Suspect
PE Executable
MD5:
Size: 0 B
application/x-dosexec
The file 2c92b06822dd29994ef34cdef0b3af14 is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 8 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Inconclusive
- File type
- PE Executable
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual C++ v6.0 DLLMicrosoft Visual Studio .NET
Symbol obfuscation
Medium
9 files
EXE2c92b06822dd29994ef34cdef0b3af14
Structure
P7B[Authenticode]_54209be0.p7b
BINResources
BIN.Net Resources
| Name | Value |
|---|---|
| Info | Authenticode present at 0xF0800 size 11896 bytes |
| Module Name | Holiday_Booking_1305.exe |
| Full Name | Holiday_Booking_1305.exe |
| EntryPoint | System.Void Jubtm.Nxinkaxoeu::Main() |
| Scope Name | Holiday_Booking_1305.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Holiday_Booking_1305 |
| Assembly Version | 5.5.3.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 11 |
| Main Method | System.Void Jubtm.Nxinkaxoeu::Main() |
| Main IL Instruction Count | 4 |
| Main IL | |
| Module Name | Holiday_Booking_1305.exe |
| Full Name | Holiday_Booking_1305.exe |
| EntryPoint | System.Void Jubtm.Nxinkaxoeu::Main() |
| Scope Name | Holiday_Booking_1305.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Holiday_Booking_1305 |
| Assembly Version | 5.5.3.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 11 |
| Main Method | System.Void Jubtm.Nxinkaxoeu::Main() |
| Main IL Instruction Count | 4 |
| Main IL | |