Suspicious
Suspect

a13d970993a6d17ba70c21b7e825a661

PE Executable
|
MD5: a13d970993a6d17ba70c21b7e825a661
|
Size: 3.27 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
 Hash Value
MD5
a13d970993a6d17ba70c21b7e825a661
Sha1
ddd7912c37aebd56edcc935b362047f8de8b61bf
Sha256
333895a4615ea1dedf4f0cc796d912ccec7384c7157f9e3bda2e6d27e392a9d2
Sha384
123c185ca3b5fa16dbfb9751108ab53e1fa80706143d0da0e112863ae3d27c0577460faca935c95304438dc93121d946
Sha512
05dfe8b7f284dfa4ffb692a1d06ac952462c068f5bc1bbae826df6800cbb91433fea7614159f3b942c6a18bfca70926e4dafa34cb9b9e78bdaffbe3e1bcc19be
SSDeep
49152:KvulL26AaNeWgPhlmVqvMQ7XSKBDirUMffLoGdETHHB72eh2NT:KveL26AaNeWgPhlmVqkQ7XSKBDirD
TLSH
2CE55A143BF85E63E16AD773DAB0501663F1FC2AF363EB0B6191667E1C53B4058026AB

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
a13d970993a6d17ba70c21b7e825a661
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Client
Full Name

Client
EntryPoint

System.Void ၞ銋ඎ眎聗꣡嬸ᖥ㵣巒荩꺂䠩煓띪獾::Main(System.String[])
Scope Name

Client
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.4.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5.2
Total Strings

11123
Main Method

System.Void ၞ銋ඎ眎聗꣡嬸ᖥ㵣巒荩꺂䠩煓띪獾::Main(System.String[])
Main IL Instruction Count

19
Main IL

ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void ၞ銋ඎ眎聗꣡嬸ᖥ㵣巒荩꺂䠩煓띪獾::ᠰ凸㗹׋쒯�듘喙༏నꃭ䈵菅苙虉㳆㽪뇐(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void ၞ銋ඎ眎聗꣡嬸ᖥ㵣巒荩꺂䠩煓띪獾::㦀┶낭㘵떮懺犎䩕㩡褵躶싁櫚�⼸(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void ﱞ跳틿�엚胛뽩㨔਋頑䓈໛☢ꕱᮭ푉ₗ䱑::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name

Client
Full Name

Client
EntryPoint

System.Void ၞ銋ඎ眎聗꣡嬸ᖥ㵣巒荩꺂䠩煓띪獾::Main(System.String[])
Scope Name

Client
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.4.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5.2
Total Strings

11123
Main Method

System.Void ၞ銋ඎ眎聗꣡嬸ᖥ㵣巒荩꺂䠩煓띪獾::Main(System.String[])
Main IL Instruction Count

19
Main IL

ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void ၞ銋ඎ眎聗꣡嬸ᖥ㵣巒荩꺂䠩煓띪獾::ᠰ凸㗹׋쒯�듘喙༏నꃭ䈵菅苙虉㳆㽪뇐(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void ၞ銋ඎ眎聗꣡嬸ᖥ㵣巒荩꺂䠩煓띪獾::㦀┶낭㘵떮懺犎䩕㩡褵躶싁櫚�⼸(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void ﱞ跳틿�엚胛뽩㨔਋頑䓈໛☢ꕱᮭ푉ₗ䱑::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
a13d970993a6d17ba70c21b7e825a661 (3.27 MB)
File Structure
a13d970993a6d17ba70c21b7e825a661
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙