Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
c346c56f8c839f815becca2acfccca14
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
.Net Resources
CGLhh7DIXP5OgC5BIX.Z42Rbw9TBcYpyR9aeV
nX7C5KphK2jXp81hwF.4p8Ri05hsF8I83CGbE
Name Value
Module Name
RosAof6qh30kcHhIdkQan1OXVdCwr6rFUzYyNMU
Full Name
RosAof6qh30kcHhIdkQan1OXVdCwr6rFUzYyNMU
EntryPoint
System.Void Nj74IhFarSZ8gjL5RyZ.RgrtkGFmSvOhTZCPdt8::oL2qxfOUnp()
Scope Name
RosAof6qh30kcHhIdkQan1OXVdCwr6rFUzYyNMU
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
ZQZsyuMHY6J8vnNZZVoLdJ9
Assembly Version
6.2.7.2
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
63
Main Method
System.Void Nj74IhFarSZ8gjL5RyZ.RgrtkGFmSvOhTZCPdt8::oL2qxfOUnp()
Main IL Instruction Count
14
Main IL 
br.s IL_000B: ldc.i4.0
call <null>
ldnull <null>
ldc.i4.0 <null>
ldelem.ref <null>
pop <null>
ldc.i4.0 <null>
brtrue.s IL_0007: ldnull
call System.Void vcfTy8q3pvkdiVqdOFU.fYUiraqdFYTm4itNA9T::kLjw4iIsCLsZtxc4lksN0j()
nop <null>
ldsfld System.Object Nj74IhFarSZ8gjL5RyZ.RgrtkGFmSvOhTZCPdt8::bo5qIdPfHs
callvirt System.Void PIbVNwFdN8m44q2a2JY.MqGC10FbUZyQdwuHKER::oArJrNxkS7()
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙