Suspicious
Suspect

c7e3294065eecac82ccc790a7beffe9a

PE Executable
|
MD5: c7e3294065eecac82ccc790a7beffe9a
|
Size: 44.03 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
c7e3294065eecac82ccc790a7beffe9a
Sha1
e78ffe9c0cb2c326667e47eb68c8a61c6ef02682
Sha256
97a3c46027f2f1467a058e92406d75535e2f91832705df5a33ccaac64579624e
Sha384
6e6c6c6a704484d8b63da48d44a2f58c84497907077c88254ea54f8b811ebc8e8048f791cced1ad4cc9351abac3a0690
Sha512
81318f611fe13517ca27fcde548137df68a2aa5b5d066d5c8fc5dfc5c4bb2c7ad7f0307d1679e0dee6f668aa302c73884e4754d1e1c377deb556518ba6f12bdb
SSDeep
768:YZgSQuSNzxI0Malv6/XNjMfDrg3GVfhHydmC+:YINzVVlCfNwfDrgIptC+
TLSH
60134C007FE5C57BF3BE4BB858B2630546B5E9632503EE4D2CC010EA5A17BC99B416EE
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: C:\Users\gcloud\md\2026-02-27-13-23_sushi-kiwami.com\mClient\mClient.pdb

Module Name

mClient.exe

Full Name

mClient.exe

EntryPoint

System.Void Client.Program::Main()

Scope Name

mClient.exe

Scope Type

ModuleDef

Kind

Console

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

mClient

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

122

Main Method

System.Void Client.Program::Main()

Main IL Instruction Count

33

Main IL

ldc.i4.0 <null> stloc.0 <null> br IL_0015: ldloc.0 ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) ldloc.0 <null> ldc.i4.1 <null> add <null> stloc.0 <null> ldloc.0 <null> ldsfld System.String Client.Settings::Delay call System.Int32 System.Convert::ToInt32(System.String) blt.s IL_0007: ldc.i4 1000 call System.Boolean Client.Settings::InitializeSettings() brtrue IL_0032: nop ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> call System.Void Client.Helper.Methods::PreventSleep() leave IL_0043: nop pop <null> leave IL_0043: nop nop <null> call System.Boolean Client.Connection.ClientSocket::get_IsConnected() brtrue IL_0058: leave IL_0063 call System.Void Client.Connection.ClientSocket::Reconnect() call System.Void Client.Connection.ClientSocket::InitializeClient() leave IL_0063: ldc.i4 5000 pop <null> leave IL_0063: ldc.i4 5000 ldc.i4 5000 call System.Void System.Threading.Thread::Sleep(System.Int32) br.s IL_0043: nop

c7e3294065eecac82ccc790a7beffe9a (44.03 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙