Malicious PE Executable analysis – 969505140165

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Very high

1 malicious · 13 files

EXE969505140165f0a33c192ad200916668

Structure

BINResources

BIN.Net Resources

Name	Value
Module Name	Q 玉マ%6マ
Full Name	Q 玉マ%6マ
EntryPoint	`System.Void 望dp瑞=瑞伝f _2l影立$9M望\|.命Ѫ科キ_通グ路伝谷{ 命テ$J;9$::††† †††††“(System.String[])`
Scope Name	Q 玉マ%6マ
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	lkoWopihA2to7Be
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	42
Main Method	`System.Void 望dp瑞=瑞伝f _2l影立$9M望\|.命Ѫ科キ_通グ路伝谷{ 命テ$J;9$::††† †††††“(System.String[])`
Main IL Instruction Count	19
Main IL	ldc.i4.0 <null> newarr System.Byte ldsfld ††† †††–Œ† ††† †††–Œ†::††† †††–Œ‡ call System.Reflection.Assembly ††† †††–Œ†::††† †††–‹ž(System.Byte[],††† †††–Œ†) pop <null> leave IL_0046: ret pop <null> ldsfld ††† †††–Œˆ ††† †††–Œˆ::††† †††–Œ‰ call System.Void ††† †††–Œˆ::††† †††–‹ž(††† †††–Œˆ) ldsfld System.Byte[] り!o<w大N$hO大ササt人8X6ϒ阪丹通ナN\|科:m6i鶐OG$GN命bD鶐::††† †††††› ldsfld System.Byte[] り!o<w大N$hO大ササt人8X6ϒ阪丹通ナN\|科:m6i鶐OG$GN命bD鶐::††† †††††œ ldsfld ††† †††–ŒŠ ††† †††–ŒŠ::††† †††–Œ‹ call System.Byte[] ††† †††–ŒŠ::††† †††–‹ž(System.Byte[],System.Byte[],††† †††–ŒŠ) stloc.0 <null> ldloc.0 <null> ldsfld ††† †††–ŒŒ ††† †††–ŒŒ::††† †††–Œ call System.Void ††† †††–ŒŒ::††† †††–‹ž(System.Byte[],††† †††–ŒŒ) leave IL_0046: ret ret <null>
Module Name	Q 玉マ%6マ
Full Name	Q 玉マ%6マ
EntryPoint	`System.Void 望dp瑞=瑞伝f _2l影立$9M望\|.命Ѫ科キ_通グ路伝谷{ 命テ$J;9$::††† †††††“(System.String[])`
Scope Name	Q 玉マ%6マ
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	lkoWopihA2to7Be
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	42
Main Method	`System.Void 望dp瑞=瑞伝f _2l影立$9M望\|.命Ѫ科キ_通グ路伝谷{ 命テ$J;9$::††† †††††“(System.String[])`
Main IL Instruction Count	19
Main IL	ldc.i4.0 <null> newarr System.Byte ldsfld ††† †††–Œ† ††† †††–Œ†::††† †††–Œ‡ call System.Reflection.Assembly ††† †††–Œ†::††† †††–‹ž(System.Byte[],††† †††–Œ†) pop <null> leave IL_0046: ret pop <null> ldsfld ††† †††–Œˆ ††† †††–Œˆ::††† †††–Œ‰ call System.Void ††† †††–Œˆ::††† †††–‹ž(††† †††–Œˆ) ldsfld System.Byte[] り!o<w大N$hO大ササt人8X6ϒ阪丹通ナN\|科:m6i鶐OG$GN命bD鶐::††† †††††› ldsfld System.Byte[] り!o<w大N$hO大ササt人8X6ϒ阪丹通ナN\|科:m6i鶐OG$GN命bD鶐::††† †††††œ ldsfld ††† †††–ŒŠ ††† †††–ŒŠ::††† †††–Œ‹ call System.Byte[] ††† †††–ŒŠ::††† †††–‹ž(System.Byte[],System.Byte[],††† †††–ŒŠ) stloc.0 <null> ldloc.0 <null> ldsfld ††† †††–ŒŒ ††† †††–ŒŒ::††† †††–Œ call System.Void ††† †††–ŒŒ::††† †††–‹ž(System.Byte[],††† †††–ŒŒ) leave IL_0046: ret ret <null>