Suspicious
Suspect

c31d6cbdf634c79d9d06685890934ba7

PE Executable
|
MD5: c31d6cbdf634c79d9d06685890934ba7
|
Size: 521.22 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
c31d6cbdf634c79d9d06685890934ba7
Sha1
b9817fb0f14a2b2fc5f8378ff41ad06ab99a989d
Sha256
1e143733e31bfe1015f4674770f569088937586c8e0d4984cacd7aa2484fd3f1
Sha384
dc8e17cf549874d2cd12b9cf2d9cead5c36ccf75d6d4896c9c3b23968f3fa53ed457d174d1b1b4143cf10334300e8527
Sha512
d0ddf8dcd7b11405b9cd6b35e9f89f5c7852092a5a3226ccead141ea3f3d89d588359b676242a563c4d23bd24299a6c0071ea056fe726b0eacbbf1de9042b534
SSDeep
6144:qFtgq3nkDQxA03rR0Ce6VlWT8b9uljHcDKo6SSmTIyTSKTqMRgBbmDD36eFJ:QtgZDQJDPVle8WUvSmEybRFKqJ
TLSH
8DB4B20CFE91E805DE1E3DB7CFEA11004B7165C1AE1186963109AFFE8B6637259E627C

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
pwdcxmfxgyng
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

cloudpud test.exe

Full Name

cloudpud test.exe

EntryPoint

System.Void SoRInOhb.bpjBrgfsbXfjuKQ::xOwmrUHYsDaIcdR(System.String[])

Scope Name

cloudpud test.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

cloudpud test

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

1402

Main Method

System.Void SoRInOhb.bpjBrgfsbXfjuKQ::xOwmrUHYsDaIcdR(System.String[])

Main IL Instruction Count

56

Main IL

ldc.i4 4400 stloc.0 <null> br IL_00BF: br IL_000B nop <null> ldloc.0 <null> ldc.i4 4415 ceq <null> brfalse IL_0024: nop call System.Void SoRInOhb.bpjBrgfsbXfjuKQ::xERaAqoWhrbHZe() ldc.i4 4417 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 4417 ceq <null> brfalse IL_007E: nop newobj System.Void System.Random::.ctor() nop <null> ldc.r8 6000 ldc.r8 2000 call System.Double System.Math::Truncate(System.Double) sub <null> call System.Int32 System.Convert::ToInt32(System.Double) nop <null> ldc.r8 9000 ldc.r8 3000 sub <null> call System.Int32 System.Convert::ToInt32(System.Double) callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) call System.Void System.Threading.Thread::Sleep(System.Int32) ldc.i4 4420 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 4420 ceq <null> brfalse IL_0097: nop call System.Void nWRCPPHRraVnRff.KQQoLAUsOtJvg::JTwBMYPpJiRfwK() ldc.i4 4421 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 4400 ceq <null> brfalse IL_00AC: nop nop <null> ldc.i4 4415 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 4421 ceq <null> brfalse IL_00BF: br IL_000B br IL_00C4: ret br IL_000B: nop ret <null>

Module Name

cloudpud test.exe

Full Name

cloudpud test.exe

EntryPoint

System.Void SoRInOhb.bpjBrgfsbXfjuKQ::xOwmrUHYsDaIcdR(System.String[])

Scope Name

cloudpud test.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

cloudpud test

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

1402

Main Method

System.Void SoRInOhb.bpjBrgfsbXfjuKQ::xOwmrUHYsDaIcdR(System.String[])

Main IL Instruction Count

56

Main IL

ldc.i4 4400 stloc.0 <null> br IL_00BF: br IL_000B nop <null> ldloc.0 <null> ldc.i4 4415 ceq <null> brfalse IL_0024: nop call System.Void SoRInOhb.bpjBrgfsbXfjuKQ::xERaAqoWhrbHZe() ldc.i4 4417 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 4417 ceq <null> brfalse IL_007E: nop newobj System.Void System.Random::.ctor() nop <null> ldc.r8 6000 ldc.r8 2000 call System.Double System.Math::Truncate(System.Double) sub <null> call System.Int32 System.Convert::ToInt32(System.Double) nop <null> ldc.r8 9000 ldc.r8 3000 sub <null> call System.Int32 System.Convert::ToInt32(System.Double) callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) call System.Void System.Threading.Thread::Sleep(System.Int32) ldc.i4 4420 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 4420 ceq <null> brfalse IL_0097: nop call System.Void nWRCPPHRraVnRff.KQQoLAUsOtJvg::JTwBMYPpJiRfwK() ldc.i4 4421 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 4400 ceq <null> brfalse IL_00AC: nop nop <null> ldc.i4 4415 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 4421 ceq <null> brfalse IL_00BF: br IL_000B br IL_00C4: ret br IL_000B: nop ret <null>

c31d6cbdf634c79d9d06685890934ba7 (521.22 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙