Suspicious
Suspect

PE Executable
MD5: 2053b07e67e71dd9ba69c50d77f2b498
Size: 600.06 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 2053b07e67e71dd9ba69c50d77f2b498
Sha1 ac9c34537fdb3c1c11238d6fe8b752906a3afe21
Sha256 019f809d35950f9c45a9f2b33b2fa85b17829481aac37124b28478c9f0faf71c
Sha384 872e370f8f008ef160347e9a3832d030e1af1015229b195f435a20fff263e1018c41415741847c13aad12899fe9b6100
Sha512 408f55d42b18ab35efb6db88eccbc2e3eafaaaab03088640bdbae5745a3201dd19b1e4e3ee8d84c7f33ce126a592876b7b26ed183de7d70a04f8d03fcc0cb1f0
SSDeep 12288:hjh6ACN5qxfu5h8Pbr+wdNy8xzNZU87RsmWJX:J8AB2z8Pbrl3HzNhR
TLSH E5D4CE546DADEB1EDCA463F0C970F2B007B56C686822E60A4DE63CD77B23B0C1655B63
2053b07e67e71dd9ba69c50d77f2b498
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SoftwareMercado.frmPrincipal.resources
$this.Icon
[NBF]root.IconData
gr
[NBF]root.Data
SoftwareMercado.Properties.Resources.resources
FFDQ
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Module Name
TnyH.exe
Full Name
TnyH.exe
EntryPoint
System.Void SoftwareMercado.Program::Main()
Scope Name
TnyH.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
TnyH
Assembly Version
3.7.2.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
573
Main Method
System.Void SoftwareMercado.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void SoftwareMercado.frmPrincipal::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
PDB Path PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
2053b07e67e71dd9ba69c50d77f2b498
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SoftwareMercado.frmPrincipal.resources
$this.Icon
[NBF]root.IconData
gr
[NBF]root.Data
SoftwareMercado.Properties.Resources.resources
FFDQ
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
PDB Path PATH
?huhuhuhu
2053b07e67e71dd9ba69c50d77f2b498
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙