Suspicious
Suspect

1f7dfae94b47471bfe959d8c8bc78910

Share on LinkedIn
Print
PE Executable
MD5: 1f7dfae94b47471bfe959d8c8bc78910
Size: 859.14 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 1f7dfae94b47471bfe959d8c8bc78910
Sha1 03b59ef24ebe54ce10b792cadfff37304457fa41
Sha256 b61e95706ad5eeb2ce5258f583e306d413a59510c970206434e41c5a8f46f4c9
Sha384 efd16cbd378690f072ca130a2598925cf9544dadb141974f563fb5d807ea4a548242c9b81e32a66c6a65ddb9f1e3de98
Sha512 dd899e911411f9c0bb29e3ad577b34634b7ff5f66538660370db691e9faf5151f945c505eaa712b74480390a165b7d77d8196c6d59db5d75b7aac9cbc7887da0
SSDeep 12288:j5Rpq2LGp8TD2tckiQ1Q9UR0VsVLoQN4qKxeTLaw3thOUdivhSN:tRDEckzSUR0VmLF4bxC/3TOUdivhY
TLSH 4005EFB42A04C986D5A24BBBD961E3F53BB42DB4D831C2034EE77DBB793570418E52B2
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
1f7dfae94b47471bfe959d8c8bc78910
.Net Resources
CoralReefApp.Properties.Resources.resources
Kare
[NBF]root.Data
NIwl
[NBF]root.Data
[NBF]root.Data-preview.png
CoralReefApp.StockForm.resources
$this.Icon
[NBF]root.IconData
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
COXY.exe
Full Name
COXY.exe
EntryPoint
System.Void CoralReefApp.Program::Main()
Scope Name
COXY.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
COXY
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
243
Main Method
System.Void CoralReefApp.Program::Main()
Main IL Instruction Count
12
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
call System.Void CoralReefApp.Program::InitialisiereDatenSet()
nop <null>
newobj System.Void CoralReefApp.ReefForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
Module Name
COXY.exe
Full Name
COXY.exe
EntryPoint
System.Void CoralReefApp.Program::Main()
Scope Name
COXY.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
COXY
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
243
Main Method
System.Void CoralReefApp.Program::Main()
Main IL Instruction Count
12
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
call System.Void CoralReefApp.Program::InitialisiereDatenSet()
nop <null>
newobj System.Void CoralReefApp.ReefForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙