Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | fe75224216b7f097321e552f4d24f0c6
|
| Sha1 | e386f2dfe63ff959fdf2cb5cd9b64d755e0eb126
|
| Sha256 | 8ed52e5cadcf8bc30a3e25bb135c0d5e4e81c8fd43ee2843736bc614998e9a34
|
| Sha384 | b09812f9c9d4823785309a18dade94c03d7ccc9f99cba093b85eff6e7b4419f2d2e8ca2e02687a100147a5d5a2dc2a49
|
| Sha512 | c3eda766339940e44a94bcddb4dd7e61a4b5dfef3488a3d1d0c3aba4b7762b0ee953310f5c7a526e2fa33964c4019f1b69483f431bb09f1d8c2c22404494781f
|
| SSDeep | 98304:oNLZpnlY8QoSvfvux8iOhHRelnFhaszOMFulctElNafq024pIVs9TmxfKYSFXgdS:cdXyIx8vRunFhaUtm0fX2JOTGuSIwCZ
|
| TLSH | 4E663389AB2635A2C1A51B36D46412C0CFB1C847F263D2BD98DC3FCA6F4CBD915478A7
|
PeID
|
Name0 | Value |
|---|---|
| Module Name | HsDr.exe |
| Full Name | HsDr.exe |
| EntryPoint | System.Void SecureMode.Program::Main() |
| Scope Name | HsDr.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | HsDr |
| Assembly Version | 1.6.1908.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0 |
| Total Strings | 2 |
| Main Method | System.Void SecureMode.Program::Main() |
| Main IL Instruction Count | 33 |
| Main IL | ldc.i4.4 <null> stloc.1 <null> ldloc.1 <null> switch dnlib.DotNet.Emit.Instruction[] call System.Void SecureMode.AsyncForm59::Ⴈ() ldc.i4 235 ldc.i4 173 call System.Void SecureMode.Properties.Resources::Ⴄ(System.Int32,System.Int16) ldc.i4.0 <null> ldc.i4 878 ldc.i4 823 call System.Void SecureMode.ProfessionalForm65::Ⴓ(System.Boolean,System.Int32,System.Char) ldc.i4.1 <null> stloc.1 <null> br.s IL_0002: ldloc.1 newobj System.Void SecureMode.ProfessionalForm53::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ldsfld System.Char[] SecureMode.PrimaryForm58::Ⴐ ldc.i4 249 ldsfld System.Char[] SecureMode.PrimaryForm58::Ⴐ ldc.i4 249 ldelem.u2 <null> ldsfld System.Char[] SecureMode.PrimaryForm58::Ⴐ ldc.i4.6 <null> ldelem.u2 <null> xor <null> ldc.i4.s 46 and <null> stelem.i2 <null> ret <null> ldtoken System.Void SecureMode.Program::Main() pop <null> ret <null> |
| Module Name | HsDr.exe |
| Full Name | HsDr.exe |
| EntryPoint | System.Void SecureMode.Program::Main() |
| Scope Name | HsDr.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | HsDr |
| Assembly Version | 1.6.1908.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0 |
| Total Strings | 2 |
| Main Method | System.Void SecureMode.Program::Main() |
| Main IL Instruction Count | 33 |
| Main IL | ldc.i4.4 <null> stloc.1 <null> ldloc.1 <null> switch dnlib.DotNet.Emit.Instruction[] call System.Void SecureMode.AsyncForm59::Ⴈ() ldc.i4 235 ldc.i4 173 call System.Void SecureMode.Properties.Resources::Ⴄ(System.Int32,System.Int16) ldc.i4.0 <null> ldc.i4 878 ldc.i4 823 call System.Void SecureMode.ProfessionalForm65::Ⴓ(System.Boolean,System.Int32,System.Char) ldc.i4.1 <null> stloc.1 <null> br.s IL_0002: ldloc.1 newobj System.Void SecureMode.ProfessionalForm53::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ldsfld System.Char[] SecureMode.PrimaryForm58::Ⴐ ldc.i4 249 ldsfld System.Char[] SecureMode.PrimaryForm58::Ⴐ ldc.i4 249 ldelem.u2 <null> ldsfld System.Char[] SecureMode.PrimaryForm58::Ⴐ ldc.i4.6 <null> ldelem.u2 <null> xor <null> ldc.i4.s 46 and <null> stelem.i2 <null> ret <null> ldtoken System.Void SecureMode.Program::Main() pop <null> ret <null> |
|
Name0 | Value |
|---|---|
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
|
Name0 | Value | Location |
|---|---|---|
| Embedded Resources | 0 |
fe75224216b7f097321e552f4d24f0c6 |
| Suspicious Type Names (1-2 chars) | 0 |
fe75224216b7f097321e552f4d24f0c6 |