Suspicious
Suspect

87a58d7a56708f0a3af5230a6a5bb68a

PE Executable
|
MD5: 87a58d7a56708f0a3af5230a6a5bb68a
|
Size: 1.07 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
87a58d7a56708f0a3af5230a6a5bb68a
Sha1
0c24d83ceff43110a90f4e73c2d03ad3193b112a
Sha256
95ce64c132b3e69b44a5a0371f448e646caf6e3947b35543aebcc9c57fbaf2dc
Sha384
5c87e5ba4186ca229c62db18a94c040502f9529dd3df49c29b067415a6a0cfc92244db14d45dda2422a638a2c122e9f9
Sha512
16281d6c26c33aefe45452fc706c2c8b3239e12c12e1d3053fc53ad978e891643946b5425f91c6fc9ed88aa4600dd92bd26f7760f5a907f7ba0f3fe6ce1604a0
SSDeep
24576:Vcgb/GiAljl1uxwWA645yT/bG3K61YKJT4:VNtOp1qA6znafYk4
TLSH
7135CE6227EC5B58F5BEAB7A657001014BF5FC16EB32EA1D3E9450DE0821F81C962B73

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Ginaporizan.6813905.png
zd5A2Qksq6rWtx.Resources.resources
732fa99036ab2c.Resources.resources
f55024420
[NBF]root.Data
f55024421
[NBF]root.Data
f550244210
[NBF]root.Data
f550244211
[NBF]root.Data
f550244212
[NBF]root.Data
f550244213
[NBF]root.Data
f550244214
[NBF]root.Data
f550244215
[NBF]root.Data
f550244216
[NBF]root.Data
f550244217
[NBF]root.Data
f550244218
[NBF]root.Data
f550244219
[NBF]root.Data
f55024422
[NBF]root.Data
f550244220
[NBF]root.Data
f550244221
[NBF]root.Data
f55024423
[NBF]root.Data
f55024424
[NBF]root.Data
f55024425
[NBF]root.Data
f55024426
[NBF]root.Data
f55024427
[NBF]root.Data
f55024428
[NBF]root.Data
f55024429
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

zd5A2Qksq6rWtx

Full Name

zd5A2Qksq6rWtx

EntryPoint

System.Void zd5A2Qksq6rWtx.Fiz10DxyKk3::5koYtRc06yF()

Scope Name

zd5A2Qksq6rWtx

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

zd5A2Qksq6rWtx

Assembly Version

27.15.43.129

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1713

Main Method

System.Void zd5A2Qksq6rWtx.Fiz10DxyKk3::5koYtRc06yF()

Main IL Instruction Count

102

Main IL

nop <null> nop <null> ldloc.0 <null> newobj System.Void zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::.ctor(zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> stfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.s 24 clt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0028: ldc.i4.1 ldloc.0 <null> ldc.i4.s 24 stfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.1 <null> ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g conv.r8 <null> ldc.r8 24 div <null> call System.Double System.Math::Ceiling(System.Double) ldc.r8 1 add <null> call System.Double System.Math::Round(System.Double) conv.ovf.i4 <null> call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Range(System.Int32,System.Int32) ldsfld System.Func`2<System.Int32,System.Int32> zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::0XqnZrm brfalse.s IL_0062: ldsfld zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::gs8Q7mHkpr2P ldsfld System.Func`2<System.Int32,System.Int32> zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::0XqnZrm br.s IL_0078: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) ldsfld zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::gs8Q7mHkpr2P ldftn System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::ay9S3jA(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`2<System.Int32,System.Int32> zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::0XqnZrm call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) call System.Int32[] System.Linq.Enumerable::ToArray<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>) stloc.1 <null> ldloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Boolean zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::9f_HEr3eknR2(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr) call System.Int32 System.Linq.Enumerable::First<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>) stfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.2 <null> ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.2 <null> sub.ovf <null> stloc.s V_5 ldc.i4.0 <null> stloc.s V_6 br.s IL_00C5: ldloc.s V_6 ldloc.2 <null> ldloc.s V_6 ldnull <null> stelem.ref <null> ldloc.s V_6 ldc.i4.1 <null> add.ovf <null> stloc.s V_6 ldloc.s V_6 ldloc.s V_5 ble.s IL_00BA: ldloc.2 ldstr gnp.5093186 call System.String Microsoft.VisualBasic.Strings::StrReverse(System.String) stloc.3 <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.1 <null> sub.ovf <null> ldloc.3 <null> call System.Byte[] zd5A2Qksq6rWtx.5Exfc3FzWp7b2::Zr3n8N_gmdT9(System.Object) call System.Byte[] zd5A2Qksq6rWtx.5esFmP0ck4c::6gcRAn(System.Byte[]) stelem.ref <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g call System.Void zd5A2Qksq6rWtx.Sr0oa9zXPmb6k::6Mbzx5P(System.Object[],System.Int32) nop <null> leave.s IL_010A: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_010A: nop nop <null> ret <null>

Module Name

zd5A2Qksq6rWtx

Full Name

zd5A2Qksq6rWtx

EntryPoint

System.Void zd5A2Qksq6rWtx.Fiz10DxyKk3::5koYtRc06yF()

Scope Name

zd5A2Qksq6rWtx

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

zd5A2Qksq6rWtx

Assembly Version

27.15.43.129

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1713

Main Method

System.Void zd5A2Qksq6rWtx.Fiz10DxyKk3::5koYtRc06yF()

Main IL Instruction Count

102

Main IL

nop <null> nop <null> ldloc.0 <null> newobj System.Void zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::.ctor(zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg) stloc.0 <null> ldloc.0 <null> ldc.i4.1 <null> stfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.s 24 clt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0028: ldc.i4.1 ldloc.0 <null> ldc.i4.s 24 stfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.1 <null> ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g conv.r8 <null> ldc.r8 24 div <null> call System.Double System.Math::Ceiling(System.Double) ldc.r8 1 add <null> call System.Double System.Math::Round(System.Double) conv.ovf.i4 <null> call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Range(System.Int32,System.Int32) ldsfld System.Func`2<System.Int32,System.Int32> zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::0XqnZrm brfalse.s IL_0062: ldsfld zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::gs8Q7mHkpr2P ldsfld System.Func`2<System.Int32,System.Int32> zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::0XqnZrm br.s IL_0078: call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) ldsfld zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::gs8Q7mHkpr2P ldftn System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::ay9S3jA(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Int32>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`2<System.Int32,System.Int32> zd5A2Qksq6rWtx.Fiz10DxyKk3/Tc0eq.Jm0tk9Qd::0XqnZrm call System.Collections.Generic.IEnumerable`1<System.Int32> System.Linq.Enumerable::Select<System.Int32,System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Int32>) call System.Int32[] System.Linq.Enumerable::ToArray<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>) stloc.1 <null> ldloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Boolean zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::9f_HEr3eknR2(System.Int32) newobj System.Void System.Func`2<System.Int32,System.Boolean>::.ctor(System.Object,System.IntPtr) call System.Int32 System.Linq.Enumerable::First<System.Int32>(System.Collections.Generic.IEnumerable`1<System.Int32>,System.Func`2<System.Int32,System.Boolean>) stfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.2 <null> ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.2 <null> sub.ovf <null> stloc.s V_5 ldc.i4.0 <null> stloc.s V_6 br.s IL_00C5: ldloc.s V_6 ldloc.2 <null> ldloc.s V_6 ldnull <null> stelem.ref <null> ldloc.s V_6 ldc.i4.1 <null> add.ovf <null> stloc.s V_6 ldloc.s V_6 ldloc.s V_5 ble.s IL_00BA: ldloc.2 ldstr gnp.5093186 call System.String Microsoft.VisualBasic.Strings::StrReverse(System.String) stloc.3 <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g ldc.i4.1 <null> sub.ovf <null> ldloc.3 <null> call System.Byte[] zd5A2Qksq6rWtx.5Exfc3FzWp7b2::Zr3n8N_gmdT9(System.Object) call System.Byte[] zd5A2Qksq6rWtx.5esFmP0ck4c::6gcRAn(System.Byte[]) stelem.ref <null> ldloc.2 <null> ldloc.0 <null> ldfld System.Int32 zd5A2Qksq6rWtx.Fiz10DxyKk3/yf2Q9tF.cc4Nf3Yg::Yk2xr_H8w6xM9g call System.Void zd5A2Qksq6rWtx.Sr0oa9zXPmb6k::6Mbzx5P(System.Object[],System.Int32) nop <null> leave.s IL_010A: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_7 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_010A: nop nop <null> ret <null>

87a58d7a56708f0a3af5230a6a5bb68a (1.07 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙