Suspicious
Suspect

dc9792fe7d61fa3861ce3f5ffa8278e2

PE Executable
|
MD5: dc9792fe7d61fa3861ce3f5ffa8278e2
|
Size: 1.8 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
 Hash Value
MD5
dc9792fe7d61fa3861ce3f5ffa8278e2
Sha1
16923c81ff9564b8a16070e3c9dc51941711fc47
Sha256
cf790980d19ae946d6de6a03100ec1c207ceff95cf7e220d90108c2749fd0f63
Sha384
ea2750b057d3067cae3b76c51a43c6287d9df9274154715cfe731e3bb5fe19683fe5b1448ba742c9ee7c07864bdccf4e
Sha512
8e4a00a00e643fc2b164ce03f475e06e08fd239f26d0ea8ad1dabb9d98996920885db7e59b38f59ff7152e63b7fcb77e8e81783932fd7b7759be186f3edc41bb
SSDeep
24576:TlLoRymbJ8wgMh4CEv3ksjU6UsHMcrE0Jv3oqv5BYg9AxMkD/zfp:tajbOhMhjE/7xUsHtJv3sxMQ
TLSH
4A85F12037E94A44F4FE5B78457246105BF9FC0BAE32DA1E6E8420DE1D79F418AA1B73

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
UPolyX 0.3 -> delikon
File Structure
dc9792fe7d61fa3861ce3f5ffa8278e2
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Rofowenzo.lenoma.dt
2xrH_Xd6.eAa9w2Ta6Ft.resources
7aceaebeb5fad2.Resources.resources
f778e6ce0
[NBF]root.Data
f778e6ce1
[NBF]root.Data
f778e6ce10
[NBF]root.Data
f778e6ce11
[NBF]root.Data
f778e6ce12
[NBF]root.Data
f778e6ce13
[NBF]root.Data
f778e6ce14
[NBF]root.Data
f778e6ce15
[NBF]root.Data
f778e6ce16
[NBF]root.Data
f778e6ce17
[NBF]root.Data
f778e6ce18
[NBF]root.Data
f778e6ce19
[NBF]root.Data
f778e6ce2
[NBF]root.Data
f778e6ce20
[NBF]root.Data
f778e6ce21
[NBF]root.Data
f778e6ce22
[NBF]root.Data
f778e6ce23
[NBF]root.Data
f778e6ce24
[NBF]root.Data
f778e6ce25
[NBF]root.Data
f778e6ce26
[NBF]root.Data
f778e6ce27
[NBF]root.Data
f778e6ce28
[NBF]root.Data
f778e6ce29
[NBF]root.Data
f778e6ce3
[NBF]root.Data
f778e6ce30
[NBF]root.Data
f778e6ce31
[NBF]root.Data
f778e6ce32
[NBF]root.Data
f778e6ce33
[NBF]root.Data
f778e6ce34
[NBF]root.Data
f778e6ce35
[NBF]root.Data
f778e6ce36
[NBF]root.Data
f778e6ce37
[NBF]root.Data
f778e6ce38
[NBF]root.Data
f778e6ce39
[NBF]root.Data
f778e6ce4
[NBF]root.Data
f778e6ce40
[NBF]root.Data
f778e6ce41
[NBF]root.Data
f778e6ce42
[NBF]root.Data
f778e6ce43
[NBF]root.Data
f778e6ce44
[NBF]root.Data
f778e6ce45
[NBF]root.Data
f778e6ce46
[NBF]root.Data
f778e6ce47
[NBF]root.Data
f778e6ce48
[NBF]root.Data
f778e6ce49
[NBF]root.Data
f778e6ce5
[NBF]root.Data
f778e6ce50
[NBF]root.Data
f778e6ce51
[NBF]root.Data
f778e6ce52
[NBF]root.Data
f778e6ce53
[NBF]root.Data
f778e6ce54
[NBF]root.Data
f778e6ce55
[NBF]root.Data
f778e6ce56
[NBF]root.Data
f778e6ce57
[NBF]root.Data
f778e6ce58
[NBF]root.Data
f778e6ce59
[NBF]root.Data
f778e6ce6
[NBF]root.Data
f778e6ce60
[NBF]root.Data
f778e6ce61
[NBF]root.Data
f778e6ce62
[NBF]root.Data
f778e6ce63
[NBF]root.Data
f778e6ce64
[NBF]root.Data
f778e6ce7
[NBF]root.Data
f778e6ce8
[NBF]root.Data
f778e6ce9
[NBF]root.Data
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

2xrH_Xd6
Full Name

2xrH_Xd6
EntryPoint

System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Scope Name

2xrH_Xd6
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

2xrH_Xd6
Assembly Version

19.1.46.95
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

2470
Main Method

System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Main IL Instruction Count

4
Main IL

nop <null> newobj System.Void 2xrH_Xd6.zi9AbWt18qe/1tbGojZ0Ew9.7Ldxz6XcqNp4g1::.ctor() stloc.0 <null> ret <null>
Module Name

2xrH_Xd6
Full Name

2xrH_Xd6
EntryPoint

System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Scope Name

2xrH_Xd6
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

2xrH_Xd6
Assembly Version

19.1.46.95
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

2470
Main Method

System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Main IL Instruction Count

4
Main IL

nop <null> newobj System.Void 2xrH_Xd6.zi9AbWt18qe/1tbGojZ0Ew9.7Ldxz6XcqNp4g1::.ctor() stloc.0 <null> ret <null>
dc9792fe7d61fa3861ce3f5ffa8278e2 (1.8 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙