Suspicious
Suspect

bd1224ee138e9003fe43f6cfbd3e86ca

PE Executable
|
MD5: bd1224ee138e9003fe43f6cfbd3e86ca
|
Size: 7.81 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
bd1224ee138e9003fe43f6cfbd3e86ca
Sha1
8c34e94a3a677f292e727757f5844cbe438f64ba
Sha256
d941c72620e20ab0d1974778bffb76741d7fed22a41a7e8dd0d250dd96f7e0cf
Sha384
d40231f66b4feb4c453f188c077fc26abdc55c7ca27fe05755353833213ab625b6ccd690dca6327b4f6d6140e5b39f05
Sha512
60eef7940b57e3aed2f88fc5179c19ec60ac1aaf3a36e44ae92a3b6ccea9eea831752be27c2f738525cd5305e741b48658c4d756dc1a5689d53a4cdfe4bfa13f
SSDeep
196608:ZLnF/J1lPJP5quK3yJ+B5UiMp3vPkyoHc18Ma0uLgZdVXL9Fs:ZpxTKCiKB3kRHct+KLc
TLSH
C976337259BE5894CC8E93B7853D2D19BA19D439A1C31F4CF289EF8A9D94184403FFAC

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
fqzkgutqz.Resources
9мая.exe
CrazyMouse.exe
Flyondesktop.exe
Gondon-Zvuk.exe
allah pidoras.exe
hitler gimn ukraina.exe
lc.exe
litvin goyda.exe
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

ic.exe

Full Name

ic.exe

EntryPoint

System.Void Program::Main()

Scope Name

ic.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

ic

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

17

Main Method

System.Void Program::Main()

Main IL Instruction Count

10

Main IL

ldc.i4 2000 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Boolean Program::CreateMutex() brtrue.s IL_001B: ldnull call System.Int32 System.Environment::get_ExitCode() call System.Void System.Environment::Exit(System.Int32) ldnull <null> call System.Object Program::WorkF(System.Object) pop <null> ret <null>

Module Name

ic.exe

Full Name

ic.exe

EntryPoint

System.Void Program::Main()

Scope Name

ic.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

ic

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

17

Main Method

System.Void Program::Main()

Main IL Instruction Count

10

Main IL

ldc.i4 2000 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Boolean Program::CreateMutex() brtrue.s IL_001B: ldnull call System.Int32 System.Environment::get_ExitCode() call System.Void System.Environment::Exit(System.Int32) ldnull <null> call System.Object Program::WorkF(System.Object) pop <null> ret <null>

bd1224ee138e9003fe43f6cfbd3e86ca (7.81 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙