Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Сапёр.Main.resources
$this.Icon
[NBF]root.IconData
GameTimer.TrayLocation
LPP
[NBF]root.Data
SettingsButton.Image
[NBF]root.Data
[NBF]root.Data-preview.png
SmileButton.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Сапёр.Properties.Resources.resources
OHUn
[NBF]root.Data
[NBF]root.Data-preview.png
blank_block
[NBF]root.Data
[NBF]root.Data-preview.png
block_1
[NBF]root.Data
[NBF]root.Data-preview.png
block_2
[NBF]root.Data
[NBF]root.Data-preview.png
block_3
[NBF]root.Data
[NBF]root.Data-preview.png
block_4
[NBF]root.Data
[NBF]root.Data-preview.png
block_5
[NBF]root.Data
[NBF]root.Data-preview.png
block_6
[NBF]root.Data
[NBF]root.Data-preview.png
block_7
[NBF]root.Data
[NBF]root.Data-preview.png
block_8
[NBF]root.Data
[NBF]root.Data-preview.png
clicked_bomb_block
[NBF]root.Data
[NBF]root.Data-preview.png
close_button
[NBF]root.Data
[NBF]root.Data-preview.png
close_button_hover
[NBF]root.Data
[NBF]root.Data-preview.png
closed_block
[NBF]root.Data
[NBF]root.Data-preview.png
flagged_block
[NBF]root.Data
[NBF]root.Data-preview.png
minimize_button
minimize_button_hover
not_clicked_bomb_block
[NBF]root.Data
[NBF]root.Data-preview.png
not_flagged_block
[NBF]root.Data
[NBF]root.Data-preview.png
settings
[NBF]root.Data
[NBF]root.Data-preview.png
settings_hover
[NBF]root.Data
[NBF]root.Data-preview.png
smile
[NBF]root.Data
[NBF]root.Data-preview.png
smile_click
[NBF]root.Data
[NBF]root.Data-preview.png
smile_cool
[NBF]root.Data
[NBF]root.Data-preview.png
smile_sad
[NBF]root.Data
[NBF]root.Data-preview.png
Сапёр.Settings.resources
Name Value
Module Name
TPvI.exe
Full Name
TPvI.exe
EntryPoint
System.Void Сапёр.Program::Main()
Scope Name
TPvI.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
TPvI
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
237
Main Method
System.Void Сапёр.Program::Main()
Main IL Instruction Count
6
Main IL
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
newobj System.Void Сапёр.Main::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
ret <null>
PDB Path PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙