Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
PeID
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual Studio .NET
376809d4de1459576198b40a875a5114
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Qia65nWr.Pjr2gQ6ps7j.resources
efd704f8a2a299.Resources.resources
4adad9870
[NBF]root.Data
4adad9871
[NBF]root.Data
4adad98710
[NBF]root.Data
4adad98711
[NBF]root.Data
4adad98712
[NBF]root.Data
4adad98713
[NBF]root.Data
4adad98714
[NBF]root.Data
4adad98715
[NBF]root.Data
4adad98716
[NBF]root.Data
4adad98717
[NBF]root.Data
4adad98718
[NBF]root.Data
4adad98719
[NBF]root.Data
4adad9872
[NBF]root.Data
4adad98720
[NBF]root.Data
4adad98721
[NBF]root.Data
4adad9873
[NBF]root.Data
4adad9874
[NBF]root.Data
4adad9875
[NBF]root.Data
4adad9876
[NBF]root.Data
4adad9877
[NBF]root.Data
4adad9878
[NBF]root.Data
4adad9879
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
Qia65nWr
Full Name
Qia65nWr
EntryPoint
System.Void Qia65nWr.4r_BP0xy1a::dCt4E3jk9dBnaR()
Scope Name
Qia65nWr
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Qia65nWr
Assembly Version
25.7.39.209
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
16
Main Method
System.Void Qia65nWr.4r_BP0xy1a::dCt4E3jk9dBnaR()
Main IL Instruction Count
77
Main IL 
nop <null>
newobj System.Void Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::.ctor()
stloc.0 <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
newobj System.Void Qia65nWr.Pjr2gQ6ps7j::.ctor()
dup <null>
ldc.i4.s 100
ldc.i4 200
newobj System.Void System.Drawing.Size::.ctor(System.Int32,System.Int32)
callvirt System.Void System.Windows.Forms.Control::set_Size(System.Drawing.Size)
nop <null>
stloc.1 <null>
ldloc.0 <null>
newobj System.Void Qia65nWr.4r_BP0xy1a::.ctor()
dup <null>
ldc.i4 1000
ldc.i4 500
newobj System.Void System.Drawing.Size::.ctor(System.Int32,System.Int32)
callvirt System.Void System.Windows.Forms.Form::set_Size(System.Drawing.Size)
nop <null>
stfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
ldloc.1 <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
callvirt System.Int32 System.Windows.Forms.Control::get_Width()
conv.r8 <null>
ldc.r8 2
div <null>
ldloc.1 <null>
callvirt System.Int32 System.Windows.Forms.Control::get_Width()
conv.r8 <null>
ldc.r8 2
div <null>
sub <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
callvirt System.Int32 System.Windows.Forms.Control::get_Height()
conv.r8 <null>
ldc.r8 2
div <null>
ldloc.1 <null>
callvirt System.Int32 System.Windows.Forms.Control::get_Height()
conv.r8 <null>
ldc.r8 2
div <null>
sub <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
newobj System.Void System.Drawing.Point::.ctor(System.Int32,System.Int32)
callvirt System.Void System.Windows.Forms.Control::set_Location(System.Drawing.Point)
nop <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
callvirt System.Windows.Forms.Control/ControlCollection System.Windows.Forms.Control::get_Controls()
callvirt System.Void System.Windows.Forms.Control/ControlCollection::Clear()
nop <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
callvirt System.Windows.Forms.Control/ControlCollection System.Windows.Forms.Control::get_Controls()
ldloc.1 <null>
callvirt System.Void System.Windows.Forms.Control/ControlCollection::Add(System.Windows.Forms.Control)
nop <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
ldloc.0 <null>
ldftn System.Void Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::mBr72aF(System.Object,System.EventArgs)
newobj System.Void System.EventHandler::.ctor(System.Object,System.IntPtr)
callvirt System.Void System.Windows.Forms.Form::add_Load(System.EventHandler)
nop <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
Qia65nWr
Full Name
Qia65nWr
EntryPoint
System.Void Qia65nWr.4r_BP0xy1a::dCt4E3jk9dBnaR()
Scope Name
Qia65nWr
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Qia65nWr
Assembly Version
25.7.39.209
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
16
Main Method
System.Void Qia65nWr.4r_BP0xy1a::dCt4E3jk9dBnaR()
Main IL Instruction Count
77
Main IL 
nop <null>
newobj System.Void Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::.ctor()
stloc.0 <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
newobj System.Void Qia65nWr.Pjr2gQ6ps7j::.ctor()
dup <null>
ldc.i4.s 100
ldc.i4 200
newobj System.Void System.Drawing.Size::.ctor(System.Int32,System.Int32)
callvirt System.Void System.Windows.Forms.Control::set_Size(System.Drawing.Size)
nop <null>
stloc.1 <null>
ldloc.0 <null>
newobj System.Void Qia65nWr.4r_BP0xy1a::.ctor()
dup <null>
ldc.i4 1000
ldc.i4 500
newobj System.Void System.Drawing.Size::.ctor(System.Int32,System.Int32)
callvirt System.Void System.Windows.Forms.Form::set_Size(System.Drawing.Size)
nop <null>
stfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
ldloc.1 <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
callvirt System.Int32 System.Windows.Forms.Control::get_Width()
conv.r8 <null>
ldc.r8 2
div <null>
ldloc.1 <null>
callvirt System.Int32 System.Windows.Forms.Control::get_Width()
conv.r8 <null>
ldc.r8 2
div <null>
sub <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
callvirt System.Int32 System.Windows.Forms.Control::get_Height()
conv.r8 <null>
ldc.r8 2
div <null>
ldloc.1 <null>
callvirt System.Int32 System.Windows.Forms.Control::get_Height()
conv.r8 <null>
ldc.r8 2
div <null>
sub <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
newobj System.Void System.Drawing.Point::.ctor(System.Int32,System.Int32)
callvirt System.Void System.Windows.Forms.Control::set_Location(System.Drawing.Point)
nop <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
callvirt System.Windows.Forms.Control/ControlCollection System.Windows.Forms.Control::get_Controls()
callvirt System.Void System.Windows.Forms.Control/ControlCollection::Clear()
nop <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
callvirt System.Windows.Forms.Control/ControlCollection System.Windows.Forms.Control::get_Controls()
ldloc.1 <null>
callvirt System.Void System.Windows.Forms.Control/ControlCollection::Add(System.Windows.Forms.Control)
nop <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
ldloc.0 <null>
ldftn System.Void Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::mBr72aF(System.Object,System.EventArgs)
newobj System.Void System.EventHandler::.ctor(System.Object,System.IntPtr)
callvirt System.Void System.Windows.Forms.Form::add_Load(System.EventHandler)
nop <null>
ldloc.0 <null>
ldfld Qia65nWr.4r_BP0xy1a Qia65nWr.4r_BP0xy1a/Cwr34Asy.3Qcrjk7ZEdn2::Dac54Rwji
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙