9d9d54d38aed19ec686522d590a2a462

PE Executable
|
MD5: 9d9d54d38aed19ec686522d590a2a462
|
Size: 1.95 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	9d9d54d38aed19ec686522d590a2a462
Sha1	f941481f5e810a5d081b7e0aea2e7ce0567fafb2
Sha256	e7078c1080db9dafe06ac8258d4d685cbdef80ab0363ac7438dcef8c3bf554b1
Sha384	a0261839774f0a8ecf041985af49bb60e39aa124788dd97ea3ddfedbb26600ca1e05615fe142c09b6dd0569a18efb09b
Sha512	fc5d408754e80a01282fe6eb15903cf0086c220400703bfb72921a962bbf783472f1091d2e8a1f9f421ca3a6ea4bc8ff3d1761efe18114cac5214a4290892086
SSDeep	49152:ARFn7wRPirm2NnPTKKm77LrwCB6uanFf:ARFMoZNn2Km77LrwkFW
TLSH	F995F150B7F5811AF1FF2BBAA9B314550B37BA039A3AC74E198C605D1FA33409E513A7

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	Client.exe
Full Name	Client.exe
EntryPoint	System.Void facxznixdgwtugfopwohyey.aARME4LSEmQHAIBzTSNObA::Main()
Scope Name	Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Client
Assembly Version	1.6.5.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	1519
Main Method	System.Void facxznixdgwtugfopwohyey.aARME4LSEmQHAIBzTSNObA::Main()
Main IL Instruction Count	11
Main IL	ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void facxznixdgwtugfopwohyey.aARME4LSEmQHAIBzTSNObA::rOytu7v43NcRMqy7W7qI2CcbRJ() newobj System.Void facxznixdgwtugfopwohyey.61mO1QydLWo::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	Client.exe
Full Name	Client.exe
EntryPoint	System.Void facxznixdgwtugfopwohyey.aARME4LSEmQHAIBzTSNObA::Main()
Scope Name	Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Client
Assembly Version	1.6.5.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	1519
Main Method	System.Void facxznixdgwtugfopwohyey.aARME4LSEmQHAIBzTSNObA::Main()
Main IL Instruction Count	11
Main IL	ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void facxznixdgwtugfopwohyey.aARME4LSEmQHAIBzTSNObA::rOytu7v43NcRMqy7W7qI2CcbRJ() newobj System.Void facxznixdgwtugfopwohyey.61mO1QydLWo::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name0	Value
Embedded Resources	31
Suspicious Type Names (1-2 chars)	0

9d9d54d38aed19ec686522d590a2a462 (1.95 MB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
Embedded Resources	31	9d9d54d38aed19ec686522d590a2a462
Suspicious Type Names (1-2 chars)	0	9d9d54d38aed19ec686522d590a2a462

You must be signed in to post a comment.

9d9d54d38aed19ec686522d590a2a462

PE Executable | MD5: 9d9d54d38aed19ec686522d590a2a462 | Size: 1.95 MB | application/x-dosexec

PE Executable
|
MD5: 9d9d54d38aed19ec686522d590a2a462
|
Size: 1.95 MB
|
application/x-dosexec