Deep Malware Analysis of 73268d9a4bf927991e9a6bfadd126ffd | md5: 73268d9a4bf927991e9a6bfadd126ffd | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.38

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	73268d9a4bf927991e9a6bfadd126ffd
Sha1	8c437dbabdb4feb2ffcbb36bc24fdbf97f932209
Sha256	c6792922c5d98b83a6f89ae037a9ab9c83085f173e7542e09f9fff143ddd42b5
Sha384	4016d735f7f8ec8f32be10e3c4103a649a64e17fd66cc990ac1d4cc489507bc83a00e638c9ae03b3ead8acca21e3daf0
Sha512	be69b10c81b64e60184a936b98c85af48c167faa811834087f2d85169c510a864b5d42c4e9ef740d273ec53aa6a55f820bb1d6b481812570f8e4c569bc882682
SSDeep	24576:czQnfw5/MFsA4+8QDx14WFcMeqH2Q3b2qsJ3:czQnfeMFsx6iWFWOl2qsJ3
TLSH	8E25230EA95253A0C7BC1F7EE901A2C4867BCB2255B2F7DA58F459B90FA47CCC44F486

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	qOfc.exe
Full Name	qOfc.exe
EntryPoint	System.Void Phm.Time.x::Main()
Scope Name	qOfc.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	qOfc
Assembly Version	7.5.3.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	2
Main Method	System.Void Phm.Time.x::Main()
Main IL Instruction Count	9
Main IL	`call System.Void Phm.Time.Properties.Resources::Ⴓ() newobj System.Void WinFormsJogoDaVelha.Form1::.ctor() ldc.i4 957 ldc.i4 968 call System.Void Phm.Time.Timetable::Ⴅ<System.Windows.Forms.Form>(System.Windows.Forms.Form,System.Int32,System.Char) ret <null> ldtoken System.Void Phm.Time.x::Main() pop <null> ret <null>`
Module Name	qOfc.exe
Full Name	qOfc.exe
EntryPoint	System.Void Phm.Time.x::Main()
Scope Name	qOfc.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	qOfc
Assembly Version	7.5.3.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	2
Main Method	System.Void Phm.Time.x::Main()
Main IL Instruction Count	9
Main IL	`call System.Void Phm.Time.Properties.Resources::Ⴓ() newobj System.Void WinFormsJogoDaVelha.Form1::.ctor() ldc.i4 957 ldc.i4 968 call System.Void Phm.Time.Timetable::Ⴅ<System.Windows.Forms.Form>(System.Windows.Forms.Form,System.Int32,System.Char) ret <null> ldtoken System.Void Phm.Time.x::Main() pop <null> ret <null>`