3b27840adc3d577a34eaa8bc3a987693

PE Executable
|
MD5: 3b27840adc3d577a34eaa8bc3a987693
|
Size: 1.05 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	3b27840adc3d577a34eaa8bc3a987693
Sha1	029298cbf85679f0924eda7c642252dd98a4764b
Sha256	34fc69023eb0009b5cd2f6f43b3677a4bf6a6677e08b2d90a8021aeae4c9c80b
Sha384	2458ed07307d846e8a90a12700446ff733f273ec6586c20fad2c6a7ee26bfedd52907e6faecae00da7e104a349dc3e06
Sha512	7ca510de9f00233c171d13ccece50bade547ff08cca64b1fe5dafd1c8445df0c70aa589301732b351b59c1b0018c7905c145e7d57b893b63422c41146bba7ce8
SSDeep	24576:rxVb6xvZbk9pIPDP6vT5KJ+E/eop1/KF6+mdP5nflnVe:rxl6pZbWIPDCvTa+3m/KFFmT9nV
TLSH	1F25129166E3DC12D8E987B102F0D2B65671AFCDE053C30FA9DDACDB7A0678568C1392

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	wqFy.exe
Full Name	wqFy.exe
EntryPoint	System.Void i3.eK::eK()
Scope Name	wqFy.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	wqFy
Assembly Version	1.6.1908.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	247
Main Method	System.Void i3.eK::eK()
Main IL Instruction Count	16
Main IL	br IL_000F: nop call System.Void NY.fc::VaMxiG() br IL_0028: nop nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() br IL_001C: nop nop <null> ret <null> nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) br IL_0005: call System.Void NY.fc::VaMxiG() nop <null> newobj System.Void ed.LC::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) br IL_001A: nop
Module Name	wqFy.exe
Full Name	wqFy.exe
EntryPoint	System.Void i3.eK::eK()
Scope Name	wqFy.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	wqFy
Assembly Version	1.6.1908.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	247
Main Method	System.Void i3.eK::eK()
Main IL Instruction Count	16
Main IL	br IL_000F: nop call System.Void NY.fc::VaMxiG() br IL_0028: nop nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() br IL_001C: nop nop <null> ret <null> nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) br IL_0005: call System.Void NY.fc::VaMxiG() nop <null> newobj System.Void ed.LC::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) br IL_001A: nop

Artefacts

Name0	Value
Embedded Resources	3
Suspicious Type Names (1-2 chars)	13

3b27840adc3d577a34eaa8bc3a987693 (1.05 MB)

3b27840adc3d577a34eaa8bc3a987693

PE Executable | MD5: 3b27840adc3d577a34eaa8bc3a987693 | Size: 1.05 MB | application/x-dosexec

PE Executable
|
MD5: 3b27840adc3d577a34eaa8bc3a987693
|
Size: 1.05 MB
|
application/x-dosexec