Suspicious
Suspect

4ff5eb85a422518dc88ee5d9bba6d6d2

PE Executable
|
MD5: 4ff5eb85a422518dc88ee5d9bba6d6d2
|
Size: 3.31 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
4ff5eb85a422518dc88ee5d9bba6d6d2
Sha1
8858aaa6fb627abeec61285bb3f4d6ad23292be6
Sha256
6e24d211ffbc893adfc360912b9bd2b4c1ae1ef630a2ee030d58878a130b7d66
Sha384
800abd768646c0bb6eefdb0f58551a64b55e0fe2bf329c194966c50c261d2e97f2a7b0e7b90e7b0bca72aa3230f63c61
Sha512
2f786869b1ffb3db27fce7c15a0a46ca6f6104501d3d86e8026e9d2fe83190d22f5b7b30a7152005ee9bb9a58b78f6265107713ce53f59c72b9f76e7e4f957c9
SSDeep
49152:nZ3qcx6IfwmfEjCLZ7QU7YodSXCUmxXED/clnaw:nwAggcojJmD/7w
TLSH
E9E5691B1AC324E0D0E99E75A7BC55F956F26A6F5420A3BB004862F8CF6230E75572B3

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
4ff5eb85a422518dc88ee5d9bba6d6d2
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0032
ID:0
ID:0-preview.png
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
ID:0036
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
zefn.zefn.resources
zefn.pgaixo4jai1.png
3f86aecdbbe539.Resources.resources
2396b5870
[NBF]root.Data
2396b5871
[NBF]root.Data
2396b58710
[NBF]root.Data
2396b587100
[NBF]root.Data
2396b587101
[NBF]root.Data
2396b587102
[NBF]root.Data
2396b587103
[NBF]root.Data
2396b587104
[NBF]root.Data
2396b587105
[NBF]root.Data
2396b587106
[NBF]root.Data
2396b587107
[NBF]root.Data
2396b587108
[NBF]root.Data
2396b587109
[NBF]root.Data
2396b58711
[NBF]root.Data
2396b587110
[NBF]root.Data
2396b587111
[NBF]root.Data
2396b587112
[NBF]root.Data
2396b587113
[NBF]root.Data
2396b587114
[NBF]root.Data
2396b587115
[NBF]root.Data
2396b587116
[NBF]root.Data
2396b587117
[NBF]root.Data
2396b587118
[NBF]root.Data
2396b587119
[NBF]root.Data
2396b58712
[NBF]root.Data
2396b587120
[NBF]root.Data
2396b587121
[NBF]root.Data
2396b587122
[NBF]root.Data
2396b587123
[NBF]root.Data
2396b587124
[NBF]root.Data
2396b587125
[NBF]root.Data
2396b587126
[NBF]root.Data
2396b587127
[NBF]root.Data
2396b587128
[NBF]root.Data
2396b587129
[NBF]root.Data
2396b58713
[NBF]root.Data
2396b587130
[NBF]root.Data
2396b587131
[NBF]root.Data
2396b587132
[NBF]root.Data
2396b587133
[NBF]root.Data
2396b587134
[NBF]root.Data
2396b587135
[NBF]root.Data
2396b587136
[NBF]root.Data
2396b587137
[NBF]root.Data
2396b587138
[NBF]root.Data
2396b587139
[NBF]root.Data
2396b58714
[NBF]root.Data
2396b587140
[NBF]root.Data
2396b587141
[NBF]root.Data
2396b587142
[NBF]root.Data
2396b587143
[NBF]root.Data
2396b58715
[NBF]root.Data
2396b58716
[NBF]root.Data
2396b58717
[NBF]root.Data
2396b58718
[NBF]root.Data
2396b58719
[NBF]root.Data
2396b5872
[NBF]root.Data
2396b58720
[NBF]root.Data
2396b58721
[NBF]root.Data
2396b58722
[NBF]root.Data
2396b58723
[NBF]root.Data
2396b58724
[NBF]root.Data
2396b58725
[NBF]root.Data
2396b58726
[NBF]root.Data
2396b58727
[NBF]root.Data
2396b58728
[NBF]root.Data
2396b58729
[NBF]root.Data
2396b5873
[NBF]root.Data
2396b58730
[NBF]root.Data
2396b58731
[NBF]root.Data
2396b58732
[NBF]root.Data
2396b58733
[NBF]root.Data
2396b58734
[NBF]root.Data
2396b58735
[NBF]root.Data
2396b58736
[NBF]root.Data
2396b58737
[NBF]root.Data
2396b58738
[NBF]root.Data
2396b58739
[NBF]root.Data
2396b5874
[NBF]root.Data
2396b58740
[NBF]root.Data
2396b58741
[NBF]root.Data
2396b58742
[NBF]root.Data
2396b58743
[NBF]root.Data
2396b58744
[NBF]root.Data
2396b58745
[NBF]root.Data
2396b58746
[NBF]root.Data
2396b58747
[NBF]root.Data
2396b58748
[NBF]root.Data
2396b58749
[NBF]root.Data
2396b5875
[NBF]root.Data
2396b58750
[NBF]root.Data
2396b58751
[NBF]root.Data
2396b58752
[NBF]root.Data
2396b58753
[NBF]root.Data
2396b58754
[NBF]root.Data
2396b58755
[NBF]root.Data
2396b58756
[NBF]root.Data
2396b58757
[NBF]root.Data
2396b58758
[NBF]root.Data
2396b58759
[NBF]root.Data
2396b5876
[NBF]root.Data
2396b58760
[NBF]root.Data
2396b58761
[NBF]root.Data
2396b58762
[NBF]root.Data
2396b58763
[NBF]root.Data
2396b58764
[NBF]root.Data
2396b58765
[NBF]root.Data
2396b58766
[NBF]root.Data
2396b58767
[NBF]root.Data
2396b58768
[NBF]root.Data
2396b58769
[NBF]root.Data
2396b5877
[NBF]root.Data
2396b58770
[NBF]root.Data
2396b58771
[NBF]root.Data
2396b58772
[NBF]root.Data
2396b58773
[NBF]root.Data
2396b58774
[NBF]root.Data
2396b58775
[NBF]root.Data
2396b58776
[NBF]root.Data
2396b58777
[NBF]root.Data
2396b58778
[NBF]root.Data
2396b58779
[NBF]root.Data
2396b5878
[NBF]root.Data
2396b58780
[NBF]root.Data
2396b58781
[NBF]root.Data
2396b58782
[NBF]root.Data
2396b58783
[NBF]root.Data
2396b58784
[NBF]root.Data
2396b58785
[NBF]root.Data
2396b58786
[NBF]root.Data
2396b58787
[NBF]root.Data
2396b58788
[NBF]root.Data
2396b58789
[NBF]root.Data
2396b5879
[NBF]root.Data
2396b58790
[NBF]root.Data
2396b58791
[NBF]root.Data
2396b58792
[NBF]root.Data
2396b58793
[NBF]root.Data
2396b58794
[NBF]root.Data
2396b58795
[NBF]root.Data
2396b58796
[NBF]root.Data
2396b58797
[NBF]root.Data
2396b58798
[NBF]root.Data
2396b58799
[NBF]root.Data
Informations
Name
 Value
Module Name

zefn
Full Name

zefn
EntryPoint

System.Void t3K1P.Bz41Sco9::i8WBe71J()
Scope Name

zefn
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

zefn
Assembly Version

1.7.12.8
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

2357
Main Method

System.Void t3K1P.Bz41Sco9::i8WBe71J()
Main IL Instruction Count

4
Main IL

nop <null> call System.Void t3K1P.Bz41Sco9::Eb14HzLn() nop <null> ret <null>
Module Name

zefn
Full Name

zefn
EntryPoint

System.Void t3K1P.Bz41Sco9::i8WBe71J()
Scope Name

zefn
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

zefn
Assembly Version

1.7.12.8
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

2357
Main Method

System.Void t3K1P.Bz41Sco9::i8WBe71J()
Main IL Instruction Count

4
Main IL

nop <null> call System.Void t3K1P.Bz41Sco9::Eb14HzLn() nop <null> ret <null>
Artefacts
Name
 Value
Embedded Resources

4
Suspicious Type Names (1-2 chars)

0
4ff5eb85a422518dc88ee5d9bba6d6d2 (3.31 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙