Malicious PE Executable analysis – 8dd6324d57fb

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Very high

1 malicious · 13 files

EXE8dd6324d57fbde1a12e1b6c16415a1fc

Structure

BINResources

BIN.Net Resources

Name	Value
Module Name	R科aキU#}
Full Name	R科aキU#}
EntryPoint	`System.Void ††† †††††”.††† †††††“::††† †††††•(System.String[])`
Scope Name	R科aキU#}
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	OkiIcMICZUd4ynf
Assembly Version	10.0.26100.3624
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	42
Main Method	`System.Void ††† †††††”.††† †††††“::††† †††††•(System.String[])`
Main IL Instruction Count	19
Main IL	ldc.i4.0 <null> newarr System.Byte ldsfld ††† †††™—‘ ††† †††™—‘::††† †††™—’ call System.Reflection.Assembly ††† †††™—‘::††† †††™—(System.Byte[],††† †††™—‘) pop <null> leave IL_0046: ret pop <null> ldsfld ††† †††™—“ ††† †††™—“::††† †††™—” call System.Void ††† †††™—“::††† †††™—(††† †††™—“) ldsfld System.Byte[] 伝7n$牡要 Bdpフ能望:1V瑞7ϒnz:影3viィ玉aG瑞,AN系4P市TC::††† ††††‡† ldsfld System.Byte[] 伝7n$牡要 Bdpフ能望:1V瑞7ϒnz:影3viィ玉aG瑞,AN系4P市TC::††† ††††‡‡ ldsfld ††† †††™—• ††† †††™—•::††† †††™—– call System.Byte[] ††† †††™—•::††† †††™—(System.Byte[],System.Byte[],††† †††™—•) stloc.0 <null> ldloc.0 <null> ldsfld ††† †††™—— ††† †††™——::††† †††™—˜ call System.Void ††† †††™——::††† †††™—(System.Byte[],††† †††™——) leave IL_0046: ret ret <null>
Module Name	R科aキU#}
Full Name	R科aキU#}
EntryPoint	`System.Void ††† †††††”.††† †††††“::††† †††††•(System.String[])`
Scope Name	R科aキU#}
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	OkiIcMICZUd4ynf
Assembly Version	10.0.26100.3624
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	42
Main Method	`System.Void ††† †††††”.††† †††††“::††† †††††•(System.String[])`
Main IL Instruction Count	19
Main IL	ldc.i4.0 <null> newarr System.Byte ldsfld ††† †††™—‘ ††† †††™—‘::††† †††™—’ call System.Reflection.Assembly ††† †††™—‘::††† †††™—(System.Byte[],††† †††™—‘) pop <null> leave IL_0046: ret pop <null> ldsfld ††† †††™—“ ††† †††™—“::††† †††™—” call System.Void ††† †††™—“::††† †††™—(††† †††™—“) ldsfld System.Byte[] 伝7n$牡要 Bdpフ能望:1V瑞7ϒnz:影3viィ玉aG瑞,AN系4P市TC::††† ††††‡† ldsfld System.Byte[] 伝7n$牡要 Bdpフ能望:1V瑞7ϒnz:影3viィ玉aG瑞,AN系4P市TC::††† ††††‡‡ ldsfld ††† †††™—• ††† †††™—•::††† †††™—– call System.Byte[] ††† †††™—•::††† †††™—(System.Byte[],System.Byte[],††† †††™—•) stloc.0 <null> ldloc.0 <null> ldsfld ††† †††™—— ††† †††™——::††† †††™—˜ call System.Void ††† †††™——::††† †††™—(System.Byte[],††† †††™——) leave IL_0046: ret ret <null>