Suspicious
Suspect

PE Executable
MD5: c48b806b5553a48b2f73b88d714ce6ca
Size: 1.23 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 c48b806b5553a48b2f73b88d714ce6ca
Sha1 dc2a262813e753d396203cea6cb9c95e0c68825b
Sha256 6d583cacffa753561203ea70ca7dd3da996bdb0b6ef5b25aaef8eb01ae5c8326
Sha384 561d7cc249842d3c8883974e67192fe34a9442bad5511922bb2a7fa8ea99027ed56797c5ad7cbd395b0d6c2b350d5b1c
Sha512 96ac0eefc66911d6154049b2eba94536839744387ca10f7929addfd557199fb65f8bdb2caa009ad879a0d34cadac2e4882618a73453acad51c75fe50f34b7a71
SSDeep 24576:0GYImX67U1TGMIg2xHQOSx6vEZtgFfWs4BmNTyCWNQvGax:VqXuU1Tr2xwOZMtmWdBm8CW6vGU
TLSH 144522057396E902D9A11FF06870D77012356D9CBA21E2176EFFEDEFB928B102D85392
24 items
  • c48b806b5553a48b2f73b88d714ce6caSOS: 0.37
    • Structure
      • DosHeader
      • PE Header
      • Optional Header (x86)
      • Section Headers
        • .text
        • .rsrc
        • .reloc
    • Resources
      • RT_VERSION
        • ID:0001
          • ID:0
      • RT_MANIFEST
        • ID:0001
          • ID:0
    • .Net Resources
      • SudokuGen.Form1.resources
      • SudokuGen.Properties.Resources.resources
        • IO
          • [NBF]root.Data
        • TmRo
          • [NBF]root.Data
            • [NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: Ljsh.pdb
Module Name
Ljsh.exe
Full Name
Ljsh.exe
EntryPoint
System.Void SudokuGen.Program::Main()
Scope Name
Ljsh.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Ljsh
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
145
Main Method
System.Void SudokuGen.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void SudokuGen.Form1::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
24 items
  • c48b806b5553a48b2f73b88d714ce6caSOS: 0.37
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙