Suspicious
Suspect

acce1a436bb02943599e545e840d76d6

PE Executable
|
MD5: acce1a436bb02943599e545e840d76d6
|
Size: 1.18 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
acce1a436bb02943599e545e840d76d6
Sha1
49640dabc43275f2c65cd4d269dcb1f264057afb
Sha256
a8cf62116e2033f4236222c9d98c26051ced7bc1bd60114c17922c4577c762de
Sha384
9b7dc09acfd9b3c0de90d8fa50846078857dd22bbfff5d3056a2fed570bb17a06df384f49ffa65ed0f6ab15c5eef050a
Sha512
0f78f923f9ac471742fdee4df5971a07dd3b071ab81dbacb6861ad75e72de9d06a0017d8eb6af5cb7353cf9a61d61a341e94d733f88ddb7bd93adbf539b09a39
SSDeep
24576:x1Ak0Mv87dJy9+7GBrtGOihD4Qlg50rt5lV9u1e2OLNKX8:x1xWdJyk7G7pihjLBD3u1GpKX
TLSH
3145338EB38C9551E1F199B685071410DAE1E7C540BACFBEE28A73B67C63F298C2564C

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
UPolyX 0.3 -> delikon
File Structure
acce1a436bb02943599e545e840d76d6
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Emgrgqq.Properties.Resources.resources
Lgsspolg
Informations
Name
 Value
Module Name

Your_Leave_Mid Year_Till _December 2025.exe
Full Name

Your_Leave_Mid Year_Till _December 2025.exe
EntryPoint

System.Void Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::GenerateSetEmitter()
Scope Name

Your_Leave_Mid Year_Till _December 2025.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Your_Leave_Mid Year_Till _December 2025
Assembly Version

1.0.6832.22126
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

6
Main Method

System.Void Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::GenerateSetEmitter()
Main IL Instruction Count

21
Main IL

ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0066: ret call System.Byte[] Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::MergeEmitter() ldstr 67505oI+9KnioNMPPGKQQg== ldstr cGlXgmKIUFw= call System.Byte[] Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::GenerateJoinedEmitter(System.Object,System.Object,System.Object) ldstr wIQ6efbTtQNbATaF4W.m9Kkg0sX7nLGH8Ziib ldstr IemJggQE6 call System.Void Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::ObserveEmitter(System.Object,System.Object,System.Object) ldc.i4 0 ldsfld <Module>{f484432a-41e9-4de5-83a7-c53ad02d7a7f} <Module>{f484432a-41e9-4de5-83a7-c53ad02d7a7f}::m_60dbc708cd72424c9f3c11836f4b67e2 ldfld System.Int32 <Module>{f484432a-41e9-4de5-83a7-c53ad02d7a7f}::m_fccd5d4245c84bfe8a37be7c86a51a70 brfalse IL_0012: switch(IL_0066,IL_0024) pop <null> ldc.i4 0 br IL_0012: switch(IL_0066,IL_0024) ret <null>
Module Name

Your_Leave_Mid Year_Till _December 2025.exe
Full Name

Your_Leave_Mid Year_Till _December 2025.exe
EntryPoint

System.Void Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::GenerateSetEmitter()
Scope Name

Your_Leave_Mid Year_Till _December 2025.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Your_Leave_Mid Year_Till _December 2025
Assembly Version

1.0.6832.22126
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

6
Main Method

System.Void Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::GenerateSetEmitter()
Main IL Instruction Count

21
Main IL

ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0066: ret call System.Byte[] Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::MergeEmitter() ldstr 67505oI+9KnioNMPPGKQQg== ldstr cGlXgmKIUFw= call System.Byte[] Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::GenerateJoinedEmitter(System.Object,System.Object,System.Object) ldstr wIQ6efbTtQNbATaF4W.m9Kkg0sX7nLGH8Ziib ldstr IemJggQE6 call System.Void Your_Leave_MidYear_Till_December2025.Helpers.EmitterRecord::ObserveEmitter(System.Object,System.Object,System.Object) ldc.i4 0 ldsfld <Module>{f484432a-41e9-4de5-83a7-c53ad02d7a7f} <Module>{f484432a-41e9-4de5-83a7-c53ad02d7a7f}::m_60dbc708cd72424c9f3c11836f4b67e2 ldfld System.Int32 <Module>{f484432a-41e9-4de5-83a7-c53ad02d7a7f}::m_fccd5d4245c84bfe8a37be7c86a51a70 brfalse IL_0012: switch(IL_0066,IL_0024) pop <null> ldc.i4 0 br IL_0012: switch(IL_0066,IL_0024) ret <null>
acce1a436bb02943599e545e840d76d6 (1.18 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙