Deep Malware Analysis of fb94495ee6a993917ae0e5076c5e7471 | md5: fb94495ee6a993917ae0e5076c5e7471 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.33

PE Executable

MD5: fb94495ee6a993917ae0e5076c5e7471

Size: 749.57 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	fb94495ee6a993917ae0e5076c5e7471
Sha1	432b5959e5252e915a16912f33367cf5fb144629
Sha256	57993a7af1eb33d9ca444b7c030d73fe67c32dec183ebc27b68ad1092c104b33
Sha384	4bf4aea59fe33feb846fc6ce26ec83d05933d42875f03e9a456c61d3237c1a94105543d29878e0210703691776a8ef50
Sha512	6b0782c427cad0f526bae48b519d24e40176931fec4a052f3510cebef1356cbc2675eebd78f67822f8c5f4639e729f934ecdb5e29d013809990b590bd1a85e9f
SSDeep	12288:SW8VQKovC1Iv0hYoywYDi4aqhKfThsrDJBggGG+n3KuTx:F8uKyC1IshY2xZfihBp4
TLSH	49F402617368E525D4E60BF20022D2385BB97E8C6562D34A9FCDBCEF3931B869508773

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: ?
Module Name	jSJ.exe
Full Name	jSJ.exe
EntryPoint	System.Void Assignment_1_Agenda.Program::Main()
Scope Name	jSJ.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	jSJ
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	432
Main Method	System.Void Assignment_1_Agenda.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Assignment_1_Agenda.AgendaActiv::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Module Name	jSJ.exe
Full Name	jSJ.exe
EntryPoint	System.Void Assignment_1_Agenda.Program::Main()
Scope Name	jSJ.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	jSJ
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	432
Main Method	System.Void Assignment_1_Agenda.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Assignment_1_Agenda.AgendaActiv::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.