Suspicious
Suspect

b46b76ae3c6941648ba0c603373741cb

PE Executable
|
MD5: b46b76ae3c6941648ba0c603373741cb
|
Size: 75.26 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
b46b76ae3c6941648ba0c603373741cb
Sha1
5910f13608709d92575c880709316011be58c165
Sha256
cc06b15ba726eef22c4645294a7499a1ffb11b7234b2f0b6a088b89c1697bb37
Sha384
6ce7b9ffe26dbf04c3cc269b06e5e60b860e1bbe32d5329aae970612327ca2683f6ac50a96c4c63b9f69086ab64ee266
Sha512
662d8f82bf6e0af2f2eb0223908403cef4e40a5e3674456c05b288ef60d848a465bf38c960533ed4efd63123ecff76ff1a881e03ea5d97a6b220c2cb54e2f814
SSDeep
1536:bgsed9L2ZejwDpRWx4mKUUotb1TtMxBhUU3PzF+POgSbgjgSa2Ix4Bq:bgsyanDpRhUdZMxgU3PzFSOgSbgjgSax
TLSH
B173E70B969878EDE12B5BB76D5B9F5EA678B8437D0ACB052220474F10760CEF603D93

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
b46b76ae3c6941648ba0c603373741cb
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
6kB5kYcKrh
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Cronos-Crypter���🥵�️�️️��️🕰
Full Name

Cronos-Crypter���🥵�️�️️��️🕰
EntryPoint

System.Void Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter��️🔕�🄔�����️♂()
Scope Name

Cronos-Crypter���🥵�️�️️��️🕰
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Cronos-Crypter�🌫🪠�️����🤭‍�
Assembly Version

0.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

<null>
Total Strings

112
Main Method

System.Void Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter��️🔕�🄔�����️♂()
Main IL Instruction Count

28
Main IL

nop <null> call System.Void Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter��‍�️��🤩⚧�🕰️�() nop <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr NmtCNWtZY0tyaA== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter🔵��🫁�⚧�🨶‍���(System.String) stloc.0 <null> ldloc.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr OXBIOVVGOWZkWg== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter⚧‍�🨶‍🤕����‍��(System.Byte[],System.String) stloc.1 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr QzpcV2luZG93c1xNaWNyb3NvZnQuTkVUXEZyYW1ld29ya1x2NC4wLjMwMzE5XFJlZ0FzbS5leGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldloc.1 <null> ldc.i4.0 <null> call System.Boolean Cronos-Crypter�‍️��‍��️��🛁�‍::Cronos-Crypter�🪠�‍‍‍‍⚧��🢘�♂(System.String,System.Byte[],System.Boolean) pop <null> ret <null>
Module Name

Cronos-Crypter���🥵�️�️️��️🕰
Full Name

Cronos-Crypter���🥵�️�️️��️🕰
EntryPoint

System.Void Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter��️🔕�🄔�����️♂()
Scope Name

Cronos-Crypter���🥵�️�️️��️🕰
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Cronos-Crypter�🌫🪠�️����🤭‍�
Assembly Version

0.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

<null>
Total Strings

112
Main Method

System.Void Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter��️🔕�🄔�����️♂()
Main IL Instruction Count

28
Main IL

nop <null> call System.Void Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter��‍�️��🤩⚧�🕰️�() nop <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr NmtCNWtZY0tyaA== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter🔵��🫁�⚧�🨶‍���(System.String) stloc.0 <null> ldloc.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr OXBIOVVGOWZkWg== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] Cronos-Crypter��🤵����🤩�️�️�::Cronos-Crypter⚧‍�🨶‍🤕����‍��(System.Byte[],System.String) stloc.1 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr QzpcV2luZG93c1xNaWNyb3NvZnQuTkVUXEZyYW1ld29ya1x2NC4wLjMwMzE5XFJlZ0FzbS5leGU= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldloc.1 <null> ldc.i4.0 <null> call System.Boolean Cronos-Crypter�‍️��‍��️��🛁�‍::Cronos-Crypter�🪠�‍‍‍‍⚧��🢘�♂(System.String,System.Byte[],System.Boolean) pop <null> ret <null>
b46b76ae3c6941648ba0c603373741cb (75.26 KB)
File Structure
b46b76ae3c6941648ba0c603373741cb
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
6kB5kYcKrh
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙