Suspicious
Suspect

14873f091ec6e4b5cd510745741f246e

PE Executable
MD5: 14873f091ec6e4b5cd510745741f246e
Size: 604.16 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 14873f091ec6e4b5cd510745741f246e
Sha1 763e4abf5dc140cdb702eeaa2a3d075670bc73d6
Sha256 17161ca9b95f7b2550a69cc0f2fce78ae93ae27869f6652fd54cbc2bbec68b38
Sha384 131f0127613673cda0c1674d5ff5c91b5e8b03e3e4ef61315fc9fc655d6df0ace0039ccd57c731505a8702e8e10a43f3
Sha512 dc06650224fb39e778e6b55be490e20a1b86a54da9a2b7d1110bb2e66e0c8f344c16a462b0d339701d62bb0e00f82f4875646a4f97cf3b48b38ff31e37806531
SSDeep 12288:NHQXd7n4P0bJA5dbJNl2TcILTERU+1NsylLjQOr3avNuu:y9nJA5db0TTl+PpdnU0
TLSH 55D4E004326BDE02D5A55BF008B1E3B857B86E9DA931C3074EFBBEEB7439705A540297
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
FogStation.Properties.Resources.resources
Btlj
[NBF]root.Data
NBWB
[NBF]root.Data
[NBF]root.Data-preview.png
icons8_customer_26
[NBF]root.Data
[NBF]root.Data-preview.png
icons8_graph_report_50
[NBF]root.Data
[NBF]root.Data-preview.png
icons8_package_64
[NBF]root.Data
[NBF]root.Data-preview.png
icons8_purchase_order_50
[NBF]root.Data
[NBF]root.Data-preview.png
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
DgwB.exe
Full Name
DgwB.exe
EntryPoint
System.Void FogStation.Program::Main()
Scope Name
DgwB.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
DgwB
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
383
Main Method
System.Void FogStation.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void FogStation.FormAccueil::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
FogStation.Properties.Resources.resources
Btlj
[NBF]root.Data
NBWB
[NBF]root.Data
[NBF]root.Data-preview.png
icons8_customer_26
[NBF]root.Data
[NBF]root.Data-preview.png
icons8_graph_report_50
[NBF]root.Data
[NBF]root.Data-preview.png
icons8_package_64
[NBF]root.Data
[NBF]root.Data-preview.png
icons8_purchase_order_50
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙