Suspicious
Suspect

0d2a82da3049ab07bebfc704c51dd6ac

PE Executable
MD5: 0d2a82da3049ab07bebfc704c51dd6ac
Size: 800.77 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 0d2a82da3049ab07bebfc704c51dd6ac
Sha1 dd329dad985709c2ee5e638d5f246b6161478c9b
Sha256 f6f945f98e910a514c6d1e16c407e9c19138e138a65e4b2eaebe97815276805c
Sha384 7daaceb33e93304058431e50ffa99c4d00c3d5536921b5a2d6810cee3d3126580f26082df2e233768e7e06975974c8e4
Sha512 95c11b09d055bf6c18e07647b52f9e8a951cfc0ce6d71eb07c61294a822ee6bc4b119709f39bdc99ef4679dec252236e75f39b5d0ab714e03075792c78eda2f3
SSDeep 12288:sTJVWHuSJMcQWA8eQOVRjvZ4ukj014ND+8qTvi362z7GmPu9XfyRcWJGk5y:QJVWOS24AhzRjx6VtjeQnh29XfyQk5
TLSH CF05F11563AAEB02F4B69FF01870C7700778BD9EB930D20A8ED66CEB7835B519594393
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ErrorAnalyzer.Forms.MainForm.resources
ErrorAnalyzer.Properties.Resources.resources
Coloring
[NBF]root.Data
mfWG
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: lVXu.pdb
Module Name
lVXu.exe
Full Name
lVXu.exe
EntryPoint
System.Void ErrorAnalyzer.Program::Main()
Scope Name
lVXu.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
lVXu
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
438
Main Method
System.Void ErrorAnalyzer.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void ErrorAnalyzer.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ErrorAnalyzer.Forms.MainForm.resources
ErrorAnalyzer.Properties.Resources.resources
Coloring
[NBF]root.Data
mfWG
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙