Deep Malware Analysis of 1702f6476993eb605fe93eebbbc5fc42 | md5: 1702f6476993eb605fe93eebbbc5fc42 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.93

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very high

MD5	1702f6476993eb605fe93eebbbc5fc42
Sha1	409af51ffa0d10f41374a2b1f3517b98b950ed00
Sha256	ce990051cbbec61b7e5fda012e29bc9776d0f298cc586c20ed13f949f34db37b
Sha384	73750074c4939b71f262b12819109f3b3a8cb6db7201f6bdad770f64ea62b6ac96c81881bf5da3eee086a2e437aceea6
Sha512	8d997aef82ad4b2d055a87ec7fd82b92afd52dd86c93c1460ef8b55219a02e8f18558e1a6b8468aa467a0b158feb650e1f323c84174b0d92f65fd1d6356abfd7
SSDeep	3072:MzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIWtsC6wwBLsjAIZnB/nFgMbszw:MLV6Bta6dtJmakIM5D+LsjAcW/zhIRVJ
TLSH	4414CF563BA84A2FE2DE8579712212139379C2E3E9C3F3DE28E411B64F567E50A071D3

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	NanoCore Client.exe
Full Name	NanoCore Client.exe
EntryPoint	System.Void ClientLoaderForm::Main()
Scope Name	NanoCore Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v2.0.50727
Tables Header Version	512
WinMD Version	<null>
Assembly Name	NanoCore Client
Assembly Version	1.2.2.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	2
Main Method	System.Void ClientLoaderForm::Main()
Main IL Instruction Count	4
Main IL	`call #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw== #=q_jQLaNdtSDa6ovA0VGw50w==::#=qqROT7DfncW7strhZvp0iRQ==() callvirt ClientLoaderForm #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw==::#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`
Module Name	NanoCore Client.exe
Full Name	NanoCore Client.exe
EntryPoint	System.Void ClientLoaderForm::Main()
Scope Name	NanoCore Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v2.0.50727
Tables Header Version	512
WinMD Version	<null>
Assembly Name	NanoCore Client
Assembly Version	1.2.2.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	2
Main Method	System.Void ClientLoaderForm::Main()
Main IL Instruction Count	4
Main IL	`call #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw== #=q_jQLaNdtSDa6ovA0VGw50w==::#=qqROT7DfncW7strhZvp0iRQ==() callvirt ClientLoaderForm #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw==::#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`