Suspicious
Suspect

27512b501a2c656f455a0b0b50c86ae8

Share on LinkedIn
Print
PE Executable
MD5: 27512b501a2c656f455a0b0b50c86ae8
Size: 598.02 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
598.02 KB · 598,016 B
First seen
2026-10-15 12:00 · 10 days ago
Last seen
2026-10-15 12:00 · 10 days ago
Last analysis
2026-10-15 12:00 · 10 days ago
Hashes
MD5 27512b501a2c656f455a0b0b50c86ae8 Sha1 e1a22f0f22df5ad5942131e41a01aa34c09badc5 Sha256 6b68a1f5df0a2e64d8d5092dacf355a35bbab4e7d5d6c193234a05bc5037dcbc Sha384 a452e4b785364b962370fd158325316a5348b8221fde0af7ec2ee517e562e589d2590e6312975b63b9f2689358e8237c Sha512 b99d5f2edfa36ab319904ee06d3fdf17bedac891962609cdadb6e1f35d9f242b491980d3da61bc27b0c28f0282b0113ef33efbe71f087967ee436290fdb3fc7f SSDeep 12288:UKN8gTP1PTBjjT3XiKpl9QZsOGazvzGC7JR79SO6qTiqE7iP+8e:DN8gv3S0eT37JR7/gk TLSH F3D49BA42254EE12D4EA0AB5D8E1D2FF07B15D5BE921F20B99D63DAF3A30250F7006C7
Detection
Symbol obfuscation
Medium
12 files
EXE27512b501a2c656f455a0b0b50c86ae8
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
unEa.exe
Full Name
unEa.exe
EntryPoint
System.Void TeaEstate.Program::Main()
Scope Name
unEa.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
unEa
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
432
Info
PE Detect: PeReader OK (file layout)
Main Method
System.Void TeaEstate.Program::Main()
Main IL Instruction Count
22
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
call System.Void TeaEstate.Program::UcitajPostavke()
nop <null>
newobj System.Void TeaEstate.frmPolje::.ctor()
stsfld TeaEstate.frmPolje TeaEstate.Program::fPolje
newobj System.Void TeaEstate.frmTvornica::.ctor()
stsfld TeaEstate.frmTvornica TeaEstate.Program::fTvornica
newobj System.Void TeaEstate.frmSezona::.ctor()
stsfld TeaEstate.frmSezona TeaEstate.Program::fSezona
newobj System.Void TeaEstate.frmIzvjestaj::.ctor()
stsfld TeaEstate.frmIzvjestaj TeaEstate.Program::fIzvjestaj
newobj System.Void TeaEstate.frmImanje::.ctor()
stsfld TeaEstate.frmImanje TeaEstate.Program::fImanje
ldsfld TeaEstate.frmImanje TeaEstate.Program::fImanje
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙