Suspicious
Suspect

45ca534c46f05171477501366a3bdfab

PE Executable
|
MD5: 45ca534c46f05171477501366a3bdfab
|
Size: 793.6 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
45ca534c46f05171477501366a3bdfab
Sha1
9a9168e58083386017724370ad89f5f29f6e3cd4
Sha256
a42941472759b2fbbd3d8958263b1f83cf2619190b15926ff39bfdff12ab9964
Sha384
7f7fcbee6de5f53757d9f3fbe545fe625e27a86fafc8668a4542d477066814b67e88df5765dc8e39913b03d3f06b6118
Sha512
ca9b55c80fe23ae68b5e87c33211c3527e247b66b43d6c1e0a4d33bd26f6b17208ae71a0dca306129c4943b7400cd52f9f968cc1c4be09f8d8310510847e8de1
SSDeep
12288:QRg853VXlyxjS/gpKEtnMt/5OGpo5hc9/aCkUIc:C5F1icYGpoDcGU
TLSH
ADF43AE11AA43B51D1FEEE35CA360560E7BD7C428E238A49FC473FA67D3660588806D7

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
45ca534c46f05171477501366a3bdfab
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0032
ID:0
ID:0-preview.png
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
ID:0036
ID:0
ID:0037
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
FiberaDigit.fibraship.ico
1KwsnyZ5d6.cy0P8Fkkr6z.resources
$this.Icon
[NBF]root.IconData
AboutDeveloperToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
AboutSoftwareToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
ExitToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
SettingsToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
1KwsnyZ5d6.Resources.resources
f703a01b70b31d.Resources.resources
1685e2e50
[NBF]root.Data
1685e2e51
[NBF]root.Data
1685e2e52
[NBF]root.Data
1685e2e53
[NBF]root.Data
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

1KwsnyZ5d6
Full Name

1KwsnyZ5d6
EntryPoint

System.Void 1KwsnyZ5d6.Fy0pr::Ryx4dY0wq7sT()
Scope Name

1KwsnyZ5d6
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

1KwsnyZ5d6
Assembly Version

24.22.7.13
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

2241
Main Method

System.Void 1KwsnyZ5d6.Fy0pr::Ryx4dY0wq7sT()
Main IL Instruction Count

73
Main IL

nop <null> ldtoken System.Windows.Forms.Application call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stloc.0 <null> ldloc.0 <null> ldstr EnableVisualStyles ldc.i4.s 24 callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Reflection.BindingFlags) ldnull <null> ldnull <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> ldloc.0 <null> ldstr SetCompatibleTextRenderingDefault ldc.i4.s 24 callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Reflection.BindingFlags) ldnull <null> ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldc.i4.0 <null> box System.Boolean stelem.ref <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> call System.OperatingSystem System.Environment::get_OSVersion() callvirt System.Version System.OperatingSystem::get_Version() callvirt System.Int32 System.Version::get_Major() ldc.i4.6 <null> clt <null> ldc.i4.0 <null> ceq <null> stloc.1 <null> ldloc.1 <null> brfalse.s IL_0071: nop call System.Boolean 1KwsnyZ5d6.Fy0pr::7csQD9pb6qx() pop <null> nop <null> nop <null> call System.Boolean 1KwsnyZ5d6.Fy0pr::Mco1wL0t() ldc.i4.0 <null> ceq <null> stloc.2 <null> ldloc.2 <null> brfalse.s IL_0080: nop br.s IL_00B6: ret nop <null> nop <null> call System.Void 1KwsnyZ5d6.Fy0pr::5mrZR7xn() nop <null> leave.s IL_00AF: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.3 <null> nop <null> ldstr Application failed to start: ldloc.3 <null> callvirt System.String System.Exception::get_Message() call System.String System.String::Concat(System.String,System.String) call System.Void 1KwsnyZ5d6.Fy0pr::Tji5k8JbNb(System.String) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00AF: nop nop <null> call System.Void System.Windows.Forms.Application::Exit() nop <null> ret <null>
Module Name

1KwsnyZ5d6
Full Name

1KwsnyZ5d6
EntryPoint

System.Void 1KwsnyZ5d6.Fy0pr::Ryx4dY0wq7sT()
Scope Name

1KwsnyZ5d6
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

1KwsnyZ5d6
Assembly Version

24.22.7.13
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

2241
Main Method

System.Void 1KwsnyZ5d6.Fy0pr::Ryx4dY0wq7sT()
Main IL Instruction Count

73
Main IL

nop <null> ldtoken System.Windows.Forms.Application call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stloc.0 <null> ldloc.0 <null> ldstr EnableVisualStyles ldc.i4.s 24 callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Reflection.BindingFlags) ldnull <null> ldnull <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> ldloc.0 <null> ldstr SetCompatibleTextRenderingDefault ldc.i4.s 24 callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Reflection.BindingFlags) ldnull <null> ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldc.i4.0 <null> box System.Boolean stelem.ref <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> call System.OperatingSystem System.Environment::get_OSVersion() callvirt System.Version System.OperatingSystem::get_Version() callvirt System.Int32 System.Version::get_Major() ldc.i4.6 <null> clt <null> ldc.i4.0 <null> ceq <null> stloc.1 <null> ldloc.1 <null> brfalse.s IL_0071: nop call System.Boolean 1KwsnyZ5d6.Fy0pr::7csQD9pb6qx() pop <null> nop <null> nop <null> call System.Boolean 1KwsnyZ5d6.Fy0pr::Mco1wL0t() ldc.i4.0 <null> ceq <null> stloc.2 <null> ldloc.2 <null> brfalse.s IL_0080: nop br.s IL_00B6: ret nop <null> nop <null> call System.Void 1KwsnyZ5d6.Fy0pr::5mrZR7xn() nop <null> leave.s IL_00AF: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.3 <null> nop <null> ldstr Application failed to start: ldloc.3 <null> callvirt System.String System.Exception::get_Message() call System.String System.String::Concat(System.String,System.String) call System.Void 1KwsnyZ5d6.Fy0pr::Tji5k8JbNb(System.String) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00AF: nop nop <null> call System.Void System.Windows.Forms.Application::Exit() nop <null> ret <null>
45ca534c46f05171477501366a3bdfab (793.6 KB)
File Structure
45ca534c46f05171477501366a3bdfab
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0032
ID:0
ID:0-preview.png
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
ID:0036
ID:0
ID:0037
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
FiberaDigit.fibraship.ico
1KwsnyZ5d6.cy0P8Fkkr6z.resources
$this.Icon
[NBF]root.IconData
AboutDeveloperToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
AboutSoftwareToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
ExitToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
SettingsToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
1KwsnyZ5d6.Resources.resources
f703a01b70b31d.Resources.resources
1685e2e50
[NBF]root.Data
1685e2e51
[NBF]root.Data
1685e2e52
[NBF]root.Data
1685e2e53
[NBF]root.Data
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙