Deep Malware Analysis of cc38769ded7b2c6959c3199c84f8db91 | md5: cc38769ded7b2c6959c3199c84f8db91 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.45

PE Executable

MD5: cc38769ded7b2c6959c3199c84f8db91

Size: 961.54 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Medium

MD5	cc38769ded7b2c6959c3199c84f8db91
Sha1	c6a20ac9d09fd0e9b40ee3a73690c1e3b0e607fe
Sha256	0874e7b9ba2653207308bad8a2efca4a30690413a4eaeace15a6b4d601a5bb94
Sha384	fe91248a8faffb9c95cd180320f26394f14eedfb40321df9a2d3c12bb422747124ceac8caa4814486817352a1f903e50
Sha512	fa384106a5352e6461bf148cf022bd5899378143a06c5c68a622568d626e69a435c88f92094e350850c3b3d28d5791556d91939404f47916b812115627ec3f56
SSDeep	12288:cvCTweSGWJGgmi+eMptpwMTj5EQu7FdkQ8aRv991J7HGfn1aYOegWvO1qIKMrX:cXmi+dpthRu70uVIOe0fP
TLSH	2515128423D6FE16D4A62FF80C70D37913B5AD59F526E3070EEA6CEB782AB011950297

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: jpsn.pdb
Module Name	jpsn.exe
Full Name	jpsn.exe
EntryPoint	System.Void QueryFormat.Program::Main()
Scope Name	jpsn.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	jpsn
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	638
Main Method	System.Void QueryFormat.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void QueryFormat.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Module Name	jpsn.exe
Full Name	jpsn.exe
EntryPoint	System.Void QueryFormat.Program::Main()
Scope Name	jpsn.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	jpsn
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	638
Main Method	System.Void QueryFormat.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void QueryFormat.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.