fbff18e6704e268e2d733c82065f16c2

PE Executable
|
MD5: fbff18e6704e268e2d733c82065f16c2
|
Size: 1.01 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	fbff18e6704e268e2d733c82065f16c2
Sha1	788e65592e4a555aecadedaa6e70b484d1a1d9b3
Sha256	f2fe8f1407a521f600d14b437640224c73ab0e616f5a0ce419b9f0c0c9076dc6
Sha384	22c130aca29375773f8fd4affc135a15991e520fcd84135e6f76368bdcd6406a4760c9a1f176da330dd791c21fbebcfd
Sha512	a77f45487ca05fb2407ba192b3a800c8a2a1a6fedd26f664da983e1de2d247fb82d2b90d8d0ad238d9fec75bacd951dfc5f45d3aeed7f16d24e8a39ed3f23178
SSDeep	24576:mxVb6S7WAOUS9XN9YeLwHH14mA/ICLwq:mxl6dfdNWeLwHHGwY
TLSH	C025129072D3E822E4908BB109B4E2B243795ECFE423D38799EE5DD7B9027C525E5782

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	qHop.exe
Full Name	qHop.exe
EntryPoint	System.Void G9.ol::ol()
Scope Name	qHop.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	qHop
Assembly Version	1.6.1908.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	247
Main Method	System.Void G9.ol::ol()
Main IL Instruction Count	16
Main IL	br IL_0011: nop nop <null> ret <null> call System.Void Ub.bd::plv6V7() br IL_0028: nop nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() br IL_001C: nop nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) br IL_0007: call System.Void Ub.bd::plv6V7() nop <null> newobj System.Void a0.U5::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) br IL_0005: nop
Module Name	qHop.exe
Full Name	qHop.exe
EntryPoint	System.Void G9.ol::ol()
Scope Name	qHop.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	qHop
Assembly Version	1.6.1908.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	247
Main Method	System.Void G9.ol::ol()
Main IL Instruction Count	16
Main IL	br IL_0011: nop nop <null> ret <null> call System.Void Ub.bd::plv6V7() br IL_0028: nop nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() br IL_001C: nop nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) br IL_0007: call System.Void Ub.bd::plv6V7() nop <null> newobj System.Void a0.U5::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) br IL_0005: nop

Artefacts

Name0	Value
Embedded Resources	3
Suspicious Type Names (1-2 chars)	14

fbff18e6704e268e2d733c82065f16c2 (1.01 MB)

fbff18e6704e268e2d733c82065f16c2

PE Executable | MD5: fbff18e6704e268e2d733c82065f16c2 | Size: 1.01 MB | application/x-dosexec

PE Executable
|
MD5: fbff18e6704e268e2d733c82065f16c2
|
Size: 1.01 MB
|
application/x-dosexec