Suspicious
Suspect

88f92602d16a90f66690e7ef8aec98b4

PE Executable
|
MD5: 88f92602d16a90f66690e7ef8aec98b4
|
Size: 1.09 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
88f92602d16a90f66690e7ef8aec98b4
Sha1
4fb743c9a36a5d8d31d524f4267e40c9f92ea730
Sha256
89f0f25086dc48c93e7b9c2e14e5e2c7fb9ab756109a21bab23555b9d6a9ba0a
Sha384
3c23c8ab3708f30f1215ab5527394186a018e8249c5941a17fca1ee444b1df07dd1847be86851790e667a4063daa12e0
Sha512
a6441a031ff42dfba37d9ff33012928a63a56b849a8f29de70e655de720f814660051c21c9c0f3027f65febc5559360f0515d42b28f6c9535c397d37d4f02c01
SSDeep
24576:OEuyicTVkK0S11Vk33pi3r+v+sCE98DWEvbQVN:L7apiqJDoBvbU
TLSH
9335019C3550B1CFC44789765D60EEB4EA602DAA9707D30391E72EEBBD0D69B9F001E2

PeID

Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
WorldClock.Form1.resources
WorldClock.Properties.Resources.resources
jOWr
[NBF]root.Data
[NBF]root.Data-preview.png
shu
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

jZNE.exe

Full Name

jZNE.exe

EntryPoint

System.Void WorldClock.Program::Main()

Scope Name

jZNE.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

jZNE

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

0

Main Method

System.Void WorldClock.Program::Main()

Main IL Instruction Count

37

Main IL

nop <null> ldc.i4 932016504 ldc.i4 1503264921 xor <null> dup <null> stloc.0 <null> ldc.i4.5 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_006F: nop call System.Void WorldClock.Program::‌‎‪‍‬‍‭‎‍‮‪‪‪​‫‮‫​‪‌‭‏‬‌‍‏‮() ldloc.0 <null> ldc.i4 -1285181897 mul <null> ldc.i4 -1124394255 xor <null> br.s IL_0006: ldc.i4 1503264921 newobj System.Void WorldClock.Form1::.ctor() call System.Void WorldClock.Program::‮‫‌‬‮‌‍‍‍‮‭‍​‮‍‎‮‪‪‏‪‫‪‏‪‮(System.Windows.Forms.Form) ldloc.0 <null> ldc.i4 80632784 mul <null> ldc.i4 1104840758 xor <null> br.s IL_0006: ldc.i4 1503264921 nop <null> ldc.i4.0 <null> call System.Void WorldClock.Program::‪‭​‫‭​‫‏‪‪‮‎‬‮‫‫​‌‭‭‭‪‏‌‫‮(System.Boolean) nop <null> ldloc.0 <null> ldc.i4 1473966409 mul <null> ldc.i4 -1134620848 xor <null> br.s IL_0006: ldc.i4 1503264921 nop <null> ret <null>

88f92602d16a90f66690e7ef8aec98b4 (1.09 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙