Malicious
Malicious

5081657547532969afad7a03891b43f7

Share on LinkedIn
Print
PE Executable
MD5: 5081657547532969afad7a03891b43f7
Size: 655.87 KB
application/x-dosexec
Infection Chain
Infection chain Ctrl + scroll to zoom · drag to pan
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Medium

Hash
 Hash Value
MD5
5081657547532969afad7a03891b43f7
Sha1
2aa33f9d04274c941ec0a668819a2f3960c691d1
Sha256
8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198
Sha384
09d68fef3d22d875d5a5d57db4a3c23a400338951288466e04ef5719b99c0d7aff3f7428256f3ed720227fb06478b2b0
Sha512
66d44c75fe03e44cd09a2ed8e397960e586ab990636509efbcd302d573b025c1861d12869cde01b623954547dba6e5f57091933f8f333d378c805edc40e87b14
SSDeep
12288:M9J85LGE/c8SttVJDj8iCug9aCenPcN3CNIb88WsNMP5F1k:M9gSE/c8SttHf8iC7hWPW3CNIb88WsN8
TLSH
66D4194177409B51D55A317AD3D618340BF1B9E74B32C20AEF8A3FA97D72363AC1B60A

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
5081657547532969afad7a03891b43f7
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
c46b289fb7fd506407569ddbd438c5e5.a57d8da3267353e6590928a2a94a29ad.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
[NBF]root.IconData
progressBar1.Modifiers
$this.Language
$this.GridSize
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Spulebane.exe
Full Name

Spulebane.exe
EntryPoint

System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Scope Name

Spulebane.exe
Scope Type

ModuleDef
Kind

Console
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Spulebane
Assembly Version

37.40.78.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

461d39c4a423da0b
Target Framework

.NETFramework,Version=v4.0
Total Strings

124
Main Method

System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Main IL Instruction Count

55
Main IL

ldc.i4 79460974 stloc V_4 ldc.i4 2086112099 stloc V_5 ldc.i4 3 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 201 br IL_005E: stloc V_4 ldc.i4 135 br IL_005E: stloc V_4 ldc.i4 454 br IL_005E: stloc V_4 ldc.i4 235 br IL_005E: stloc V_4 ldc.i4 270 br IL_005E: stloc V_4 stloc V_4 ldc.i4 3 newarr System.Int32 stloc V_3 ldloc V_3 ldc.i4 0 ldc.i4 809 stelem.i4 <null> ldloc V_3 ldc.i4 1 ldc.i4 781 stelem.i4 <null> ldloc V_3 ldc.i4 2 ldc.i4 703 stelem.i4 <null> ldloc V_3 ldc.i4 0 ldelem.i4 <null> stloc V_5 nop <null> call System.IntPtr f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cd039bc9f2ac7cb09fe1eec6c1234b95() ldc.i4 270 ldloc V_4 sub <null> call System.Boolean f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cf0fb09fc8737c2fbc5d8da397c3c292(System.IntPtr,System.Int32) pop <null> leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles() pop <null> leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles() call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 -270 ldloc V_4 add <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void c46b289fb7fd506407569ddbd438c5e5.a57d8da3267353e6590928a2a94a29ad::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name

Spulebane.exe
Full Name

Spulebane.exe
EntryPoint

System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Scope Name

Spulebane.exe
Scope Type

ModuleDef
Kind

Console
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Spulebane
Assembly Version

37.40.78.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

461d39c4a423da0b
Target Framework

.NETFramework,Version=v4.0
Total Strings

124
Main Method

System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Main IL Instruction Count

55
Main IL

ldc.i4 79460974 stloc V_4 ldc.i4 2086112099 stloc V_5 ldc.i4 3 switch dnlib.DotNet.Emit.Instruction[] ldc.i4 201 br IL_005E: stloc V_4 ldc.i4 135 br IL_005E: stloc V_4 ldc.i4 454 br IL_005E: stloc V_4 ldc.i4 235 br IL_005E: stloc V_4 ldc.i4 270 br IL_005E: stloc V_4 stloc V_4 ldc.i4 3 newarr System.Int32 stloc V_3 ldloc V_3 ldc.i4 0 ldc.i4 809 stelem.i4 <null> ldloc V_3 ldc.i4 1 ldc.i4 781 stelem.i4 <null> ldloc V_3 ldc.i4 2 ldc.i4 703 stelem.i4 <null> ldloc V_3 ldc.i4 0 ldelem.i4 <null> stloc V_5 nop <null> call System.IntPtr f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cd039bc9f2ac7cb09fe1eec6c1234b95() ldc.i4 270 ldloc V_4 sub <null> call System.Boolean f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cf0fb09fc8737c2fbc5d8da397c3c292(System.IntPtr,System.Int32) pop <null> leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles() pop <null> leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles() call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 -270 ldloc V_4 add <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void c46b289fb7fd506407569ddbd438c5e5.a57d8da3267353e6590928a2a94a29ad::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
5081657547532969afad7a03891b43f7 (655.87 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙