Suspicious
Suspect

5b98f341729789768f830375e4223092

PE Executable
|
MD5: 5b98f341729789768f830375e4223092
|
Size: 3.99 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
5b98f341729789768f830375e4223092
Sha1
e169b827a356b9c2f8b7fb73da262304ba5e6996
Sha256
4d3e6fe106f6d05c524b1e72a093651c4c76544a8d526a81d5fd448806bec304
Sha384
f78633edda04cf45d11e24ff009c999ff2523e383450986cb9b7cd2ae477fd9af3d8a748bedc9e565ae1f4a9da85b19d
Sha512
20b96afa5677472df37d1f4c800e1848b89bd2e895e3ac1b3000ca6fda653e4151c9cf899e600d7f8b200f369041f325365aef99b096cf85107821752858cb49
SSDeep
98304:Bkz8zbgXBsFTiLj4AYqSTt6vlNbCcrbw2mBcV5aUg1ST:B28fgIWU36vjbCO82OcXg16
TLSH
9E06238832E0B2EFC92BC8B5EB592C64EB9134B743875A17115346EDD96D897CF081F2
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
QCJE
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Module Name

server1.exe

Full Name

server1.exe

EntryPoint

System.Void ‍‪‍‌‬‍‮‬‪‍​‮‫​‍‏‮‭‬‮::‮‭‫‮‬‎‌‍‮‏‮​‮‬​‌‫‫‎‬​‭‪‪‮()

Scope Name

server1.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

server1

Assembly Version

1.2.6.9

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

1

Main Method

System.Void ‍‪‍‌‬‍‮‬‪‍​‮‫​‍‏‮‭‬‮::‮‭‫‮‬‎‌‍‮‏‮​‮‬​‌‫‫‎‬​‭‪‪‮()

Main IL Instruction Count

17

Main IL

conv.ovf.i2 <null> stloc.0 <null> stelem.i1 <null> bgt <null> UNKNOWN1 <null> ldc.i4.m1 <null> UNKNOWN1 <null> ckfinite <null> UNKNOWN1 <null> and <null> stelem.i4 <null> callvirt <null> or <null> div.un <null> UNKNOWN1 <null> ldelema <null> isinst <null>

5b98f341729789768f830375e4223092 (3.99 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙