22b344ca7642ee07503c12ec495873a6

PE Executable

MD5: 22b344ca7642ee07503c12ec495873a6

Size: 1.05 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	22b344ca7642ee07503c12ec495873a6
Sha1	8aa7500b5ebb82e0ac4bd4c7fbc697f76f0ec08b
Sha256	acc82d5cf6e8bcbf29ac4bbc6de0646664beb9dcbc072d0b9d27cff23058456b
Sha384	ab586be0e6ce8dd99a9f636897199eaf9121c573b8f825c1c139acf257ab58cbcbea9234b597ed3676ee9e3283f594ad
Sha512	b8f7cdf6fa686ffb30940346acdde5793608c6c970df67809f0c88f98765de2c2eb61566b3cc55dd6d6d6a2a47f374b8c91dc33ed8b3d496997d485ab602840b
SSDeep	24576:m5daHw1mKU5ekbAwYRPq1uVrDF/BWGAj++yf01cj65+jT:slmvxbAX4SrOZ++yfeaI+3
TLSH	AF25F11822A49F02D13D53798A72E37053F12D4BA517E70A9EDCFCEB3D21BE1590A687

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: ?
Module Name	uzSG.exe
Full Name	uzSG.exe
EntryPoint	System.Void QuantumAnalyzer.ShellExtension.A::Main()
Scope Name	uzSG.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	uzSG
Assembly Version	0.0.1.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	1601
Main Method	System.Void QuantumAnalyzer.ShellExtension.A::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void QuantumAnalyzer.ShellExtension.bt_::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.