Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
PeID
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
48e1fdaf7662517c4e0f968966d4d7b0
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
lfwhUWZlmFnGhDYPudAJ.Resources.resources
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
lfwhUWZlmFnGhDYPudAJ.exe
Full Name
lfwhUWZlmFnGhDYPudAJ.exe
EntryPoint
System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Main()
Scope Name
lfwhUWZlmFnGhDYPudAJ.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
lfwhUWZlmFnGhDYPudAJ
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
1479
Main Method
System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Main()
Main IL Instruction Count
160
Main IL 
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::U�߂�Ԝ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::˨-�ë�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::«ٚیϒA()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::ɮAױƟ뜸()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::뫆䇹޹皍�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Ωƌջ븤�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::�鈇-�؜()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Օ븤恁ޤ޻()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::꼺ӥʭݶZ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::콪Ц̧�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::מc츠᳼�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::�Rɩôå()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::�ŚΑşջ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::�恁޻뫆c()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::հΠܪ�ׁ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::޸ƌׁ—Օ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::ӛӤֵŎŔ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Ԝᔖל׃œ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Юٗ-B�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ľ�鈇Ɯ�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�şŁɛٷ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�ɛӚŎӓ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Αג‰ִK()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ӚӺ츠^�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ӻ�εҏɇ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ҡľ�ʤ޹()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ЅԌRƟ�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::츠ƌ�ٚ콪()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::B،�Ŵ㹃()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::یג—z«()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::츠לę鈟ٷ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ɛیˤ�j()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ʭג�ɩҢ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::᳼ިܣבܣ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ŏiƌ�ޤ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Uˤۨ�鈇()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ꓞ�΅뜸У()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�ݝ�թל()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::сήʪڿٵ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::tWڿ޸O()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ѕȩ̄ߟŁ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::⥤չ盀꾯ﾭ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::؝Ц׉�ľ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::iųܪׁņ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::̲߻ٚӓų()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�Uթۚک()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�ٕ@鈟�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ī߻Ų㹃恁()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ִņ븤հƚ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ǎŔޗ�䇹()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ɵ븤��Ω()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::«Ī콪åή()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::��ӥ�Ò()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ò�˳�蠺()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::^�şΑ�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ӓױņ�Ɯ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ٵЮ���()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::հ盀ӓ߂B()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�ב�ĂÒ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�m�ɢ�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ôA2䇹̀()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ٕmٕ쐬̆()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::׃ٵŁ퓜ņ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�Ӻٕ֏�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::¾ٚک«Ϙ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�޴嵱ʪ㹃()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Մųzʓٷ()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::&�m΅()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::ҟεZ�ҏ()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::ʪٷǎ콪&()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::�츠Bܣﾭ()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::丐˳Օٗ�()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::ŧִӤʤک()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::��t쐬ܣ()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::Ųɛ޴B泮()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::m�Ӥ،¾()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::iٚٚå—()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Ң똛Թ泮ִ()
nop <null>
call System.Void System.Windows.Forms.Application::Run()
nop <null>
ret <null>
Module Name
lfwhUWZlmFnGhDYPudAJ.exe
Full Name
lfwhUWZlmFnGhDYPudAJ.exe
EntryPoint
System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Main()
Scope Name
lfwhUWZlmFnGhDYPudAJ.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
lfwhUWZlmFnGhDYPudAJ
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
1479
Main Method
System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Main()
Main IL Instruction Count
160
Main IL 
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::U�߂�Ԝ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::˨-�ë�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::«ٚیϒA()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::ɮAױƟ뜸()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::뫆䇹޹皍�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Ωƌջ븤�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::�鈇-�؜()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Օ븤恁ޤ޻()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::꼺ӥʭݶZ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::콪Ц̧�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::מc츠᳼�()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::�Rɩôå()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::�ŚΑşջ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::�恁޻뫆c()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::հΠܪ�ׁ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::޸ƌׁ—Օ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::ӛӤֵŎŔ()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Ԝᔖל׃œ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Юٗ-B�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ľ�鈇Ɯ�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�şŁɛٷ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�ɛӚŎӓ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Αג‰ִK()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ӚӺ츠^�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ӻ�εҏɇ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ҡľ�ʤ޹()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ЅԌRƟ�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::츠ƌ�ٚ콪()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::B،�Ŵ㹃()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::یג—z«()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::츠לę鈟ٷ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ɛیˤ�j()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ʭג�ɩҢ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::᳼ިܣבܣ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ŏiƌ�ޤ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Uˤۨ�鈇()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ꓞ�΅뜸У()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�ݝ�թל()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::сήʪڿٵ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::tWڿ޸O()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ѕȩ̄ߟŁ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::⥤չ盀꾯ﾭ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::؝Ц׉�ľ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::iųܪׁņ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::̲߻ٚӓų()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�Uթۚک()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�ٕ@鈟�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ī߻Ų㹃恁()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ִņ븤հƚ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ǎŔޗ�䇹()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ɵ븤��Ω()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::«Ī콪åή()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::��ӥ�Ò()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Ò�˳�蠺()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::^�şΑ�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ӓױņ�Ɯ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ٵЮ���()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::հ盀ӓ߂B()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�ב�ĂÒ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�m�ɢ�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ôA2䇹̀()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::ٕmٕ쐬̆()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::׃ٵŁ퓜ņ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�Ӻٕ֏�()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::¾ٚک«Ϙ()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::�޴嵱ʪ㹃()
nop <null>
call System.Void ņᔖUגε.Z¾�Αϫ::Մųzʓٷ()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::&�m΅()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::ҟεZ�ҏ()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::ʪٷǎ콪&()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::�츠Bܣﾭ()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::丐˳Օٗ�()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::ŧִӤʤک()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::��t쐬ܣ()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::Ųɛ޴B泮()
nop <null>
call System.Void ҟӛс𝄖.�㠰ɛیҢ::m�Ӥ،¾()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::iٚٚå—()
nop <null>
call System.Void ᔖĪ؉⛊̲.Jٚεٚ�::Ң똛Թ泮ִ()
nop <null>
call System.Void System.Windows.Forms.Application::Run()
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙