Suspicious
Suspect

da21bf5cb4e5fe8ed40b231ab6c46973

PE Executable
|
MD5: da21bf5cb4e5fe8ed40b231ab6c46973
|
Size: 4.09 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
da21bf5cb4e5fe8ed40b231ab6c46973
Sha1
6a4cd79eb9f5fc432959c3acb78b134e4b49edcf
Sha256
7be2273bfc26f6f298548a4ff29de90dd24c8dc6b473ea06c2d59c62e09cedff
Sha384
894efc83aed4d66419a93c62bf77523df387c2bad549cb2d7fafbea5b07d35e11aa20594a5adb5ddd4abff4eededa04c
Sha512
923ffd9499d040d6fe2baaee420f903d3e467ef27625ee53104684441d95f40c8d130fa37488659381b26481aec388f1ca0b8b93d9b717e1a9c834c554f54530
SSDeep
98304:Oa/vgp0ZdT/oKFvoQBphR5uE6ZER/9IgQp3UfBPGxyjZjzb23:/Hgp0ZdT/JoIUFStPGxyj8
TLSH
B11622DC369131AEC407DC3146581CB896536F6A7F2EB1079C237A6BB67F8C78E054A2

PeID

UPolyX 0.3 -> delikon
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
HJ]
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

server1.exe

Full Name

server1.exe

EntryPoint

System.Void ‍‫‮‮‫‫‬‏‏‌‮‪‫‍‍‎‪‎‎‬‏‮‌‏‬‫‍‮::‪‫‏​‪‮‏‎‭‭‬‫‌‫‪‭‏​​‮()

Scope Name

server1.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

server1

Assembly Version

3.6.8.9

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

6

Main Method

System.Void ‍‫‮‮‫‫‬‏‏‌‮‪‫‍‍‎‪‎‎‬‏‮‌‏‬‫‍‮::‪‫‏​‪‮‏‎‭‭‬‫‌‫‪‭‏​​‮()

Main IL Instruction Count

7

Main IL

prefix2 <null> conv.ovf.u2.un <null> stind.r8 <null> stobj <null> ldloc.0 <null> add <null> bge.un <null>

da21bf5cb4e5fe8ed40b231ab6c46973 (4.09 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
HJ]
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙