Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

The file 72182ce2322be8a7a623882262f5f2b7 is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 7 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
—
MD5
-
Verdict
Inconclusive
File type
PE Executable

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual Studio .NET
Symbol obfuscation
Medium

4 files
EXE72182ce2322be8a7a623882262f5f2b7
Structure

Name Value
Module Name
xxx.exe
Full Name
xxx.exe
EntryPoint
System.Void xxx.있აიდვსდრა는법იდი로하하하를კ하것는ი것::main(System.String[])
Scope Name
xxx.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
xxx
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.7.2
Total Strings
52
Main Method
System.Void xxx.있აიდვსდრა는법იდი로하하하를კ하것는ი것::main(System.String[])
Main IL Instruction Count
87
Main IL 
nop <null>
ldc.i4 30000
call System.Void System.Threading.Thread::Sleep(System.Int32)
nop <null>
ldstr რ도하ა모ც드하돈예ცროს세276GJA29Zbw79Pz0sLN1cJ7c3McZfAo2ad36Gn39Z13mh0twW9
stloc.0 <null>
ldstr 성르로ლ나수예르르그새მ하것세0YiWTqH4CVtmqz5IRKj9w4yj3L2G5a0L0oP8KtXODKqyt19J24aFeM5Vw6
stloc.1 <null>
ldstr 하ი예ი운ჭვ나을을를운있을დl89w46lBUXxk2O0I4BTz6YDjf52RIM0Tk9Y3iZlq9MpnmUxTm
stloc.2 <null>
ldstr ი그ვ이지는난새ი것모ს님კ을m1O7W9Jdpxw1N4lMFLPLvZ4L0x467RhQj8D0X
stloc.3 <null>
ldstr 코는ა을을예ი예დ만을ნნ생ლ7g2kiqDGpDTT5k71ru139w996zCZvf9sg
stloc.s V_4
ldstr 료ეოა수종는드을종을თმნუ9f7bojy1GfI72Et63s0XQt1Udc9nTr379bdBSL06GfS88e
stloc.s V_5
ldstr ღეა이ა도료ო방ფაა난고그0P8SoW849968Jed17tBgoZ660c03JiXFcDaVrkyMznwR1wzRbtpT6fo
stloc.s V_6
ldstr 이를있რდ운스로ნ코님스ა지지Wt0AmxyszSv7VdX7Sb7z7Elbj5oiScd46xn8b7rWkuFUFDJq8w5czMr
stloc.s V_7
ldstr 모운을ვ하종მ는는님생방를აო4uy21Cvf3sx7VkAE825f93oW7Frb96k
stloc.s V_8
ldstr 는დ를하ა그료지를დობ세ქფJ2849wC5ri9JJ0Xzr1OX5KPV8vOBLOTAlqPvme6MWIQ8t6n9D8Kh
stloc.s V_9
ldsfld System.Byte[] xxx.있აიდვსდრა는법იდი로하하하를კ하것는ი것::vnIoTIkrZKrnQjYeafNmDqAVDjProuRiEwn
call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
stloc.s V_10
ldstr ი는새를종და세იქცც코კკ4zaQ6rD8euTH8tJYup81GQ8C5LNzHTnktG3OK0pW3TVxLk2p7GvjpX5
stloc.s V_11
ldstr 있რქ방법난რ프도스ნ를코ო르0JJ7vMg2LJk31qu17Su8ahLCwB9OSw1WB7A4k35K5R6Uns
stloc.s V_12
ldstr 세ც을ია르행ა도고시코코აკZI1wGCB2v5xDc2Ua940C9FxZIfa207h5gEKpw786WWLwRt
stloc.s V_13
ldstr 새세ა수방ი프을ცვ료는하ი수kpyk6FM7ey2XczYuhv4222JZkDfCNKQAIw91FLyg6x2kLjo1TZ3Mx1Uf7
stloc.s V_14
ldstr ა도დოი는르종스하방돈하행რQMIaNblD360h71m26v2PUVgnHO8eAoht0X
stloc.s V_15
ldstr 방ე만드법თ을스는는고만დ로행uG1s1UoZZWQ4JDP38N9VQ4hNlGFX642cs5UE4q
stloc.s V_16
ldstr დდი님დაი하하კ하수는는는e06M9osCH9P8A05OmJEwH1y81bt8v8
stloc.s V_17
ldstr 는드აქდა운დ예을ცა시나을0K1bYpwLOzSEaY5t675GdFFNhO5bE96PP92odD727qCDW6fz45Gh7OL
stloc.s V_18
ldstr ა프ილ는을ო그시ქ만ე생ბ로0UlaVT2g6f0YUqeo55E9Y8o6Z5081rXyP1vV6ZHt7RBv1y
stloc.s V_19
ldstr 법აქ세ქ종ც도님დრ있ნდ르8VDrzyhxlLHFcNpBj4o2XDXc7G05yb0
stloc.s V_20
ldloc.s V_10
ldnull <null>
ldstr EntryPoint
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldnull <null>
ldstr Invoke
ldc.i4.2 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldstr ნლ만그를돈하ა를ა스ქ난ს로m84C7mKqf62CoTGA20lb0jB4xlddQFG7o7nFt8957l86
stloc.s V_21
ldstr 난는것음드생코지를ც로하რარSfjev5O8veLvFvxKECWiq8x5NsYQUF74ozr5
stloc.s V_22
ldstr 를하ნ방르는을프세აცრ는로법T4sCyqTH9332USeOHrl1u1a1Qp685Uie7zjhU982
stloc.s V_23
ldstr ლ난ე을ქ다იც하세지ლრჭ를TOn788Dv61vB2ydH7DJRD0ahRJm2z08p5M2lf4Dv3
stloc.s V_24
ldstr ი로님ც료는을რ성ქ프ქრა고PL4kqd2s78SQ3G4LYgZ0gqFA3w13soJacX187vkpGo2vD3i03CGR5B
stloc.s V_25
ldstr უ종방종ი여로რ그ი수ცდფ성9W0j138aaI23SA5C6l0ebXn6f1dsQ2
stloc.s V_26
ldstr დდი만행는იდ프를ალ만성를Qp29L0rEQF7h4giR5F0O11o14q6iG55wdWcDqn3
stloc.s V_27
ldstr არა방თაკ난ეე세을수დ난tvmI9Zx3hyeXe2I2J15YVzNtgch3rF9PY0Qc
stloc.s V_28
ldstr ციდ성운하운ა세ან난방하ვrIMP99o2PWNyFwG66inske03X6tzF83qFWQoMwHGh2bYJJq0759LF
stloc.s V_29
ldstr 지კ돈코스을그ი있ც돈것있დქ129q4u2nTgxzL75Pp9wjSoFyv2uX9HX2bJlFzQX9WB8WuK
stloc.s V_30
ret <null>
Module Name
xxx.exe
Full Name
xxx.exe
EntryPoint
System.Void xxx.있აიდვსდრა는법იდი로하하하를კ하것는ი것::main(System.String[])
Scope Name
xxx.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
xxx
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.7.2
Total Strings
52
Main Method
System.Void xxx.있აიდვსდრა는법იდი로하하하를კ하것는ი것::main(System.String[])
Main IL Instruction Count
87
Main IL 
nop <null>
ldc.i4 30000
call System.Void System.Threading.Thread::Sleep(System.Int32)
nop <null>
ldstr რ도하ა모ც드하돈예ცროს세276GJA29Zbw79Pz0sLN1cJ7c3McZfAo2ad36Gn39Z13mh0twW9
stloc.0 <null>
ldstr 성르로ლ나수예르르그새მ하것세0YiWTqH4CVtmqz5IRKj9w4yj3L2G5a0L0oP8KtXODKqyt19J24aFeM5Vw6
stloc.1 <null>
ldstr 하ი예ი운ჭვ나을을를운있을დl89w46lBUXxk2O0I4BTz6YDjf52RIM0Tk9Y3iZlq9MpnmUxTm
stloc.2 <null>
ldstr ი그ვ이지는난새ი것모ს님კ을m1O7W9Jdpxw1N4lMFLPLvZ4L0x467RhQj8D0X
stloc.3 <null>
ldstr 코는ა을을예ი예დ만을ნნ생ლ7g2kiqDGpDTT5k71ru139w996zCZvf9sg
stloc.s V_4
ldstr 료ეოა수종는드을종을თმნუ9f7bojy1GfI72Et63s0XQt1Udc9nTr379bdBSL06GfS88e
stloc.s V_5
ldstr ღეა이ა도료ო방ფაა난고그0P8SoW849968Jed17tBgoZ660c03JiXFcDaVrkyMznwR1wzRbtpT6fo
stloc.s V_6
ldstr 이를있რდ운스로ნ코님스ა지지Wt0AmxyszSv7VdX7Sb7z7Elbj5oiScd46xn8b7rWkuFUFDJq8w5czMr
stloc.s V_7
ldstr 모운을ვ하종მ는는님생방를აო4uy21Cvf3sx7VkAE825f93oW7Frb96k
stloc.s V_8
ldstr 는დ를하ა그료지를დობ세ქფJ2849wC5ri9JJ0Xzr1OX5KPV8vOBLOTAlqPvme6MWIQ8t6n9D8Kh
stloc.s V_9
ldsfld System.Byte[] xxx.있აიდვსდრა는법იდი로하하하를კ하것는ი것::vnIoTIkrZKrnQjYeafNmDqAVDjProuRiEwn
call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
stloc.s V_10
ldstr ი는새를종და세იქცც코კკ4zaQ6rD8euTH8tJYup81GQ8C5LNzHTnktG3OK0pW3TVxLk2p7GvjpX5
stloc.s V_11
ldstr 있რქ방법난რ프도스ნ를코ო르0JJ7vMg2LJk31qu17Su8ahLCwB9OSw1WB7A4k35K5R6Uns
stloc.s V_12
ldstr 세ც을ია르행ა도고시코코აკZI1wGCB2v5xDc2Ua940C9FxZIfa207h5gEKpw786WWLwRt
stloc.s V_13
ldstr 새세ა수방ი프을ცვ료는하ი수kpyk6FM7ey2XczYuhv4222JZkDfCNKQAIw91FLyg6x2kLjo1TZ3Mx1Uf7
stloc.s V_14
ldstr ა도დოი는르종스하방돈하행რQMIaNblD360h71m26v2PUVgnHO8eAoht0X
stloc.s V_15
ldstr 방ე만드법თ을스는는고만დ로행uG1s1UoZZWQ4JDP38N9VQ4hNlGFX642cs5UE4q
stloc.s V_16
ldstr დდი님დაი하하კ하수는는는e06M9osCH9P8A05OmJEwH1y81bt8v8
stloc.s V_17
ldstr 는드აქდა운დ예을ცა시나을0K1bYpwLOzSEaY5t675GdFFNhO5bE96PP92odD727qCDW6fz45Gh7OL
stloc.s V_18
ldstr ა프ილ는을ო그시ქ만ე생ბ로0UlaVT2g6f0YUqeo55E9Y8o6Z5081rXyP1vV6ZHt7RBv1y
stloc.s V_19
ldstr 법აქ세ქ종ც도님დრ있ნდ르8VDrzyhxlLHFcNpBj4o2XDXc7G05yb0
stloc.s V_20
ldloc.s V_10
ldnull <null>
ldstr EntryPoint
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldnull <null>
ldstr Invoke
ldc.i4.2 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
ldc.i4.1 <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateCall(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[],System.Boolean)
pop <null>
ldstr ნლ만그를돈하ა를ა스ქ난ს로m84C7mKqf62CoTGA20lb0jB4xlddQFG7o7nFt8957l86
stloc.s V_21
ldstr 난는것음드생코지를ც로하რარSfjev5O8veLvFvxKECWiq8x5NsYQUF74ozr5
stloc.s V_22
ldstr 를하ნ방르는을프세აცრ는로법T4sCyqTH9332USeOHrl1u1a1Qp685Uie7zjhU982
stloc.s V_23
ldstr ლ난ე을ქ다იც하세지ლრჭ를TOn788Dv61vB2ydH7DJRD0ahRJm2z08p5M2lf4Dv3
stloc.s V_24
ldstr ი로님ც료는을რ성ქ프ქრა고PL4kqd2s78SQ3G4LYgZ0gqFA3w13soJacX187vkpGo2vD3i03CGR5B
stloc.s V_25
ldstr უ종방종ი여로რ그ი수ცდფ성9W0j138aaI23SA5C6l0ebXn6f1dsQ2
stloc.s V_26
ldstr დდი만행는იდ프를ალ만성를Qp29L0rEQF7h4giR5F0O11o14q6iG55wdWcDqn3
stloc.s V_27
ldstr არა방თაკ난ეე세을수დ난tvmI9Zx3hyeXe2I2J15YVzNtgch3rF9PY0Qc
stloc.s V_28
ldstr ციდ성운하운ა세ან난방하ვrIMP99o2PWNyFwG66inske03X6tzF83qFWQoMwHGh2bYJJq0759LF
stloc.s V_29
ldstr 지კ돈코스을그ი있ც돈것있დქ129q4u2nTgxzL75Pp9wjSoFyv2uX9HX2bJlFzQX9WB8WuK
stloc.s V_30
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙