Suspicious
Suspect

ba8f3048f461ed358d9c2fa1412a7426

PE Executable
|
MD5: ba8f3048f461ed358d9c2fa1412a7426
|
Size: 1.17 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
ba8f3048f461ed358d9c2fa1412a7426
Sha1
0947354fffc6d5ce5f05b8493cac6f0e27570195
Sha256
96f8492fd115abf7134203668cd31f428efbc1d75edb9c6f26aaf8201e19950e
Sha384
237694c686d0c554c9f5e937c5078a4a76e4f4b1627af46784844b63680e66e6d8a0646a4d9b8aa3bcadc7fc7111709b
Sha512
8fcceb52a16bbe334b9464da96897a1f0d8f289a7522818f4c769fa23935ccc82fbb08c3f073958fe442decfd73b0f723e9c4d28c472d780c35a9732d26c3d57
SSDeep
12288:0NNE5JpFpBF9YPJjgj99J5S4YvBapuOL3EvZ++cjynwYHBncipSxDYng7bimq7Jm:0NN6jixgj9ztycicJTQ6EXuWOr
TLSH
184541342EEA502AF173AF7D9AE47596DA5FB6A33707984D00B203C60723A42DDD153E

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Rq1vvV63PgGMOeJEh14HHiqomP5FNyyaQJ1UmmJg8bN

Full Name

Rq1vvV63PgGMOeJEh14HHiqomP5FNyyaQJ1UmmJg8bN

EntryPoint

System.Void koZ.91s::476()

Scope Name

Rq1vvV63PgGMOeJEh14HHiqomP5FNyyaQJ1UmmJg8bN

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

oTwIBKmWfz0t9NJfa0pa

Assembly Version

7.6.9.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

1773

Main Method

System.Void koZ.91s::476()

Main IL Instruction Count

5

Main IL

nop <null> ldsfld 8I8.9A9 koZ.91s::627 callvirt System.Void 8I8.9A9::wTq() nop <null> ret <null>

Module Name

Rq1vvV63PgGMOeJEh14HHiqomP5FNyyaQJ1UmmJg8bN

Full Name

Rq1vvV63PgGMOeJEh14HHiqomP5FNyyaQJ1UmmJg8bN

EntryPoint

System.Void koZ.91s::476()

Scope Name

Rq1vvV63PgGMOeJEh14HHiqomP5FNyyaQJ1UmmJg8bN

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

oTwIBKmWfz0t9NJfa0pa

Assembly Version

7.6.9.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

1773

Main Method

System.Void koZ.91s::476()

Main IL Instruction Count

5

Main IL

nop <null> ldsfld 8I8.9A9 koZ.91s::627 callvirt System.Void 8I8.9A9::wTq() nop <null> ret <null>

ba8f3048f461ed358d9c2fa1412a7426 (1.17 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙