Suspicious
Suspect

852dbeb154c98f0fc493a64e1a6b2a47

PE Executable
|
MD5: 852dbeb154c98f0fc493a64e1a6b2a47
|
Size: 1.23 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
852dbeb154c98f0fc493a64e1a6b2a47
Sha1
56010647b3d71e2ff2cbc51383be45c005e10755
Sha256
343a0ffbd5b9eb887a4fb642b6a508e49d75338c94c18404c0c4818b21ab1951
Sha384
daeabaccd50c3ad61d9d95f2e07c218a338f2fade6c474921c960fd1fa29ebcfe087c6b933abd986d89a0193619259ef
Sha512
bc0bf9c4eaf4035b1e5e4cbde8454a23d81fe7bad14ca64029eece8091ab21b19764da4f8a1a7b032cab2d1d4f497af97ce1bda5bc94350a5a4e299a2d792459
SSDeep
24576:lQh2bZCnRveYepqMKDmfC4KOSSn2p6tCMGN:uIARveYkqM3fC41p2TN
TLSH
3945E01A36DA4190E1BB8B34EFBA4A1447F4BA17CA32C75FA15605FDCB1638561233B3

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ez9P0D_.g.resources
ez9P0D_.Resources.resources
c72d4d45cb23b0.Resources.resources
bb60fb8f0
[NBF]root.Data
bb60fb8f1
[NBF]root.Data
bb60fb8f10
[NBF]root.Data
bb60fb8f11
[NBF]root.Data
bb60fb8f12
[NBF]root.Data
bb60fb8f13
[NBF]root.Data
bb60fb8f14
[NBF]root.Data
bb60fb8f15
[NBF]root.Data
bb60fb8f16
[NBF]root.Data
bb60fb8f17
[NBF]root.Data
bb60fb8f18
[NBF]root.Data
bb60fb8f19
[NBF]root.Data
bb60fb8f2
[NBF]root.Data
bb60fb8f20
[NBF]root.Data
bb60fb8f21
[NBF]root.Data
bb60fb8f22
[NBF]root.Data
bb60fb8f23
[NBF]root.Data
bb60fb8f24
[NBF]root.Data
bb60fb8f25
[NBF]root.Data
bb60fb8f26
[NBF]root.Data
bb60fb8f27
[NBF]root.Data
bb60fb8f28
[NBF]root.Data
bb60fb8f29
[NBF]root.Data
bb60fb8f3
[NBF]root.Data
bb60fb8f30
[NBF]root.Data
bb60fb8f31
[NBF]root.Data
bb60fb8f32
[NBF]root.Data
bb60fb8f33
[NBF]root.Data
bb60fb8f34
[NBF]root.Data
bb60fb8f35
[NBF]root.Data
bb60fb8f36
[NBF]root.Data
bb60fb8f37
[NBF]root.Data
bb60fb8f38
[NBF]root.Data
bb60fb8f39
[NBF]root.Data
bb60fb8f4
[NBF]root.Data
bb60fb8f40
[NBF]root.Data
bb60fb8f41
[NBF]root.Data
bb60fb8f5
[NBF]root.Data
bb60fb8f6
[NBF]root.Data
bb60fb8f7
[NBF]root.Data
bb60fb8f8
[NBF]root.Data
bb60fb8f9
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

ez9P0D_

Full Name

ez9P0D_

EntryPoint

System.Void ez9P0D_.4Jnnf7Yyj::kXw7kx6T()

Scope Name

ez9P0D_

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

ez9P0D_

Assembly Version

15.4.10.240

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1005

Main Method

System.Void ez9P0D_.4Jnnf7Yyj::kXw7kx6T()

Main IL Instruction Count

106

Main IL

nop <null> nop <null> newobj System.Void ez9P0D_.4Jnnf7Yyj::.ctor() stloc.0 <null> newobj System.Void System.Windows.Forms.Form::.ctor() stloc.1 <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> newobj System.Void System.Object::.ctor() ldnull <null> ldstr CreateTab ldc.i4.2 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldstr segmen stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.0 <null> stelem.ref <null> dup <null> stloc.3 <null> ldnull <null> ldnull <null> ldc.i4.2 <null> newarr System.Boolean dup <null> ldc.i4.1 <null> ldc.i4.1 <null> stelem.i1 <null> dup <null> stloc.s V_4 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) stloc.s V_5 ldloc.s V_4 ldc.i4.1 <null> ldelem.u1 <null> brtrue.s IL_0051: ldloc.3 br.s IL_006E: ldloc.s V_5 ldloc.3 <null> ldc.i4.1 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken ez9P0D_.4Jnnf7Yyj call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass ez9P0D_.4Jnnf7Yyj stloc.0 <null> ldloc.s V_5 call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.2 <null> leave.s IL_00ED: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_6 nop <null> nop <null> ldc.i4 214 stloc.s V_7 br.s IL_00B1: ldloc.s V_7 ldloc.s V_7 ldc.i4.3 <null> mul.ovf <null> stloc.s V_7 ldloc.s V_7 ldc.i4.s 24 cgt <null> stloc.s V_9 ldloc.s V_9 brfalse.s IL_00AF: nop ldc.i4.s 24 stloc.s V_7 ldstr resources/9875193 call System.Byte[] ez9P0D_.1YyqwxN2Rm3na::4mbXP5ptg(System.String) stloc.s V_8 br.s IL_00BF: ldloc.s V_8 nop <null> nop <null> ldloc.s V_7 ldc.i4.s 24 rem <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_10 ldloc.s V_10 brtrue.s IL_008B: ldloc.s V_7 ldloc.s V_8 castclass System.Byte[] call System.Void ez9P0D_.3dbTtqE8Sg7x2y/pNp5i9L.ix4ZSpq5ai3W8::Bjo0c4i(System.Byte[]) nop <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> leave.s IL_00E5: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00E5: nop nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00ED: nop nop <null> ret <null>

Module Name

ez9P0D_

Full Name

ez9P0D_

EntryPoint

System.Void ez9P0D_.4Jnnf7Yyj::kXw7kx6T()

Scope Name

ez9P0D_

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

ez9P0D_

Assembly Version

15.4.10.240

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1005

Main Method

System.Void ez9P0D_.4Jnnf7Yyj::kXw7kx6T()

Main IL Instruction Count

106

Main IL

nop <null> nop <null> newobj System.Void ez9P0D_.4Jnnf7Yyj::.ctor() stloc.0 <null> newobj System.Void System.Windows.Forms.Form::.ctor() stloc.1 <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> newobj System.Void System.Object::.ctor() ldnull <null> ldstr CreateTab ldc.i4.2 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldstr segmen stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.0 <null> stelem.ref <null> dup <null> stloc.3 <null> ldnull <null> ldnull <null> ldc.i4.2 <null> newarr System.Boolean dup <null> ldc.i4.1 <null> ldc.i4.1 <null> stelem.i1 <null> dup <null> stloc.s V_4 call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) stloc.s V_5 ldloc.s V_4 ldc.i4.1 <null> ldelem.u1 <null> brtrue.s IL_0051: ldloc.3 br.s IL_006E: ldloc.s V_5 ldloc.3 <null> ldc.i4.1 <null> ldelem.ref <null> call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) ldtoken ez9P0D_.4Jnnf7Yyj call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Object Microsoft.VisualBasic.CompilerServices.Conversions::ChangeType(System.Object,System.Type) castclass ez9P0D_.4Jnnf7Yyj stloc.0 <null> ldloc.s V_5 call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.2 <null> leave.s IL_00ED: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_6 nop <null> nop <null> ldc.i4 214 stloc.s V_7 br.s IL_00B1: ldloc.s V_7 ldloc.s V_7 ldc.i4.3 <null> mul.ovf <null> stloc.s V_7 ldloc.s V_7 ldc.i4.s 24 cgt <null> stloc.s V_9 ldloc.s V_9 brfalse.s IL_00AF: nop ldc.i4.s 24 stloc.s V_7 ldstr resources/9875193 call System.Byte[] ez9P0D_.1YyqwxN2Rm3na::4mbXP5ptg(System.String) stloc.s V_8 br.s IL_00BF: ldloc.s V_8 nop <null> nop <null> ldloc.s V_7 ldc.i4.s 24 rem <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_10 ldloc.s V_10 brtrue.s IL_008B: ldloc.s V_7 ldloc.s V_8 castclass System.Byte[] call System.Void ez9P0D_.3dbTtqE8Sg7x2y/pNp5i9L.ix4ZSpq5ai3W8::Bjo0c4i(System.Byte[]) nop <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> leave.s IL_00E5: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00E5: nop nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00ED: nop nop <null> ret <null>

852dbeb154c98f0fc493a64e1a6b2a47 (1.23 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙