Suspicious
Suspect

75071e56c67a11e605584e2dd88328b8

PE Executable
MD5: 75071e56c67a11e605584e2dd88328b8
Size: 1.06 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
Hash Value
MD5
75071e56c67a11e605584e2dd88328b8
Sha1
d7ce809c5ec1ede0489a3be06beb792d38f89f7f
Sha256
640c7c6ea97dbecc0438cd6d77d4a599e459929f626e2f0b2b4a66dfe1f99b84
Sha384
bc42180e592f660b2b7cfc422a383967c8d57eb71673f33a724d227bb0f5e770e5ddac0d048ef7b8c92654cf4bb13a80
Sha512
1e224db526df7222055f2f51b1a79bf79c39f2ef6f8e488f380e3edb72c297688bd53ee7cf542f23850e15206aa923fc4fd049986d75e5db493f386854b2bd73
SSDeep
24576:qUvJO/blPE3bMN5E7BC5pwqZemfx/HjiTVt1wt4:Ry5P9NeWXem5vjiTz
TLSH
BF259D9C3111FA8EC8878D72C968DDF4A6102CA6D707D24391E77DABB93D7869F041E2

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
BoneDice.Properties.Resources.resources
KBGK
[NBF]root.Data
[NBF]root.Data-preview.png
wck
[NBF]root.Data
BoneDice.TurnierForm.resources
$this.Icon
[NBF]root.IconData
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

LJsV.exe

Full Name

LJsV.exe

EntryPoint

System.Void BoneDice.Program::Main()

Scope Name

LJsV.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

LJsV

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

0

Main Method

System.Void BoneDice.Program::Main()

Main IL Instruction Count

37

Main IL

nop <null> ldc.i4 252169588 ldc.i4 755242082 xor <null> dup <null> stloc.0 <null> ldc.i4.5 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0070: ret call System.Void BoneDice.Program::‮‎‎‬‎‍​‫‌‬‬‏‫‬‪‎‫‪‏‎‭‬‫‎‌‮‬‮() nop <null> ldloc.0 <null> ldc.i4 -1305643041 mul <null> ldc.i4 -142223123 xor <null> br.s IL_0006: ldc.i4 755242082 ldc.i4.0 <null> call System.Void BoneDice.Program::‫‫‭‬‬‫‮‌‏‍​‪‌‎‏‭‪‬‎‭‪‮(System.Boolean) ldloc.0 <null> ldc.i4 1799054177 mul <null> ldc.i4 2143332257 xor <null> br.s IL_0006: ldc.i4 755242082 nop <null> newobj System.Void BoneDice.SchenkeForm::.ctor() call System.Void BoneDice.Program::‮‫‏‫‏‫‏‪‏‫​​‏‭‫‬‮‎‫‍‪‮(System.Windows.Forms.Form) nop <null> ldloc.0 <null> ldc.i4 58989375 mul <null> ldc.i4 -1882466988 xor <null> br.s IL_0006: ldc.i4 755242082 ret <null>

Module Name

LJsV.exe

Full Name

LJsV.exe

EntryPoint

System.Void BoneDice.Program::Main()

Scope Name

LJsV.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

LJsV

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

0

Main Method

System.Void BoneDice.Program::Main()

Main IL Instruction Count

37

Main IL

nop <null> ldc.i4 252169588 ldc.i4 755242082 xor <null> dup <null> stloc.0 <null> ldc.i4.5 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0070: ret call System.Void BoneDice.Program::‮‎‎‬‎‍​‫‌‬‬‏‫‬‪‎‫‪‏‎‭‬‫‎‌‮‬‮() nop <null> ldloc.0 <null> ldc.i4 -1305643041 mul <null> ldc.i4 -142223123 xor <null> br.s IL_0006: ldc.i4 755242082 ldc.i4.0 <null> call System.Void BoneDice.Program::‫‫‭‬‬‫‮‌‏‍​‪‌‎‏‭‪‬‎‭‪‮(System.Boolean) ldloc.0 <null> ldc.i4 1799054177 mul <null> ldc.i4 2143332257 xor <null> br.s IL_0006: ldc.i4 755242082 nop <null> newobj System.Void BoneDice.SchenkeForm::.ctor() call System.Void BoneDice.Program::‮‫‏‫‏‫‏‪‏‫​​‏‭‫‬‮‎‫‍‪‮(System.Windows.Forms.Form) nop <null> ldloc.0 <null> ldc.i4 58989375 mul <null> ldc.i4 -1882466988 xor <null> br.s IL_0006: ldc.i4 755242082 ret <null>

75071e56c67a11e605584e2dd88328b8 (1.06 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙