Deep Malware Analysis of 42c3244cdf0f63c215b8159c951fea6a | md5: 42c3244cdf0f63c215b8159c951fea6a | Executable | PE (Portable Executable) | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.34

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	42c3244cdf0f63c215b8159c951fea6a
Sha1	ef629db680ebcfd5b015f2057e60a2f4062552b1
Sha256	c9ce53fa50e1e0abf00366fc843f48353c25f21f4522a3c8f71cde705f20acea
Sha384	54b5b0b3daac50d0292dc2dbdf5270866cbb363d20a7c2842bdd54f101bf25a885763382183618b6ccd5d316533b672e
Sha512	bb7cd5c35d33053a3d016951a89ea107ccc07e04c9e47c8f18224b0a4e2191754c7a3b187cfd95c43eee437088f887f26012b4b1aa97aadc55a05e3c7e3b8b52
SSDeep	12288:/NH4zFyU4Ec06HdDyx7rayv2mmQLltC0+PG+YtCekeK:/NYzJPc06Hue1mLltC1G+ACe
TLSH	9CF40128EE23E502F41463770761EA7872A45DBD91C1C6B27EF4EEDBB16E6040F63252

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Module Name	jxl.exe
Full Name	jxl.exe
EntryPoint	System.Void HoqueLtd.Program::Main()
Scope Name	jxl.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	jxl
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	169
Main Method	System.Void HoqueLtd.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void HoqueLtd.HomePage::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`
Module Name	jxl.exe
Full Name	jxl.exe
EntryPoint	System.Void HoqueLtd.Program::Main()
Scope Name	jxl.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	jxl
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	169
Main Method	System.Void HoqueLtd.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void HoqueLtd.HomePage::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`

PDB Path PATH

?huhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential