Deep Malware Analysis of 59854e147c55e5a0d047550c3f6e8951 | md5: 59854e147c55e5a0d047550c3f6e8951 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.44

PE Executable

MD5: 59854e147c55e5a0d047550c3f6e8951

Size: 578.56 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Medium

MD5	59854e147c55e5a0d047550c3f6e8951
Sha1	bdb8d7475b51022fa488d43c5e02d3004e7c4a34
Sha256	900498d3f7fb82fa595230e9aa40f2a77b94b13c1bdb7dd017fcfeb8a549e23e
Sha384	7eefcce877c5b85eeac342cf807e94d7851dfb0522a5bde1e0baf5d02598de4cf28267db7f4e3cb95e5f982b030297c7
Sha512	c970f420088baee76d56862f3a7f7218350389342b558847c941d4bd04cc15bb0c81d21ad2b17e8869032c6fff4bf2e9db83bbc20ad697d95a8f014de6d3c29e
SSDeep	12288:zTFvGz8han2Km7XxhB1UFNE5sUa/rcoPIYviYf:FYm7Xxhvkr1/pd
TLSH	F1C41275150BFD15C8DA2BB518B2E3F8927C4E88B412D717DBF97CDB3C2B205A9442A2

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: twGS.pdb
Module Name	twGS.exe
Full Name	twGS.exe
EntryPoint	System.Void QuantumSimulator.Program::Main()
Scope Name	twGS.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	twGS
Assembly Version	7.4.1.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	63
Main Method	System.Void QuantumSimulator.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void QuantumSimulator.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Module Name	twGS.exe
Full Name	twGS.exe
EntryPoint	System.Void QuantumSimulator.Program::Main()
Scope Name	twGS.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	twGS
Assembly Version	7.4.1.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	63
Main Method	System.Void QuantumSimulator.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void QuantumSimulator.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.