Suspicious
Suspect

582a18d09290ca01a3e75841590bb9d1

PE Executable
|
MD5: 582a18d09290ca01a3e75841590bb9d1
|
Size: 731.14 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

High

Hash
Hash Value
MD5
582a18d09290ca01a3e75841590bb9d1
Sha1
7ab7cfbc34c8730368d173b6da887efc1dedbd64
Sha256
6c09b777df1a95bac8b74f67909ea7a24dd048d58847003546ccef328f72aff6
Sha384
2e49af0686905788897a8ac09eeef38317926132e150a89faaef937f00c97f2dc181284bf1cce32df1af553619a12f39
Sha512
4b624b7152383461854f183bbee656a6b389984b6b867b52ef99b0ca89273c6ea8c51c1a76f3d8a59da3728e001a710d2adf4a604c737cb8916d52dcdbc0ebf2
SSDeep
12288:UC57eRPAIbMTEM8xLyBEHom4gQOaK+1Fz4JXjLuSaAMcwOLsMBf/VmzPJCKqp:v1+iTMyUom4jODbMc8oK
TLSH
CBF4F18C7654B5AFC453CA728AA4DC74A6607CBB930BC20391EB5C9FB91C697CE045E3

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Ahorcado.FormMenuPrincipal.resources
Ahorcado.Properties.Resources.resources
R
[NBF]root.Data
[NBF]root.Data-preview.png
Task1
[NBF]root.Data
VwZDRS
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

jCEOjW.exe

Full Name

jCEOjW.exe

EntryPoint

System.Void Ahorcado.Program::Main()

Scope Name

jCEOjW.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

jCEOjW

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

200

Main Method

System.Void Ahorcado.Program::Main()

Main IL Instruction Count

25

Main IL

nop <null> ldc.i4 785039883 ldc.i4 768993711 xor <null> dup <null> stloc.0 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0037: nop call System.Void Ahorcado.Program::‏‮‬‍‍‎​​‮‮‭​‭‍‏‪‮‭‭‮‏‍‏‬‪​‌‪‮() ldloc.0 <null> ldc.i4 -317183466 mul <null> ldc.i4 1351629276 xor <null> br.s IL_0006: ldc.i4 768993711 nop <null> ldc.i4.0 <null> call System.Void Ahorcado.Program::​‎‍‮‮​‪‫‏‫‭‎‭‎‪‏‪‌​‌‍‫‪‌‬‏‮‮(System.Boolean) nop <null> newobj System.Void Ahorcado.FormMenuPrincipal::.ctor() call System.Void Ahorcado.Program::​‭‌‬‎‫‪‍‬‬‫‍‪‬‫‌‪‮(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

jCEOjW.exe

Full Name

jCEOjW.exe

EntryPoint

System.Void Ahorcado.Program::Main()

Scope Name

jCEOjW.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

jCEOjW

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

200

Main Method

System.Void Ahorcado.Program::Main()

Main IL Instruction Count

25

Main IL

nop <null> ldc.i4 785039883 ldc.i4 768993711 xor <null> dup <null> stloc.0 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0037: nop call System.Void Ahorcado.Program::‏‮‬‍‍‎​​‮‮‭​‭‍‏‪‮‭‭‮‏‍‏‬‪​‌‪‮() ldloc.0 <null> ldc.i4 -317183466 mul <null> ldc.i4 1351629276 xor <null> br.s IL_0006: ldc.i4 768993711 nop <null> ldc.i4.0 <null> call System.Void Ahorcado.Program::​‎‍‮‮​‪‫‏‫‭‎‭‎‪‏‪‌​‌‍‫‪‌‬‏‮‮(System.Boolean) nop <null> newobj System.Void Ahorcado.FormMenuPrincipal::.ctor() call System.Void Ahorcado.Program::​‭‌‬‎‫‪‍‬‬‫‍‪‬‫‌‪‮(System.Windows.Forms.Form) nop <null> ret <null>

582a18d09290ca01a3e75841590bb9d1 (731.14 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙