Suspicious
Suspect

aad30e43426358bde6d73ef179021c60

PE Executable
|
MD5: aad30e43426358bde6d73ef179021c60
|
Size: 565.25 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
aad30e43426358bde6d73ef179021c60
Sha1
ccecd29ec13490d2d548dac93aae88a9ced3c9d0
Sha256
54a8b4c753e22ebf0f248088c4424393f31417b9d79e0dafe7bf573e6263240a
Sha384
b614e7e926d23d1964a076d5ac03e5b135548e2143ad28de71eb920070dbd5c7d4ff78535df7b0e4676b4bf975fb2416
Sha512
3b15516ee8b9169db7c5ad3c130a903ddb2bbe2f618ac81cf5fbdab0077daa74af7ed6dd5ebc3a9e9b3b0b69a144e6f08a8902c6ee620009c6eb84909b529ec4
SSDeep
12288:Ixa1/nkJsj+yWZoJwQ9JCWX7NeAw3U97VjGT2oy:ZFkJsgxk8DfUFVjbD
TLSH
84C4F218769ADB72D5EA07F40621E13213B6AD9DF421D3074EEAECFB781135838962C7

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
aad30e43426358bde6d73ef179021c60
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
 Value
Module Name

jIXC.exe
Full Name

jIXC.exe
EntryPoint

System.Void ModernAdapter.Program::Main()
Scope Name

jIXC.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

jIXC
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

617
Main Method

System.Void ModernAdapter.Program::Main()
Main IL Instruction Count

12
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> call System.Void ModernAdapter.Program::InitializeApplication() nop <null> newobj System.Void ModernAdapter.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Module Name

jIXC.exe
Full Name

jIXC.exe
EntryPoint

System.Void ModernAdapter.Program::Main()
Scope Name

jIXC.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

jIXC
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

617
Main Method

System.Void ModernAdapter.Program::Main()
Main IL Instruction Count

12
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> call System.Void ModernAdapter.Program::InitializeApplication() nop <null> newobj System.Void ModernAdapter.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
Embedded Resources

8
Suspicious Type Names (1-2 chars)

0
aad30e43426358bde6d73ef179021c60 (565.25 KB)
File Structure
aad30e43426358bde6d73ef179021c60
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
Embedded Resources

8

aad30e43426358bde6d73ef179021c60
Suspicious Type Names (1-2 chars)

0

aad30e43426358bde6d73ef179021c60
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙