Suspicious
Suspect

b0022539593c48afa66a4f22f8532d6e

PE Executable
|
MD5: b0022539593c48afa66a4f22f8532d6e
|
Size: 1.27 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
b0022539593c48afa66a4f22f8532d6e
Sha1
9514c58701f8ab07b8a095c7cd2fd68ac68b31ab
Sha256
ab28803f79757760027a140b87cf9d068ec8c6c8ebc541a680b6f874aeb63a05
Sha384
7240ad9cadebccc155e5e1a80b1f01a3c47088bc51049d4876be5db7621f6f2344cff9f2fae022fb964b4d811043ee46
Sha512
573b165dd119ed5f7486dd84cc8907076a352a26b228539dccc456234154697b180d772af5d4d1edefcd9f7758af0463def7f98c575cc57b69b84dc7cf5466d7
SSDeep
24576:x6q64Cj8Yy0e0f/9KoYrv0eogZQzAy+A:sq6488Yy0Lf1vBe/K2A
TLSH
C245C01A2BDD6AF0E17F8F359274015047F0B60BC232E75E6994F3F9CE92B895512263

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
TetraSite.demandflatteningrules
7EfpxiA54.jq6DRpy.resources
bc93c5bbcef45d.Resources.resources
3d4a0a380
[NBF]root.Data
3d4a0a381
[NBF]root.Data
3d4a0a3810
[NBF]root.Data
3d4a0a3811
[NBF]root.Data
3d4a0a3812
[NBF]root.Data
3d4a0a3813
[NBF]root.Data
3d4a0a3814
[NBF]root.Data
3d4a0a3815
[NBF]root.Data
3d4a0a3816
[NBF]root.Data
3d4a0a3817
[NBF]root.Data
3d4a0a3818
[NBF]root.Data
3d4a0a3819
[NBF]root.Data
3d4a0a382
[NBF]root.Data
3d4a0a3820
[NBF]root.Data
3d4a0a3821
[NBF]root.Data
3d4a0a3822
[NBF]root.Data
3d4a0a3823
[NBF]root.Data
3d4a0a3824
[NBF]root.Data
3d4a0a3825
[NBF]root.Data
3d4a0a3826
[NBF]root.Data
3d4a0a3827
[NBF]root.Data
3d4a0a3828
[NBF]root.Data
3d4a0a3829
[NBF]root.Data
3d4a0a383
[NBF]root.Data
3d4a0a3830
[NBF]root.Data
3d4a0a3831
[NBF]root.Data
3d4a0a3832
[NBF]root.Data
3d4a0a3833
[NBF]root.Data
3d4a0a3834
[NBF]root.Data
3d4a0a3835
[NBF]root.Data
3d4a0a3836
[NBF]root.Data
3d4a0a3837
[NBF]root.Data
3d4a0a3838
[NBF]root.Data
3d4a0a3839
[NBF]root.Data
3d4a0a384
[NBF]root.Data
3d4a0a3840
[NBF]root.Data
3d4a0a3841
[NBF]root.Data
3d4a0a3842
[NBF]root.Data
3d4a0a385
[NBF]root.Data
3d4a0a386
[NBF]root.Data
3d4a0a387
[NBF]root.Data
3d4a0a388
[NBF]root.Data
3d4a0a389
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

7EfpxiA54

Full Name

7EfpxiA54

EntryPoint

System.Void 7EfpxiA54.1xnQL8goj/Ms9idA.Rx7qtL::Moz6gX4zZ()

Scope Name

7EfpxiA54

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

7EfpxiA54

Assembly Version

28.10.13.194

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1175

Main Method

System.Void 7EfpxiA54.1xnQL8goj/Ms9idA.Rx7qtL::Moz6gX4zZ()

Main IL Instruction Count

32

Main IL

nop <null> nop <null> ldc.i4.s 20 stloc.0 <null> newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor() stloc.1 <null> ldloc.0 <null> stloc.2 <null> ldc.i4.1 <null> stloc.3 <null> br.s IL_001D: ldloc.3 ldloc.1 <null> ldloc.3 <null> callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32) nop <null> ldloc.3 <null> ldc.i4.1 <null> add.ovf <null> stloc.3 <null> ldloc.3 <null> ldloc.2 <null> ble.s IL_0011: ldloc.1 ldstr demandflatteningrules call System.Void 7EfpxiA54.ym8Yg4Gf::yQj4yi6En3Cx2M(System.String) nop <null> leave.s IL_003B: nop call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_003B: nop nop <null> ret <null>

Module Name

7EfpxiA54

Full Name

7EfpxiA54

EntryPoint

System.Void 7EfpxiA54.1xnQL8goj/Ms9idA.Rx7qtL::Moz6gX4zZ()

Scope Name

7EfpxiA54

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

7EfpxiA54

Assembly Version

28.10.13.194

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1175

Main Method

System.Void 7EfpxiA54.1xnQL8goj/Ms9idA.Rx7qtL::Moz6gX4zZ()

Main IL Instruction Count

32

Main IL

nop <null> nop <null> ldc.i4.s 20 stloc.0 <null> newobj System.Void System.Collections.Generic.List`1<System.Int32>::.ctor() stloc.1 <null> ldloc.0 <null> stloc.2 <null> ldc.i4.1 <null> stloc.3 <null> br.s IL_001D: ldloc.3 ldloc.1 <null> ldloc.3 <null> callvirt System.Void System.Collections.Generic.List`1<System.Int32>::Add(System.Int32) nop <null> ldloc.3 <null> ldc.i4.1 <null> add.ovf <null> stloc.3 <null> ldloc.3 <null> ldloc.2 <null> ble.s IL_0011: ldloc.1 ldstr demandflatteningrules call System.Void 7EfpxiA54.ym8Yg4Gf::yQj4yi6En3Cx2M(System.String) nop <null> leave.s IL_003B: nop call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_003B: nop nop <null> ret <null>

b0022539593c48afa66a4f22f8532d6e (1.27 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙