0ab8080fb2028181d7241e824d569cf2

PE Executable

MD5: 0ab8080fb2028181d7241e824d569cf2

Size: 935.94 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	0ab8080fb2028181d7241e824d569cf2
Sha1	ea3fd1dbcc5800814033fae89859a62973bfc6cc
Sha256	a0aaff2946ba2bf57f5e94c081bf289a8ddb7f2edee21ba0be9796c769946f76
Sha384	0550731f3346c63905fb491a444d8a1024e77b79f56c9d745fb6d957a09ce482666bf6d9af7d9a27b28613f1dda1ec0c
Sha512	0221c684cbd91c8ad5f4565d5591c88431b0118251d81412b507795e75c894ca96d307dff1357f5cfcafb93efb976aed0abb8658235130d3c075c8c10adcceed
SSDeep	24576:aR8EIDoc1Gz2baGiBn5of/UFmueqhXMaA/ngyJIMLl+ZB:MDID/C2sCf2mueevA/gyJIUU
TLSH	6715F114335ECA12C4A957F41D30E6B807B4AD6DA421D3078EEAFCEF793AB5069142E7

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Module Name	NFLG.exe
Full Name	NFLG.exe
EntryPoint	System.Void SalesWinApp.Program::Main()
Scope Name	NFLG.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	NFLG
Assembly Version	4.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	402
Info	PE Detect: PeReader OK (file layout)
Main Method	System.Void SalesWinApp.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SalesWinApp.frmLogin::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\LIlRHeRINU\src\obj\Debug\NFLG.pdb

No malware configuration was found at this point.

You must be signed in to view YARA rules.