Suspicious
Suspect

116e658ef216b1abef1187a734ff6d76

PE Executable
MD5: 116e658ef216b1abef1187a734ff6d76
Size: 922.11 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
922.11 KB · 922,112 B
Hashes
MD5 116e658ef216b1abef1187a734ff6d76 Sha1 d0074fa2dad9075af5162db316175ee7741b62e6 Sha256 fcd0afb3357deff8b894fcf35dd75c90e08a0602fce699786aeff0bc9925bb50 Sha384 cef73d1b66d12609afe53c88ab2f5b97fde3538c920077fc86537a78f9bb13df54233b5bb264c516beadbb349858ef74 Sha512 39877c8bc00d461b6b15c853ddcbcc6acfaa21ead2291b92f278c5f7aed542291aaf5f9ef210b533bacecb2658335ea47e61c163805478b829fa97a664496b31 SSDeep 24576:YNGUNuA6gKEcs45sWX1/gqh5oBNELQPLs2D+cHGq3VFdAQ:IGUggKW4N3ojPcOGq3ZA TLSH 64150160239ACD02C6A70BF41971E3F417B89E48E821D3039EF6FEDB79697497914382
Detection
Symbol obfuscation
Medium
19 files
EXE116e658ef216b1abef1187a734ff6d76
Structure
BIN.Net Resources
BINCaveSystem.CaveForm.resources
BINCaveSystem.Properties.Resources.resources
BINDiff
DATA[NBF]root.Data
BINgUXG
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINrestart
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINrocket
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINstatus_error
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
uDSJ.exe
Full Name
uDSJ.exe
EntryPoint
System.Void CaveSystem.Program::Main()
Scope Name
uDSJ.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
uDSJ
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
282
Main Method
System.Void CaveSystem.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void CaveSystem.CaveForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
19 files
EXE116e658ef216b1abef1187a734ff6d76
Structure
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙