Malicious
Malicious

75a5a6a67f8b999d378e01f2279a6a5c

PE Executable
|
MD5: 75a5a6a67f8b999d378e01f2279a6a5c
|
Size: 56.83 KB
|
application/x-dosexec

Infection Chain
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
Hash Value
MD5
75a5a6a67f8b999d378e01f2279a6a5c
Sha1
097960346b0a84c665773c52dd24071e1a474cb4
Sha256
c6ae803a939ceb15eb048bbc3460c176bc41a7f4a6c951429a0263ee78254763
Sha384
f38f6dc6839044ea007151fe4ecb2aaa79e1469b3d79ad3c6e0e8ec97001927336b025c8d1c951fc698f0c52ec230aac
Sha512
1bf873c1f9f9ec5aa05ac6aaad9d7d8af19f7cf4ccfd5e2e850ad1176dd04fbe3307b380a082ce3f2d1bffce52670a1369e4a570e26e643f6e31506416a00561
SSDeep
768:iMr3DxZqxy4GnvYdWkFTNk3VGIe0M8giSSnoDNgR+JgyqZAD+22GK2GMF:LRZqxWQWkFQc0giSSO8CgyqW2GhF
TLSH
6943F8027B874351E419207B80EF056403F2B7A36777EB773E5C62BD4A523926E85F8A

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
QnoKqDCEcir0Zovni2.jYfZc8WS3SVsMarUWO
OONYTUYYU.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
[NBF]root.IconData
progressBar1.Modifiers
$this.Language
$this.GridSize
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: OONYTUYYU.pdb

Module Name

OONYTUYYU.exe

Full Name

OONYTUYYU.exe

EntryPoint

System.Void zX8OsR1QEakTxccGQF.mPwFbo8S3v2UDEUWIs::<Main>(System.String[])

Scope Name

OONYTUYYU.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

OONYTUYYU

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.2

Total Strings

23

Main Method

System.Void zX8OsR1QEakTxccGQF.mPwFbo8S3v2UDEUWIs::<Main>(System.String[])

Main IL Instruction Count

15

Main IL

br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull ldarg.0 <null> call System.Threading.Tasks.Task zX8OsR1QEakTxccGQF.mPwFbo8S3v2UDEUWIs::MZqUhdnCO(System.Object) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>

Module Name

OONYTUYYU.exe

Full Name

OONYTUYYU.exe

EntryPoint

System.Void zX8OsR1QEakTxccGQF.mPwFbo8S3v2UDEUWIs::<Main>(System.String[])

Scope Name

OONYTUYYU.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

OONYTUYYU

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.2

Total Strings

23

Main Method

System.Void zX8OsR1QEakTxccGQF.mPwFbo8S3v2UDEUWIs::<Main>(System.String[])

Main IL Instruction Count

15

Main IL

br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull ldarg.0 <null> call System.Threading.Tasks.Task zX8OsR1QEakTxccGQF.mPwFbo8S3v2UDEUWIs::MZqUhdnCO(System.Object) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>

75a5a6a67f8b999d378e01f2279a6a5c (56.83 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
QnoKqDCEcir0Zovni2.jYfZc8WS3SVsMarUWO
OONYTUYYU.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
[NBF]root.IconData
progressBar1.Modifiers
$this.Language
$this.GridSize
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙