Suspicious
Suspect

4c500b5b338520b36a3372174a6b6857

PE Executable
|
MD5: 4c500b5b338520b36a3372174a6b6857
|
Size: 2.43 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
4c500b5b338520b36a3372174a6b6857
Sha1
780097cf39b4fb56e16a8d66781b2b0466a9b7b5
Sha256
611694c5d97d8e22b16be5aa8cd834e896b3c44e72dfc7237b84ce7baf7882c0
Sha384
df1f3bd516ecfa716db31d8e1b4931e7ea03d27249fa9afb9802ec78039abb444b831d002bf3388e9144e895ff43ff41
Sha512
4c12b263055bee33994286a57fa271fe20dc95f7e54e7f8ffcd3904b53549bb18e268649f70db4017a3f2db042f3c9560dd365bd6e2301425751b2ba4e20969e
SSDeep
24576:LhIk2Jj7cJSjv1BuCw7sULd3yUJVdzxlkj/7WUx2VzUN+XpOPwOl67:ak2JuYNBI0KcWBAEW
TLSH
49B58E3439FB502AB173EFB58AE4749ADA6FF6B33707589E205003864713A81DDD163A

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Informations
Name
Value
Module Name

jvgIonv

Full Name

jvgIonv

EntryPoint

System.Void Z33.357::6K6(System.String[])

Scope Name

jvgIonv

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

BGmrr5jPlSPi1mINqS8vocHpCoqxPsXrTAn

Assembly Version

7.4.6.6

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

2910

Main Method

System.Void Z33.357::6K6(System.String[])

Main IL Instruction Count

33

Main IL

nop <null> newobj System.Void xMB.3rw::.ctor() pop <null> ldarg.0 <null> brfalse IL_0014: ldnull ldarg.0 <null> ldlen <null> brtrue IL_001A: ldarg.0 ldnull <null> br IL_001D: ldarg.0 ldarg.0 <null> ldc.i4.0 <null> ldelem.ref <null> ldarg.0 <null> brfalse IL_002C: ldnull ldarg.0 <null> ldlen <null> conv.i4 <null> ldc.i4.1 <null> bgt IL_0032: ldarg.0 ldnull <null> br IL_0035: newobj System.Void 6k7.n7t::.ctor(System.String,System.String) ldarg.0 <null> ldc.i4.1 <null> ldelem.ref <null> newobj System.Void 6k7.n7t::.ctor(System.String,System.String) call System.Void o9M.655::M4n(6k7.n7t) nop <null> ldstr DE496crcOSDiKz7c newobj System.Void D4D.7YK::.ctor(System.String) call System.Void D4D.7YK::2N6() nop <null> ret <null>

Module Name

jvgIonv

Full Name

jvgIonv

EntryPoint

System.Void Z33.357::6K6(System.String[])

Scope Name

jvgIonv

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

BGmrr5jPlSPi1mINqS8vocHpCoqxPsXrTAn

Assembly Version

7.4.6.6

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

2910

Main Method

System.Void Z33.357::6K6(System.String[])

Main IL Instruction Count

33

Main IL

nop <null> newobj System.Void xMB.3rw::.ctor() pop <null> ldarg.0 <null> brfalse IL_0014: ldnull ldarg.0 <null> ldlen <null> brtrue IL_001A: ldarg.0 ldnull <null> br IL_001D: ldarg.0 ldarg.0 <null> ldc.i4.0 <null> ldelem.ref <null> ldarg.0 <null> brfalse IL_002C: ldnull ldarg.0 <null> ldlen <null> conv.i4 <null> ldc.i4.1 <null> bgt IL_0032: ldarg.0 ldnull <null> br IL_0035: newobj System.Void 6k7.n7t::.ctor(System.String,System.String) ldarg.0 <null> ldc.i4.1 <null> ldelem.ref <null> newobj System.Void 6k7.n7t::.ctor(System.String,System.String) call System.Void o9M.655::M4n(6k7.n7t) nop <null> ldstr DE496crcOSDiKz7c newobj System.Void D4D.7YK::.ctor(System.String) call System.Void D4D.7YK::2N6() nop <null> ret <null>

Artefacts
Name
Value
Embedded Resources

0

Suspicious Type Names (1-2 chars)

0

4c500b5b338520b36a3372174a6b6857 (2.43 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙