Suspicious
Suspect

8d4535311966d6e32e18de2cabffe4a5

PE Executable
MD5: 8d4535311966d6e32e18de2cabffe4a5
Size: 876.54 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 8d4535311966d6e32e18de2cabffe4a5
Sha1 e80e49168fb0dcdeb7fbfb9e640be6a4cc6378f5
Sha256 e30391464a63e304f33dc72ec39b2a19e6f722caa47157efa695945bef965953
Sha384 ee891d9156e5e113d33dc978b6022ade5869c56e9b2dbfde2df5aba11a3d23ccc1df655917d8e15f6d778bc644b27842
Sha512 0a6d370a3feb8d80fdad050a4cc6004e82ed604cce2a00d61dd48d6a108bc448906257cc9fd883c3e18556c2011d7b3978082dc9e491cb0ba92dff4230299431
SSDeep 12288:21U2iNKcry7wVrtaqegy3UpFgfVuuky389/hTB68pYeSnhlkx32iGvLe:n1Yc+70YqWR9o/hTBR+homiQe
TLSH B315E171386E8E22C46543F1613FFF7963E1DF882551D209CFD2AE9B782964D492B20B
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Contacts2025.AboutBox11111.resources
logoPictureBox.Image
[NBF]root.Data
[NBF]root.Data-preview.png
WhoWantToBeMillionaire.Form1.resources
$this.Icon
[NBF]root.IconData
NA
[NBF]root.Data
errorProvider1.TrayLocation
timer1.TrayLocation
timer2.TrayLocation
Contacts2025.Form1.resources
BtnNewContact.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Contacts2025.frmAddOrEdit.resources
Contacts2025.Properties.Resources.resources
F
[NBF]root.Data
[NBF]root.Data-preview.png
R__1_
[NBF]root.Data
[NBF]root.Data-preview.png
XCP
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: xJJ.pdb
Module Name
xJJ.exe
Full Name
xJJ.exe
EntryPoint
System.Void Contacts2025.Program::Main()
Scope Name
xJJ.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
xJJ
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
375
Main Method
System.Void Contacts2025.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void Contacts2025.Form1::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
xJJ.exe
Full Name
xJJ.exe
EntryPoint
System.Void Contacts2025.Program::Main()
Scope Name
xJJ.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
xJJ
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
375
Main Method
System.Void Contacts2025.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void Contacts2025.Form1::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Contacts2025.AboutBox11111.resources
logoPictureBox.Image
[NBF]root.Data
[NBF]root.Data-preview.png
WhoWantToBeMillionaire.Form1.resources
$this.Icon
[NBF]root.IconData
NA
[NBF]root.Data
errorProvider1.TrayLocation
timer1.TrayLocation
timer2.TrayLocation
Contacts2025.Form1.resources
BtnNewContact.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Contacts2025.frmAddOrEdit.resources
Contacts2025.Properties.Resources.resources
F
[NBF]root.Data
[NBF]root.Data-preview.png
R__1_
[NBF]root.Data
[NBF]root.Data-preview.png
XCP
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙