Malicious
Malicious

8dd6324d57fbde1a12e1b6c16415a1fc

PE Executable
|
MD5: 8dd6324d57fbde1a12e1b6c16415a1fc
|
Size: 3.18 MB
|
application/x-dosexec


Print
Infection Chain
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
Hash Value
MD5
8dd6324d57fbde1a12e1b6c16415a1fc
Sha1
c68b281a2eb75868d0be49a4835c2f7c1cfe349a
Sha256
28e4ad78f2695b75e4fb2a15ff7fdccc8bcdb23f9b53a1757bd169f57f6a91c1
Sha384
aaebb90abf813debf6383b71d0b130b24c7ba7037129caa2492549e7076bcef9343743f6bf6f7a894648bf62c54e9a86
Sha512
57389aeab630fe4893d325a743a81c12a7d31354caa732e668a53a907173a8637cce364f743f9a1ddc7e04e06ec6cc72574a28a68051e1d205dab1e1e60a0c8b
SSDeep
49152:o1rnFKeeKGCnUWMYl8KIK/HwZUnwblDG9KOsilR:6ZKeRGCnzMYl8Kr/HwZUnwblaEx8
TLSH
FDE5E89189D9BC10DBF15EB29231A2B634C54F279E75BA32CD9F65670F35F3A28800E1

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Žfr—’‡l‹1‘mup4j‹Ÿ.6sŒvoˆh1‹†•2œkœ1Œ
ybcŸs‘™9š88nšb“†.kp3im5’žŠ47–cŽka
˜v‰vp67—5†8™ušu.j•oifŽŸ™Ÿmfoˆe
OkiIcMICZUd4ynf.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
[NBF]root.IconData
progressBar1.Modifiers
$this.Language
$this.GridSize
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

R科aキU#}

Full Name

R科aキU#}

EntryPoint

System.Void ††† †††††”.††† †††††“::††† †††††•(System.String[])

Scope Name

R科aキU#}

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

OkiIcMICZUd4ynf

Assembly Version

10.0.26100.3624

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

42

Main Method

System.Void ††† †††††”.††† †††††“::††† †††††•(System.String[])

Main IL Instruction Count

19

Main IL

ldc.i4.0 <null> newarr System.Byte ldsfld ††† †††™—‘ ††† †††™—‘::††† †††™—’ call System.Reflection.Assembly ††† †††™—‘::††† †††™—(System.Byte[],††† †††™—‘) pop <null> leave IL_0046: ret pop <null> ldsfld ††† †††™—“ ††† †††™—“::††† †††™—” call System.Void ††† †††™—“::††† †††™—(††† †††™—“) ldsfld System.Byte[] 伝7n$牡要 Bdpフ能望:1V瑞7ϒnz:影3viィ玉aG瑞,AN系4P市TC::††† ††††‡† ldsfld System.Byte[] 伝7n$牡要 Bdpフ能望:1V瑞7ϒnz:影3viィ玉aG瑞,AN系4P市TC::††† ††††‡‡ ldsfld ††† †††™—• ††† †††™—•::††† †††™—– call System.Byte[] ††† †††™—•::††† †††™—(System.Byte[],System.Byte[],††† †††™—•) stloc.0 <null> ldloc.0 <null> ldsfld ††† †††™—— ††† †††™——::††† †††™—˜ call System.Void ††† †††™——::††† †††™—(System.Byte[],††† †††™——) leave IL_0046: ret ret <null>

Module Name

R科aキU#}

Full Name

R科aキU#}

EntryPoint

System.Void ††† †††††”.††† †††††“::††† †††††•(System.String[])

Scope Name

R科aキU#}

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

OkiIcMICZUd4ynf

Assembly Version

10.0.26100.3624

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

42

Main Method

System.Void ††† †††††”.††† †††††“::††† †††††•(System.String[])

Main IL Instruction Count

19

Main IL

ldc.i4.0 <null> newarr System.Byte ldsfld ††† †††™—‘ ††† †††™—‘::††† †††™—’ call System.Reflection.Assembly ††† †††™—‘::††† †††™—(System.Byte[],††† †††™—‘) pop <null> leave IL_0046: ret pop <null> ldsfld ††† †††™—“ ††† †††™—“::††† †††™—” call System.Void ††† †††™—“::††† †††™—(††† †††™—“) ldsfld System.Byte[] 伝7n$牡要 Bdpフ能望:1V瑞7ϒnz:影3viィ玉aG瑞,AN系4P市TC::††† ††††‡† ldsfld System.Byte[] 伝7n$牡要 Bdpフ能望:1V瑞7ϒnz:影3viィ玉aG瑞,AN系4P市TC::††† ††††‡‡ ldsfld ††† †††™—• ††† †††™—•::††† †††™—– call System.Byte[] ††† †††™—•::††† †††™—(System.Byte[],System.Byte[],††† †††™—•) stloc.0 <null> ldloc.0 <null> ldsfld ††† †††™—— ††† †††™——::††† †††™—˜ call System.Void ††† †††™——::††† †††™—(System.Byte[],††† †††™——) leave IL_0046: ret ret <null>

8dd6324d57fbde1a12e1b6c16415a1fc (3.18 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙