Suspicious
Suspect

44e75d142db1d45fc971adccb08f4d21

PE Executable
|
MD5: 44e75d142db1d45fc971adccb08f4d21
|
Size: 523.26 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
44e75d142db1d45fc971adccb08f4d21
Sha1
d56b374279a70c4508b114e8323ff38bc0e379b4
Sha256
a8dabe249da520a24de691d48bf2549dda65bbb3e62cecd148b1ff0080533cac
Sha384
d2e4595308d5bec1cd357ef4657da21d87c9f53b777bfd607ae1bb72c273f2cb9087161366b921ec794b17530c07aa34
Sha512
b3fdfcafeee5cc9ba6e1225614f95dd37708044da12b8035bd82f4b3a8b1e7b910e36deeb4d2419a2ee7396524cae1559d78c6948f9efb5e1e1a40ab5f23689d
SSDeep
12288:ChKhMeg8/1h7W4Y0rGysqaLzaGOIYzNQ/Ijvz4oG/os6+6lcbC4:ChKeoY0rGyULGGOIYe/Ijvz9G/oR+62O
TLSH
9FB4025EFEA2A723CF1D1673E41722484565E952E123F2671B8C1DE16F26BECC08EC52

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

jICT.exe

Full Name

jICT.exe

EntryPoint

System.Void PrimeNumberGenerator.Program::Main()

Scope Name

jICT.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

jICT

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

2

Main Method

System.Void PrimeNumberGenerator.Program::Main()

Main IL Instruction Count

39

Main IL

ldsfld System.Byte[] PrimeNumberGenerator.Forms.MainForm::Ⴗ stloc.2 <null> ldc.i4.4 <null> stloc.1 <null> ldloc.1 <null> switch dnlib.DotNet.Emit.Instruction[] call System.Void PrimeNumberGenerator.Forms.SettingsForm::Ⴅ() ldc.i4 563 ldc.i4 514 call System.Void PrimeNumberGenerator.Classes.NumberAnalyzer::Ⴀ(System.Int32,System.Int16) ldc.i4.0 <null> ldc.i4 510 ldc.i4 504 call System.Void PrimeNumberGenerator.Program::Ⴀ(System.Boolean,System.Int32,System.Int16) ldloc.2 <null> ldc.i4 296 ldelem.u1 <null> ldc.i4 159 sub <null> stloc.1 <null> br.s IL_0008: ldloc.1 newobj System.Void PrimeNumberGenerator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ldsfld System.Byte[] PrimeNumberGenerator.Forms.MainForm::Ⴗ ldc.i4 207 ldsfld System.Byte[] PrimeNumberGenerator.Forms.MainForm::Ⴗ ldc.i4 207 ldelem.u1 <null> ldsfld System.Byte[] PrimeNumberGenerator.Forms.MainForm::Ⴗ ldc.i4 337 ldelem.u1 <null> and <null> ldc.i4.s 67 and <null> stelem.i1 <null> ret <null> ldtoken System.Void PrimeNumberGenerator.Program::Main() pop <null> ret <null>

Module Name

jICT.exe

Full Name

jICT.exe

EntryPoint

System.Void PrimeNumberGenerator.Program::Main()

Scope Name

jICT.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

jICT

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

2

Main Method

System.Void PrimeNumberGenerator.Program::Main()

Main IL Instruction Count

39

Main IL

ldsfld System.Byte[] PrimeNumberGenerator.Forms.MainForm::Ⴗ stloc.2 <null> ldc.i4.4 <null> stloc.1 <null> ldloc.1 <null> switch dnlib.DotNet.Emit.Instruction[] call System.Void PrimeNumberGenerator.Forms.SettingsForm::Ⴅ() ldc.i4 563 ldc.i4 514 call System.Void PrimeNumberGenerator.Classes.NumberAnalyzer::Ⴀ(System.Int32,System.Int16) ldc.i4.0 <null> ldc.i4 510 ldc.i4 504 call System.Void PrimeNumberGenerator.Program::Ⴀ(System.Boolean,System.Int32,System.Int16) ldloc.2 <null> ldc.i4 296 ldelem.u1 <null> ldc.i4 159 sub <null> stloc.1 <null> br.s IL_0008: ldloc.1 newobj System.Void PrimeNumberGenerator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ldsfld System.Byte[] PrimeNumberGenerator.Forms.MainForm::Ⴗ ldc.i4 207 ldsfld System.Byte[] PrimeNumberGenerator.Forms.MainForm::Ⴗ ldc.i4 207 ldelem.u1 <null> ldsfld System.Byte[] PrimeNumberGenerator.Forms.MainForm::Ⴗ ldc.i4 337 ldelem.u1 <null> and <null> ldc.i4.s 67 and <null> stelem.i1 <null> ret <null> ldtoken System.Void PrimeNumberGenerator.Program::Main() pop <null> ret <null>

44e75d142db1d45fc971adccb08f4d21 (523.26 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙