Suspicious
Suspect

cc224cf348ac9a5b70602659518f6d15

PE Executable
|
MD5: cc224cf348ac9a5b70602659518f6d15
|
Size: 552.96 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
cc224cf348ac9a5b70602659518f6d15
Sha1
657ffcc73435817b37eabf6bacf0201f43d10a1c
Sha256
17c3ca5eeae6f48af796f5a6c3925d5f08ca18489a40980228080089be453db0
Sha384
c7c70447202dea2eadd45c7a6faf599ab966492e133beaa2a5fd75ac02b1ec0cc0eada41b7d47268df681095049910d7
Sha512
2b621a820ddeb2a79f31d4e8a9d4e784076668aa6dd3cd8ebe134b4e99ac31aed1dc4b74b42a2048167296c63ae2dab0065218bff8e29d2a93f27432f5883e6b
SSDeep
12288:Nkqx9eiHpuSKwPVle88r8yaBxykyAYWk:f9pHpKzPajyh
TLSH
4BC4C40CFE81F804CE1E3DB7CEE911004B7165C1AE1296962159AFFD8B563B35AE267C

PeID

.NET executable
HQR data file
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
cc224cf348ac9a5b70602659518f6d15
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
xnkntpzezjqb
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

2Client.exe
Full Name

2Client.exe
EntryPoint

System.Void ZJzfFLaEUD.ECMTywatMDd::ASowUnplVhGoQF(System.String[])
Scope Name

2Client.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

2Client
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

1541
Main Method

System.Void ZJzfFLaEUD.ECMTywatMDd::ASowUnplVhGoQF(System.String[])
Main IL Instruction Count

56
Main IL

ldc.i4 7322 stloc.0 <null> br IL_00BF: br IL_000B nop <null> ldloc.0 <null> ldc.i4 7336 ceq <null> brfalse IL_0065: nop newobj System.Void System.Random::.ctor() nop <null> ldc.r8 2000 ldc.r8 2000 add <null> call System.Int32 System.Convert::ToInt32(System.Double) nop <null> ldc.r8 6003.477121254719 ldc.r8 3000 call System.Double System.Math::Log10(System.Double) sub <null> call System.Int32 System.Convert::ToInt32(System.Double) callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) call System.Void System.Threading.Thread::Sleep(System.Int32) ldc.i4 7338 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 7338 ceq <null> brfalse IL_007E: nop call System.Void ZJzfFLaEUD.XBiKyxLljVNJ::louYdsLeBDszSm() ldc.i4 7347 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 7333 ceq <null> brfalse IL_0097: nop call System.Void ZJzfFLaEUD.ECMTywatMDd::FJcdOzouYR() ldc.i4 7336 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 7322 ceq <null> brfalse IL_00AC: nop nop <null> ldc.i4 7333 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 7347 ceq <null> brfalse IL_00BF: br IL_000B br IL_00C4: ret br IL_000B: nop ret <null>
Module Name

2Client.exe
Full Name

2Client.exe
EntryPoint

System.Void ZJzfFLaEUD.ECMTywatMDd::ASowUnplVhGoQF(System.String[])
Scope Name

2Client.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

2Client
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

1541
Main Method

System.Void ZJzfFLaEUD.ECMTywatMDd::ASowUnplVhGoQF(System.String[])
Main IL Instruction Count

56
Main IL

ldc.i4 7322 stloc.0 <null> br IL_00BF: br IL_000B nop <null> ldloc.0 <null> ldc.i4 7336 ceq <null> brfalse IL_0065: nop newobj System.Void System.Random::.ctor() nop <null> ldc.r8 2000 ldc.r8 2000 add <null> call System.Int32 System.Convert::ToInt32(System.Double) nop <null> ldc.r8 6003.477121254719 ldc.r8 3000 call System.Double System.Math::Log10(System.Double) sub <null> call System.Int32 System.Convert::ToInt32(System.Double) callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) call System.Void System.Threading.Thread::Sleep(System.Int32) ldc.i4 7338 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 7338 ceq <null> brfalse IL_007E: nop call System.Void ZJzfFLaEUD.XBiKyxLljVNJ::louYdsLeBDszSm() ldc.i4 7347 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 7333 ceq <null> brfalse IL_0097: nop call System.Void ZJzfFLaEUD.ECMTywatMDd::FJcdOzouYR() ldc.i4 7336 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 7322 ceq <null> brfalse IL_00AC: nop nop <null> ldc.i4 7333 stloc.0 <null> nop <null> ldloc.0 <null> ldc.i4 7347 ceq <null> brfalse IL_00BF: br IL_000B br IL_00C4: ret br IL_000B: nop ret <null>
cc224cf348ac9a5b70602659518f6d15 (552.96 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙