b712de4ba27e5c6a9116487ad1f6e78d1be502a33f05c0454f11bb7f5dc57ade
This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2100-Oct-13 03:20:15 |
| Comments | |
| CompanyName | Leppsoft |
| FileDescription | Soundpad |
| FileVersion | 4.0.9.0 |
| InternalName | Soundpad |
| LegalCopyright | Copyright (C) 2016-2024 Leppsoft |
| LegalTrademarks | |
| OriginalFilename | Soundpad |
| ProductName | Soundpad |
| ProductVersion | 4.0.9.0 |
| Assembly Version | 4.0.9.0 |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft |
| Malicious | VirusTotal score: 49/68 (Scanned on 2026-05-02 12:06:58) |
ALYac:
Gen:Variant.Application.msilheracles.2873
APEX: Malicious AVG: Win32:MalwareX-gen [Spy] AhnLab-V3: Malware/Win.Generic.C5354698 Alibaba: TrojanSpy:MSIL/Bobik.7073fd44 Antiy-AVL: Trojan[Spy]/MSIL.Bobik Arcabit: Trojan.Application.msilheracles.DB39 Avast: Win32:MalwareX-gen [Spy] BitDefender: Gen:Variant.Application.msilheracles.2873 Bkav: W32.AIDetectMalware.CS CAT-QuickHeal: Trojan.YakbeexMSIL.ZZ4 CTX: exe.trojan.msil ClamAV: Win.Packed.Marsilia-10021147-0 CrowdStrike: win/malicious_confidence_100% (W) Cylance: Unsafe DeepInstinct: MALICIOUS ESET-NOD32: MSIL/Agent.WXS trojan Elastic: malicious (high confidence) Emsisoft: Gen:Variant.Application.msilheracles.2873 (B) Fortinet: MSIL/Agent.WXS!tr GData: Gen:Variant.Application.msilheracles.2873 Google: Detected Gridinsoft: Trojan.Win32.Agent.sa Ikarus: Trojan.MSIL.Agent K7AntiVirus: Spyware ( 700000201 ) K7GW: Spyware ( 700000201 ) Kaspersky: HEUR:Trojan-Spy.MSIL.Bobik.gen Kingsoft: MSIL.Trojan-Spy.Bobik.gen Lionic: Trojan.Win32.Bobik.l!c Malwarebytes: Trojan.MalPack MaxSecure: Trojan.Malware.300983.susgen McAfeeD: Real Protect-LS!546BEA72664D MicroWorld-eScan: Gen:Variant.Application.msilheracles.2873 Microsoft: Trojan:MSIL/Lazy.AMBB!MTB Paloalto: generic.ml Panda: Trj/GdSda.A Rising: Spyware.Bobik!8.108FF (CLOUD) Sangfor: Virus.Win32.Save.a SentinelOne: Static AI - Malicious PE Sophos: Troj/MSIL-TGO TrellixENS: GenericRXWO-IB!546BEA72664D TrendMicro-HouseCall: Trojan.Win32.VSX.PE04C9z VIPRE: Gen:Variant.Application.msilheracles.2873 Varist: W32/MSIL_Agent.HKZ.gen!Eldorado VirIT: Trojan.Win32.MSIL_Heur.A ZoneAlarm: Troj/MSIL-TGO alibabacloud: Trojan:MSIL/Lazy.AZHJ3DGW huorong: Trojan/MSIL.Agent.jp tehtris: Generic.Malware |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 3 |
| TimeDateStamp | 2100-Oct-13 03:20:15 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 48.0 |
| SizeOfCode | 0xa8600 |
| SizeOfInitializedData | 0x4600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000AA53E (Section: .text) |
| BaseOfCode | 0x2000 |
| BaseOfData | 0xac000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xb4000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rsrc
.reloc
Imports
| mscoree.dll |
_CorExeMain
|
|---|
Delayed Imports
1
2
3
4
5
6
1 (#2)
1 (#3)
1 (#4)
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 4.0.9.0 |
| ProductVersion | 4.0.9.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | |
| CompanyName | Leppsoft |
| FileDescription | Soundpad |
| FileVersion (#2) | 4.0.9.0 |
| InternalName | Soundpad |
| LegalCopyright | Copyright (C) 2016-2024 Leppsoft |
| LegalTrademarks | |
| OriginalFilename | Soundpad |
| ProductName | Soundpad |
| ProductVersion (#2) | 4.0.9.0 |
| Assembly Version | 4.0.9.0 |
| Resource LangID | UNKNOWN |
|---|
TLS Callbacks
Load Configuration
RICH Header
Errors
Leave a comment
No comments yet.