Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: b1a031ea42ce7c7d3afc496f862cd155
Size: 14.34 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 b1a031ea42ce7c7d3afc496f862cd155
Sha1 92bd064212033d96c4453857e5dc78d5974850c6
Sha256 0e8f0fa023b588637fb33b951933a20d94ccb8a98f0e684fca92e07f216d87c6
Sha384 fe9b73d5ff2398071102bccdd44ae2723c6007404fbfccf7f5587d5f8e5088e73ba3324e849c3e7749611384a940374d
Sha512 24eb181c5b43fbb1de60250e755d15aaccfba791c28e3c4fcc051226f5bc9b105a34b6de629b1faa75b31b9eff1207b6a35e8421703c555a3fa8b1e15fd8fb89
SSDeep 384:i/VKFY/GpC99FCHxRWmZa6m2a2CfOaM8xKVheWGh:i/VSY+4RCRC6mGC3xKvG
TLSH C6523B0AF3DCAA62E5AE42341832031A73B1E16A9825D75E5CC840AD6F3738C17937F9
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: ?
Module Name
Megoossggooj.exe
Full Name
Megoossggooj.exe
EntryPoint
System.Void ԔԑŌÚԏËÿԕḬÅ.ÜԣӗÿⱫÛøД::Main()
Scope Name
Megoossggooj.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Megoossggooj
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.8
Total Strings
27
Main Method
System.Void ԔԑŌÚԏËÿԕḬÅ.ÜԣӗÿⱫÛøД::Main()
Main IL Instruction Count
3
Main IL
call System.Void ԔԑŌÚԏËÿԕḬÅ.ÜԣӗÿⱫÛøД::ŅⱫýԤҦ()
call System.Void ԔԑŌÚԏËÿԕḬÅ.ÜԣӗÿⱫÛøД::üøⱵĞ()
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙