27512b501a2c656f455a0b0b50c86ae8

PE Executable

MD5: 27512b501a2c656f455a0b0b50c86ae8

Size: 598.02 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

598.02 KB · 598,016 B

Hashes

MD5 27512b501a2c656f455a0b0b50c86ae8 Sha1 e1a22f0f22df5ad5942131e41a01aa34c09badc5 Sha256 6b68a1f5df0a2e64d8d5092dacf355a35bbab4e7d5d6c193234a05bc5037dcbc Sha384 a452e4b785364b962370fd158325316a5348b8221fde0af7ec2ee517e562e589d2590e6312975b63b9f2689358e8237c Sha512 b99d5f2edfa36ab319904ee06d3fdf17bedac891962609cdadb6e1f35d9f242b491980d3da61bc27b0c28f0282b0113ef33efbe71f087967ee436290fdb3fc7f SSDeep 12288:UKN8gTP1PTBjjT3XiKpl9QZsOGazvzGC7JR79SO6qTiqE7iP+8e:DN8gv3S0eT37JR7/gk TLSH F3D49BA42254EE12D4EA0AB5D8E1D2FF07B15D5BE921F20B99D63DAF3A30250F7006C7

Detection

Symbol obfuscation

Medium

12 files

EXE27512b501a2c656f455a0b0b50c86ae8

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINRT_MANIFEST

BINID:0001

BINID:0

BIN.Net Resources

BINTeaEstate.frmTvornica.resources

ICON$this.Icon

BIN[NBF]root.IconData

BINTeaEstate.Properties.Resources.resources

BINPol

DATA[NBF]root.Data

BINglJh

IMG[NBF]root.Data

IMG[NBF]root.Data-preview.png

STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name	Value
Module Name	unEa.exe
Full Name	unEa.exe
EntryPoint	System.Void TeaEstate.Program::Main()
Scope Name	unEa.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	unEa
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	432
Info	PE Detect: PeReader OK (file layout)
Main Method	System.Void TeaEstate.Program::Main()
Main IL Instruction Count	22
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> call System.Void TeaEstate.Program::UcitajPostavke() nop <null> newobj System.Void TeaEstate.frmPolje::.ctor() stsfld TeaEstate.frmPolje TeaEstate.Program::fPolje newobj System.Void TeaEstate.frmTvornica::.ctor() stsfld TeaEstate.frmTvornica TeaEstate.Program::fTvornica newobj System.Void TeaEstate.frmSezona::.ctor() stsfld TeaEstate.frmSezona TeaEstate.Program::fSezona newobj System.Void TeaEstate.frmIzvjestaj::.ctor() stsfld TeaEstate.frmIzvjestaj TeaEstate.Program::fIzvjestaj newobj System.Void TeaEstate.frmImanje::.ctor() stsfld TeaEstate.frmImanje TeaEstate.Program::fImanje ldsfld TeaEstate.frmImanje TeaEstate.Program::fImanje call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

12 files

EXE27512b501a2c656f455a0b0b50c86ae8

Structure

BINResources

BIN.Net Resources

No malware configuration was found at this point.

You must be signed in to view YARA rules.