146c5d2cbf3373f83dcfa349a4c76ff7

PE Executable

MD5: 146c5d2cbf3373f83dcfa349a4c76ff7

Size: 973.31 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	146c5d2cbf3373f83dcfa349a4c76ff7
Sha1	e483854bdd7df5316ae6380d030ba9ecd9d07d42
Sha256	d86753e540f7ec56ae0e03335558af87e536c03bdd7d93511a5521ee28605341
Sha384	ca948dfce922dd9129ebabca2d649d76c837a0782987d4400849351dd927f1e8718ed6faa4ab2acfb9e522c185832bea
Sha512	bd33a540e1fe3bb11d14714f62789adda23f6b3df7469a17a6b63a027a0aff08a5814bf2030ef885ee94e7a39f3181704d559369ae9cfb07c7d57f099860c849
SSDeep	24576:avCKX8jhrUrME8VPcthPs8RCvk+Cgr0Lsx:avCfjhAgE8hzvkE0Lsx
TLSH	1E25BD0C23DED836E461DEB00560D7F846641ED86859E282C9EAFDAF7B7B641DC0D1B2

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Module Name	igiq.exe
Full Name	igiq.exe
EntryPoint	System.Void KaraokeManager.Program::Main()
Scope Name	igiq.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	igiq
Assembly Version	12.12.12.12
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Info	PE Detect: PeReader OK (file layout)
Total Strings	296
Main Method	System.Void KaraokeManager.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void KaraokeManager.frmDangNhap::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\KPcgpOAFsl\src\obj\Debug\igiq.pdb

No malware configuration was found at this point.

You must be signed in to view YARA rules.