15a3534676d742c0949e3c0f9e7e2fe4cf34fcbe599fb83b17bafd6db7fbf256
This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2022-Feb-01 05:49:17 |
| Comments | |
| CompanyName | |
| FileDescription | DevXUnityRun |
| FileVersion | 1.0.0.0 |
| InternalName | DevXUnityUnpackerRun.exe |
| LegalCopyright | Copyright © 2017 |
| LegalTrademarks | |
| OriginalFilename | DevXUnityUnpackerRun.exe |
| ProductName | DevXUnityRun |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft |
| Malicious | VirusTotal score: 49/72 (Scanned on 2025-01-22 11:33:21) |
ALYac:
Gen:Variant.Tedy.216341
APEX: Malicious AVG: Win32:TrojanX-gen [Trj] AhnLab-V3: Trojan/Win.Generic.C5297586 Alibaba: Trojan:Win32/Malgent.941592f2 Antiy-AVL: Trojan/Win32.Generic Arcabit: Trojan.Tedy.D34D15 Avast: Win32:TrojanX-gen [Trj] BitDefender: Gen:Variant.Tedy.216341 Bkav: W32.AIDetectMalware.CS CAT-QuickHeal: Trojan.Ghanarava.1732708841f8ebcf CTX: exe.trojan.malgent CrowdStrike: win/malicious_confidence_100% (W) Cylance: Unsafe DeepInstinct: MALICIOUS ESET-NOD32: a variant of Generik.GUDOJXI Emsisoft: Gen:Variant.Tedy.216341 (B) FireEye: Gen:Variant.Tedy.216341 Fortinet: PossibleThreat GData: Gen:Variant.Tedy.216341 Google: Detected Ikarus: Trojan.Win32.Malgent Jiangmin: Trojan.Generic.hnfsg K7AntiVirus: Riskware ( 00584baa1 ) K7GW: Riskware ( 00584baa1 ) Kaspersky: HEUR:Trojan.Win32.Generic Kingsoft: Win32.Trojan.Generic.a Lionic: Trojan.Win32.Malgent.4!c Malwarebytes: Malware.AI.1726347954 MaxSecure: Trojan.Malware.196612858.susgen McAfee: Artemis!259CB8E025DE McAfeeD: ti!15A3534676D7 MicroWorld-eScan: Gen:Variant.Tedy.216341 Microsoft: Trojan:Win32/Malgent NANO-Antivirus: Trojan.Win32.Tedy.ktkfox Paloalto: generic.ml Panda: Trj/GdSda.A Rising: Trojan.Generic!8.C3 (CLOUD) Sangfor: Trojan.Win32.Malgent.V0i3 SentinelOne: Static AI - Malicious PE Sophos: Mal/Generic-R Symantec: ML.Attribute.HighConfidence Tencent: Malware.Win32.Gencirc.14160556 Trapmine: suspicious.low.ml.score TrendMicro: TROJ_GEN.R002C0DAH25 TrendMicro-HouseCall: TROJ_GEN.R002C0DAH25 VIPRE: Gen:Variant.Tedy.216341 Varist: W32/Risk.OJXP-1614 Zillya: Trojan.Generic.Win32.1668614 |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 3 |
| TimeDateStamp | 2022-Feb-01 05:49:17 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 48.0 |
| SizeOfCode | 0xc00 |
| SizeOfInitializedData | 0x3600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00002B4E (Section: .text) |
| BaseOfCode | 0x2000 |
| BaseOfData | 0x4000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xa000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rsrc
.reloc
Imports
| mscoree.dll |
_CorExeMain
|
|---|
Delayed Imports
1
2
3
32512
1 (#2)
1 (#3)
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.0 |
| ProductVersion | 1.0.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | |
| CompanyName | |
| FileDescription | DevXUnityRun |
| FileVersion (#2) | 1.0.0.0 |
| InternalName | DevXUnityUnpackerRun.exe |
| LegalCopyright | Copyright © 2017 |
| LegalTrademarks | |
| OriginalFilename | DevXUnityUnpackerRun.exe |
| ProductName | DevXUnityRun |
| ProductVersion (#2) | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
| Resource LangID | UNKNOWN |
|---|
TLS Callbacks
Load Configuration
RICH Header
Errors
Leave a comment
No comments yet.