Suspicious
Suspect

PE Executable
MD5: b94c1c9af9fe2d18a8f026626fd94e89
Size: 1.54 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 b94c1c9af9fe2d18a8f026626fd94e89
Sha1 6a2bf083998a14c97d388e0f10c8762fa99f8001
Sha256 5333387c203448cd76fc8af3f75f9aabbaa764c929d308d304829d0440bc64e0
Sha384 77a4312dd833d5504d572a94ec7027d18c2febf7122eae8aea1dab7ac2300fe58512e2ca8865f69bf02277ae14b70084
Sha512 6c20344ae43278c9ca7bedf2c2e1b25093d619eb6c8c6150fd5a63cf6d959eb4d258222cc300f7c323fe32b0befd4f18f23244e0ccb037bf3768bfaa77945e68
SSDeep 24576:F13WOS2eo8g0fDC1sN11AuZ5GaJvPn2JTsZjw:FBWOSjo8fC1sr1VGa9uaZj
TLSH 8965E0F1B351C815E4F709F97A24C67031A7FDAD99A0C20D1ADABD9F74B3381109AA4B
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
b94c1c9af9fe2d18a8f026626fd94e89
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ErrorAnalyzer.Forms.MainForm.resources
ErrorAnalyzer.Properties.Resources.resources
Coloring
[NBF]root.Data
Ogji
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: Jgnm.pdb
Module Name
Jgnm.exe
Full Name
Jgnm.exe
EntryPoint
System.Void ErrorAnalyzer.Program::Main()
Scope Name
Jgnm.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Jgnm
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
438
Main Method
System.Void ErrorAnalyzer.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void ErrorAnalyzer.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
Jgnm.exe
Full Name
Jgnm.exe
EntryPoint
System.Void ErrorAnalyzer.Program::Main()
Scope Name
Jgnm.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Jgnm
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
438
Main Method
System.Void ErrorAnalyzer.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void ErrorAnalyzer.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
b94c1c9af9fe2d18a8f026626fd94e89
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ErrorAnalyzer.Forms.MainForm.resources
ErrorAnalyzer.Properties.Resources.resources
Coloring
[NBF]root.Data
Ogji
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙