Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
c2723b6fd8c7db2cc6a975d909294096
Sha1
e5dc572b9cdba19c7b6865a74ffa41bbb9744fdc
Sha256
20da63c8311c8cfeb498efd608bfa6b8182fbebf3c45e6e3fe655c432a91eae6
Sha384
08de64fe36e3f532fc6b1256404a588f3fecd01da0543e8a4f1caa87af1a6b9446f5b4bea733c72a3abc08fe94fd56f3
Sha512
4d0fde1cdd4d0d5a6a0a7a5da353c5a8338952def818a6b70bd742402235669917c48e2398613798396d966578c133dca511b6b919de199870e0e0f102863c2b
SSDeep
49152:OkqXfd+/9AqbXHeWD/2D+y9WH3UZ9ydvAPMdGKlshwJsaf5HIEDZ:OkqXf0FfbXHRXy5XAvAPMdGsshwJHpIK
TLSH
2AA53318571E028ADE7B067A387533422F79DA2949ADE3DE074CBD5D039EF420386B9D

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
costura.costura.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.newtonsoft.json.dll.compressed
[Authenticode]_220cad77.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
[Authenticode]_4fc668a7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.memory.dll.compressed
[Authenticode]_02648583.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.runtime.compilerservices.unsafe.dll.compressed
[Authenticode]_daaa2853.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.interopservices.runtimeinformation.dll.compressed
[Authenticode]_2cfabfa2.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.InteropServices.RuntimeInformation.SR.resources
costura.system.valuetuple.dll.compressed
[Authenticode]_b468f670.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ValueTuple.SR.resources
costura.websocket-sharp.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.apollointerop.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.dinvokeresolver.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.encryptedfilestore.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.httpprofile.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.injection.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.kerberostickets.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.namedpipeprofile.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.plaintextcryptography.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.process.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.pskcryptography.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.simpleresolver.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.tasks.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
costura.system.management.automation.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
IBC
ID:0000
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Authenticode.resources
AutomationExceptions.resources
CommandBaseStrings.resources
Credential.resources
CredentialAttribute.resources
ConsoleInfoErrorStrings.resources
CoreMshSnapInResources.resources
CredUI.resources
DescriptionsStrings.resources
DiscoveryExceptions.resources
ErrorCategory.resources
ErrorPackage.resources
ErrorPackageRemoting.resources
EventingResources.resources
ExtendedTypeSystem.resources
FileSystemProviderStrings.resources
FormatAndOut.XmlLoading.resources
GetErrorText.resources
HostInterfaceExceptionsStrings.resources
History.resources
InternalHostStrings.resources
InternalHostUserInterfaceStrings.resources
Logging.resources
Metadata.resources
MshHostRawUserInterfaceStrings.resources
MshSignature.resources
NativeCP.resources
ParameterBinderStrings.resources
Parser.resources
PathUtils.resources
Pipeline.resources
PowerShellStrings.resources
ProgressRecordStrings.resources
ProviderBaseSecurity.resources
ProxyCommandStrings.resources
PSCommandStrings.resources
PSDataBufferStrings.resources
PSListModifier.resources
RegistryProviderStrings.resources
Runspace.resources
RunspaceInit.resources
RunspacePoolStrings.resources
AuthorizationManagerBase.resources
Serialization.resources
SessionStateProviderBaseStrings.resources
SessionStateStrings.resources
SuggestionStrings.resources
MshSnapInCmdletResources.resources
MshSnapinInfo.resources
TransactionStrings.resources
TypesXml.resources
WildcardPattern.resources
HelpErrors.resources
HelpDisplayStrings.resources
MiniShellErrors.resources
RemotingErrorIdStrings.resources
DebuggerStrings.resources
Modules.resources
costura.metadata
costura.tcpprofile.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.websocketprofile.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metadata
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: ?

Module Name

Apollo.exe

Full Name

Apollo.exe

EntryPoint

System.Void Apollo.Program::Main(System.String[])

Scope Name

Apollo.exe

Scope Type

ModuleDef

Kind

Console

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Apollo

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.1

Total Strings

179

Main Method

System.Void Apollo.Program::Main(System.String[])

Main IL Instruction Count

6

Main IL

ldsfld System.Int32 Apollo.Program::_security_init pop <null> ldsfld System.String Apollo.Config::PayloadUUID newobj System.Void Apollo.Agent.Apollo::.ctor(System.String) callvirt System.Void ApolloInterop.Classes.Agent::Start() ret <null>

Module Name

Apollo.exe

Full Name

Apollo.exe

EntryPoint

System.Void Apollo.Program::Main(System.String[])

Scope Name

Apollo.exe

Scope Type

ModuleDef

Kind

Console

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Apollo

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.1

Total Strings

179

Main Method

System.Void Apollo.Program::Main(System.String[])

Main IL Instruction Count

6

Main IL

ldsfld System.Int32 Apollo.Program::_security_init pop <null> ldsfld System.String Apollo.Config::PayloadUUID newobj System.Void Apollo.Agent.Apollo::.ctor(System.String) callvirt System.Void ApolloInterop.Classes.Agent::Start() ret <null>

c2723b6fd8c7db2cc6a975d909294096 (2.1 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙