Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5: c346c56f8c839f815becca2acfccca14
Size: 1.7 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 c346c56f8c839f815becca2acfccca14
Sha1 75a19b3a266424cf7b81d3c00914a355b10dd3d1
Sha256 ad8a9a7b26fe9302ae52ff26fbb84efbb129f28aa37c5de62c7a04905bee32f9
Sha384 b2d5b78120568efa36079eb4606c76c00e9f61894d5c82c026661eeb8c2f076aa77cd1065788cc8373337b9b818205f7
Sha512 ada238c1b235502c1eac289af9d910181e807f2061f74caba5669342b170e7a03b4c6ae116c1aeb6c5f28a4bb7f637b87996d0309a7d40ee62b5108af961f9b0
SSDeep 24576:KUManoGojyGz3d+SdtP73clEuwRalmsVE4x5HzAUs7s7xjh/PZnf4ZAmK0Iq3Lc:Kza6jpdJVDcGHAssVFlsgNWW0T3
TLSH DA759D06BE44CE91F0191233C3EF454847B4A9516AA6E32B7DBA37AD15123A73C0DEDB
c346c56f8c839f815becca2acfccca14
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
.Net Resources
CGLhh7DIXP5OgC5BIX.Z42Rbw9TBcYpyR9aeV
nX7C5KphK2jXp81hwF.4p8Ri05hsF8I83CGbE
Name Value
Module Name
RosAof6qh30kcHhIdkQan1OXVdCwr6rFUzYyNMU
Full Name
RosAof6qh30kcHhIdkQan1OXVdCwr6rFUzYyNMU
EntryPoint
System.Void Nj74IhFarSZ8gjL5RyZ.RgrtkGFmSvOhTZCPdt8::oL2qxfOUnp()
Scope Name
RosAof6qh30kcHhIdkQan1OXVdCwr6rFUzYyNMU
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
ZQZsyuMHY6J8vnNZZVoLdJ9
Assembly Version
6.2.7.2
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
63
Main Method
System.Void Nj74IhFarSZ8gjL5RyZ.RgrtkGFmSvOhTZCPdt8::oL2qxfOUnp()
Main IL Instruction Count
14
Main IL 
br.s IL_000B: ldc.i4.0
call <null>
ldnull <null>
ldc.i4.0 <null>
ldelem.ref <null>
pop <null>
ldc.i4.0 <null>
brtrue.s IL_0007: ldnull
call System.Void vcfTy8q3pvkdiVqdOFU.fYUiraqdFYTm4itNA9T::kLjw4iIsCLsZtxc4lksN0j()
nop <null>
ldsfld System.Object Nj74IhFarSZ8gjL5RyZ.RgrtkGFmSvOhTZCPdt8::bo5qIdPfHs
callvirt System.Void PIbVNwFdN8m44q2a2JY.MqGC10FbUZyQdwuHKER::oArJrNxkS7()
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙