Suspect
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Armadillo v4.x
Symbol obfuscation
Medium
18 files
EXE7430304b5156ea8e86b57470ea0e1573
Structure
P7B[Authenticode]_a32ace3a.p7b
BINResources
BIN.Net Resources
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0xBF000 size 13832 bytes |
| Info | PDB Path: qGq.pdb |
| Module Name | qGq.exe |
| Full Name | qGq.exe |
| EntryPoint | System.Void SmartNetworkAnalyzer.Program::Main() |
| Scope Name | qGq.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | qGq |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 243 |
| Main Method | System.Void SmartNetworkAnalyzer.Program::Main() |
| Main IL Instruction Count | 26 |
| Main IL | |