957b5d83f81452efc9536cba1cf35b1c

PE Executable

MD5: 957b5d83f81452efc9536cba1cf35b1c

Size: 950.78 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very low

MD5	957b5d83f81452efc9536cba1cf35b1c
Sha1	0876e836eeaf8ab40f9ddfa84b3b017ede782817
Sha256	cd6ead626c8b5df6f95887fba78fd19cd506716eff119c050f8083bb8b7efe87
Sha384	04ab2f06a53c10e9b27e507304d806f0bbb4dcfd49526bb56fe5e4e31b4f6503d21d6428f9c4107ca5b4c0b2260ed37d
Sha512	685c9b5dba3ab6dd4bb2daa437691f2ddfd6d0b1bd3294ac1ef9556eec0ada0a899a8038e545d3e4a00d56531d20d5d05f8aab5c08949bf3641cd0b535903588
SSDeep	12288:BaxqmnOnZrYVCYB7bYQ+53jOY6pgY4U8A3Olxe6xpcmZDbHbpzYL8cI3RTd70Vrg:Q8pqG3jCpwU8QOdxdmL8RB570dUmc5x
TLSH	5B15DF7031AD9863DAB956F04450E17533A76ECF282AD2DA4DC6BDDB7CE4BC01B90A43

Name	Value
Module Name	iZAp.exe
Full Name	iZAp.exe
EntryPoint	System.Void QLDTDD_FPT.Program::Main()
Scope Name	iZAp.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	iZAp
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	974
Main Method	System.Void QLDTDD_FPT.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void QLDTDD_FPT.Mainform::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`

PDB Path PATH

iZhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

No malware configuration was found at this point.

PDB Path PATH

iZhuhuhuhu

957b5d83f81452efc9536cba1cf35b1c

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

You must be signed in to view YARA rules.