Suspicious
Suspect

748e02b2acd3183d51d1a92b8e8fffe5

PE Executable
|
MD5: 748e02b2acd3183d51d1a92b8e8fffe5
|
Size: 3.76 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
748e02b2acd3183d51d1a92b8e8fffe5
Sha1
23d18d1d5f87fe1405a316a39fec5da660fe008f
Sha256
916f4d68b9c5fe39d3470b584a8949a078e8d2a5164a248af3b6487f6851f4a6
Sha384
1524035ed22bd5ab5fcd3372826bf2e330fa194af91b09e2c7b2268826b356b7436c45adc8ee60f73631e68e7a746a1a
Sha512
f7c009682f77d819621b394c19d08c07f8d15286f6372ce3150d3776fdc7cc3458b8ee0b0d6c72f82830df50e45ad81445028e8b8b22ddbba9ed380ff3c4ea76
SSDeep
98304:dG6o5K+ftJbMy2SuM4aHQC7mSWrv7uPHp:g5K+zbc9M4pAmNrvw
TLSH
1A0622293BC6A808D17D4276003996816331F6CF6EA1D72CACDA56FC2FB16537F146A3

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
748e02b2acd3183d51d1a92b8e8fffe5
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
dg crypted.dg crypted.resources
dg crypted.681935058.png
c7b489145ea639.Resources.resources
45a2acd90
45a2acd91
45a2acd910
45a2acd9100
45a2acd9101
45a2acd9102
45a2acd9103
45a2acd9104
45a2acd9105
45a2acd9106
45a2acd9107
45a2acd9108
45a2acd9109
45a2acd911
45a2acd9110
45a2acd9111
45a2acd9112
45a2acd9113
45a2acd9114
45a2acd9115
45a2acd9116
45a2acd9117
45a2acd9118
45a2acd9119
45a2acd912
45a2acd9120
45a2acd9121
45a2acd9122
45a2acd9123
45a2acd9124
45a2acd9125
45a2acd9126
45a2acd9127
45a2acd9128
45a2acd9129
45a2acd913
45a2acd9130
45a2acd9131
45a2acd9132
45a2acd9133
45a2acd9134
45a2acd9135
45a2acd9136
45a2acd9137
45a2acd9138
45a2acd9139
45a2acd914
45a2acd9140
45a2acd9141
45a2acd9142
45a2acd9143
45a2acd9144
45a2acd9145
45a2acd9146
45a2acd9147
45a2acd9148
45a2acd9149
45a2acd915
45a2acd9150
45a2acd9151
45a2acd9152
45a2acd9153
45a2acd9154
45a2acd9155
45a2acd9156
45a2acd9157
45a2acd9158
45a2acd9159
45a2acd916
45a2acd9160
45a2acd9161
45a2acd9162
45a2acd9163
45a2acd9164
45a2acd9165
45a2acd9166
45a2acd9167
45a2acd9168
45a2acd9169
45a2acd917
45a2acd9170
45a2acd9171
45a2acd9172
45a2acd9173
45a2acd9174
45a2acd9175
45a2acd9176
45a2acd9177
45a2acd9178
45a2acd9179
45a2acd918
45a2acd919
45a2acd92
45a2acd920
45a2acd921
45a2acd922
45a2acd923
45a2acd924
45a2acd925
45a2acd926
45a2acd927
45a2acd928
45a2acd929
45a2acd93
45a2acd930
45a2acd931
45a2acd932
45a2acd933
45a2acd934
45a2acd935
45a2acd936
45a2acd937
45a2acd938
45a2acd939
45a2acd94
45a2acd940
45a2acd941
45a2acd942
45a2acd943
45a2acd944
45a2acd945
45a2acd946
45a2acd947
45a2acd948
45a2acd949
45a2acd95
45a2acd950
45a2acd951
45a2acd952
45a2acd953
45a2acd954
45a2acd955
45a2acd956
45a2acd957
45a2acd958
45a2acd959
45a2acd96
45a2acd960
45a2acd961
45a2acd962
45a2acd963
45a2acd964
45a2acd965
45a2acd966
45a2acd967
45a2acd968
45a2acd969
45a2acd97
45a2acd970
45a2acd971
45a2acd972
45a2acd973
45a2acd974
45a2acd975
45a2acd976
45a2acd977
45a2acd978
45a2acd979
45a2acd98
45a2acd980
45a2acd981
45a2acd982
45a2acd983
45a2acd984
45a2acd985
45a2acd986
45a2acd987
45a2acd988
45a2acd989
45a2acd99
45a2acd990
45a2acd991
45a2acd992
45a2acd993
45a2acd994
45a2acd995
45a2acd996
45a2acd997
45a2acd998
45a2acd999
Informations
Name
 Value
Module Name

dg crypted
Full Name

dg crypted
EntryPoint

System.Void Bf17F.Cd1g9::n5PRm()
Scope Name

dg crypted
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

dg crypted
Assembly Version

1.3.5.3
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

1777
Main Method

System.Void Bf17F.Cd1g9::n5PRm()
Main IL Instruction Count

102
Main IL

nop <null> nop <null> ldloc.0 <null> newobj System.Void Bf17F.Cd1g9/Aw03Lzr.y9A6P::.ctor(Bf17F.Cd1g9/Aw03Lzr.y9A6P) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> stfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.s 24 clt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0028: ldc.i4.1 ldloc.0 <null> ldc.i4.s 24 stfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.1 <null> ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM conv.r8 <null> ldc.r8 24 div <null> call System.Double System.Math::Ceiling(System.Double) ldc.r8 1 add <null> call System.Double System.Math::Round(System.Double) conv.ovf.i4 <null> call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Range(System.Int32,System.Int32) ldsfld System.Func`2<System.Int32,System.Int32> Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I85-0 brfalse.s IL_0062: ldsfld Bf17F.Cd1g9/Aw03Lzr.Cq5w0 Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I ldsfld System.Func`2<System.Int32,System.Int32> Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I85-0 br.s IL_0078: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) ldsfld Bf17F.Cd1g9/Aw03Lzr.Cq5w0 Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I ldftn System.Int32 Bf17F.Cd1g9/Aw03Lzr.Cq5w0::Tb9i2(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`2<System.Int32,System.Int32> Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I85-0 call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) call System.Int32[] System.Linq.Enumerable::ToArray<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>) stloc.1 <null> ldloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Boolean Bf17F.Cd1g9/Aw03Lzr.y9A6P::Lg41N(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr) call System.Int32 System.Linq.Enumerable::First<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>) stfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.2 <null> ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.2 <null> sub.ovf <null> stloc.s V_5 ldc.i4.0 <null> stloc.s V_6 br.s IL_00C5: ldloc.s V_6 ldloc.2 <null> ldloc.s V_6 ldnull <null> stelem.ref <null> ldloc.s V_6 ldc.i4.1 <null> add.ovf <null> stloc.s V_6 ldloc.s V_6 ldloc.s V_5 ble.s IL_00BA: ldloc.2 ldstr gnp.850539186 call System.String Microsoft.VisualBasic.Strings::StrReverse(System.String) stloc.3 <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.1 <null> sub.ovf <null> ldloc.3 <null> call System.Byte[] Bf17F.Nm5k8AD::p9XJm70(System.String) call System.Byte[] Bf17F.z5AB::Kx2s9(System.Byte[]) stelem.ref <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM call System.Void Bf17F.d9H2Q::r6S4HmW(System.Object[],System.Int32) nop <null> leave.s IL_010A: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_010A: nop nop <null> ret <null>
Module Name

dg crypted
Full Name

dg crypted
EntryPoint

System.Void Bf17F.Cd1g9::n5PRm()
Scope Name

dg crypted
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

dg crypted
Assembly Version

1.3.5.3
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

1777
Main Method

System.Void Bf17F.Cd1g9::n5PRm()
Main IL Instruction Count

102
Main IL

nop <null> nop <null> ldloc.0 <null> newobj System.Void Bf17F.Cd1g9/Aw03Lzr.y9A6P::.ctor(Bf17F.Cd1g9/Aw03Lzr.y9A6P) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> stfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.s 24 clt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0028: ldc.i4.1 ldloc.0 <null> ldc.i4.s 24 stfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.1 <null> ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM conv.r8 <null> ldc.r8 24 div <null> call System.Double System.Math::Ceiling(System.Double) ldc.r8 1 add <null> call System.Double System.Math::Round(System.Double) conv.ovf.i4 <null> call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Range(System.Int32,System.Int32) ldsfld System.Func`2<System.Int32,System.Int32> Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I85-0 brfalse.s IL_0062: ldsfld Bf17F.Cd1g9/Aw03Lzr.Cq5w0 Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I ldsfld System.Func`2<System.Int32,System.Int32> Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I85-0 br.s IL_0078: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) ldsfld Bf17F.Cd1g9/Aw03Lzr.Cq5w0 Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I ldftn System.Int32 Bf17F.Cd1g9/Aw03Lzr.Cq5w0::Tb9i2(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`2<System.Int32,System.Int32> Bf17F.Cd1g9/Aw03Lzr.Cq5w0::$I85-0 call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) call System.Int32[] System.Linq.Enumerable::ToArray<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>) stloc.1 <null> ldloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Boolean Bf17F.Cd1g9/Aw03Lzr.y9A6P::Lg41N(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr) call System.Int32 System.Linq.Enumerable::First<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>) stfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.2 <null> ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.2 <null> sub.ovf <null> stloc.s V_5 ldc.i4.0 <null> stloc.s V_6 br.s IL_00C5: ldloc.s V_6 ldloc.2 <null> ldloc.s V_6 ldnull <null> stelem.ref <null> ldloc.s V_6 ldc.i4.1 <null> add.ovf <null> stloc.s V_6 ldloc.s V_6 ldloc.s V_5 ble.s IL_00BA: ldloc.2 ldstr gnp.850539186 call System.String Microsoft.VisualBasic.Strings::StrReverse(System.String) stloc.3 <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM ldc.i4.1 <null> sub.ovf <null> ldloc.3 <null> call System.Byte[] Bf17F.Nm5k8AD::p9XJm70(System.String) call System.Byte[] Bf17F.z5AB::Kx2s9(System.Byte[]) stelem.ref <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 Bf17F.Cd1g9/Aw03Lzr.y9A6P::$VB$Local_NUM call System.Void Bf17F.d9H2Q::r6S4HmW(System.Object[],System.Int32) nop <null> leave.s IL_010A: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_010A: nop nop <null> ret <null>
Artefacts
Name
 Value
Embedded Resources

4
Suspicious Type Names (1-2 chars)

0
748e02b2acd3183d51d1a92b8e8fffe5 (3.76 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙