Suspicious
Suspect

PE Executable
MD5: 2774dd7119b47047dda5436f1a3f7b6f
Size: 733.18 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 2774dd7119b47047dda5436f1a3f7b6f
Sha1 a4dff4240001c3cb8b86e3219e0617915cf4ee1d
Sha256 b10dbb37da8dafbad48755ee8fcc94b50d37e47f14181f0a302c4f909f5db954
Sha384 6bf0c4099d392c332b544f952982f5903542bc2071183bcc503bae425d4c31834f23e79e4bac46bcea272d257a84729f
Sha512 4cc32ff913eb14f3781d75633df942ee3222b8911684d48d1070e77be4fb51855c5917f61c5fa613ac34e62b24db5812b6dd7364b4b3141c09cf965c4d9d3784
SSDeep 12288:vh64S2PzH7jsDb8zMWICFXxVlnLYWMJ+YXnNXq9fun+4Xt/WZ:vhFBzHPHM9CxxLLYnXnNXqu+4Xt
TLSH 43F4D01576BA8F12C8A69BF42A74E17407F42E9EA921D30F8DE13DDB7635F401A40B93
PeID
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Library.FormMenu.resources
$this.Icon
[NBF]root.IconData
TCA
[NBF]root.Data
Library.FormBook.resources
BookFlowLibrary.Properties.Resources.resources
lQpke
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Module Name
iJUqS.exe
Full Name
iJUqS.exe
EntryPoint
System.Void Library.Program::Main()
Scope Name
iJUqS.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
iJUqS
Assembly Version
12.10.5.7
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
759
Main Method
System.Void Library.Program::Main()
Main IL Instruction Count
5
Main IL
nop <null>
newobj System.Void Library.FormMenu::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
iJUqS.exe
Full Name
iJUqS.exe
EntryPoint
System.Void Library.Program::Main()
Scope Name
iJUqS.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
iJUqS
Assembly Version
12.10.5.7
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
759
Main Method
System.Void Library.Program::Main()
Main IL Instruction Count
5
Main IL
nop <null>
newobj System.Void Library.FormMenu::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
PDB Path PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Library.FormMenu.resources
$this.Icon
[NBF]root.IconData
TCA
[NBF]root.Data
Library.FormBook.resources
BookFlowLibrary.Properties.Resources.resources
lQpke
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
PDB Path PATH
?huhuhuhu
2774dd7119b47047dda5436f1a3f7b6f
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙