Deep Malware Analysis of Capital Sports KHI.PDF.exe | md5: a411ed156707afc86b2d76361f7063aa | Executable | PE (Portable Executable) | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.34

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	a411ed156707afc86b2d76361f7063aa
Sha1	423d955ba09f5193fad7ee635238ec10e3db4064
Sha256	78588988e4b33dd7fcbe40e35a529dc8ed6ba6f76355585e75b36acf31cd7f7a
Sha384	e35033ca4236c7d7629b5fe2805ad516736d6b53dbf1aeb8246f86be1df138d4be8433dec35570d9605ba743cd992dad
Sha512	1a6977f8cd066c1c919e7b564e0192131bfe607e66e33a42321bc20844b936d115a428da94677df5d870f77c3a65971d168d78cedc66b653d22a493fbac4348c
SSDeep	12288:ydlAXTR54i1gLU93EZpwJvOGBZrhAEOuoViPoahqLf3QnDg:ydqDR54BM0ZEvOGBZrSV2dGfkDg
TLSH	90E40151FE679803F55456B707A1E97972AA0DAD60C0C2763EF4EEEB79AD6001F23203

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Module Name	tjv.exe
Full Name	tjv.exe
EntryPoint	System.Void HoqueLtd.Program::Main()
Scope Name	tjv.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	tjv
Assembly Version	7.8.6.5
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	169
Main Method	System.Void HoqueLtd.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void HoqueLtd.HomePage::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`
Module Name	tjv.exe
Full Name	tjv.exe
EntryPoint	System.Void HoqueLtd.Program::Main()
Scope Name	tjv.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	tjv
Assembly Version	7.8.6.5
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	169
Main Method	System.Void HoqueLtd.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void HoqueLtd.HomePage::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`

PDB Path PATH

?huhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential