5081657547532969afad7a03891b43f7

PE Executable

MD5: 5081657547532969afad7a03891b43f7

Size: 655.87 KB

application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	5081657547532969afad7a03891b43f7
Sha1	2aa33f9d04274c941ec0a668819a2f3960c691d1
Sha256	8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198
Sha384	09d68fef3d22d875d5a5d57db4a3c23a400338951288466e04ef5719b99c0d7aff3f7428256f3ed720227fb06478b2b0
Sha512	66d44c75fe03e44cd09a2ed8e397960e586ab990636509efbcd302d573b025c1861d12869cde01b623954547dba6e5f57091933f8f333d378c805edc40e87b14
SSDeep	12288:M9J85LGE/c8SttVJDj8iCug9aCenPcN3CNIb88WsNMP5F1k:M9gSE/c8SttHf8iC7hWPW3CNIb88WsN8
TLSH	66D4194177409B51D55A317AD3D618340BF1B9E74B32C20AEF8A3FA97D72363AC1B60A

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Spulebane.exe
Full Name	Spulebane.exe
EntryPoint	System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Scope Name	Spulebane.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Spulebane
Assembly Version	37.40.78.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	461d39c4a423da0b
Target Framework	.NETFramework,Version=v4.0
Total Strings	124
Main Method	System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Main IL Instruction Count	55
Main IL	ldc.i4 79460974 stloc V_4 ldc.i4 2086112099 stloc V_5 ldc.i4 3 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 201 br IL_005E: stloc V_4 ldc.i4 135 br IL_005E: stloc V_4 ldc.i4 454 br IL_005E: stloc V_4 ldc.i4 235 br IL_005E: stloc V_4 ldc.i4 270 br IL_005E: stloc V_4 stloc V_4 ldc.i4 3 newarr System.Int32 stloc V_3 ldloc V_3 ldc.i4 0 ldc.i4 809 stelem.i4 <null> ldloc V_3 ldc.i4 1 ldc.i4 781 stelem.i4 <null> ldloc V_3 ldc.i4 2 ldc.i4 703 stelem.i4 <null> ldloc V_3 ldc.i4 0 ldelem.i4 <null> stloc V_5 nop <null> call System.IntPtr f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cd039bc9f2ac7cb09fe1eec6c1234b95() ldc.i4 270 ldloc V_4 sub <null> call System.Boolean f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cf0fb09fc8737c2fbc5d8da397c3c292(System.IntPtr,System.Int32) pop <null> leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles() pop <null> leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles() call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 -270 ldloc V_4 add <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void c46b289fb7fd506407569ddbd438c5e5.a57d8da3267353e6590928a2a94a29ad::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	Spulebane.exe
Full Name	Spulebane.exe
EntryPoint	System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Scope Name	Spulebane.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Spulebane
Assembly Version	37.40.78.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	461d39c4a423da0b
Target Framework	.NETFramework,Version=v4.0
Total Strings	124
Main Method	System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Main IL Instruction Count	55
Main IL	ldc.i4 79460974 stloc V_4 ldc.i4 2086112099 stloc V_5 ldc.i4 3 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 201 br IL_005E: stloc V_4 ldc.i4 135 br IL_005E: stloc V_4 ldc.i4 454 br IL_005E: stloc V_4 ldc.i4 235 br IL_005E: stloc V_4 ldc.i4 270 br IL_005E: stloc V_4 stloc V_4 ldc.i4 3 newarr System.Int32 stloc V_3 ldloc V_3 ldc.i4 0 ldc.i4 809 stelem.i4 <null> ldloc V_3 ldc.i4 1 ldc.i4 781 stelem.i4 <null> ldloc V_3 ldc.i4 2 ldc.i4 703 stelem.i4 <null> ldloc V_3 ldc.i4 0 ldelem.i4 <null> stloc V_5 nop <null> call System.IntPtr f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cd039bc9f2ac7cb09fe1eec6c1234b95() ldc.i4 270 ldloc V_4 sub <null> call System.Boolean f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cf0fb09fc8737c2fbc5d8da397c3c292(System.IntPtr,System.Int32) pop <null> leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles() pop <null> leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles() call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 -270 ldloc V_4 add <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void c46b289fb7fd506407569ddbd438c5e5.a57d8da3267353e6590928a2a94a29ad::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

5081657547532969afad7a03891b43f7 (655.87 KB)

File Structure

Characteristics

No malware configuration were found at this point.

You must be signed in to post a comment.