Suspicious
Suspect

cd965ee2ff847fce13327260e6a6048c

PE Executable
|
MD5: cd965ee2ff847fce13327260e6a6048c
|
Size: 2.01 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
cd965ee2ff847fce13327260e6a6048c
Sha1
f51b695d060ac8b90e2ad55246b34c01f44d9cd0
Sha256
1ca5ca6aa28440ae30564d2db5d644f846851fbd8569d0b10e0b2a83c661d057
Sha384
bbbcbb264c9816db9a6b908abb9742b21edee3191b0c13236ebb8d778b136317ea4f3f6f2c9bf505f711b40934e17f1b
Sha512
995ca8a0656031a7bc22caf17d3d8919943fe1e55f62fedd6ace73cf3800d3389d1123769007784cbd5739e3946d214263c5997ab1f5ea2768de4ba4d777a506
SSDeep
24576:HrL/R/Lfd+eX7VPIGPeyJwjdk5Ck8rr09vXtRP6bv8+cXk3Ryyhw3N/5qSoelM:3Rs07Ooe+F574r0FvP6bEuw3NB
TLSH
B395CE186AD01B17D73E83B589E38AA973BA94D8FF4BC70B9944B46614013E1A7431FF

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Mtgyxvys.Properties.Resources.resources
Pcutscptav
          
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Xvuogmdpvpi.exe

Full Name

Xvuogmdpvpi.exe

EntryPoint

System.Void   ::()

Scope Name

Xvuogmdpvpi.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Xvuogmdpvpi

Assembly Version

1.0.1157.15626

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

0

Main Method

System.Void   ::()

Main IL Instruction Count

37

Main IL

newobj System.Void   ::.ctor() stloc.0 <null> ldloc.0 <null> callvirt System.String   ::() brfalse.s IL_0060: leave IL_006C ldloc.0 <null> callvirt System.Type[]   ::() ldsfld System.Func`2<System.Type,System.Boolean>   /:: dup <null> brtrue.s IL_0033: call System.Collections.Generic.IEnumerable`1<System.Type> System.Linq.Enumerable::Where<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>,System.Func`2<System.Type,System.Boolean>) pop <null> ldsfld   /   /:: ldftn System.Boolean   /::(System.Type) newobj System.Void System.Func`2<System.Type,System.Boolean>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`2<System.Type,System.Boolean>   /:: call System.Collections.Generic.IEnumerable`1<System.Type> System.Linq.Enumerable::Where<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>,System.Func`2<System.Type,System.Boolean>) stloc.1 <null> ldloc.1 <null> call System.Int32 System.Linq.Enumerable::Count<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>) ldc.i4.0 <null> ble.s IL_0060: leave IL_006C ldloc.1 <null> call System.Type System.Linq.Enumerable::First<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>) ldc.i4 1508792439 call System.String ::(System.Int32) ldc.i4 256 ldnull <null> ldnull <null> ldnull <null> callvirt System.Object System.Type::InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[]) pop <null> leave IL_006C: ret ldloc.0 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ret <null>

Module Name

Xvuogmdpvpi.exe

Full Name

Xvuogmdpvpi.exe

EntryPoint

System.Void   ::()

Scope Name

Xvuogmdpvpi.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Xvuogmdpvpi

Assembly Version

1.0.1157.15626

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

0

Main Method

System.Void   ::()

Main IL Instruction Count

37

Main IL

newobj System.Void   ::.ctor() stloc.0 <null> ldloc.0 <null> callvirt System.String   ::() brfalse.s IL_0060: leave IL_006C ldloc.0 <null> callvirt System.Type[]   ::() ldsfld System.Func`2<System.Type,System.Boolean>   /:: dup <null> brtrue.s IL_0033: call System.Collections.Generic.IEnumerable`1<System.Type> System.Linq.Enumerable::Where<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>,System.Func`2<System.Type,System.Boolean>) pop <null> ldsfld   /   /:: ldftn System.Boolean   /::(System.Type) newobj System.Void System.Func`2<System.Type,System.Boolean>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`2<System.Type,System.Boolean>   /:: call System.Collections.Generic.IEnumerable`1<System.Type> System.Linq.Enumerable::Where<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>,System.Func`2<System.Type,System.Boolean>) stloc.1 <null> ldloc.1 <null> call System.Int32 System.Linq.Enumerable::Count<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>) ldc.i4.0 <null> ble.s IL_0060: leave IL_006C ldloc.1 <null> call System.Type System.Linq.Enumerable::First<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>) ldc.i4 1508792439 call System.String ::(System.Int32) ldc.i4 256 ldnull <null> ldnull <null> ldnull <null> callvirt System.Object System.Type::InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[]) pop <null> leave IL_006C: ret ldloc.0 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ret <null>

cd965ee2ff847fce13327260e6a6048c (2.01 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Mtgyxvys.Properties.Resources.resources
Pcutscptav
          
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙