Purchase Order-PM31-2507120025.com

PE Executable
|
MD5: c6495dfa135438f7eeaa0e99258ac44d
|
Size: 1.3 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	c6495dfa135438f7eeaa0e99258ac44d
Sha1	6756f7ebaf3889a5a126d9c7022a69424c470d4f
Sha256	d54a472954e38a400de20de2d78fb2d7a7e634fee16c0f1a5209ba31f19f8175
Sha384	41c3817c6486caf385865232b1937cf71c18be24b9d2b03d1bfc018c30711f8442dd5c7c87264de8f7141586bc68282c
Sha512	3e0720180a7355ceb238794a3a2dddea2a30b3eca18147a1c2950d364589817d40df86a3ad0cdf8fb0469339379561febdbd5153b74220be244247649dcb6d09
SSDeep	24576:esR+dvBm1NddIi392DXdNg3Uh3cpT1aiyrPVt+q84j1jupjyqa9PzlPm:r+NBm1Ndd9O3BcppryLVoqvXRu
TLSH	8555239E7A8C5E47D0A7ABF924AE460546D5C3B72A43C73E5F8963C4685CBE8134EC03

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Lkdwhddajio.exe
Full Name	Lkdwhddajio.exe
EntryPoint	System.Void Ftbzqkslep.Nnfmyv::Main()
Scope Name	Lkdwhddajio.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Lkdwhddajio
Assembly Version	1.0.8742.14057
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	11
Main Method	System.Void Ftbzqkslep.Nnfmyv::Main()
Main IL Instruction Count	125
Main IL	nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) br.s IL_0059: ldc.i4.s -78 nop <null> nop <null> ldsfld l[] l::e stloc.0 <null> ldnull <null> stloc.0 <null> nop <null> leave.s IL_001F: ldc.i4 36684 pop <null> nop <null> nop <null> leave.s IL_001F: ldc.i4 36684 ldc.i4 36684 call System.String m::a(System.Int32) newobj System.Void System.Version::.ctor(System.String) stloc.1 <null> ldnull <null> ldloc.1 <null> newobj System.Void g::.ctor(System.String,System.Version) stloc.2 <null> newobj System.Void h::.ctor() stloc.3 <null> newobj System.Void i::.ctor() stloc.s V_4 newobj System.Void j::.ctor() stloc.s V_5 ldloc.3 <null> ldloc.s V_4 ldloc.s V_5 newobj System.Void k::.ctor(h,i,j) stloc.s V_6 br.s IL_005F: nop ldc.i4.s -78 ldc.i4.s 23 blt.s IL_000D: nop nop <null> ldloc.2 <null> ldloc.s V_6 ldftn System.Void k::a(System.Object,a) newobj System.Void System.EventHandler`1<a>::.ctor(System.Object,System.IntPtr) callvirt System.Void g::add_a(System.EventHandler`1<a>) br.s IL_00B2: ldc.i4.s 52 ldloc.s V_7 ldc.i4.s 38 xor <null> stloc.s V_7 ldloc.s V_7 ldc.i4.s 46 add <null> switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 52 call System.Int32 s::ac(System.Int32) stloc.s V_7 br.s IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -3 stloc.s V_7 br.s IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -15 stloc.s V_7 br.s IL_0075: ldloc.s V_7 ldloc.s V_4 ldloc.s V_6 ldftn System.Void k::c(System.Object,c) newobj System.Void System.EventHandler`1<c>::.ctor(System.Object,System.IntPtr) callvirt System.Void i::add_a(System.EventHandler`1<c>) ldc.i4.s -12 stloc.s V_7 br.s IL_0075: ldloc.s V_7 nop <null> ldc.i4.s 38 call System.Int32 s::ac(System.Int32) stloc.s V_7 br.s IL_0075: ldloc.s V_7 ldloc.2 <null> callvirt System.Void g::a() ldc.i4.s -2 stloc.s V_7 br IL_0075: ldloc.s V_7 ldloc.3 <null> ldloc.s V_6 ldftn System.Void k::b(System.Object,b) newobj System.Void System.EventHandler`1<b>::.ctor(System.Object,System.IntPtr) callvirt System.Void h::add_a(System.EventHandler`1<b>) ldc.i4.m1 <null> stloc.s V_7 br IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -13 stloc.s V_7 br IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -14 stloc.s V_7 br IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -16 stloc.s V_7 br IL_0075: ldloc.s V_7 ldloc.s V_5 ldloc.s V_6 ldftn System.Void k::d(System.Object,d) newobj System.Void System.EventHandler`1<d>::.ctor(System.Object,System.IntPtr) callvirt System.Void j::add_a(System.EventHandler`1<d>) ldc.i4.s -4 stloc.s V_7 br IL_0075: ldloc.s V_7 leave.s IL_016D: ret ldloc.s V_6 brfalse.s IL_015F: ldc.i4.1 ldc.i4.0 <null> br.s IL_0162: brtrue.s IL_016C ldc.i4.1 <null> br.s IL_0162: brtrue.s IL_016C brtrue.s IL_016C: endfinally ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ret <null>
Module Name	Lkdwhddajio.exe
Full Name	Lkdwhddajio.exe
EntryPoint	System.Void Ftbzqkslep.Nnfmyv::Main()
Scope Name	Lkdwhddajio.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Lkdwhddajio
Assembly Version	1.0.8742.14057
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	11
Main Method	System.Void Ftbzqkslep.Nnfmyv::Main()
Main IL Instruction Count	125
Main IL	nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) br.s IL_0059: ldc.i4.s -78 nop <null> nop <null> ldsfld l[] l::e stloc.0 <null> ldnull <null> stloc.0 <null> nop <null> leave.s IL_001F: ldc.i4 36684 pop <null> nop <null> nop <null> leave.s IL_001F: ldc.i4 36684 ldc.i4 36684 call System.String m::a(System.Int32) newobj System.Void System.Version::.ctor(System.String) stloc.1 <null> ldnull <null> ldloc.1 <null> newobj System.Void g::.ctor(System.String,System.Version) stloc.2 <null> newobj System.Void h::.ctor() stloc.3 <null> newobj System.Void i::.ctor() stloc.s V_4 newobj System.Void j::.ctor() stloc.s V_5 ldloc.3 <null> ldloc.s V_4 ldloc.s V_5 newobj System.Void k::.ctor(h,i,j) stloc.s V_6 br.s IL_005F: nop ldc.i4.s -78 ldc.i4.s 23 blt.s IL_000D: nop nop <null> ldloc.2 <null> ldloc.s V_6 ldftn System.Void k::a(System.Object,a) newobj System.Void System.EventHandler`1<a>::.ctor(System.Object,System.IntPtr) callvirt System.Void g::add_a(System.EventHandler`1<a>) br.s IL_00B2: ldc.i4.s 52 ldloc.s V_7 ldc.i4.s 38 xor <null> stloc.s V_7 ldloc.s V_7 ldc.i4.s 46 add <null> switch dnlib.DotNet.Emit.Instruction[] ldc.i4.s 52 call System.Int32 s::ac(System.Int32) stloc.s V_7 br.s IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -3 stloc.s V_7 br.s IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -15 stloc.s V_7 br.s IL_0075: ldloc.s V_7 ldloc.s V_4 ldloc.s V_6 ldftn System.Void k::c(System.Object,c) newobj System.Void System.EventHandler`1<c>::.ctor(System.Object,System.IntPtr) callvirt System.Void i::add_a(System.EventHandler`1<c>) ldc.i4.s -12 stloc.s V_7 br.s IL_0075: ldloc.s V_7 nop <null> ldc.i4.s 38 call System.Int32 s::ac(System.Int32) stloc.s V_7 br.s IL_0075: ldloc.s V_7 ldloc.2 <null> callvirt System.Void g::a() ldc.i4.s -2 stloc.s V_7 br IL_0075: ldloc.s V_7 ldloc.3 <null> ldloc.s V_6 ldftn System.Void k::b(System.Object,b) newobj System.Void System.EventHandler`1<b>::.ctor(System.Object,System.IntPtr) callvirt System.Void h::add_a(System.EventHandler`1<b>) ldc.i4.m1 <null> stloc.s V_7 br IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -13 stloc.s V_7 br IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -14 stloc.s V_7 br IL_0075: ldloc.s V_7 nop <null> ldc.i4.s -16 stloc.s V_7 br IL_0075: ldloc.s V_7 ldloc.s V_5 ldloc.s V_6 ldftn System.Void k::d(System.Object,d) newobj System.Void System.EventHandler`1<d>::.ctor(System.Object,System.IntPtr) callvirt System.Void j::add_a(System.EventHandler`1<d>) ldc.i4.s -4 stloc.s V_7 br IL_0075: ldloc.s V_7 leave.s IL_016D: ret ldloc.s V_6 brfalse.s IL_015F: ldc.i4.1 ldc.i4.0 <null> br.s IL_0162: brtrue.s IL_016C ldc.i4.1 <null> br.s IL_0162: brtrue.s IL_016C brtrue.s IL_016C: endfinally ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ret <null>

Purchase Order-PM31-2507120025.com (1.3 MB)

File Structure

Characteristics

No malware configuration were found at this point.

You must be signed in to post a comment.

Purchase Order-PM31-2507120025.com

PE Executable | MD5: c6495dfa135438f7eeaa0e99258ac44d | Size: 1.3 MB | application/x-dosexec

PE Executable
|
MD5: c6495dfa135438f7eeaa0e99258ac44d
|
Size: 1.3 MB
|
application/x-dosexec