Suspicious
Suspect

a09c9c189dcd8dc8f28aa6bc37606c6a

PE Executable
|
MD5: a09c9c189dcd8dc8f28aa6bc37606c6a
|
Size: 1.2 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
a09c9c189dcd8dc8f28aa6bc37606c6a
Sha1
19f7402f351f80291e92b296a6f9503ceae051b6
Sha256
a9369f71a2fd4ac66b3339e665680162801ff29665cbe0ab6e78f79742a410ae
Sha384
d7bf3d60e914e533f002c5cffa194279a841d2b68779462b1f12648ac1bcf58e55199ca326dab931dc4d0edd86539263
Sha512
3903adf87d74a6b12b46950b0e1fe913f975649bfaf40bce2bea10bcf91286a1f02f4a78e4699b9b2ca0d624cb55012abc1574a722803d7f2b4fbb8ffa7f7b6b
SSDeep
24576:I+VeDStC+ONdBl2RRDbPt8JjWZ5LAwxx56A:hVZtv4H2LDbPcj455l
TLSH
8A45011379CC5AE4D08CC8B96E29F37CB22ABC1480BB8C05BC96F509557A7126AF753D

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
a09c9c189dcd8dc8f28aa6bc37606c6a
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Sqnzzxjbp.Properties.Resources.resources
Gccxaezj
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Dry-Dock Specifications.exe
Full Name

Dry-Dock Specifications.exe
EntryPoint

System.Void Sqnzzxjbp.Decorators.InternalDecorator::CancelDecorator()
Scope Name

Dry-Dock Specifications.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Dry-Dock Specifications
Assembly Version

1.0.5034.28849
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

6
Main Method

System.Void Sqnzzxjbp.Decorators.InternalDecorator::CancelDecorator()
Main IL Instruction Count

31
Main IL

ldc.i4 2 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0053: ret ldsfld System.Action`1<System.IO.MemoryStream> Sqnzzxjbp.Decorators.InternalDecorator/<>c::calcDecorator dup <null> brtrue IL_006A: call System.Void Sqnzzxjbp.Decorators.InternalDecorator::HandleDecorator(System.Action`1<System.IO.MemoryStream>) pop <null> ldc.i4 1 ldsfld <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01} <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01}::m_835bafdf5afb4e218c516fb1a4a47d33 ldfld System.Int32 <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01}::m_4c2a85c0f25348e7928001ff6197cb72 brfalse IL_0012: switch(IL_0053,IL_0054,IL_0028) pop <null> ldc.i4 1 br IL_0012: switch(IL_0053,IL_0054,IL_0028) ret <null> ldsfld Sqnzzxjbp.Decorators.InternalDecorator/<>c Sqnzzxjbp.Decorators.InternalDecorator/<>c::m_FinalizerVisitor ldftn System.Void Sqnzzxjbp.Decorators.InternalDecorator/<>c::HandleOrderedDecorator(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action`1<System.IO.MemoryStream> Sqnzzxjbp.Decorators.InternalDecorator/<>c::calcDecorator call System.Void Sqnzzxjbp.Decorators.InternalDecorator::HandleDecorator(System.Action`1<System.IO.MemoryStream>) ldc.i4 0 ldsfld <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01} <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01}::m_835bafdf5afb4e218c516fb1a4a47d33 ldfld System.Int32 <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01}::m_5b245e2ceb664712a65dad2ccb69b05e brtrue IL_0012: switch(IL_0053,IL_0054,IL_0028) pop <null> ldc.i4 0 br IL_0012: switch(IL_0053,IL_0054,IL_0028)
Module Name

Dry-Dock Specifications.exe
Full Name

Dry-Dock Specifications.exe
EntryPoint

System.Void Sqnzzxjbp.Decorators.InternalDecorator::CancelDecorator()
Scope Name

Dry-Dock Specifications.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Dry-Dock Specifications
Assembly Version

1.0.5034.28849
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

6
Main Method

System.Void Sqnzzxjbp.Decorators.InternalDecorator::CancelDecorator()
Main IL Instruction Count

31
Main IL

ldc.i4 2 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0053: ret ldsfld System.Action`1<System.IO.MemoryStream> Sqnzzxjbp.Decorators.InternalDecorator/<>c::calcDecorator dup <null> brtrue IL_006A: call System.Void Sqnzzxjbp.Decorators.InternalDecorator::HandleDecorator(System.Action`1<System.IO.MemoryStream>) pop <null> ldc.i4 1 ldsfld <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01} <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01}::m_835bafdf5afb4e218c516fb1a4a47d33 ldfld System.Int32 <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01}::m_4c2a85c0f25348e7928001ff6197cb72 brfalse IL_0012: switch(IL_0053,IL_0054,IL_0028) pop <null> ldc.i4 1 br IL_0012: switch(IL_0053,IL_0054,IL_0028) ret <null> ldsfld Sqnzzxjbp.Decorators.InternalDecorator/<>c Sqnzzxjbp.Decorators.InternalDecorator/<>c::m_FinalizerVisitor ldftn System.Void Sqnzzxjbp.Decorators.InternalDecorator/<>c::HandleOrderedDecorator(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action`1<System.IO.MemoryStream> Sqnzzxjbp.Decorators.InternalDecorator/<>c::calcDecorator call System.Void Sqnzzxjbp.Decorators.InternalDecorator::HandleDecorator(System.Action`1<System.IO.MemoryStream>) ldc.i4 0 ldsfld <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01} <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01}::m_835bafdf5afb4e218c516fb1a4a47d33 ldfld System.Int32 <Module>{f4dbb6a4-b07e-4600-a239-716ecbc3fa01}::m_5b245e2ceb664712a65dad2ccb69b05e brtrue IL_0012: switch(IL_0053,IL_0054,IL_0028) pop <null> ldc.i4 0 br IL_0012: switch(IL_0053,IL_0054,IL_0028)
a09c9c189dcd8dc8f28aa6bc37606c6a (1.2 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙