Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
78572c0f2259ac00176710d000bc49af
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0032
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
8jqKwf.g.resources
8jqKwf.Resources.resources
926a6214bf02bf.Resources.resources
fd1f93a40
[NBF]root.Data
fd1f93a41
[NBF]root.Data
fd1f93a410
[NBF]root.Data
fd1f93a411
[NBF]root.Data
fd1f93a412
[NBF]root.Data
fd1f93a413
[NBF]root.Data
fd1f93a414
[NBF]root.Data
fd1f93a415
[NBF]root.Data
fd1f93a416
[NBF]root.Data
fd1f93a417
[NBF]root.Data
fd1f93a418
[NBF]root.Data
fd1f93a419
[NBF]root.Data
fd1f93a42
[NBF]root.Data
fd1f93a420
[NBF]root.Data
fd1f93a421
[NBF]root.Data
fd1f93a422
[NBF]root.Data
fd1f93a423
[NBF]root.Data
fd1f93a43
[NBF]root.Data
fd1f93a44
[NBF]root.Data
fd1f93a45
[NBF]root.Data
fd1f93a46
[NBF]root.Data
fd1f93a47
[NBF]root.Data
fd1f93a48
[NBF]root.Data
fd1f93a49
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
8jqKwf
Full Name
8jqKwf
EntryPoint
System.Void 8jqKwf.Lj8tn4mYfoB::kj6MiGf57qz()
Scope Name
8jqKwf
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
8jqKwf
Assembly Version
2.5.38.255
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
693
Main Method
System.Void 8jqKwf.Lj8tn4mYfoB::kj6MiGf57qz()
Main IL Instruction Count
197
Main IL 
nop <null>
ldstr 2.1.0
stloc.0 <null>
nop <null>
call System.Boolean System.Environment::get_Is64BitProcess()
stloc.1 <null>
call System.Int32 System.Environment::get_ProcessorCount()
stloc.2 <null>
call System.String System.IO.Path::GetTempPath()
stloc.3 <null>
newobj System.Void System.Windows.Forms.Form::.ctor()
stloc.s V_4
ldc.i4.s 25
stloc.s V_5
ldloc.s V_5
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
newarr System.Object
stloc.s V_6
ldc.i4 310976284
box System.Int32
stloc.s V_7
ldsfld System.String 8jqKwf.Cdt5fL6n::or7JCdz36n
call System.String 8jqKwf.4xrFqT::xFn51a(System.String)
stloc.s V_8
ldloc.s V_6
ldc.i4.0 <null>
ldloc.s V_8
stelem.ref <null>
ldloc.s V_6
ldc.i4.1 <null>
ldloc.s V_7
callvirt System.String System.Object::ToString()
stelem.ref <null>
ldloc.s V_6
ldc.i4.2 <null>
ldloc.s V_6
ldc.i4.0 <null>
ldelem.ref <null>
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.Byte[] 8jqKwf.Dw4b1/1CfxGkc.9Gfri7sA::Sm0wb5yL4Gd(System.String)
stelem.ref <null>
ldloc.s V_6
ldc.i4.3 <null>
ldloc.s V_6
ldc.i4.2 <null>
ldelem.ref <null>
castclass System.Byte[]
ldloc.s V_7
call System.Int32 Microsoft.VisualBasic.CompilerServices.Conversions::ToInteger(System.Object)
call System.Object 8jqKwf.Lj8tn4mYfoB/gs6G8aCo.Njs1ci5X4eSfEx::5SjqCe_96Zzj(System.Byte[],System.Int32)
ldnull <null>
ldstr ToArray
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stelem.ref <null>
ldc.i4.4 <null>
newarr System.Object
dup <null>
ldc.i4.0 <null>
ldloc.s V_6
ldc.i4.3 <null>
ldelem.ref <null>
stelem.ref <null>
dup <null>
ldc.i4.1 <null>
ldtoken System.Reflection.Assembly
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Reflection.MethodInfo[] System.Type::GetMethods()
ldsfld System.Func`2<System.Reflection.MethodInfo,System.Boolean> 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::7Gmer
brfalse.s IL_00CB: ldsfld 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::bWm4e7
ldsfld System.Func`2<System.Reflection.MethodInfo,System.Boolean> 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::7Gmer
br.s IL_00E1: call System.Collections.Generic.IEnumerable`1<System.Reflection.MethodInfo> System.Linq.Enumerable::Where<System.Reflection.MethodInfo>(System.Collections.Generic.IEnumerable`1<System.Reflection.MethodInfo>,System.Func`2<System.Reflection.MethodInfo,System.Boolean>)
ldsfld 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::bWm4e7
ldftn System.Boolean 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::zZa9Ls5ka(System.Reflection.MethodInfo)
newobj System.Void System.Func`2<System.Reflection.MethodInfo,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Reflection.MethodInfo,System.Boolean> 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::7Gmer
call System.Collections.Generic.IEnumerable`1<System.Reflection.MethodInfo> System.Linq.Enumerable::Where<System.Reflection.MethodInfo>(System.Collections.Generic.IEnumerable`1<System.Reflection.MethodInfo>,System.Func`2<System.Reflection.MethodInfo,System.Boolean>)
stelem.ref <null>
dup <null>
ldc.i4.2 <null>
newobj System.Void System.Object::.ctor()
stelem.ref <null>
dup <null>
ldc.i4.3 <null>
newobj System.Void System.Object::.ctor()
stelem.ref <null>
stloc.s V_9
ldloc.s V_9
ldc.i4.1 <null>
ldelem.ref <null>
castclass System.Collections.IEnumerable
callvirt System.Collections.IEnumerator System.Collections.IEnumerable::GetEnumerator()
stloc.s V_11
br.s IL_0153: ldloc.s V_11
ldloc.s V_11
callvirt System.Object System.Collections.IEnumerator::get_Current()
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stloc.s V_12
nop <null>
ldloc.s V_9
ldc.i4.2 <null>
ldloc.s V_12
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
ldloc.s V_9
ldc.i4.0 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
call System.Object 8jqKwf.Lj8tn4mYfoB::bRc7B5noeDp9J(System.Object)
castclass System.Object[]
call System.Object 8jqKwf.Lj8tn4mYfoB::nx2Z9Szkgo4Wd(System.Object,System.Object[])
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stelem.ref <null>
leave.s IL_0160: leave.s IL_0179
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0151: nop
nop <null>
nop <null>
ldloc.s V_11
callvirt System.Boolean System.Collections.IEnumerator::MoveNext()
stloc.s V_13
ldloc.s V_13
brtrue.s IL_010B: ldloc.s V_11
leave.s IL_0179: ldloc.s V_9
ldloc.s V_11
isinst System.IDisposable
brfalse.s IL_0178: endfinally
ldloc.s V_11
isinst System.IDisposable
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
ldloc.s V_9
ldc.i4.2 <null>
ldelem.ref <null>
ldnull <null>
ldstr GetTypes
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldc.i4.1 <null>
newarr System.Object
dup <null>
ldc.i4.0 <null>
ldc.i4.s 25
box System.Int32
stelem.ref <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateIndexGet(System.Object,System.Object[],System.String[])
ldnull <null>
ldstr GetMethods
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldc.i4.1 <null>
newarr System.Object
dup <null>
ldc.i4.0 <null>
ldc.i4.0 <null>
box System.Int32
stelem.ref <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateIndexGet(System.Object,System.Object[],System.String[])
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stloc.s V_10
ldloc.s V_10
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
call System.Object 8jqKwf.Lj8tn4mYfoB/pEe2N3fgpD.Nzb8tE4ap1mJiL::9znZsyH4R(System.Object)
pop <null>
leave.s IL_01FD: nop
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_14
nop <null>
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_01FD: nop
nop <null>
ret <null>
Module Name
8jqKwf
Full Name
8jqKwf
EntryPoint
System.Void 8jqKwf.Lj8tn4mYfoB::kj6MiGf57qz()
Scope Name
8jqKwf
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
8jqKwf
Assembly Version
2.5.38.255
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
693
Main Method
System.Void 8jqKwf.Lj8tn4mYfoB::kj6MiGf57qz()
Main IL Instruction Count
197
Main IL 
nop <null>
ldstr 2.1.0
stloc.0 <null>
nop <null>
call System.Boolean System.Environment::get_Is64BitProcess()
stloc.1 <null>
call System.Int32 System.Environment::get_ProcessorCount()
stloc.2 <null>
call System.String System.IO.Path::GetTempPath()
stloc.3 <null>
newobj System.Void System.Windows.Forms.Form::.ctor()
stloc.s V_4
ldc.i4.s 25
stloc.s V_5
ldloc.s V_5
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
newarr System.Object
stloc.s V_6
ldc.i4 310976284
box System.Int32
stloc.s V_7
ldsfld System.String 8jqKwf.Cdt5fL6n::or7JCdz36n
call System.String 8jqKwf.4xrFqT::xFn51a(System.String)
stloc.s V_8
ldloc.s V_6
ldc.i4.0 <null>
ldloc.s V_8
stelem.ref <null>
ldloc.s V_6
ldc.i4.1 <null>
ldloc.s V_7
callvirt System.String System.Object::ToString()
stelem.ref <null>
ldloc.s V_6
ldc.i4.2 <null>
ldloc.s V_6
ldc.i4.0 <null>
ldelem.ref <null>
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.Byte[] 8jqKwf.Dw4b1/1CfxGkc.9Gfri7sA::Sm0wb5yL4Gd(System.String)
stelem.ref <null>
ldloc.s V_6
ldc.i4.3 <null>
ldloc.s V_6
ldc.i4.2 <null>
ldelem.ref <null>
castclass System.Byte[]
ldloc.s V_7
call System.Int32 Microsoft.VisualBasic.CompilerServices.Conversions::ToInteger(System.Object)
call System.Object 8jqKwf.Lj8tn4mYfoB/gs6G8aCo.Njs1ci5X4eSfEx::5SjqCe_96Zzj(System.Byte[],System.Int32)
ldnull <null>
ldstr ToArray
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stelem.ref <null>
ldc.i4.4 <null>
newarr System.Object
dup <null>
ldc.i4.0 <null>
ldloc.s V_6
ldc.i4.3 <null>
ldelem.ref <null>
stelem.ref <null>
dup <null>
ldc.i4.1 <null>
ldtoken System.Reflection.Assembly
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
call System.Reflection.MethodInfo[] System.Type::GetMethods()
ldsfld System.Func`2<System.Reflection.MethodInfo,System.Boolean> 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::7Gmer
brfalse.s IL_00CB: ldsfld 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::bWm4e7
ldsfld System.Func`2<System.Reflection.MethodInfo,System.Boolean> 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::7Gmer
br.s IL_00E1: call System.Collections.Generic.IEnumerable`1<System.Reflection.MethodInfo> System.Linq.Enumerable::Where<System.Reflection.MethodInfo>(System.Collections.Generic.IEnumerable`1<System.Reflection.MethodInfo>,System.Func`2<System.Reflection.MethodInfo,System.Boolean>)
ldsfld 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::bWm4e7
ldftn System.Boolean 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::zZa9Ls5ka(System.Reflection.MethodInfo)
newobj System.Void System.Func`2<System.Reflection.MethodInfo,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Reflection.MethodInfo,System.Boolean> 8jqKwf.Lj8tn4mYfoB/2FdysjK4q6p.3Mnzmq1PmJb80::7Gmer
call System.Collections.Generic.IEnumerable`1<System.Reflection.MethodInfo> System.Linq.Enumerable::Where<System.Reflection.MethodInfo>(System.Collections.Generic.IEnumerable`1<System.Reflection.MethodInfo>,System.Func`2<System.Reflection.MethodInfo,System.Boolean>)
stelem.ref <null>
dup <null>
ldc.i4.2 <null>
newobj System.Void System.Object::.ctor()
stelem.ref <null>
dup <null>
ldc.i4.3 <null>
newobj System.Void System.Object::.ctor()
stelem.ref <null>
stloc.s V_9
ldloc.s V_9
ldc.i4.1 <null>
ldelem.ref <null>
castclass System.Collections.IEnumerable
callvirt System.Collections.IEnumerator System.Collections.IEnumerable::GetEnumerator()
stloc.s V_11
br.s IL_0153: ldloc.s V_11
ldloc.s V_11
callvirt System.Object System.Collections.IEnumerator::get_Current()
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stloc.s V_12
nop <null>
ldloc.s V_9
ldc.i4.2 <null>
ldloc.s V_12
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
ldloc.s V_9
ldc.i4.0 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
call System.Object 8jqKwf.Lj8tn4mYfoB::bRc7B5noeDp9J(System.Object)
castclass System.Object[]
call System.Object 8jqKwf.Lj8tn4mYfoB::nx2Z9Szkgo4Wd(System.Object,System.Object[])
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stelem.ref <null>
leave.s IL_0160: leave.s IL_0179
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0151: nop
nop <null>
nop <null>
ldloc.s V_11
callvirt System.Boolean System.Collections.IEnumerator::MoveNext()
stloc.s V_13
ldloc.s V_13
brtrue.s IL_010B: ldloc.s V_11
leave.s IL_0179: ldloc.s V_9
ldloc.s V_11
isinst System.IDisposable
brfalse.s IL_0178: endfinally
ldloc.s V_11
isinst System.IDisposable
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
ldloc.s V_9
ldc.i4.2 <null>
ldelem.ref <null>
ldnull <null>
ldstr GetTypes
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldc.i4.1 <null>
newarr System.Object
dup <null>
ldc.i4.0 <null>
ldc.i4.s 25
box System.Int32
stelem.ref <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateIndexGet(System.Object,System.Object[],System.String[])
ldnull <null>
ldstr GetMethods
ldc.i4.0 <null>
newarr System.Object
ldnull <null>
ldnull <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[])
ldc.i4.1 <null>
newarr System.Object
dup <null>
ldc.i4.0 <null>
ldc.i4.0 <null>
box System.Int32
stelem.ref <null>
ldnull <null>
call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateIndexGet(System.Object,System.Object[],System.String[])
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stloc.s V_10
ldloc.s V_10
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
call System.Object 8jqKwf.Lj8tn4mYfoB/pEe2N3fgpD.Nzb8tE4ap1mJiL::9znZsyH4R(System.Object)
pop <null>
leave.s IL_01FD: nop
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_14
nop <null>
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_01FD: nop
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙