Malicious PE Executable analysis – 058add3a7686

PE Executable

MD5: 238cd37b1f7a03fad4846389e320c084

Size: 1.36 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

1.36 MB · 1,357,824 B

First seen

2026-03-09 10:16 · 7 months ago

Last seen

2026-03-09 10:16 · 7 months ago

Last analysis

2026-03-10 04:47 · 7 months ago

Hashes

MD5 238cd37b1f7a03fad4846389e320c084 Sha1 f9d25d7ba6ef61653759c9a9162612fedebacec6 Sha256 058add3a76861e33920560412912eee7651c2ad2a9b81a26f679313a44310fdf Sha384 ecef6be13a808715967899ed420b3f1ff4e40f5e0cfe951dd67d55f75f54575d3baba990665f093c0c74118787f06ab8 Sha512 f67540195d456839336d7e9ea3c5e22a8cfdd5ff102c398728600fc1ade6316299945c3139a309e316d17d77b70b086c0635f93576c6e72f0897b051ca04c7f6 SSDeep 24576:0X04gO0v1bEYao5wf3BPxAgCrsbEj95RzBM/xKozxw:07s1Tao5KBdqnRFM7 TLSH 44557B117E44CE01F0091233C3EF458997B4E961AAA6E32B7DBA3B6E15123977D0D9CB

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Very high

1 malicious · 4 files

EXE238cd37b1f7a03fad4846389e320c084

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BIN.Net Resources

BINUyyhdMb21ewKWYB3V6.iN3UtId8SojlbVIdnn

BINt5PHIfS4h7Eq4e64H3.ayqIQgG0v4lU8nqugO

Name	Value
Module Name	vDoVrLO2vHcOeXkQ5jZPopvVsga5CSL5Xf5s
Full Name	vDoVrLO2vHcOeXkQ5jZPopvVsga5CSL5Xf5s
EntryPoint	System.Void of2U4VFarinGCLAluV4.FgTv3hFmffU5ah80EQ3::pX3pXwfvKA()
Scope Name	vDoVrLO2vHcOeXkQ5jZPopvVsga5CSL5Xf5s
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	uJLeIwZ7F6vBEuBDgIGSSm
Assembly Version	1.7.3.8
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	63
Main Method	System.Void of2U4VFarinGCLAluV4.FgTv3hFmffU5ah80EQ3::pX3pXwfvKA()
Main IL Instruction Count	14
Main IL	`br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull call System.Void JxTsSKpt4dA1pCV3t8V.oHqMa9pn4YAW4KDHmMm::kLjw4iIsCLsZtxc4lksN0j() nop <null> ldsfld System.Object of2U4VFarinGCLAluV4.FgTv3hFmffU5ah80EQ3::kOmphKrQTO callvirt System.Void mSoTfnFnPeMi4jubfFP.J4FI9hFVoC35cDQHw8J::YOsb0n1FUM() nop <null> ret <null>`
Module Name	vDoVrLO2vHcOeXkQ5jZPopvVsga5CSL5Xf5s
Full Name	vDoVrLO2vHcOeXkQ5jZPopvVsga5CSL5Xf5s
EntryPoint	System.Void of2U4VFarinGCLAluV4.FgTv3hFmffU5ah80EQ3::pX3pXwfvKA()
Scope Name	vDoVrLO2vHcOeXkQ5jZPopvVsga5CSL5Xf5s
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	uJLeIwZ7F6vBEuBDgIGSSm
Assembly Version	1.7.3.8
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	63
Main Method	System.Void of2U4VFarinGCLAluV4.FgTv3hFmffU5ah80EQ3::pX3pXwfvKA()
Main IL Instruction Count	14
Main IL	`br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull call System.Void JxTsSKpt4dA1pCV3t8V.oHqMa9pn4YAW4KDHmMm::kLjw4iIsCLsZtxc4lksN0j() nop <null> ldsfld System.Object of2U4VFarinGCLAluV4.FgTv3hFmffU5ah80EQ3::kOmphKrQTO callvirt System.Void mSoTfnFnPeMi4jubfFP.J4FI9hFVoC35cDQHw8J::YOsb0n1FUM() nop <null> ret <null>`

1 malicious · 4 files

EXE238cd37b1f7a03fad4846389e320c084

Structure

BINResources

BIN.Net Resources

No malware configuration was found at this point.