5838cb23489e11a4a1d36f8870adff4d

PE Executable
|
MD5: 5838cb23489e11a4a1d36f8870adff4d
|
Size: 1.99 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	5838cb23489e11a4a1d36f8870adff4d
Sha1	6034f6adae251b6bbf2b86a5229194fc2626bf7e
Sha256	15c0f6587e713de3cc2a87d01f4ef228ed6998b16ba6249b2238084f8a03ec32
Sha384	b4fa3e545a32525e9f6a130087f94bfed6c42520d822d7190fd2cd0e251ec0c759e59a249a3564d0dab22cd40c4c7c1e
Sha512	f5052ae942a19bc5707b582763c57b45c112fb2b023872ab79bd264c879a6f4b7d0352c3151b065b352e0f03382fd0e7a5fa35238dfe6273e016482842dd6575
SSDeep	49152:OSj1a7anKy1S9/aOHRnsovgncO3JVO71O7t:OSj1a7im/aOxgnRJK4
TLSH	DD95F04B765A4874C069673EC5DA9504E3F178456323E78F79C923A60E133EEE92E383

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual C++ v6.0 DLL

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: Syntex Spoofer.pdb
Module Name	Syntex Spoofer.exe
Full Name	Syntex Spoofer.exe
EntryPoint	System.Void dZfm5hq7EpQZmC67nD.hFVDIyQgo3eFMr0i6G::TeSSdIds4()
Scope Name	Syntex Spoofer.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Syntex Spoofer
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	44
Main Method	System.Void dZfm5hq7EpQZmC67nD.hFVDIyQgo3eFMr0i6G::TeSSdIds4()
Main IL Instruction Count	36
Main IL	ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0030: ldc.i4.0 ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldc.i4 4 br IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 0 ldsfld <Module>{b0190f00-605c-4317-b4bc-75089167ec59} <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_967f1b9912a046a39be621c005ef29b2 ldfld System.Int32 <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_b710c9089e0e4b5fb57d0e20286a4202 brtrue IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) pop <null> ldc.i4 0 br IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) newobj System.Void Syntex_Spoofer.Menu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ldc.i4 3 ldsfld <Module>{b0190f00-605c-4317-b4bc-75089167ec59} <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_967f1b9912a046a39be621c005ef29b2 ldfld System.Int32 <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_d410cf12cb864c9d9077341b40a4387f brfalse IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) pop <null> ldc.i4 3 br IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) ret <null> call System.Void JWL4JwdZVfSQfMLkLZD.I83H4HdSQ0knqW5GEu4::O52BdxPqBL() ldc.i4 2 ldsfld <Module>{b0190f00-605c-4317-b4bc-75089167ec59} <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_967f1b9912a046a39be621c005ef29b2 ldfld System.Int32 <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_f8fc07b2dbc94384848d1963035ca8ab brfalse IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) pop <null> ldc.i4 1 br IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E)
Module Name	Syntex Spoofer.exe
Full Name	Syntex Spoofer.exe
EntryPoint	System.Void dZfm5hq7EpQZmC67nD.hFVDIyQgo3eFMr0i6G::TeSSdIds4()
Scope Name	Syntex Spoofer.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Syntex Spoofer
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	44
Main Method	System.Void dZfm5hq7EpQZmC67nD.hFVDIyQgo3eFMr0i6G::TeSSdIds4()
Main IL Instruction Count	36
Main IL	ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0030: ldc.i4.0 ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldc.i4 4 br IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 0 ldsfld <Module>{b0190f00-605c-4317-b4bc-75089167ec59} <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_967f1b9912a046a39be621c005ef29b2 ldfld System.Int32 <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_b710c9089e0e4b5fb57d0e20286a4202 brtrue IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) pop <null> ldc.i4 0 br IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) newobj System.Void Syntex_Spoofer.Menu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ldc.i4 3 ldsfld <Module>{b0190f00-605c-4317-b4bc-75089167ec59} <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_967f1b9912a046a39be621c005ef29b2 ldfld System.Int32 <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_d410cf12cb864c9d9077341b40a4387f brfalse IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) pop <null> ldc.i4 3 br IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) ret <null> call System.Void JWL4JwdZVfSQfMLkLZD.I83H4HdSQ0knqW5GEu4::O52BdxPqBL() ldc.i4 2 ldsfld <Module>{b0190f00-605c-4317-b4bc-75089167ec59} <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_967f1b9912a046a39be621c005ef29b2 ldfld System.Int32 <Module>{b0190f00-605c-4317-b4bc-75089167ec59}::m_f8fc07b2dbc94384848d1963035ca8ab brfalse IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E) pop <null> ldc.i4 1 br IL_0012: switch(IL_0030,IL_0040,IL_0064,IL_008D,IL_008E)

5838cb23489e11a4a1d36f8870adff4d (1.99 MB)

File Structure

Characteristics

No malware configuration were found at this point.

You must be signed in to post a comment.

5838cb23489e11a4a1d36f8870adff4d

PE Executable | MD5: 5838cb23489e11a4a1d36f8870adff4d | Size: 1.99 MB | application/x-dosexec

PE Executable
|
MD5: 5838cb23489e11a4a1d36f8870adff4d
|
Size: 1.99 MB
|
application/x-dosexec