c9721f0caa9548bdeec5f3436d8a529e

PE Executable
|
MD5: c9721f0caa9548bdeec5f3436d8a529e
|
Size: 1.01 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	c9721f0caa9548bdeec5f3436d8a529e
Sha1	32ecce1a19baaed6fd4bc0851e8b859e87837de6
Sha256	b782aabf9cd513691eb4b496e8d22b7f3224bf69286c7c4df7f0d29bc3a667f6
Sha384	f8661cb3f011e01558521430bb4e7cd7fdaffbcbbcc4aa88c99244ae019f09270190b4fa193555d1d07f81cfef363bcb
Sha512	ed4e59da4c93d818fcd95aa812cba80a663e5abca56bddbe9cc442c25c312227d29e021b3ecd28f0da3162701c5f36a43c5d28933df1cf388329d7329174f36c
SSDeep	24576:9pxVb6EUPYOA9Hojy6ip/NSFo4ItrVmN5q4ZXb4sLaGtxr5wwYUZ8J66B:9pxl6bAFHo26oIFot5mN5q4J4BWr5lY8
TLSH	AF2512A02693ED13D4E453B509A5C6721339AFCAE423C38F55DE9EEFFA42B8014943D2

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	uPIq.exe
Full Name	uPIq.exe
EntryPoint	System.Void j6.uq::uq()
Scope Name	uPIq.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	uPIq
Assembly Version	1.6.1908.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	247
Main Method	System.Void j6.uq::uq()
Main IL Instruction Count	16
Main IL	br IL_0021: nop nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) br IL_002C: call System.Void IT.l3::cKmpPS() nop <null> newobj System.Void U7.kP::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) br IL_0036: nop nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() br IL_0005: nop call System.Void IT.l3::cKmpPS() br IL_0011: nop nop <null> ret <null>
Module Name	uPIq.exe
Full Name	uPIq.exe
EntryPoint	System.Void j6.uq::uq()
Scope Name	uPIq.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	uPIq
Assembly Version	1.6.1908.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	247
Main Method	System.Void j6.uq::uq()
Main IL Instruction Count	16
Main IL	br IL_0021: nop nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) br IL_002C: call System.Void IT.l3::cKmpPS() nop <null> newobj System.Void U7.kP::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) br IL_0036: nop nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() br IL_0005: nop call System.Void IT.l3::cKmpPS() br IL_0011: nop nop <null> ret <null>

Artefacts

Name0	Value
Embedded Resources	3
Suspicious Type Names (1-2 chars)	13

c9721f0caa9548bdeec5f3436d8a529e (1.01 MB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
Embedded Resources	3	c9721f0caa9548bdeec5f3436d8a529e
Suspicious Type Names (1-2 chars)	13	c9721f0caa9548bdeec5f3436d8a529e

You must be signed in to post a comment.

c9721f0caa9548bdeec5f3436d8a529e

PE Executable | MD5: c9721f0caa9548bdeec5f3436d8a529e | Size: 1.01 MB | application/x-dosexec

PE Executable
|
MD5: c9721f0caa9548bdeec5f3436d8a529e
|
Size: 1.01 MB
|
application/x-dosexec