Deep Malware Analysis of 11afd585c49bfc2e5f52b4adc0f6f6de | md5: 11afd585c49bfc2e5f52b4adc0f6f6de | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.37

PE Executable

MD5: 11afd585c49bfc2e5f52b4adc0f6f6de

Size: 748.03 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	11afd585c49bfc2e5f52b4adc0f6f6de
Sha1	3532f5f5d39c0bb1e90ef8354fccd673a59a9f5f
Sha256	9051c1be2c95d7e2e53fee0434385bc2c3561369a210a6698d3b2ac3240f34db
Sha384	9534ac1307339f5012e54f44c75c4a6d100bfa00ed53d40a7dd2df690772520840038d983a487dbd0b74e6387655337f
Sha512	96ab2c2bee5f3fdc09315a02b220a4ab04b1795918fbead65fffc497d434b9c3350c8b2738ca3283483688311a0517d9683952d1ec2f4e55abaea2e3947406ed
SSDeep	12288:hWjsBA1/eXyrA0Bi6zZ3BjLsBHn4GJpEIXden76ie3P/Cgk2UFkfn2og:YjYImX6HBnNREBHdJpk6ieEsJ
TLSH	57F402163756D800D5E24FF05930D3B40778AE4AB906D31B9EFBACEFB839B545A492C2

PeID

Microsoft Visual C++ v6.0 DLL

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: BdGF.pdb
Module Name	BdGF.exe
Full Name	BdGF.exe
EntryPoint	System.Void SudokuGen.Program::Main()
Scope Name	BdGF.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	BdGF
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	145
Main Method	System.Void SudokuGen.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SudokuGen.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.