Suspicious
Suspect

PE Executable
MD5: 68dbb0ccec5ccf6b1f3b15b8f718e122
Size: 694.27 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 68dbb0ccec5ccf6b1f3b15b8f718e122
Sha1 0ce69959b1b1517a55b1bb0a6ba83f0ba2ad90e7
Sha256 32f152c9fe6debe129b961dcc4e158e2d0329de2793a15f26e8d4ed5bbe2ce62
Sha384 68e75f8a883e7e82a56258208b956ef86bda970da532e03ebc371f8f6f5e682c181b33cbbdc4e6bf71395f2cf476a162
Sha512 f0c9f660e0e3707023e0993b74e2de80113015068ff3e9a45825cc2eb1016cae1ddf08c0ef8e420281da226c07a133160adaad3e3c93ec1aae9087fcafb292fd
SSDeep 12288:xLUReJ56rb1VR9rwvO5ZLQzGsT+8jp87qnSv809HVbkzxvE:u8n6rtuO5ZLQbqmSxWzB
TLSH AEE412A02BACCB26E47657F614B2E27007702EAFA532D3165FD96CDFB515F204A107A3
68dbb0ccec5ccf6b1f3b15b8f718e122
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SlotMachine.SlotDisplay.resources
SlotMachine.Properties.Resources.resources
NH
[NBF]root.Data
fZVLBb
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: pJQueb.pdb
Module Name
pJQueb.exe
Full Name
pJQueb.exe
EntryPoint
System.Void SlotMachine.Program::Main()
Scope Name
pJQueb.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
pJQueb
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
374
Main Method
System.Void SlotMachine.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void SlotMachine.SlotDisplay::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
68dbb0ccec5ccf6b1f3b15b8f718e122
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SlotMachine.SlotDisplay.resources
SlotMachine.Properties.Resources.resources
NH
[NBF]root.Data
fZVLBb
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙