Suspicious
Suspect

b044abe166330aaf79e842d232d71377

PE Executable
|
MD5: b044abe166330aaf79e842d232d71377
|
Size: 326.66 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
 Hash Value
MD5
b044abe166330aaf79e842d232d71377
Sha1
263529ddc12178772a6ccc02109e7633a30c8277
Sha256
26f52d29815a25e021c0ac37bb0712833cb21c3b4e97ccd5b35199de3b3f2e92
Sha384
f3205fb323326c54a919c3d64637b2641096b82ca897554122545c34d39e292f7a4e0763b16c9a62c0902eee5f63f655
Sha512
9f4ce3232e7ff505eae4638022b3b1d3cd20357d38f275de4b1bbea3917c367071a33fb6121b920dbab05815824bf347f4bb64a27e1bee67ea2c2823872b4e26
SSDeep
3072:acq3LM6YMIZyr4Jliv6cG/a5/mOwJpowPRJZiYzw4Db9ps3hyIOkOn7GSdGwJu5D:1q3MMIE031vJpZGYFD8ROFXJu0D
TLSH
836406507BE88A1AF2FE2BB5F83660114BB4F856E47AC74E9E8460DD1C637489D0137B

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
b044abe166330aaf79e842d232d71377
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Jjrpbivfk.Msqcbjmprxg.resources
Informations
Name
 Value
Module Name

sheetsexe.exe
Full Name

sheetsexe.exe
EntryPoint

System.Void Jjrpbivfk.Sseulc::Main()
Scope Name

sheetsexe.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

sheetsexe
Assembly Version

22504.418.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

1448
Main Method

System.Void Jjrpbivfk.Sseulc::Main()
Main IL Instruction Count

27
Main IL

ldsfld System.Threading.ThreadExceptionEventHandler Jjrpbivfk.Sseulc/<>c::<>9__0_0 dup <null> brtrue IL_0022: call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) pop <null> ldsfld Jjrpbivfk.Sseulc/<>c Jjrpbivfk.Sseulc/<>c::<>9 ldftn System.Void Jjrpbivfk.Sseulc/<>c::<Main>b__0_0(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Threading.ThreadExceptionEventHandler Jjrpbivfk.Sseulc/<>c::<>9__0_0 call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldsfld System.UnhandledExceptionEventHandler Jjrpbivfk.Sseulc/<>c::<>9__0_1 dup <null> brtrue IL_004E: callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) pop <null> ldsfld Jjrpbivfk.Sseulc/<>c Jjrpbivfk.Sseulc/<>c::<>9 ldftn System.Void Jjrpbivfk.Sseulc/<>c::<Main>b__0_1(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.UnhandledExceptionEventHandler Jjrpbivfk.Sseulc/<>c::<>9__0_1 callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Jjrpbivfk.Mskmiooh::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name

sheetsexe.exe
Full Name

sheetsexe.exe
EntryPoint

System.Void Jjrpbivfk.Sseulc::Main()
Scope Name

sheetsexe.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

sheetsexe
Assembly Version

22504.418.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

1448
Main Method

System.Void Jjrpbivfk.Sseulc::Main()
Main IL Instruction Count

27
Main IL

ldsfld System.Threading.ThreadExceptionEventHandler Jjrpbivfk.Sseulc/<>c::<>9__0_0 dup <null> brtrue IL_0022: call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) pop <null> ldsfld Jjrpbivfk.Sseulc/<>c Jjrpbivfk.Sseulc/<>c::<>9 ldftn System.Void Jjrpbivfk.Sseulc/<>c::<Main>b__0_0(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Threading.ThreadExceptionEventHandler Jjrpbivfk.Sseulc/<>c::<>9__0_0 call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldsfld System.UnhandledExceptionEventHandler Jjrpbivfk.Sseulc/<>c::<>9__0_1 dup <null> brtrue IL_004E: callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) pop <null> ldsfld Jjrpbivfk.Sseulc/<>c Jjrpbivfk.Sseulc/<>c::<>9 ldftn System.Void Jjrpbivfk.Sseulc/<>c::<Main>b__0_1(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.UnhandledExceptionEventHandler Jjrpbivfk.Sseulc/<>c::<>9__0_1 callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Jjrpbivfk.Mskmiooh::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
b044abe166330aaf79e842d232d71377 (326.66 KB)
File Structure
b044abe166330aaf79e842d232d71377
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Jjrpbivfk.Msqcbjmprxg.resources
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙