System.Int32 System.Convert::ToInt32(System.Double) callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) call System.Void System.Threading.Thread::Sleep(System.Int32) ldc.i4 1756 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 1731 ceq <null> brfalse IL_00AC: nop nop <null> ldc.i4 1744 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 1763 ceq <null> brfalse IL_00BF: br IL_000B br IL_00C4: ret br IL_000B: nop ret <null>

Module Name

nptavesfxjvj.exe

Full Name

nptavesfxjvj.exe

EntryPoint

System.Void EYwsroPe.gzkkupRLaFZF::XDnGpNPFH(System.String[])

Scope Name

nptavesfxjvj.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

nptavesfxjvj

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

1203

Main Method

System.Void EYwsroPe.gzkkupRLaFZF::XDnGpNPFH(System.String[])

Main IL Instruction Count

56

Main IL

ldc.i4 1731 stloc.0 <null> br IL_00BF: br IL_000B nop <null> ldloc.0 <null> ldc.i4 1744 ceq <null> brfalse IL_0024: nop call System.Void EYwsroPe.gzkkupRLaFZF::ThJdDMVSyoa() ldc.i4 1753 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 1756 ceq <null> brfalse IL_003D: nop call System.Void EYwsroPe.RLXMOokES::rgURHkAh() ldc.i4 1763 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 1753 ceq <null> brfalse IL_0097: nop newobj System.Void System.Random::.ctor() nop <null> ldc.r8 8000000 ldc.r8 2000 div <null> call System.Int32 System.Convert::ToInt32(System.Double) nop <null> ldc.r8 5996.522878745281 ldc.r8 3000 call System.Double System.Math::Log10(System.Double) add <null> call System.Int32 System.Convert::ToInt32(System.Double) callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) call System.Void System.Threading.Thread::Sleep(System.Int32) ldc.i4 1756 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 1731 ceq <null> brfalse IL_00AC: nop nop <null> ldc.i4 1744 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 1763 ceq <null> brfalse IL_00BF: br IL_000B br IL_00C4: ret br IL_000B: nop ret <null>

3bbefdbc28c070a39ab9d6c70b6d6f04 (456.7 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙