Suspicious
Suspect

e5d8e8e7fd048a022b5592a7c06b25e7

PE Executable
|
MD5: e5d8e8e7fd048a022b5592a7c06b25e7
|
Size: 938.5 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
e5d8e8e7fd048a022b5592a7c06b25e7
Sha1
ae773b784837d4aff2a3a853e7ca60ea8a2538b6
Sha256
e0fe82afeda1bc7179ac7810ee7378bf15665c16191f0cafcf00413fedb1a8e2
Sha384
4d8a259ff5ce4ffa8f616752a17432dee0e99dc24a19874df6b635889262b702fb0d4645f3115f6868df88970e04f56d
Sha512
997a5952b5408f749a1113467b5b1876fdb9333234b54e16625de0ac169abc10cd11ef74f4d962a0ab62db833b30f78ed5accb9ffdd7d7a1a521a69404ec7333
SSDeep
12288:DeeZoL367f+BPfPG/1RR4dC4O0f3o5KpT/bG3K6PJtYSYKrs:DvZoLKDePKFv4t45yT/bG3K6bYs
TLSH
83157CF13AD8122DE5BFAB384CB10A2C5BFBEC57C621C65E2C4330DA5C21F499915B96
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
g_0G9Xif.Resources.resources
14e8acef15dd03.Resources.resources
586ff44f0
[NBF]root.Data
586ff44f1
[NBF]root.Data
586ff44f10
[NBF]root.Data
586ff44f11
[NBF]root.Data
586ff44f12
[NBF]root.Data
586ff44f13
[NBF]root.Data
586ff44f14
[NBF]root.Data
586ff44f15
[NBF]root.Data
586ff44f16
[NBF]root.Data
586ff44f17
[NBF]root.Data
586ff44f18
[NBF]root.Data
586ff44f19
[NBF]root.Data
586ff44f2
[NBF]root.Data
586ff44f20
[NBF]root.Data
586ff44f21
[NBF]root.Data
586ff44f3
[NBF]root.Data
586ff44f4
[NBF]root.Data
586ff44f5
[NBF]root.Data
586ff44f6
[NBF]root.Data
586ff44f7
[NBF]root.Data
586ff44f8
[NBF]root.Data
586ff44f9
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

g_0G9Xif

Full Name

g_0G9Xif

EntryPoint

System.Void g_0G9Xif.ai9Fb5Hc::Gps6a3Cr0A()

Scope Name

g_0G9Xif

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

g_0G9Xif

Assembly Version

25.23.17.108

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.6

Total Strings

1600

Main Method

System.Void g_0G9Xif.ai9Fb5Hc::Gps6a3Cr0A()

Main IL Instruction Count

131

Main IL

nop <null> newobj System.Void System.Random::.ctor() stloc.0 <null> newobj System.Void System.Windows.Forms.Form::.ctor() stloc.2 <null> nop <null> ldloc.0 <null> ldc.i4.s -10 ldc.i4.s 10 callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) stloc.3 <null> ldloc.3 <null> ldc.i4.0 <null> cgt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0050: nop ldstr System.AppDomain call System.Type System.Type::GetType(System.String) stloc.s V_5 ldloc.s V_5 ldstr CurrentDomain ldc.i4.s 24 callvirt System.Reflection.PropertyInfo System.Type::GetProperty(System.String,System.Reflection.BindingFlags) stloc.s V_6 ldloc.s V_6 ldnull <null> ldnull <null> callvirt System.Object System.Reflection.PropertyInfo::GetValue(System.Object,System.Object[]) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.1 <null> br.s IL_006E: nop nop <null> ldstr System.Object call System.Type System.Type::GetType(System.String) stloc.s V_7 ldloc.s V_7 call System.Object System.Activator::CreateInstance(System.Type) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.1 <null> nop <null> nop <null> br.s IL_000D: nop nop <null> ldloc.1 <null> ldnull <null> ldstr Load ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> call System.Byte[] g_0G9Xif.Rp7s8_wNC5pfcB::9WbrpwC7Z() call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Reverse<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) call System.Byte[] System.Linq.Enumerable::ToArray<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) ldsfld System.Func`3<System.Byte,System.Int32,System.Byte> g_0G9Xif.ai9Fb5Hc/Rzb9tX5bB0i.9byXYc1zd3i::yt0CbFi1 brfalse.s IL_009B: ldsfld g_0G9Xif.ai9Fb5Hc/Rzb9tX5bB0i.9byXYc1zd3i g_0G9Xif.ai9Fb5Hc/Rzb9tX5bB0i.9byXYc1zd3i::Xfa8mw5 ldsfld System.Func`3<System.Byte,System.Int32,System.Byte> g_0G9Xif.ai9Fb5Hc/Rzb9tX5bB0i.9byXYc1zd3i::yt0CbFi1 br.s IL_00B1: call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Select<System.Byte,System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>,System.Func`3<System.Byte,System.Int32,System.Byte>) ldsfld g_0G9Xif.ai9Fb5Hc/Rzb9tX5bB0i.9byXYc1zd3i g_0G9Xif.ai9Fb5Hc/Rzb9tX5bB0i.9byXYc1zd3i::Xfa8mw5 ldftn System.Byte g_0G9Xif.ai9Fb5Hc/Rzb9tX5bB0i.9byXYc1zd3i::Tij6y2LzNa1w(System.Byte,System.Int32) newobj System.Void System.Func`3<System.Byte,System.Int32,System.Byte>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`3<System.Byte,System.Int32,System.Byte> g_0G9Xif.ai9Fb5Hc/Rzb9tX5bB0i.9byXYc1zd3i::yt0CbFi1 call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Select<System.Byte,System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>,System.Func`3<System.Byte,System.Int32,System.Byte>) call System.Byte[] System.Linq.Enumerable::ToArray<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) stelem.ref <null> ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldnull <null> ldstr GetTypes ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldc.i4.s 24 box System.Int32 stelem.ref <null> ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldnull <null> ldstr GetMethods ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) castclass System.Collections.IEnumerable callvirt System.Collections.IEnumerator System.Collections.IEnumerable::GetEnumerator() stloc.s V_8 br.s IL_013B: ldloc.s V_8 ldloc.s V_8 callvirt System.Object System.Collections.IEnumerator::get_Current() call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.s V_9 nop <null> ldloc.s V_9 castclass System.Reflection.MethodInfo ldnull <null> ldc.i4.0 <null> newarr System.Object callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> leave.s IL_0139: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_10 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0139: nop nop <null> nop <null> ldloc.s V_8 callvirt System.Boolean System.Collections.IEnumerator::MoveNext() stloc.s V_11 ldloc.s V_11 brtrue.s IL_0104: ldloc.s V_8 leave.s IL_0161: ret ldloc.s V_8 isinst System.IDisposable brfalse.s IL_0160: endfinally ldloc.s V_8 isinst System.IDisposable callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ret <null>

e5d8e8e7fd048a022b5592a7c06b25e7 (938.5 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙