Suspicious
Suspect

593e0fe77ef56eccf0ec8369d35bc725

PE Executable
|
MD5: 593e0fe77ef56eccf0ec8369d35bc725
|
Size: 61.44 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
593e0fe77ef56eccf0ec8369d35bc725
Sha1
5e7c787b942fe29474ac8a5fe203f9ef3bb12936
Sha256
396d140dc9291967bad26253ddd77758242e73cdc7c26ac55e60faeff90c48c1
Sha384
fb956296142a29a771b15d1b61f92758e08ca7c2bb3d7785a91963df5b7fcc150920d454040544b7eadc7eabc8ac130c
Sha512
c451e0a34b9c9df5f2a8629a54c4c3b691acef96fe30d153884aeef50342bb4d89c91bad48d2158aa8f7e07a7726bace4e1065094c939763efb4c41194eaa06e
SSDeep
1536:eo7X82DVdJJWkXmBkb5HRf5wSNLu8Ojkk:eo7sYbPOkb5HVL/Ojt
TLSH
BB537D297BE2412AE1FE9FB548F53163D675F2235907EA2F14C1018B1A17ACDCE503E6

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Module Name

brainfuckingrot.exe

Full Name

brainfuckingrot.exe

EntryPoint

System.Void Stub.cpzecuONPfP8eSFktibG3J1OFFqCEYyDI::Etu1jCqqne0O9HIYBpbaOLCbZEdtYmWpK()

Scope Name

brainfuckingrot.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

brainfuckingrot

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

238

Main Method

System.Void Stub.cpzecuONPfP8eSFktibG3J1OFFqCEYyDI::Etu1jCqqne0O9HIYBpbaOLCbZEdtYmWpK()

Main IL Instruction Count

58

Main IL

ldsfld System.Int32 DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::WjN1NpKUjj7cJsezHzRzVBND2Kxkpk7nM ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::oI4sAmNNDlwUE6BLruauQ9GCX8J6dZdcc call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::oI4sAmNNDlwUE6BLruauQ9GCX8J6dZdcc ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::ZDaHdYLMC37ijIdnBT0NqpPAQz24Ixxab call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::ZDaHdYLMC37ijIdnBT0NqpPAQz24Ixxab ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::g7kx4iiZo8AfNxWs6OcSRyMWkAdaEfdPE call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::g7kx4iiZo8AfNxWs6OcSRyMWkAdaEfdPE ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::kBVRyYbinPRLr1nkM4hWh1uztur0kRtBZ call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::kBVRyYbinPRLr1nkM4hWh1uztur0kRtBZ ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::7HTcki9oTg16ZKu3eWZCpMXPfyZMNFyVy call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::7HTcki9oTg16ZKu3eWZCpMXPfyZMNFyVy ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::tQUlkW5CloyWdYaKnR3iiMvDdZxe6P71m call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::tQUlkW5CloyWdYaKnR3iiMvDdZxe6P71m leave.s IL_009E: call System.Boolean Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::liEN1pt9txBDMNZLYLvP51KkQzN9DxVOjnHqv9UE7Ju8vfUTGCMlz3n8tBCiOpcUa() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_009E: call System.Boolean Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::liEN1pt9txBDMNZLYLvP51KkQzN9DxVOjnHqv9UE7Ju8vfUTGCMlz3n8tBCiOpcUa() call System.Boolean Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::liEN1pt9txBDMNZLYLvP51KkQzN9DxVOjnHqv9UE7Ju8vfUTGCMlz3n8tBCiOpcUa() brtrue.s IL_00AB: call System.Void Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::pSxpleeel0eWGf9ojUlOHv2A9jK6TYhToIgaLQmTtjUrqRaiJ1B3zVIGewUuEmT1B() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::pSxpleeel0eWGf9ojUlOHv2A9jK6TYhToIgaLQmTtjUrqRaiJ1B3zVIGewUuEmT1B() ldnull <null> ldftn System.Void Stub.cpzecuONPfP8eSFktibG3J1OFFqCEYyDI::7uRSTwhBPC2RSqTahZ4bhAOhXEhp3ZAAw() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void Stub.cpzecuONPfP8eSFktibG3J1OFFqCEYyDI::n6w4p3EafUWV46cK7sNfHfuLve3mMl14V() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>

Module Name

brainfuckingrot.exe

Full Name

brainfuckingrot.exe

EntryPoint

System.Void Stub.cpzecuONPfP8eSFktibG3J1OFFqCEYyDI::Etu1jCqqne0O9HIYBpbaOLCbZEdtYmWpK()

Scope Name

brainfuckingrot.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

brainfuckingrot

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

238

Main Method

System.Void Stub.cpzecuONPfP8eSFktibG3J1OFFqCEYyDI::Etu1jCqqne0O9HIYBpbaOLCbZEdtYmWpK()

Main IL Instruction Count

58

Main IL

ldsfld System.Int32 DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::WjN1NpKUjj7cJsezHzRzVBND2Kxkpk7nM ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::oI4sAmNNDlwUE6BLruauQ9GCX8J6dZdcc call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::oI4sAmNNDlwUE6BLruauQ9GCX8J6dZdcc ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::ZDaHdYLMC37ijIdnBT0NqpPAQz24Ixxab call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::ZDaHdYLMC37ijIdnBT0NqpPAQz24Ixxab ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::g7kx4iiZo8AfNxWs6OcSRyMWkAdaEfdPE call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::g7kx4iiZo8AfNxWs6OcSRyMWkAdaEfdPE ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::kBVRyYbinPRLr1nkM4hWh1uztur0kRtBZ call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::kBVRyYbinPRLr1nkM4hWh1uztur0kRtBZ ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::7HTcki9oTg16ZKu3eWZCpMXPfyZMNFyVy call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::7HTcki9oTg16ZKu3eWZCpMXPfyZMNFyVy ldsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::tQUlkW5CloyWdYaKnR3iiMvDdZxe6P71m call System.Object Stub.dYo1c9lIfAB5Nq03igZCVUCb4JEH8CIFpzQYPU6SEkRqN9lWS1vqT3A3Wd1ooN3LQ::pgs3dhSDfw60SJt1IsTMPYeS2LCxd1IrqORJPA4GIWhaccIvDo1paiLgwJHzpgzk4(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String DGrvhr8xMkn6f1kuFUIkKrMtTy4wewn1s::tQUlkW5CloyWdYaKnR3iiMvDdZxe6P71m leave.s IL_009E: call System.Boolean Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::liEN1pt9txBDMNZLYLvP51KkQzN9DxVOjnHqv9UE7Ju8vfUTGCMlz3n8tBCiOpcUa() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_009E: call System.Boolean Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::liEN1pt9txBDMNZLYLvP51KkQzN9DxVOjnHqv9UE7Ju8vfUTGCMlz3n8tBCiOpcUa() call System.Boolean Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::liEN1pt9txBDMNZLYLvP51KkQzN9DxVOjnHqv9UE7Ju8vfUTGCMlz3n8tBCiOpcUa() brtrue.s IL_00AB: call System.Void Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::pSxpleeel0eWGf9ojUlOHv2A9jK6TYhToIgaLQmTtjUrqRaiJ1B3zVIGewUuEmT1B() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.UZLxQn1EjK2QQ15LsYekGhx4PhvrP8mWKH9mXPKvoIWOCIay3Gh2VcgM3xTdhedjq::pSxpleeel0eWGf9ojUlOHv2A9jK6TYhToIgaLQmTtjUrqRaiJ1B3zVIGewUuEmT1B() ldnull <null> ldftn System.Void Stub.cpzecuONPfP8eSFktibG3J1OFFqCEYyDI::7uRSTwhBPC2RSqTahZ4bhAOhXEhp3ZAAw() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void Stub.cpzecuONPfP8eSFktibG3J1OFFqCEYyDI::n6w4p3EafUWV46cK7sNfHfuLve3mMl14V() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>

593e0fe77ef56eccf0ec8369d35bc725 (61.44 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙