Suspicious
Suspect

2d3c1ad3e1cdca3e45388c3056755721

PE Executable
MD5: 2d3c1ad3e1cdca3e45388c3056755721
Size: 1.14 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 2d3c1ad3e1cdca3e45388c3056755721
Sha1 94add754ef3f3abab93ea5135f4cde24b24f2128
Sha256 42b65197ee2dddb7b3cae26cf2d595a0f074e20e9ba0aa2efdf41d5ec3461579
Sha384 d486e199ce24f6eaf4ae669acf9d455abe512a7d0c307e163ca2874500f52e8a623407ed74f81e825880ae92b405517a
Sha512 b78226728f96e68544019aaebfa9809bd30f931b17c3889550da1256b906c49523b9604ba34ff80d810226d58436b2c5ff0fac2606b1659d20b133f4315b22eb
SSDeep 24576:7x9cQR+ioFB9mmKKRbpOeOqCqgDGEvXKgMBTplyua6kdL89:7xWQRaE3eOt3MhyNo
TLSH E835DF082257DB27C4117B74C833E7F80A641E95E910D22F9EEA7EBBBF35E355845282
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
2d3c1ad3e1cdca3e45388c3056755721
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ChurchOrgan.FormOrgan.resources
ChurchOrgan.FormReport.resources
$this.Icon
[NBF]root.IconData
ChurchOrgan.Properties.Resources.resources
Sed
[NBF]root.Data
nUnz
[NBF]root.Data
[NBF]root.Data-preview.png
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
KJYo.exe
Full Name
KJYo.exe
EntryPoint
System.Void ChurchOrgan.Program::Main()
Scope Name
KJYo.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
KJYo
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
253
Main Method
System.Void ChurchOrgan.Program::Main()
Main IL Instruction Count
116
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void ChurchOrgan.OrganDataSet::.ctor()
stloc.0 <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/RegistrationDataTable ChurchOrgan.OrganDataSet::get_Registration()
callvirt ChurchOrgan.OrganDataSet/RegistrationRow ChurchOrgan.OrganDataSet/RegistrationDataTable::NewRegistrationRow()
stloc.1 <null>
ldloc.1 <null>
ldc.i4.1 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Principal(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Flute(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Hautbois(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Mixture(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_CopulaRecit(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.s 80
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_PressionBase(System.Int32)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Tremblant(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.s 100
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_CapaciteSoufflerie(System.Int32)
nop <null>
ldloc.1 <null>
ldc.r8 20
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Temperatura(System.Double)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/RegistrationDataTable ChurchOrgan.OrganDataSet::get_Registration()
ldloc.1 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationDataTable::AddRegistrationRow(ChurchOrgan.OrganDataSet/RegistrationRow)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/StatusLiveDataTable ChurchOrgan.OrganDataSet::get_StatusLive()
callvirt ChurchOrgan.OrganDataSet/StatusLiveRow ChurchOrgan.OrganDataSet/StatusLiveDataTable::NewStatusLiveRow()
stloc.2 <null>
ldloc.2 <null>
ldc.r8 80
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveRow::set_PressionActuelle(System.Double)
nop <null>
ldloc.2 <null>
ldc.r8 50
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveRow::set_SouffletHauteur(System.Double)
nop <null>
ldloc.2 <null>
ldc.r8 0
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveRow::set_AccordDerive(System.Double)
nop <null>
ldloc.2 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveRow::set_NotesActivesCount(System.Int32)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/StatusLiveDataTable ChurchOrgan.OrganDataSet::get_StatusLive()
ldloc.2 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveDataTable::AddStatusLiveRow(ChurchOrgan.OrganDataSet/StatusLiveRow)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/ReportMetricsDataTable ChurchOrgan.OrganDataSet::get_ReportMetrics()
callvirt ChurchOrgan.OrganDataSet/ReportMetricsRow ChurchOrgan.OrganDataSet/ReportMetricsDataTable::NewReportMetricsRow()
stloc.3 <null>
ldloc.3 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_NotesSonneesPropre(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_NotesAffamees(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.s 100
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_StabiliteVent(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.1 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_MaxRegistresSimultanes(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_DureeSoufflerieActive(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.5 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_EvaluationSetup(System.Int32)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/ReportMetricsDataTable ChurchOrgan.OrganDataSet::get_ReportMetrics()
ldloc.3 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsDataTable::AddReportMetricsRow(ChurchOrgan.OrganDataSet/ReportMetricsRow)
nop <null>
ldloc.0 <null>
newobj System.Void ChurchOrgan.FormOrgan::.ctor(ChurchOrgan.OrganDataSet)
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
KJYo.exe
Full Name
KJYo.exe
EntryPoint
System.Void ChurchOrgan.Program::Main()
Scope Name
KJYo.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
KJYo
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
253
Main Method
System.Void ChurchOrgan.Program::Main()
Main IL Instruction Count
116
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void ChurchOrgan.OrganDataSet::.ctor()
stloc.0 <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/RegistrationDataTable ChurchOrgan.OrganDataSet::get_Registration()
callvirt ChurchOrgan.OrganDataSet/RegistrationRow ChurchOrgan.OrganDataSet/RegistrationDataTable::NewRegistrationRow()
stloc.1 <null>
ldloc.1 <null>
ldc.i4.1 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Principal(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Flute(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Hautbois(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Mixture(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_CopulaRecit(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.s 80
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_PressionBase(System.Int32)
nop <null>
ldloc.1 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Tremblant(System.Boolean)
nop <null>
ldloc.1 <null>
ldc.i4.s 100
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_CapaciteSoufflerie(System.Int32)
nop <null>
ldloc.1 <null>
ldc.r8 20
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationRow::set_Temperatura(System.Double)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/RegistrationDataTable ChurchOrgan.OrganDataSet::get_Registration()
ldloc.1 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/RegistrationDataTable::AddRegistrationRow(ChurchOrgan.OrganDataSet/RegistrationRow)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/StatusLiveDataTable ChurchOrgan.OrganDataSet::get_StatusLive()
callvirt ChurchOrgan.OrganDataSet/StatusLiveRow ChurchOrgan.OrganDataSet/StatusLiveDataTable::NewStatusLiveRow()
stloc.2 <null>
ldloc.2 <null>
ldc.r8 80
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveRow::set_PressionActuelle(System.Double)
nop <null>
ldloc.2 <null>
ldc.r8 50
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveRow::set_SouffletHauteur(System.Double)
nop <null>
ldloc.2 <null>
ldc.r8 0
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveRow::set_AccordDerive(System.Double)
nop <null>
ldloc.2 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveRow::set_NotesActivesCount(System.Int32)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/StatusLiveDataTable ChurchOrgan.OrganDataSet::get_StatusLive()
ldloc.2 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/StatusLiveDataTable::AddStatusLiveRow(ChurchOrgan.OrganDataSet/StatusLiveRow)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/ReportMetricsDataTable ChurchOrgan.OrganDataSet::get_ReportMetrics()
callvirt ChurchOrgan.OrganDataSet/ReportMetricsRow ChurchOrgan.OrganDataSet/ReportMetricsDataTable::NewReportMetricsRow()
stloc.3 <null>
ldloc.3 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_NotesSonneesPropre(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_NotesAffamees(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.s 100
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_StabiliteVent(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.1 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_MaxRegistresSimultanes(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.0 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_DureeSoufflerieActive(System.Int32)
nop <null>
ldloc.3 <null>
ldc.i4.5 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsRow::set_EvaluationSetup(System.Int32)
nop <null>
ldloc.0 <null>
callvirt ChurchOrgan.OrganDataSet/ReportMetricsDataTable ChurchOrgan.OrganDataSet::get_ReportMetrics()
ldloc.3 <null>
callvirt System.Void ChurchOrgan.OrganDataSet/ReportMetricsDataTable::AddReportMetricsRow(ChurchOrgan.OrganDataSet/ReportMetricsRow)
nop <null>
ldloc.0 <null>
newobj System.Void ChurchOrgan.FormOrgan::.ctor(ChurchOrgan.OrganDataSet)
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
2d3c1ad3e1cdca3e45388c3056755721
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ChurchOrgan.FormOrgan.resources
ChurchOrgan.FormReport.resources
$this.Icon
[NBF]root.IconData
ChurchOrgan.Properties.Resources.resources
Sed
[NBF]root.Data
nUnz
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙