Suspicious
Suspect

69071b22e38436dca1ed8f9b9807bd8c

PE Executable
|
MD5: 69071b22e38436dca1ed8f9b9807bd8c
|
Size: 1.24 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
69071b22e38436dca1ed8f9b9807bd8c
Sha1
ec55c40842c3429ab7301e59c336caee64482f33
Sha256
9729a8886a3c9c58f6aff691fa8a812531d7504b1060fe9092206cb39f6ab860
Sha384
b68f49d2601afd50a2ba8ecb78b4e883aa4488bde6f4522a64531d3915db7245abd7396299c042b595b8d03718a15251
Sha512
52980f4792f1e5377409b09cac9f6f5e443cca4765d9b53bee750c04d72f398c93d4f4c65c0a95561b19c4ec44cc55d83e382a3afcbce4519ccce5f950e65e97
SSDeep
24576:FN/Qh2bW7mzd3LXvJ7+vZ1mJR3qlCK/GHvM5k:FCI4mZbXlEz0VdGk
TLSH
DB45D01926D65194E1BBDB34EBB90A2447F0BA17C632D36FA14605FDCF2638A61133B3

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
cy4S9aHfo0z.g.resources
cy4S9aHfo0z.Resources.resources
8a4fb9ccbaf2bc.Resources.resources
f179873c0
[NBF]root.Data
f179873c1
[NBF]root.Data
f179873c10
[NBF]root.Data
f179873c11
[NBF]root.Data
f179873c12
[NBF]root.Data
f179873c13
[NBF]root.Data
f179873c14
[NBF]root.Data
f179873c15
[NBF]root.Data
f179873c16
[NBF]root.Data
f179873c17
[NBF]root.Data
f179873c18
[NBF]root.Data
f179873c19
[NBF]root.Data
f179873c2
[NBF]root.Data
f179873c20
[NBF]root.Data
f179873c21
[NBF]root.Data
f179873c22
[NBF]root.Data
f179873c23
[NBF]root.Data
f179873c24
[NBF]root.Data
f179873c25
[NBF]root.Data
f179873c26
[NBF]root.Data
f179873c27
[NBF]root.Data
f179873c28
[NBF]root.Data
f179873c29
[NBF]root.Data
f179873c3
[NBF]root.Data
f179873c30
[NBF]root.Data
f179873c31
[NBF]root.Data
f179873c32
[NBF]root.Data
f179873c33
[NBF]root.Data
f179873c34
[NBF]root.Data
f179873c35
[NBF]root.Data
f179873c36
[NBF]root.Data
f179873c37
[NBF]root.Data
f179873c38
[NBF]root.Data
f179873c39
[NBF]root.Data
f179873c4
[NBF]root.Data
f179873c40
[NBF]root.Data
f179873c41
[NBF]root.Data
f179873c42
[NBF]root.Data
f179873c5
[NBF]root.Data
f179873c6
[NBF]root.Data
f179873c7
[NBF]root.Data
f179873c8
[NBF]root.Data
f179873c9
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

cy4S9aHfo0z

Full Name

cy4S9aHfo0z

EntryPoint

System.Void cy4S9aHfo0z.bHe96g::mNb8F4xdrw()

Scope Name

cy4S9aHfo0z

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

cy4S9aHfo0z

Assembly Version

11.28.3.196

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1005

Main Method

System.Void cy4S9aHfo0z.bHe96g::mNb8F4xdrw()

Main IL Instruction Count

106

Main IL

nop <null> nop <null> newobj System.Void cy4S9aHfo0z.bHe96g::.ctor() stloc.0 <null> newobj System.Void System.Windows.Forms.Form::.ctor() stloc.1 <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> newobj System.Void System.Object::.ctor() ldnull <null> ldstr CreateTab ldc.i4.2 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldstr segmen stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.0 <null> stelem.ref <null> dup <null> stloc.3 <null> ldnull <null> ldnull <null> ldc.i4.2 <null> newarr System.Boolean dup <null> ldc.i4.1 <null> ldc.i4.1 <null> stelem.i1 <null> dup <null> stloc.s V_4 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) stloc.s V_5 ldloc.s V_4 ldc.i4.1 <null> ldelem.u1 <null> brtrue.s IL_0051: ldloc.3 br.s IL_006E: ldloc.s V_5 ldloc.3 <null> ldc.i4.1 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken cy4S9aHfo0z.bHe96g call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass cy4S9aHfo0z.bHe96g stloc.0 <null> ldloc.s V_5 call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.2 <null> leave.s IL_00ED: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_6 nop <null> nop <null> ldc.i4 214 stloc.s V_7 br.s IL_00B1: ldloc.s V_7 ldloc.s V_7 ldc.i4.3 <null> mul.ovf <null> stloc.s V_7 ldloc.s V_7 ldc.i4.s 24 cgt <null> stloc.s V_9 ldloc.s V_9 brfalse.s IL_00AF: nop ldc.i4.s 24 stloc.s V_7 ldstr resources/9875193 call System.Byte[] cy4S9aHfo0z.mm6K1iT::Xw9xd7nQkmF3(System.String) stloc.s V_8 br.s IL_00BF: ldloc.s V_8 nop <null> nop <null> ldloc.s V_7 ldc.i4.s 24 rem <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_10 ldloc.s V_10 brtrue.s IL_008B: ldloc.s V_7 ldloc.s V_8 castclass System.Byte[] call System.Void cy4S9aHfo0z.3PwyWx8e/3RsqHeo7r5Y.2AiwSe::2iwTm3Rc8qcArX(System.Byte[]) nop <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> leave.s IL_00E5: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00E5: nop nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00ED: nop nop <null> ret <null>

Module Name

cy4S9aHfo0z

Full Name

cy4S9aHfo0z

EntryPoint

System.Void cy4S9aHfo0z.bHe96g::mNb8F4xdrw()

Scope Name

cy4S9aHfo0z

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

cy4S9aHfo0z

Assembly Version

11.28.3.196

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1005

Main Method

System.Void cy4S9aHfo0z.bHe96g::mNb8F4xdrw()

Main IL Instruction Count

106

Main IL

nop <null> nop <null> newobj System.Void cy4S9aHfo0z.bHe96g::.ctor() stloc.0 <null> newobj System.Void System.Windows.Forms.Form::.ctor() stloc.1 <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> newobj System.Void System.Object::.ctor() ldnull <null> ldstr CreateTab ldc.i4.2 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldstr segmen stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.0 <null> stelem.ref <null> dup <null> stloc.3 <null> ldnull <null> ldnull <null> ldc.i4.2 <null> newarr System.Boolean dup <null> ldc.i4.1 <null> ldc.i4.1 <null> stelem.i1 <null> dup <null> stloc.s V_4 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) stloc.s V_5 ldloc.s V_4 ldc.i4.1 <null> ldelem.u1 <null> brtrue.s IL_0051: ldloc.3 br.s IL_006E: ldloc.s V_5 ldloc.3 <null> ldc.i4.1 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken cy4S9aHfo0z.bHe96g call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass cy4S9aHfo0z.bHe96g stloc.0 <null> ldloc.s V_5 call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.2 <null> leave.s IL_00ED: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_6 nop <null> nop <null> ldc.i4 214 stloc.s V_7 br.s IL_00B1: ldloc.s V_7 ldloc.s V_7 ldc.i4.3 <null> mul.ovf <null> stloc.s V_7 ldloc.s V_7 ldc.i4.s 24 cgt <null> stloc.s V_9 ldloc.s V_9 brfalse.s IL_00AF: nop ldc.i4.s 24 stloc.s V_7 ldstr resources/9875193 call System.Byte[] cy4S9aHfo0z.mm6K1iT::Xw9xd7nQkmF3(System.String) stloc.s V_8 br.s IL_00BF: ldloc.s V_8 nop <null> nop <null> ldloc.s V_7 ldc.i4.s 24 rem <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_10 ldloc.s V_10 brtrue.s IL_008B: ldloc.s V_7 ldloc.s V_8 castclass System.Byte[] call System.Void cy4S9aHfo0z.3PwyWx8e/3RsqHeo7r5Y.2AiwSe::2iwTm3Rc8qcArX(System.Byte[]) nop <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> leave.s IL_00E5: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00E5: nop nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00ED: nop nop <null> ret <null>

69071b22e38436dca1ed8f9b9807bd8c (1.24 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙