Deep Malware Analysis of Capital Sports KHI.PDF.exe | md5: a411ed156707afc86b2d76361f7063aa | Executable | PE (Portable Executable) | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.34

PE Executable

MD5: a411ed156707afc86b2d76361f7063aa

Size: 681.98 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	a411ed156707afc86b2d76361f7063aa
Sha1	423d955ba09f5193fad7ee635238ec10e3db4064
Sha256	78588988e4b33dd7fcbe40e35a529dc8ed6ba6f76355585e75b36acf31cd7f7a
Sha384	e35033ca4236c7d7629b5fe2805ad516736d6b53dbf1aeb8246f86be1df138d4be8433dec35570d9605ba743cd992dad
Sha512	1a6977f8cd066c1c919e7b564e0192131bfe607e66e33a42321bc20844b936d115a428da94677df5d870f77c3a65971d168d78cedc66b653d22a493fbac4348c
SSDeep	12288:ydlAXTR54i1gLU93EZpwJvOGBZrhAEOuoViPoahqLf3QnDg:ydqDR54BM0ZEvOGBZrSV2dGfkDg
TLSH	90E40151FE679803F55456B707A1E97972AA0DAD60C0C2763EF4EEEB79AD6001F23203

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Module Name	tjv.exe
Full Name	tjv.exe
EntryPoint	System.Void HoqueLtd.Program::Main()
Scope Name	tjv.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	tjv
Assembly Version	7.8.6.5
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	169
Main Method	System.Void HoqueLtd.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void HoqueLtd.HomePage::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`
Module Name	tjv.exe
Full Name	tjv.exe
EntryPoint	System.Void HoqueLtd.Program::Main()
Scope Name	tjv.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	tjv
Assembly Version	7.8.6.5
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	169
Main Method	System.Void HoqueLtd.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void HoqueLtd.HomePage::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`

PDB Path PATH

?huhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PDB Path PATH

?huhuhuhu

Capital Sports KHI.PDF.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.