Suspicious
Suspect

52fcd86dca6b5d982074e56f98f499d2

PE Executable
|
MD5: 52fcd86dca6b5d982074e56f98f499d2
|
Size: 1.31 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
52fcd86dca6b5d982074e56f98f499d2
Sha1
f96f2f5719506e82b6fee97d4a3f89953d7bc51e
Sha256
c740d11163715295558cdae9b9089d49bb8956bc632bf7b5dbf059ed579f310a
Sha384
8ae9f629763ccebddd5014dad24ac67ec411f9f62cf2a1fcf057798b9699fc4d4af05b1c619e36d828ceaf5805a06241
Sha512
27f4423b0c67bead70f323d4aba56928a54246933399dad7de297f21517b441f5c6eabd05e2f07901557a03a37292b7388cfc98b4d0b3302b30340633acce60d
SSDeep
24576:7/d3nOMu3MwlXAA4dsr1+8liXy6nzfS5tcTpucAj:7BnOl3lPUzXyptcTIH
TLSH
825533262F4C9657CBCC5B7D4337887207AAE9B7A740D6063E85EBA16D017C8123F2D6

PeID

Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Glbmxrlc.Properties.Resources.resources
Vodzraggj
TimeZoneConverter.Data.Aliases.csv.gz
file_0.bin
TimeZoneConverter.Data.Mapping.csv.gz
file_0.bin
TimeZoneConverter.Data.RailsMapping.csv.gz
file_0.bin
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Surdxzk.exe

Full Name

Surdxzk.exe

EntryPoint

System.Void Glbmxrlc.Jgdaudzzpip::Main()

Scope Name

Surdxzk.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Surdxzk

Assembly Version

1.0.5244.5488

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

82

Main Method

System.Void Glbmxrlc.Jgdaudzzpip::Main()

Main IL Instruction Count

59

Main IL

nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) nop <null> ldstr 1.4.1 newobj System.Void System.Version::.ctor(System.String) stloc.0 <null> ldnull <null> ldloc.0 <null> newobj System.Void Glbmxrlc.Phgtxgr::.ctor(System.String,System.Version) stloc.1 <null> newobj System.Void Glbmxrlc.Rxeydejlh::.ctor() stloc.2 <null> newobj System.Void Glbmxrlc.Otynegr::.ctor() stloc.3 <null> newobj System.Void Glbmxrlc.Nojxgop::.ctor() stloc.s V_4 ldloc.2 <null> ldloc.3 <null> ldloc.s V_4 newobj System.Void Glbmxrlc.Wgaifmydlw::.ctor(Glbmxrlc.Rxeydejlh,Glbmxrlc.Otynegr,Glbmxrlc.Nojxgop) stloc.s V_5 nop <null> ldloc.1 <null> ldloc.s V_5 ldftn System.Void Glbmxrlc.Wgaifmydlw::Dgxjuuvgbiw(System.Object,Glbmxrlc.Vtxqmf) newobj System.Void System.EventHandler`1<Glbmxrlc.Vtxqmf>::.ctor(System.Object,System.IntPtr) callvirt System.Void Glbmxrlc.Phgtxgr::add_DownloadCompleted(System.EventHandler`1<Glbmxrlc.Vtxqmf>) nop <null> ldloc.2 <null> ldloc.s V_5 ldftn System.Void Glbmxrlc.Wgaifmydlw::Vimlralvcbn(System.Object,Glbmxrlc.Vdyhez) newobj System.Void System.EventHandler`1<Glbmxrlc.Vdyhez>::.ctor(System.Object,System.IntPtr) callvirt System.Void Glbmxrlc.Rxeydejlh::add_DecryptionCompleted(System.EventHandler`1<Glbmxrlc.Vdyhez>) nop <null> ldloc.3 <null> ldloc.s V_5 ldftn System.Void Glbmxrlc.Wgaifmydlw::Cppayxzn(System.Object,Glbmxrlc.Tkbanbjpe) newobj System.Void System.EventHandler`1<Glbmxrlc.Tkbanbjpe>::.ctor(System.Object,System.IntPtr) callvirt System.Void Glbmxrlc.Otynegr::add_LoadCompleted(System.EventHandler`1<Glbmxrlc.Tkbanbjpe>) nop <null> ldloc.s V_4 ldloc.s V_5 ldftn System.Void Glbmxrlc.Wgaifmydlw::Fcvtatmmm(System.Object,Glbmxrlc.Bxltrcaidp) newobj System.Void System.EventHandler`1<Glbmxrlc.Bxltrcaidp>::.ctor(System.Object,System.IntPtr) callvirt System.Void Glbmxrlc.Nojxgop::add_InvocationCompleted(System.EventHandler`1<Glbmxrlc.Bxltrcaidp>) nop <null> ldloc.1 <null> callvirt System.Void Glbmxrlc.Phgtxgr::Uhjcc() nop <null> nop <null> leave IL_00AC: ret ldloc.s V_5 brfalse IL_00AB: endfinally ldloc.s V_5 callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ret <null>

52fcd86dca6b5d982074e56f98f499d2 (1.31 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙