d0e6bb6d041c0fd4cf178c516f675a08

PE Executable
|
MD5: d0e6bb6d041c0fd4cf178c516f675a08
|
Size: 235.01 KB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	d0e6bb6d041c0fd4cf178c516f675a08
Sha1	8437c6bfeefede5ac4885096b88fbe2ef32c8e2e
Sha256	b3fd5f0c90db244a8b4a99d1fc342abc54464332cc12a27b36ea07f601d717c8
Sha384	a84605fcfbf775bf6c55cbc2dc0f18e9a45213b338470e6ebd19b456010d4f0a2a6ff382906a83ef4a8472161c67b4cd
Sha512	fdc00163bccce9987a05752c9ce6a73d1c7ef7b89abc521b75a536c5e5e35117479e9c65aaf54f62d6df6dfbf1aa933c4c82af879a395f3608a8a1e0675bb029
SSDeep	6144:lloZMOfsXtioRkts/cnnK6cMlOX7fhv0IHx2PxM4dvYnb8e1mVMmi:noZCtlRk83MlOX7fhv0IHx2PxM4d+AML
TLSH	1C346B4933B88B17E25F8BBED5B1558F87B1F103E90AF7CE0C8899E82411742E949E57

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	Umbral.payload.exe
Full Name	Umbral.payload.exe
EntryPoint	System.Void ꘢虿锇睆麿詢⣝㍲봫꿝ꟸלּ轉橀䇯潭ힲ溉::䲱ɏ⵼딭캹⚖좮弛ᆋ䊣䈏壹媽致ঔꭺꄠ耋(System.String[])
Scope Name	Umbral.payload.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Umbral.payload
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	964
Main Method	System.Void ꘢虿锇睆麿詢⣝㍲봫꿝ꟸלּ轉橀䇯潭ힲ溉::䲱ɏ⵼딭캹⚖좮弛ᆋ䊣䈏壹媽致ঔꭺꄠ耋(System.String[])
Main IL Instruction Count	7
Main IL	ldarg.0 <null> call System.Threading.Tasks.Task ꘢虿锇睆麿詢⣝㍲봫꿝ꟸלּ轉橀䇯潭ힲ溉::Main(System.String[]) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>
Module Name	Umbral.payload.exe
Full Name	Umbral.payload.exe
EntryPoint	System.Void ꘢虿锇睆麿詢⣝㍲봫꿝ꟸלּ轉橀䇯潭ힲ溉::䲱ɏ⵼딭캹⚖좮弛ᆋ䊣䈏壹媽致ঔꭺꄠ耋(System.String[])
Scope Name	Umbral.payload.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Umbral.payload
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	964
Main Method	System.Void ꘢虿锇睆麿詢⣝㍲봫꿝ꟸלּ轉橀䇯潭ힲ溉::䲱ɏ⵼딭캹⚖좮弛ᆋ䊣䈏壹媽致ঔꭺꄠ耋(System.String[])
Main IL Instruction Count	7
Main IL	ldarg.0 <null> call System.Threading.Tasks.Task ꘢虿锇睆麿詢⣝㍲봫꿝ꟸלּ轉橀䇯潭ힲ溉::Main(System.String[]) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>

Artefacts

Name0	Value
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0

d0e6bb6d041c0fd4cf178c516f675a08 (235.01 KB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
Embedded Resources	0	d0e6bb6d041c0fd4cf178c516f675a08
Suspicious Type Names (1-2 chars)	0	d0e6bb6d041c0fd4cf178c516f675a08

You must be signed in to post a comment.

d0e6bb6d041c0fd4cf178c516f675a08

PE Executable | MD5: d0e6bb6d041c0fd4cf178c516f675a08 | Size: 235.01 KB | application/x-dosexec

PE Executable
|
MD5: d0e6bb6d041c0fd4cf178c516f675a08
|
Size: 235.01 KB
|
application/x-dosexec