Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 8c81e6f86fcb841998914616724a7127
|
| Sha1 | ec352b64a6c6e148fcbe6a03df0c63bd9c419aba
|
| Sha256 | 929f7e8b93d7627c0dbe5c7f47bed56ba33461e915c6e38dc4210975d13a774b
|
| Sha384 | e8b99dcdcc5b9673c508cad500acc3f223fb32f65b69bda8520ab7ae1bc1d1596b8bdabd78f2cd54ede4feef75508124
|
| Sha512 | e167bf12b32b652cd6ee4976f2b14d5b4f04796518eb524e4032aaf226d389b1396cd8b676284b9a2011612fe02755947b1291d3f61a026f3e3bbd4e47d66865
|
| SSDeep | 49152:boOxvaIICasQh8l6fwR1OWVCxv3koTUiXmMzfJ:boOxiIIgQhEHVCxLI4rJ
|
| TLSH | 5BA5F1D0EEACA95EE47AAF7AD0F7162007F49452DB32EE49081050DA0653713BDE26F7
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | 628850391.exe |
| Full Name | 628850391.exe |
| EntryPoint | System.Void Jthah.Pfwbarr::Main() |
| Scope Name | 628850391.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | 628850391 |
| Assembly Version | 1.0.1234.5252 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6 |
| Total Strings | 4890 |
| Main Method | System.Void Jthah.Pfwbarr::Main() |
| Main IL Instruction Count | 75 |
| Main IL | nop <null> ldnull <null> stloc.0 <null> br IL_001E: ldc.i4.1 nop <null> nop <null> call System.Byte[] Jthah.Properties.Lulhzktw::get_Rpuqneldya() stloc.0 <null> leave IL_0022: ldloc.0 pop <null> nop <null> nop <null> leave IL_001D: nop nop <null> ldc.i4.1 <null> stloc.1 <null> br.s IL_0008: nop ldloc.0 <null> ldnull <null> cgt.un <null> stloc.2 <null> ldloc.2 <null> brfalse IL_00A9: ret nop <null> ldloc.0 <null> call System.Byte[] Jthah.Pfwbarr::Ycdpqey(System.Byte[]) stloc.3 <null> ldloc.3 <null> ldlen <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_4 ldloc.s V_4 brfalse IL_00A8: nop nop <null> ldloc.3 <null> call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[]) stloc.s V_5 ldloc.s V_5 callvirt System.String System.Reflection.Assembly::get_CodeBase() call System.Boolean System.String::IsNullOrWhiteSpace(System.String) ldc.i4.0 <null> ceq <null> stloc.s V_6 ldloc.s V_6 brfalse IL_00A7: nop nop <null> ldstr qnNV1OUySarOVC2TFO.d3MRPKm0mIdOopP9NY stloc.s V_7 ldloc.s V_5 ldloc.s V_7 callvirt System.Type System.Reflection.Assembly::GetType(System.String) stloc.s V_8 ldloc.s V_8 callvirt System.String System.Type::get_FullName() call System.Boolean System.String::IsNullOrEmpty(System.String) ldc.i4.0 <null> ceq <null> stloc.s V_9 ldloc.s V_9 brfalse IL_00A6: nop nop <null> ldloc.s V_8 ldstr VClOEIPpo ldc.i4 256 ldnull <null> ldnull <null> ldnull <null> callvirt System.Object System.Type::InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[]) pop <null> nop <null> nop <null> nop <null> nop <null> ret <null> |
| Module Name | 628850391.exe |
| Full Name | 628850391.exe |
| EntryPoint | System.Void Jthah.Pfwbarr::Main() |
| Scope Name | 628850391.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | 628850391 |
| Assembly Version | 1.0.1234.5252 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6 |
| Total Strings | 4890 |
| Main Method | System.Void Jthah.Pfwbarr::Main() |
| Main IL Instruction Count | 75 |
| Main IL | nop <null> ldnull <null> stloc.0 <null> br IL_001E: ldc.i4.1 nop <null> nop <null> call System.Byte[] Jthah.Properties.Lulhzktw::get_Rpuqneldya() stloc.0 <null> leave IL_0022: ldloc.0 pop <null> nop <null> nop <null> leave IL_001D: nop nop <null> ldc.i4.1 <null> stloc.1 <null> br.s IL_0008: nop ldloc.0 <null> ldnull <null> cgt.un <null> stloc.2 <null> ldloc.2 <null> brfalse IL_00A9: ret nop <null> ldloc.0 <null> call System.Byte[] Jthah.Pfwbarr::Ycdpqey(System.Byte[]) stloc.3 <null> ldloc.3 <null> ldlen <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_4 ldloc.s V_4 brfalse IL_00A8: nop nop <null> ldloc.3 <null> call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[]) stloc.s V_5 ldloc.s V_5 callvirt System.String System.Reflection.Assembly::get_CodeBase() call System.Boolean System.String::IsNullOrWhiteSpace(System.String) ldc.i4.0 <null> ceq <null> stloc.s V_6 ldloc.s V_6 brfalse IL_00A7: nop nop <null> ldstr qnNV1OUySarOVC2TFO.d3MRPKm0mIdOopP9NY stloc.s V_7 ldloc.s V_5 ldloc.s V_7 callvirt System.Type System.Reflection.Assembly::GetType(System.String) stloc.s V_8 ldloc.s V_8 callvirt System.String System.Type::get_FullName() call System.Boolean System.String::IsNullOrEmpty(System.String) ldc.i4.0 <null> ceq <null> stloc.s V_9 ldloc.s V_9 brfalse IL_00A6: nop nop <null> ldloc.s V_8 ldstr VClOEIPpo ldc.i4 256 ldnull <null> ldnull <null> ldnull <null> callvirt System.Object System.Type::InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[]) pop <null> nop <null> nop <null> nop <null> nop <null> ret <null> |