Suspicious
Suspect

baaf52a5ba4b0639cce2ee4918b6da16

PE Executable
MD5: baaf52a5ba4b0639cce2ee4918b6da16
Size: 42.03 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Medium

Hash
Hash Value
MD5
baaf52a5ba4b0639cce2ee4918b6da16
Sha1
30fa0d96860adc4443d9e3d4a9e800046ad35d63
Sha256
b2ef6a86983e15d0f70e5941b79d03419d4c7bcd4b1c58223f6b8334ed800deb
Sha384
192cb5c1193d986990fe0155fab6c05f433c0667ae0519654f86196b248c38f8b9f24d1eef2dab13fb88513fb451b8ba
Sha512
227b58397123e747c10ab483b8c69122ee1620f08c05bf849748ad6543a45e81d2adad2bfcd9afea99afd6887c3e736eed31e1dbca19a2acf60cc021648e1296
SSDeep
768:BkcjrTL3kj6DMaoQVd0CvkGg1Asl/scCldedtpL38tNbJ82ADaEVXiNi:BkcvTLjoU/rs4devpL38tlJ8teEgNi
TLSH
5F136D096A7C8F27CE5E6A7E94A232071BB6C317E157F70F5C9885A915C73C0D7102EA

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
[Authenticode]_0d48c273.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
BusinessDataProcessor.Properties.Resources.resources
    ​​​​​   
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x8C00 size 6192 bytes

Module Name

BusinessDataProcessor.exe

Full Name

BusinessDataProcessor.exe

EntryPoint

System.Void  ::()

Scope Name

BusinessDataProcessor.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

BusinessDataProcessor

Assembly Version

8.0.450.1

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

0

Main Method

System.Void  ::()

Main IL Instruction Count

25

Main IL

call System.Boolean  ::() brtrue.s IL_0025: call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 -83736066 call System.String ::(System.Int32) ldc.i4 -83736235 call System.String ::(System.Int32) ldc.i4.0 <null> ldc.i4.s 16 call System.Windows.Forms.DialogResult System.Windows.Forms.MessageBox::Show(System.String,System.String,System.Windows.Forms.MessageBoxButtons,System.Windows.Forms.MessageBoxIcon) pop <null> ret <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void  ::() call System.Threading.Tasks.Task  ::() ldc.i4.0 <null> callvirt System.Runtime.CompilerServices.ConfiguredTaskAwaitable System.Threading.Tasks.Task::ConfigureAwait(System.Boolean) stloc.0 <null> ldloca.s V_0 call System.Runtime.CompilerServices.ConfiguredTaskAwaitable/ConfiguredTaskAwaiter System.Runtime.CompilerServices.ConfiguredTaskAwaitable::GetAwaiter() stloc.1 <null> ldloca.s V_1 call System.Void System.Runtime.CompilerServices.ConfiguredTaskAwaitable/ConfiguredTaskAwaiter::GetResult() ret <null>

Module Name

BusinessDataProcessor.exe

Full Name

BusinessDataProcessor.exe

EntryPoint

System.Void  ::()

Scope Name

BusinessDataProcessor.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

BusinessDataProcessor

Assembly Version

8.0.450.1

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

0

Main Method

System.Void  ::()

Main IL Instruction Count

25

Main IL

call System.Boolean  ::() brtrue.s IL_0025: call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4 -83736066 call System.String ::(System.Int32) ldc.i4 -83736235 call System.String ::(System.Int32) ldc.i4.0 <null> ldc.i4.s 16 call System.Windows.Forms.DialogResult System.Windows.Forms.MessageBox::Show(System.String,System.String,System.Windows.Forms.MessageBoxButtons,System.Windows.Forms.MessageBoxIcon) pop <null> ret <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void  ::() call System.Threading.Tasks.Task  ::() ldc.i4.0 <null> callvirt System.Runtime.CompilerServices.ConfiguredTaskAwaitable System.Threading.Tasks.Task::ConfigureAwait(System.Boolean) stloc.0 <null> ldloca.s V_0 call System.Runtime.CompilerServices.ConfiguredTaskAwaitable/ConfiguredTaskAwaiter System.Runtime.CompilerServices.ConfiguredTaskAwaitable::GetAwaiter() stloc.1 <null> ldloca.s V_1 call System.Void System.Runtime.CompilerServices.ConfiguredTaskAwaitable/ConfiguredTaskAwaiter::GetResult() ret <null>

baaf52a5ba4b0639cce2ee4918b6da16 (42.03 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙