Suspicious
Suspect

PE Executable
MD5: 3727213bebfb5e6350f0e28b5fb5a43a
Size: 1.06 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 3727213bebfb5e6350f0e28b5fb5a43a
Sha1 6896f2c2ba3c87c81617652ac4f8864a6928f60b
Sha256 26319845c08cea4e26c57a35308c7307847c693ed4108ecaaa344e8afe666b28
Sha384 733b9cc9fc9847d778031a52412a008cbe58507b2b5cf0f2e964bf2cd4da494868df266622b773811c75ba8b1cf0de9a
Sha512 180971e4bb0514a90fa717b61268e714281c1ea53731ec7827e1784a3fdbabb2f0a4bcea480509353110550324768c126efbc7d7d308d1150f720d17416f582f
SSDeep 12288:JJndt03VXlyxjS/gpKEtnMt/5OGpo5hcLywfl2eBZYPwdm+WJnp4Uf4gza:L0F1icYGpoDcOwfgebYPwd1WJneUf4g
TLSH 81359EE51EE43B51D17EFE354B7A097063FE78978E22D789344723E69E2270658803E2
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
3727213bebfb5e6350f0e28b5fb5a43a
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FiberaDigit.fibraship.ico
8Cxyg7iFQ.qBe8t0.resources
$this.Icon
[NBF]root.IconData
AboutDeveloperToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
AboutSoftwareToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
ExitToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
SettingsToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
8Cxyg7iFQ.Resources.resources
16da44375d3093.Resources.resources
54dbe9170
[NBF]root.Data
54dbe9171
[NBF]root.Data
54dbe91710
[NBF]root.Data
54dbe91711
[NBF]root.Data
54dbe91712
[NBF]root.Data
54dbe91713
[NBF]root.Data
54dbe91714
[NBF]root.Data
54dbe91715
[NBF]root.Data
54dbe91716
[NBF]root.Data
54dbe91717
[NBF]root.Data
54dbe91718
[NBF]root.Data
54dbe91719
[NBF]root.Data
54dbe9172
[NBF]root.Data
54dbe91720
[NBF]root.Data
54dbe91721
[NBF]root.Data
54dbe91722
[NBF]root.Data
54dbe91723
[NBF]root.Data
54dbe91724
[NBF]root.Data
54dbe9173
[NBF]root.Data
54dbe9174
[NBF]root.Data
54dbe9175
[NBF]root.Data
54dbe9176
[NBF]root.Data
54dbe9177
[NBF]root.Data
54dbe9178
[NBF]root.Data
54dbe9179
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
8Cxyg7iFQ
Full Name
8Cxyg7iFQ
EntryPoint
System.Void 8Cxyg7iFQ.3ysMGo4gf::pRs9wq8()
Scope Name
8Cxyg7iFQ
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
8Cxyg7iFQ
Assembly Version
15.13.40.215
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
2241
Main Method
System.Void 8Cxyg7iFQ.3ysMGo4gf::pRs9wq8()
Main IL Instruction Count
73
Main IL 
nop <null>
ldtoken System.Windows.Forms.Application
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
stloc.0 <null>
ldloc.0 <null>
ldstr EnableVisualStyles
ldc.i4.s 24
callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Reflection.BindingFlags)
ldnull <null>
ldnull <null>
callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[])
pop <null>
ldloc.0 <null>
ldstr SetCompatibleTextRenderingDefault
ldc.i4.s 24
callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Reflection.BindingFlags)
ldnull <null>
ldc.i4.1 <null>
newarr System.Object
dup <null>
ldc.i4.0 <null>
ldc.i4.0 <null>
box System.Boolean
stelem.ref <null>
callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[])
pop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
call System.OperatingSystem System.Environment::get_OSVersion()
callvirt System.Version System.OperatingSystem::get_Version()
callvirt System.Int32 System.Version::get_Major()
ldc.i4.6 <null>
clt <null>
ldc.i4.0 <null>
ceq <null>
stloc.1 <null>
ldloc.1 <null>
brfalse.s IL_0071: nop
call System.Boolean 8Cxyg7iFQ.3ysMGo4gf::aAj30()
pop <null>
nop <null>
nop <null>
call System.Boolean 8Cxyg7iFQ.3ysMGo4gf::8ynSTc()
ldc.i4.0 <null>
ceq <null>
stloc.2 <null>
ldloc.2 <null>
brfalse.s IL_0080: nop
br.s IL_00B6: ret
nop <null>
nop <null>
call System.Void 8Cxyg7iFQ.3ysMGo4gf::0Rzsn5Ep7abS()
nop <null>
leave.s IL_00AF: nop
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.3 <null>
nop <null>
ldstr Application failed to start: 
ldloc.3 <null>
callvirt System.String System.Exception::get_Message()
call System.String System.String::Concat(System.String,System.String)
call System.Void 8Cxyg7iFQ.3ysMGo4gf::4oxHf_(System.String)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00AF: nop
nop <null>
call System.Void System.Windows.Forms.Application::Exit()
nop <null>
ret <null>
Module Name
8Cxyg7iFQ
Full Name
8Cxyg7iFQ
EntryPoint
System.Void 8Cxyg7iFQ.3ysMGo4gf::pRs9wq8()
Scope Name
8Cxyg7iFQ
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
8Cxyg7iFQ
Assembly Version
15.13.40.215
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
2241
Main Method
System.Void 8Cxyg7iFQ.3ysMGo4gf::pRs9wq8()
Main IL Instruction Count
73
Main IL 
nop <null>
ldtoken System.Windows.Forms.Application
call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle)
stloc.0 <null>
ldloc.0 <null>
ldstr EnableVisualStyles
ldc.i4.s 24
callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Reflection.BindingFlags)
ldnull <null>
ldnull <null>
callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[])
pop <null>
ldloc.0 <null>
ldstr SetCompatibleTextRenderingDefault
ldc.i4.s 24
callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Reflection.BindingFlags)
ldnull <null>
ldc.i4.1 <null>
newarr System.Object
dup <null>
ldc.i4.0 <null>
ldc.i4.0 <null>
box System.Boolean
stelem.ref <null>
callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[])
pop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
call System.OperatingSystem System.Environment::get_OSVersion()
callvirt System.Version System.OperatingSystem::get_Version()
callvirt System.Int32 System.Version::get_Major()
ldc.i4.6 <null>
clt <null>
ldc.i4.0 <null>
ceq <null>
stloc.1 <null>
ldloc.1 <null>
brfalse.s IL_0071: nop
call System.Boolean 8Cxyg7iFQ.3ysMGo4gf::aAj30()
pop <null>
nop <null>
nop <null>
call System.Boolean 8Cxyg7iFQ.3ysMGo4gf::8ynSTc()
ldc.i4.0 <null>
ceq <null>
stloc.2 <null>
ldloc.2 <null>
brfalse.s IL_0080: nop
br.s IL_00B6: ret
nop <null>
nop <null>
call System.Void 8Cxyg7iFQ.3ysMGo4gf::0Rzsn5Ep7abS()
nop <null>
leave.s IL_00AF: nop
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.3 <null>
nop <null>
ldstr Application failed to start: 
ldloc.3 <null>
callvirt System.String System.Exception::get_Message()
call System.String System.String::Concat(System.String,System.String)
call System.Void 8Cxyg7iFQ.3ysMGo4gf::4oxHf_(System.String)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00AF: nop
nop <null>
call System.Void System.Windows.Forms.Application::Exit()
nop <null>
ret <null>
3727213bebfb5e6350f0e28b5fb5a43a
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FiberaDigit.fibraship.ico
8Cxyg7iFQ.qBe8t0.resources
$this.Icon
[NBF]root.IconData
AboutDeveloperToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
AboutSoftwareToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
ExitToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
SettingsToolStripMenuItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
8Cxyg7iFQ.Resources.resources
16da44375d3093.Resources.resources
54dbe9170
[NBF]root.Data
54dbe9171
[NBF]root.Data
54dbe91710
[NBF]root.Data
54dbe91711
[NBF]root.Data
54dbe91712
[NBF]root.Data
54dbe91713
[NBF]root.Data
54dbe91714
[NBF]root.Data
54dbe91715
[NBF]root.Data
54dbe91716
[NBF]root.Data
54dbe91717
[NBF]root.Data
54dbe91718
[NBF]root.Data
54dbe91719
[NBF]root.Data
54dbe9172
[NBF]root.Data
54dbe91720
[NBF]root.Data
54dbe91721
[NBF]root.Data
54dbe91722
[NBF]root.Data
54dbe91723
[NBF]root.Data
54dbe91724
[NBF]root.Data
54dbe9173
[NBF]root.Data
54dbe9174
[NBF]root.Data
54dbe9175
[NBF]root.Data
54dbe9176
[NBF]root.Data
54dbe9177
[NBF]root.Data
54dbe9178
[NBF]root.Data
54dbe9179
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙