Suspicious
Suspect

85ae2e911a2e74568f07844e23384998

PE Executable
|
MD5: 85ae2e911a2e74568f07844e23384998
|
Size: 1.07 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
85ae2e911a2e74568f07844e23384998
Sha1
b0191c61ad0eca1b31ea4bebf528dcd16d1f6f93
Sha256
3aee7183328e8f208acd9994701d1cc5e16d806c578742e963936acb19631a1d
Sha384
b28f2266b1f130c6cbbb6a63e4f8746451d0b01dbaf53416c569c0fb6540937a2f7ddc99081c453af5af0da037cc31ca
Sha512
ca4e0b5a55bd2eb3425921ea6888564c1f50e3a56c6d1421e6bd66f015d138c12e2abfbe286ca8f46ac2e2f2032ba5296d2b0fdb140df01ad855ec5fd2dae85a
SSDeep
24576:x6gb/GiAljl1uxwWAl45yT/bG3K69YjV94:xrtOp1qAlznanYjH4
TLSH
C935CE6227EC5B58F5BEAB7A647011014BF5FC16EB32EA1D3E9450DE0821F81C962B73

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Ginaporizan.6813905.png
wNg2Tq0s3F.Resources.resources
90fe8696c60832.Resources.resources
3c449bc40
[NBF]root.Data
3c449bc41
[NBF]root.Data
3c449bc410
[NBF]root.Data
3c449bc411
[NBF]root.Data
3c449bc412
[NBF]root.Data
3c449bc413
[NBF]root.Data
3c449bc414
[NBF]root.Data
3c449bc415
[NBF]root.Data
3c449bc416
[NBF]root.Data
3c449bc417
[NBF]root.Data
3c449bc418
[NBF]root.Data
3c449bc419
[NBF]root.Data
3c449bc42
[NBF]root.Data
3c449bc420
[NBF]root.Data
3c449bc421
[NBF]root.Data
3c449bc43
[NBF]root.Data
3c449bc44
[NBF]root.Data
3c449bc45
[NBF]root.Data
3c449bc46
[NBF]root.Data
3c449bc47
[NBF]root.Data
3c449bc48
[NBF]root.Data
3c449bc49
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

wNg2Tq0s3F

Full Name

wNg2Tq0s3F

EntryPoint

System.Void wNg2Tq0s3F.0pkEpN::3XwgAn()

Scope Name

wNg2Tq0s3F

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

wNg2Tq0s3F

Assembly Version

20.21.30.49

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1713

Main Method

System.Void wNg2Tq0s3F.0pkEpN::3XwgAn()

Main IL Instruction Count

102

Main IL

nop <null> nop <null> ldloc.0 <null> newobj System.Void wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::.ctor(wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> stfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.s 24 clt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0028: ldc.i4.1 ldloc.0 <null> ldc.i4.s 24 stfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.1 <null> ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K conv.r8 <null> ldc.r8 24 div <null> call System.Double System.Math::Ceiling(System.Double) ldc.r8 1 add <null> call System.Double System.Math::Round(System.Double) conv.ovf.i4 <null> call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Range(System.Int32,System.Int32) ldsfld System.Func`2<System.Int32,System.Int32> wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::2Crdkb5 brfalse.s IL_0062: ldsfld wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::nHc15yY ldsfld System.Func`2<System.Int32,System.Int32> wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::2Crdkb5 br.s IL_0078: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) ldsfld wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::nHc15yY ldftn System.Int32 wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::Ss0qo3wGfA7k(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`2<System.Int32,System.Int32> wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::2Crdkb5 call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) call System.Int32[] System.Linq.Enumerable::ToArray<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>) stloc.1 <null> ldloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Boolean wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::eJc4En0nc(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr) call System.Int32 System.Linq.Enumerable::First<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>) stfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.2 <null> ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.2 <null> sub.ovf <null> stloc.s V_5 ldc.i4.0 <null> stloc.s V_6 br.s IL_00C5: ldloc.s V_6 ldloc.2 <null> ldloc.s V_6 ldnull <null> stelem.ref <null> ldloc.s V_6 ldc.i4.1 <null> add.ovf <null> stloc.s V_6 ldloc.s V_6 ldloc.s V_5 ble.s IL_00BA: ldloc.2 ldstr gnp.5093186 call System.String Microsoft.VisualBasic.Strings::StrReverse(System.String) stloc.3 <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.1 <null> sub.ovf <null> ldloc.3 <null> call System.Byte[] wNg2Tq0s3F.ct2J6Njamr0T::ae2FnK(System.Object) call System.Byte[] wNg2Tq0s3F.8fiDkwY20tmAR5::7QggkyE0j4wFbW(System.Byte[]) stelem.ref <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K call System.Void wNg2Tq0s3F.8yfCGb0xj::9Qcdea1A4BfbMi(System.Object[],System.Int32) nop <null> leave.s IL_010A: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_010A: nop nop <null> ret <null>

Module Name

wNg2Tq0s3F

Full Name

wNg2Tq0s3F

EntryPoint

System.Void wNg2Tq0s3F.0pkEpN::3XwgAn()

Scope Name

wNg2Tq0s3F

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

wNg2Tq0s3F

Assembly Version

20.21.30.49

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1713

Main Method

System.Void wNg2Tq0s3F.0pkEpN::3XwgAn()

Main IL Instruction Count

102

Main IL

nop <null> nop <null> ldloc.0 <null> newobj System.Void wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::.ctor(wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> stfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.s 24 clt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0028: ldc.i4.1 ldloc.0 <null> ldc.i4.s 24 stfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.1 <null> ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K conv.r8 <null> ldc.r8 24 div <null> call System.Double System.Math::Ceiling(System.Double) ldc.r8 1 add <null> call System.Double System.Math::Round(System.Double) conv.ovf.i4 <null> call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Range(System.Int32,System.Int32) ldsfld System.Func`2<System.Int32,System.Int32> wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::2Crdkb5 brfalse.s IL_0062: ldsfld wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::nHc15yY ldsfld System.Func`2<System.Int32,System.Int32> wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::2Crdkb5 br.s IL_0078: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) ldsfld wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::nHc15yY ldftn System.Int32 wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::Ss0qo3wGfA7k(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`2<System.Int32,System.Int32> wNg2Tq0s3F.0pkEpN/0SkfH.Bax3gH0yJwz::2Crdkb5 call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) call System.Int32[] System.Linq.Enumerable::ToArray<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>) stloc.1 <null> ldloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Boolean wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::eJc4En0nc(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr) call System.Int32 System.Linq.Enumerable::First<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>) stfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.2 <null> ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.2 <null> sub.ovf <null> stloc.s V_5 ldc.i4.0 <null> stloc.s V_6 br.s IL_00C5: ldloc.s V_6 ldloc.2 <null> ldloc.s V_6 ldnull <null> stelem.ref <null> ldloc.s V_6 ldc.i4.1 <null> add.ovf <null> stloc.s V_6 ldloc.s V_6 ldloc.s V_5 ble.s IL_00BA: ldloc.2 ldstr gnp.5093186 call System.String Microsoft.VisualBasic.Strings::StrReverse(System.String) stloc.3 <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K ldc.i4.1 <null> sub.ovf <null> ldloc.3 <null> call System.Byte[] wNg2Tq0s3F.ct2J6Njamr0T::ae2FnK(System.Object) call System.Byte[] wNg2Tq0s3F.8fiDkwY20tmAR5::7QggkyE0j4wFbW(System.Byte[]) stelem.ref <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 wNg2Tq0s3F.0pkEpN/8Ppxz5_DSzn.2KakBp3::Lmt98iZynj2K call System.Void wNg2Tq0s3F.8yfCGb0xj::9Qcdea1A4BfbMi(System.Object[],System.Int32) nop <null> leave.s IL_010A: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_010A: nop nop <null> ret <null>

85ae2e911a2e74568f07844e23384998 (1.07 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙