Suspicious
Suspect

81f085b4c164d0b6d303e0c762a9c9a1

PE Executable
|
MD5: 81f085b4c164d0b6d303e0c762a9c9a1
|
Size: 11.09 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
81f085b4c164d0b6d303e0c762a9c9a1
Sha1
6b1052da2540db7ba59933bad76c6a4b7048ee77
Sha256
0a4aeb4dd0aa51ddbf5be869e05ca9cd3670d66d3ec43889c42cf32d791f2c27
Sha384
70121c8ef64bf9caf87d1db79aec1317ba505235d48ea8002ffb8ce38d88e090fd41ea0565047d5030256e46beefca5e
Sha512
eb8711744a070acf6930f9353eada772104fb06c16eb6b5acc32b8d25b629d851bc3f1a274bdf3d3cf664375d1d24e6ecfca77bf0fd0e08902fb8caa53b503ef
SSDeep
49152:zwXkp+UqhFIZGpGq9Ts8+f0zzuQnKdm87PqvYocA+SnyX5emyoBLGnEBaxdk+otV:zwXkoUqhFFzXnQo48myrx8x5OS
TLSH
C9B66B51F3B4C2A5C0268134A9A3A313F730B8594705A7CB5BD4AEA52FB73D06DAF316

PeID

Microsoft Visual C++ v6.0 DLL
Pe123 v2006.4.4-4.12
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.bq
.pdata
.rsrc
.dbginfo
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_RCDATA
ID:0000
[Authenticode]_87285597.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.pdata
.rsrc
.reloc
.rdata
.didat
.mrdata
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
[Authenticode]_99e398e2.p7b
[Authenticode]_b307b9bc.p7b
[Authenticode]_7eea5271.p7b
[Authenticode]_3a92f8b0.p7b
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: u K?|?

Module Name

PolarsYeaoman.exe

Full Name

PolarsYeaoman.exe

EntryPoint

System.Void A.VY::B()

Scope Name

PolarsYeaoman.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

PolarsYeaoman

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

2327

Main Method

System.Void A.VY::B()

Main IL Instruction Count

24

Main IL

ldc.i4.0 <null> stloc.0 <null> ldc.i4.0 <null> stloc.1 <null> ldc.i4.0 <null> stloc.1 <null> nop <null> ldloc.1 <null> ldc.i4.1 <null> bne.un.s IL_000F: nop ldc.i4.0 <null> stloc.1 <null> br.s IL_0024: nop nop <null> ldloca.s V_0 ldloca.s V_1 ldloca.s V_2 ldsfld System.IntPtr[] A.VY::B ldloc.0 <null> ldelem.i <null> calli System.Void (System.Int32&,System.Int32&,System.Int32&) br.s IL_0006: nop nop <null> ret <null>

81f085b4c164d0b6d303e0c762a9c9a1 (11.09 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙