Suspicious
Suspect

09c6f63fe410248459404cd208603dfc

PE Executable
MD5: 09c6f63fe410248459404cd208603dfc
Size: 928.26 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
928.26 KB · 928,256 B
First seen
2026-09-10 10:45 · one month ago
Last seen
2026-09-10 10:45 · one month ago
Last analysis
2026-09-10 10:45 · one month ago
Hashes
MD5 09c6f63fe410248459404cd208603dfc Sha1 5c9e54f3095cb6bdc4998a3038339f8902b252e0 Sha256 1ccf47d19e5181c626bf6ad2bad6e95051a3281e9234b3202906bbd8aadd79a4 Sha384 52d8bd399661892a238d736610b2dac95c43c384cef2958a48a8dbc037721cffeb5296d6773ada5b92ad759cfad5a8e3 Sha512 1505f5968e432e6ad9c9a90b687f6c124be2b81cfc9064d94467c5ee127cce12810e2539c68028f01897f06c4a0fba4db5f40d1943b7bb6188c9fc087f4d3036 SSDeep 12288:jyRpqi82cgRulrvLrt2kxSxT10bHhj7/n0yrjqQdbCrB1GEBg:GRS28v3QkUX0bBj7vq8b9Z TLSH 4415E0742A04D981D9964BBFD820E2F437B86DB5D830C2078ADBBDF7783675418E42B6
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Medium
12 files
EXE09c6f63fe410248459404cd208603dfc
Structure
BIN.Net Resources
BINCoralReefApp.Properties.Resources.resources
BINKare
DATA[NBF]root.Data
BINqnQn
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINCoralReefApp.StockForm.resources
ICON$this.Icon
BIN[NBF]root.IconData
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
otnm.exe
Full Name
otnm.exe
EntryPoint
System.Void CoralReefApp.Program::Main()
Scope Name
otnm.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
otnm
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
243
Main Method
System.Void CoralReefApp.Program::Main()
Main IL Instruction Count
12
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
call System.Void CoralReefApp.Program::InitialisiereDatenSet()
nop <null>
newobj System.Void CoralReefApp.ReefForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
Module Name
otnm.exe
Full Name
otnm.exe
EntryPoint
System.Void CoralReefApp.Program::Main()
Scope Name
otnm.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
otnm
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
243
Main Method
System.Void CoralReefApp.Program::Main()
Main IL Instruction Count
12
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
call System.Void CoralReefApp.Program::InitialisiereDatenSet()
nop <null>
newobj System.Void CoralReefApp.ReefForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
12 files
EXE09c6f63fe410248459404cd208603dfc
Structure
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙