Deep Malware Analysis of 1c6f03e29e760214807593a7748c7ed4 | md5: 1c6f03e29e760214807593a7748c7ed4 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.43

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	1c6f03e29e760214807593a7748c7ed4
Sha1	2f1d4c9d777d0bf8d120a18f371f28b63a1d7567
Sha256	3e62c839ff25262272f603a089ecccf728a43183bf31459c834f36c71ab8b0cc
Sha384	5ecb35d3c0d3e14fe92b5a09ff45f0f2acb5a7f684820c23d6f1959b905f6357502051ae18ecf574a28078618814308d
Sha512	e0979afbd0f6d18102da9c8591fcc2db0569acebb21cc438b595a4b61fc6166c246f467cc4a5a19fcfcafb736d1eddef79d6eae701a8f1501c37e569c40af54b
SSDeep	24576:vELuyzcuJApP0XEk9FfdBb+ZRkrRYYm7RkcdxdQ362LslptlrfKb9qLlmIAKUdw:MLuyJAdeDFjKRkVYF71gsftBfO9qhFU
TLSH	A885331853DA11F5CA75ACF70133F1089576D93ADAC6F927966A20544FF83E03E38BA2

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	mely
Full Name	mely
EntryPoint	System.Void ::()
Scope Name	mely
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	mely
Assembly Version	1.0.8416.23014
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	0
Main Method	System.Void ::()
Main IL Instruction Count	40
Main IL	newobj System.Void ::.ctor() stloc.1 <null> newobj System.Void ::.ctor() stloc.2 <null> newobj System.Void ::.ctor() stloc.3 <null> newobj System.Void ::.ctor() stloc.s V_4 ldloc.2 <null> ldloc.3 <null> ldloc.s V_4 newobj System.Void ::.ctor( , , ) stloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Void ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void ::(System.EventHandler`1< >) ldloc.2 <null> ldloc.0 <null> ldftn System.Void ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void ::(System.EventHandler`1< >) ldloc.3 <null> ldloc.0 <null> ldftn System.Void ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void ::(System.EventHandler`1< >) ldloc.s V_4 ldloc.0 <null> ldftn System.Void ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void ::(System.EventHandler`1< >) ldloc.1 <null> callvirt System.Void ::() leave.s IL_007B: ret ldloc.0 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ret <null>
Module Name	mely
Full Name	mely
EntryPoint	System.Void ::()
Scope Name	mely
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	mely
Assembly Version	1.0.8416.23014
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	0
Main Method	System.Void ::()
Main IL Instruction Count	40
Main IL	newobj System.Void ::.ctor() stloc.1 <null> newobj System.Void ::.ctor() stloc.2 <null> newobj System.Void ::.ctor() stloc.3 <null> newobj System.Void ::.ctor() stloc.s V_4 ldloc.2 <null> ldloc.3 <null> ldloc.s V_4 newobj System.Void ::.ctor( , , ) stloc.0 <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Void ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void ::(System.EventHandler`1< >) ldloc.2 <null> ldloc.0 <null> ldftn System.Void ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void ::(System.EventHandler`1< >) ldloc.3 <null> ldloc.0 <null> ldftn System.Void ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void ::(System.EventHandler`1< >) ldloc.s V_4 ldloc.0 <null> ldftn System.Void ::(System.Object, ) newobj System.Void System.EventHandler`1< >::.ctor(System.Object,System.IntPtr) callvirt System.Void ::(System.EventHandler`1< >) ldloc.1 <null> callvirt System.Void ::() leave.s IL_007B: ret ldloc.0 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ret <null>