Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableHQR data fileMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Low
1 malicious · 5 files
EXEcc229ad1912a9fad436fa106e6ab75de
Structure
Name Value
Module Name
Mjyfeg.exe
Full Name
Mjyfeg.exe
EntryPoint
System.Void BitMiracle.Collections.IntegratedDictionary::AddControllableDictionary()
Scope Name
Mjyfeg.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Mjyfeg
Assembly Version
1.0.2127.5856
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1210
Main Method
System.Void BitMiracle.Collections.IntegratedDictionary::AddControllableDictionary()
Main IL Instruction Count
100
Main IL 
ldc.i4 1
stloc V_3
br IL_000E: ldloc V_3
ldloc V_3
switch dnlib.DotNet.Emit.Instruction[]
br IL_0028: nop
nop <null>
ldloc.s V_2
callvirt System.String BitMiracle.Conversion.ConverterReporter::AccessScopeField()
brfalse IL_00FC: leave IL_01BC
ldc.i4 3
br IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
ldloc V_4
switch dnlib.DotNet.Emit.Instruction[]
br IL_005D: ldloc.s V_1
ldloc.s V_1
call System.Int32 System.Linq.Enumerable::Count<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>)
ldc.i4.0 <null>
ble IL_00FC: leave IL_01BC
ldc.i4 2
br IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
ldloc.s V_1
call System.Type System.Linq.Enumerable::First<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>)
ldstr YAOhddbxQ
ldc.i4 256
ldnull <null>
ldnull <null>
ldnull <null>
callvirt System.Object System.Type::InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[])
pop <null>
ldc.i4 1
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_26a44cb5d9a049e8a44106bb9b250393
brtrue IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
pop <null>
ldc.i4 1
br IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
ldloc.s V_2
callvirt System.Type[] BitMiracle.Conversion.ConverterReporter::ControlConverter()
ldsfld System.Func`2<System.Type,System.Boolean> BitMiracle.Collections.IntegratedDictionary/<>c::_MixedEmitter
dup <null>
brtrue IL_00D6: call System.Collections.Generic.IEnumerable`1<System.Type> System.Linq.Enumerable::Where<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>,System.Func`2<System.Type,System.Boolean>)
pop <null>
ldsfld BitMiracle.Collections.IntegratedDictionary/<>c BitMiracle.Collections.IntegratedDictionary/<>c::emitterRecommender
ldftn System.Boolean BitMiracle.Collections.IntegratedDictionary/<>c::CompileIntegratedClient(System.Type)
newobj System.Void System.Func`2<System.Type,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Type,System.Boolean> BitMiracle.Collections.IntegratedDictionary/<>c::_MixedEmitter
call System.Collections.Generic.IEnumerable`1<System.Type> System.Linq.Enumerable::Where<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>,System.Func`2<System.Type,System.Boolean>)
stloc.s V_1
ldc.i4 0
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_6e6304985c7e45e48a785d304f871310
brfalse IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
pop <null>
ldc.i4 0
br IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
leave IL_01BC: ret
ldloc.s V_2
brtrue IL_012C: ldloc.s V_2
ldc.i4 2
br IL_0116: switch(IL_012C,IL_0176,IL_0152)
ldloc V_0
switch dnlib.DotNet.Emit.Instruction[]
br IL_012C: ldloc.s V_2
ldloc.s V_2
callvirt System.Void System.IDisposable::Dispose()
ldc.i4 1
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_8ee0ddb654b544e88e3c2c76301a2a2f
brtrue IL_0116: switch(IL_012C,IL_0176,IL_0152)
pop <null>
ldc.i4 0
br IL_0116: switch(IL_012C,IL_0176,IL_0152)
br IL_0176: endfinally
ldc.i4 0
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_a9687739aabd46d6aba7c6d53800a97d
brfalse IL_0116: switch(IL_012C,IL_0176,IL_0152)
pop <null>
ldc.i4 0
br IL_0116: switch(IL_012C,IL_0176,IL_0152)
endfinally <null>
ldc.i4 2
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_be00241830714c1e820c4562ff356f27
brtrue IL_0012: switch(IL_0028,IL_0196,IL_01BC)
pop <null>
ldc.i4 2
br IL_0012: switch(IL_0028,IL_0196,IL_01BC)
newobj System.Void BitMiracle.Conversion.ConverterReporter::.ctor()
stloc.s V_2
ldc.i4 0
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_0dfb228d66834618b7bc56c92f5c0c48
brfalse IL_0012: switch(IL_0028,IL_0196,IL_01BC)
pop <null>
ldc.i4 0
br IL_0012: switch(IL_0028,IL_0196,IL_01BC)
ret <null>
Module Name
Mjyfeg.exe
Full Name
Mjyfeg.exe
EntryPoint
System.Void BitMiracle.Collections.IntegratedDictionary::AddControllableDictionary()
Scope Name
Mjyfeg.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Mjyfeg
Assembly Version
1.0.2127.5856
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1210
Main Method
System.Void BitMiracle.Collections.IntegratedDictionary::AddControllableDictionary()
Main IL Instruction Count
100
Main IL 
ldc.i4 1
stloc V_3
br IL_000E: ldloc V_3
ldloc V_3
switch dnlib.DotNet.Emit.Instruction[]
br IL_0028: nop
nop <null>
ldloc.s V_2
callvirt System.String BitMiracle.Conversion.ConverterReporter::AccessScopeField()
brfalse IL_00FC: leave IL_01BC
ldc.i4 3
br IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
ldloc V_4
switch dnlib.DotNet.Emit.Instruction[]
br IL_005D: ldloc.s V_1
ldloc.s V_1
call System.Int32 System.Linq.Enumerable::Count<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>)
ldc.i4.0 <null>
ble IL_00FC: leave IL_01BC
ldc.i4 2
br IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
ldloc.s V_1
call System.Type System.Linq.Enumerable::First<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>)
ldstr YAOhddbxQ
ldc.i4 256
ldnull <null>
ldnull <null>
ldnull <null>
callvirt System.Object System.Type::InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[])
pop <null>
ldc.i4 1
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_26a44cb5d9a049e8a44106bb9b250393
brtrue IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
pop <null>
ldc.i4 1
br IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
ldloc.s V_2
callvirt System.Type[] BitMiracle.Conversion.ConverterReporter::ControlConverter()
ldsfld System.Func`2<System.Type,System.Boolean> BitMiracle.Collections.IntegratedDictionary/<>c::_MixedEmitter
dup <null>
brtrue IL_00D6: call System.Collections.Generic.IEnumerable`1<System.Type> System.Linq.Enumerable::Where<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>,System.Func`2<System.Type,System.Boolean>)
pop <null>
ldsfld BitMiracle.Collections.IntegratedDictionary/<>c BitMiracle.Collections.IntegratedDictionary/<>c::emitterRecommender
ldftn System.Boolean BitMiracle.Collections.IntegratedDictionary/<>c::CompileIntegratedClient(System.Type)
newobj System.Void System.Func`2<System.Type,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.Type,System.Boolean> BitMiracle.Collections.IntegratedDictionary/<>c::_MixedEmitter
call System.Collections.Generic.IEnumerable`1<System.Type> System.Linq.Enumerable::Where<System.Type>(System.Collections.Generic.IEnumerable`1<System.Type>,System.Func`2<System.Type,System.Boolean>)
stloc.s V_1
ldc.i4 0
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_6e6304985c7e45e48a785d304f871310
brfalse IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
pop <null>
ldc.i4 0
br IL_0043: switch(IL_005D,IL_00FC,IL_0074,IL_00AD)
leave IL_01BC: ret
ldloc.s V_2
brtrue IL_012C: ldloc.s V_2
ldc.i4 2
br IL_0116: switch(IL_012C,IL_0176,IL_0152)
ldloc V_0
switch dnlib.DotNet.Emit.Instruction[]
br IL_012C: ldloc.s V_2
ldloc.s V_2
callvirt System.Void System.IDisposable::Dispose()
ldc.i4 1
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_8ee0ddb654b544e88e3c2c76301a2a2f
brtrue IL_0116: switch(IL_012C,IL_0176,IL_0152)
pop <null>
ldc.i4 0
br IL_0116: switch(IL_012C,IL_0176,IL_0152)
br IL_0176: endfinally
ldc.i4 0
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_a9687739aabd46d6aba7c6d53800a97d
brfalse IL_0116: switch(IL_012C,IL_0176,IL_0152)
pop <null>
ldc.i4 0
br IL_0116: switch(IL_012C,IL_0176,IL_0152)
endfinally <null>
ldc.i4 2
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_be00241830714c1e820c4562ff356f27
brtrue IL_0012: switch(IL_0028,IL_0196,IL_01BC)
pop <null>
ldc.i4 2
br IL_0012: switch(IL_0028,IL_0196,IL_01BC)
newobj System.Void BitMiracle.Conversion.ConverterReporter::.ctor()
stloc.s V_2
ldc.i4 0
ldsfld <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b} <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_7b53a43c965943e89c85bc2b3af3945d
ldfld System.Int32 <Module>{f0917cbb-ca33-4ecd-a0c3-64fc94c9c47b}::m_0dfb228d66834618b7bc56c92f5c0c48
brfalse IL_0012: switch(IL_0028,IL_0196,IL_01BC)
pop <null>
ldc.i4 0
br IL_0012: switch(IL_0028,IL_0196,IL_01BC)
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙