Malicious
Malicious

c9721f0caa9548bdeec5f3436d8a529e

PE Executable
MD5: c9721f0caa9548bdeec5f3436d8a529e
Size: 1.01 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very low

Hash
Hash Value
MD5
c9721f0caa9548bdeec5f3436d8a529e
Sha1
32ecce1a19baaed6fd4bc0851e8b859e87837de6
Sha256
b782aabf9cd513691eb4b496e8d22b7f3224bf69286c7c4df7f0d29bc3a667f6
Sha384
f8661cb3f011e01558521430bb4e7cd7fdaffbcbbcc4aa88c99244ae019f09270190b4fa193555d1d07f81cfef363bcb
Sha512
ed4e59da4c93d818fcd95aa812cba80a663e5abca56bddbe9cc442c25c312227d29e021b3ecd28f0da3162701c5f36a43c5d28933df1cf388329d7329174f36c
SSDeep
24576:9pxVb6EUPYOA9Hojy6ip/NSFo4ItrVmN5q4ZXb4sLaGtxr5wwYUZ8J66B:9pxl6bAFHo26oIFot5mN5q4J4BWr5lY8
TLSH
AF2512A02693ED13D4E453B509A5C6721339AFCAE423C38F55DE9EEFFA42B8014943D2

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
uPIq.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
progressBar1.Modifiers
$this.Language
$this.GridSize
SecureMode.Properties.Resources.resources
vgx
BfFI
Informations
Name
Value
Module Name

uPIq.exe

Full Name

uPIq.exe

EntryPoint

System.Void j6.uq::uq()

Scope Name

uPIq.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

uPIq

Assembly Version

1.6.1908.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

247

Main Method

System.Void j6.uq::uq()

Main IL Instruction Count

16

Main IL

br IL_0021: nop nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) br IL_002C: call System.Void IT.l3::cKmpPS() nop <null> newobj System.Void U7.kP::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) br IL_0036: nop nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() br IL_0005: nop call System.Void IT.l3::cKmpPS() br IL_0011: nop nop <null> ret <null>

Module Name

uPIq.exe

Full Name

uPIq.exe

EntryPoint

System.Void j6.uq::uq()

Scope Name

uPIq.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

uPIq

Assembly Version

1.6.1908.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

247

Main Method

System.Void j6.uq::uq()

Main IL Instruction Count

16

Main IL

br IL_0021: nop nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) br IL_002C: call System.Void IT.l3::cKmpPS() nop <null> newobj System.Void U7.kP::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) br IL_0036: nop nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() br IL_0005: nop call System.Void IT.l3::cKmpPS() br IL_0011: nop nop <null> ret <null>

Artefacts
Name
Value
Embedded Resources
3huhuhuhu
Suspicious Type Names (1-2 chars)
1huhuhuhu
Full artefact values (URLs, paths, registry keys…) are available with Essential.
Unlock with Essential
c9721f0caa9548bdeec5f3436d8a529e (1.01 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
uPIq.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
progressBar1.Modifiers
$this.Language
$this.GridSize
SecureMode.Properties.Resources.resources
vgx
BfFI
Characteristics
No malware configuration were found at this point.
Artefacts
Name
Value Location
Embedded Resources
3huhuhuhu

c9721f0caa9548bdeec5f3436d8a529e

Suspicious Type Names (1-2 chars)
1huhuhuhu

c9721f0caa9548bdeec5f3436d8a529e

Full artefact values (URLs, paths, registry keys…) are available with Essential.
Unlock with Essential
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙