d341c9133059f8b44daa6b886b412f2f

PE Executable
|
MD5: d341c9133059f8b44daa6b886b412f2f
|
Size: 3.86 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	d341c9133059f8b44daa6b886b412f2f
Sha1	b3c6bf9705939ec671ab6f40404c33ff749d4ba3
Sha256	901d6191e8bf99cf1a2a6b770519d18b82875294e95a55d1e87e42ef8bad213a
Sha384	27273f377b5cb8c2a69be6ea4e89fa32f79b5b2b9b1c395ff193eddc45bc901a23767e4b12c35f361b0f71a70b69f2b4
Sha512	74ed042b94a5574e84dcb9c4c137c8d4c70b32f20952bebe0f0bc59d1c4906541a8f96c0657cbec872152118d762619009e3696159fefbe318a122bc1a60b4ac
SSDeep	49152:qC+M7ZsypCpHOEwoXhWqGJBZaDoH3HiSoZHwSNwfGsgOKg8HYsOVGgfjvH7:qC+M9LTEEMD8HToZHivghg8HvO5LvH
TLSH	F2068D27FECE5BABD505FB7DC6F706122362E6123323C30B7A4E5356944BB62AA04507

PeID

.NET executable

HQR data file

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual C++ v6.0 DLL

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	crpted1337.exe
Full Name	crpted1337.exe
EntryPoint	System.Void crpted1337.Matching.TesterMatcher::CalcMatcher()
Scope Name	crpted1337.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	crpted1337
Assembly Version	1.0.6050.16824
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	1291
Main Method	System.Void crpted1337.Matching.TesterMatcher::CalcMatcher()
Main IL Instruction Count	18
Main IL	ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0024: ret ret <null> newobj System.Void crpted1337.Matching.MatcherTemplate::.ctor() call System.Byte[] crpted1337.Matching.MatcherTemplate::ValidateEfficientMatcher() call System.Byte[] crpted1337.Concurrency.GenericWorker::RunTransformableWorker(System.Object) call System.Void SteamKit2.Tracking.ExpandableTracker::TrackIsolatedTracker(System.Object) ldc.i4 0 ldsfld <Module>{181ff963-26cb-4966-9cb0-cd2869574a70} <Module>{181ff963-26cb-4966-9cb0-cd2869574a70}::m_5bd84276e0a54cef847e8709f99613e2 ldfld System.Int32 <Module>{181ff963-26cb-4966-9cb0-cd2869574a70}::m_240d3bae9b474bf8832318a41aa81f7b brfalse IL_0012: switch(IL_0024,IL_0025) pop <null> ldc.i4 0 br IL_0012: switch(IL_0024,IL_0025)
Module Name	crpted1337.exe
Full Name	crpted1337.exe
EntryPoint	System.Void crpted1337.Matching.TesterMatcher::CalcMatcher()
Scope Name	crpted1337.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	crpted1337
Assembly Version	1.0.6050.16824
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	1291
Main Method	System.Void crpted1337.Matching.TesterMatcher::CalcMatcher()
Main IL Instruction Count	18
Main IL	ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0024: ret ret <null> newobj System.Void crpted1337.Matching.MatcherTemplate::.ctor() call System.Byte[] crpted1337.Matching.MatcherTemplate::ValidateEfficientMatcher() call System.Byte[] crpted1337.Concurrency.GenericWorker::RunTransformableWorker(System.Object) call System.Void SteamKit2.Tracking.ExpandableTracker::TrackIsolatedTracker(System.Object) ldc.i4 0 ldsfld <Module>{181ff963-26cb-4966-9cb0-cd2869574a70} <Module>{181ff963-26cb-4966-9cb0-cd2869574a70}::m_5bd84276e0a54cef847e8709f99613e2 ldfld System.Int32 <Module>{181ff963-26cb-4966-9cb0-cd2869574a70}::m_240d3bae9b474bf8832318a41aa81f7b brfalse IL_0012: switch(IL_0024,IL_0025) pop <null> ldc.i4 0 br IL_0012: switch(IL_0024,IL_0025)

d341c9133059f8b44daa6b886b412f2f (3.86 MB)

d341c9133059f8b44daa6b886b412f2f

PE Executable | MD5: d341c9133059f8b44daa6b886b412f2f | Size: 3.86 MB | application/x-dosexec

PE Executable
|
MD5: d341c9133059f8b44daa6b886b412f2f
|
Size: 3.86 MB
|
application/x-dosexec