Suspicious
Suspect

42cadc4b46710184f362a4c0648ffae0

PE Executable
MD5: 42cadc4b46710184f362a4c0648ffae0
Size: 5.77 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
5.77 MB · 5,768,704 B
Hashes
MD5 42cadc4b46710184f362a4c0648ffae0 Sha1 42c42696757ac261fd1eddef5cc7a385fca73218 Sha256 0ed7df66992e4d52d4aba0d66fdf687e3e3eaab8aa6826134d034da078f40fcd Sha384 2f13bbf0821a54b419e1db1832ecf4a3c8754d1e4fb2e203f3b83444ace788ec219413ed6e3bb21fdc96713822e5beb5 Sha512 af86606dcc5c2ec41cbbca3d82672c9129e58c1b03b25eba7849a64a60fa187367540b9c33ce60229376dc073c314694656ba9d031e9b33cea07602e06c52f22 SSDeep 98304:aUdUOamKBr+1dgTgFvQ+L+oL9Q37PE4rmN:5vyyzgcF4+l9Ibrc TLSH B046232237C20468C53ECB74C9399B8267F2BE5A5935CB1E7B8D318D4C36B539762722
Detection
Symbol obfuscation
Very high
576 files
EXE42cadc4b46710184f362a4c0648ffae0
Structure
BIN.Net Resources
BIN6BmtqoX19Fo.g.resources
BIN6BmtqoX19Fo.Resources.resources
BINfdfc66e1e00301.Resources.resources
BIN9374e34c0
DATA[NBF]root.Data
BIN9374e34c1
DATA[NBF]root.Data
BIN9374e34c10
DATA[NBF]root.Data
BIN9374e34c100
DATA[NBF]root.Data
BIN9374e34c101
DATA[NBF]root.Data
BIN9374e34c102
DATA[NBF]root.Data
BIN9374e34c103
DATA[NBF]root.Data
BIN9374e34c104
DATA[NBF]root.Data
BIN9374e34c105
DATA[NBF]root.Data
BIN9374e34c106
DATA[NBF]root.Data
BIN9374e34c107
DATA[NBF]root.Data
BIN9374e34c108
DATA[NBF]root.Data
BIN9374e34c109
DATA[NBF]root.Data
BIN9374e34c11
DATA[NBF]root.Data
BIN9374e34c110
DATA[NBF]root.Data
BIN9374e34c111
DATA[NBF]root.Data
BIN9374e34c112
DATA[NBF]root.Data
BIN9374e34c113
DATA[NBF]root.Data
BIN9374e34c114
DATA[NBF]root.Data
BIN9374e34c115
DATA[NBF]root.Data
BIN9374e34c116
DATA[NBF]root.Data
BIN9374e34c117
DATA[NBF]root.Data
BIN9374e34c118
DATA[NBF]root.Data
BIN9374e34c119
DATA[NBF]root.Data
BIN9374e34c12
DATA[NBF]root.Data
BIN9374e34c120
DATA[NBF]root.Data
BIN9374e34c121
DATA[NBF]root.Data
BIN9374e34c122
DATA[NBF]root.Data
BIN9374e34c123
DATA[NBF]root.Data
BIN9374e34c124
DATA[NBF]root.Data
BIN9374e34c125
DATA[NBF]root.Data
BIN9374e34c126
DATA[NBF]root.Data
BIN9374e34c127
DATA[NBF]root.Data
BIN9374e34c128
DATA[NBF]root.Data
BIN9374e34c129
DATA[NBF]root.Data
BIN9374e34c13
DATA[NBF]root.Data
BIN9374e34c130
DATA[NBF]root.Data
BIN9374e34c131
DATA[NBF]root.Data
BIN9374e34c132
DATA[NBF]root.Data
BIN9374e34c133
DATA[NBF]root.Data
BIN9374e34c134
DATA[NBF]root.Data
BIN9374e34c135
DATA[NBF]root.Data
BIN9374e34c136
DATA[NBF]root.Data
BIN9374e34c137
DATA[NBF]root.Data
BIN9374e34c138
DATA[NBF]root.Data
BIN9374e34c139
DATA[NBF]root.Data
BIN9374e34c14
DATA[NBF]root.Data
BIN9374e34c140
DATA[NBF]root.Data
BIN9374e34c141
DATA[NBF]root.Data
BIN9374e34c142
DATA[NBF]root.Data
BIN9374e34c143
DATA[NBF]root.Data
BIN9374e34c144
DATA[NBF]root.Data
BIN9374e34c145
DATA[NBF]root.Data
BIN9374e34c146
DATA[NBF]root.Data
BIN9374e34c147
DATA[NBF]root.Data
BIN9374e34c148
DATA[NBF]root.Data
BIN9374e34c149
DATA[NBF]root.Data
BIN9374e34c15
DATA[NBF]root.Data
BIN9374e34c150
DATA[NBF]root.Data
BIN9374e34c151
DATA[NBF]root.Data
BIN9374e34c152
DATA[NBF]root.Data
BIN9374e34c153
DATA[NBF]root.Data
BIN9374e34c154
DATA[NBF]root.Data
BIN9374e34c155
DATA[NBF]root.Data
BIN9374e34c156
DATA[NBF]root.Data
BIN9374e34c157
DATA[NBF]root.Data
BIN9374e34c158
DATA[NBF]root.Data
BIN9374e34c159
DATA[NBF]root.Data
BIN9374e34c16
DATA[NBF]root.Data
BIN9374e34c160
DATA[NBF]root.Data
BIN9374e34c161
DATA[NBF]root.Data
BIN9374e34c162
DATA[NBF]root.Data
BIN9374e34c163
DATA[NBF]root.Data
BIN9374e34c164
DATA[NBF]root.Data
BIN9374e34c165
DATA[NBF]root.Data
BIN9374e34c166
DATA[NBF]root.Data
BIN9374e34c167
DATA[NBF]root.Data
BIN9374e34c168
DATA[NBF]root.Data
BIN9374e34c169
DATA[NBF]root.Data
BIN9374e34c17
DATA[NBF]root.Data
BIN9374e34c170
DATA[NBF]root.Data
BIN9374e34c171
DATA[NBF]root.Data
BIN9374e34c172
DATA[NBF]root.Data
BIN9374e34c173
DATA[NBF]root.Data
BIN9374e34c174
DATA[NBF]root.Data
BIN9374e34c175
DATA[NBF]root.Data
BIN9374e34c176
DATA[NBF]root.Data
BIN9374e34c177
DATA[NBF]root.Data
BIN9374e34c178
DATA[NBF]root.Data
BIN9374e34c179
DATA[NBF]root.Data
BIN9374e34c18
DATA[NBF]root.Data
BIN9374e34c180
DATA[NBF]root.Data
BIN9374e34c181
DATA[NBF]root.Data
BIN9374e34c182
DATA[NBF]root.Data
BIN9374e34c183
DATA[NBF]root.Data
BIN9374e34c184
DATA[NBF]root.Data
BIN9374e34c185
DATA[NBF]root.Data
BIN9374e34c186
DATA[NBF]root.Data
BIN9374e34c187
DATA[NBF]root.Data
BIN9374e34c188
DATA[NBF]root.Data
BIN9374e34c189
DATA[NBF]root.Data
BIN9374e34c19
DATA[NBF]root.Data
BIN9374e34c190
DATA[NBF]root.Data
BIN9374e34c191
DATA[NBF]root.Data
BIN9374e34c192
DATA[NBF]root.Data
BIN9374e34c193
DATA[NBF]root.Data
BIN9374e34c194
DATA[NBF]root.Data
BIN9374e34c195
DATA[NBF]root.Data
BIN9374e34c196
DATA[NBF]root.Data
BIN9374e34c197
DATA[NBF]root.Data
BIN9374e34c198
DATA[NBF]root.Data
BIN9374e34c199
DATA[NBF]root.Data
BIN9374e34c2
DATA[NBF]root.Data
BIN9374e34c20
DATA[NBF]root.Data
BIN9374e34c200
DATA[NBF]root.Data
BIN9374e34c201
DATA[NBF]root.Data
BIN9374e34c202
DATA[NBF]root.Data
BIN9374e34c203
DATA[NBF]root.Data
BIN9374e34c204
DATA[NBF]root.Data
BIN9374e34c205
DATA[NBF]root.Data
BIN9374e34c206
DATA[NBF]root.Data
BIN9374e34c207
DATA[NBF]root.Data
BIN9374e34c208
DATA[NBF]root.Data
BIN9374e34c209
DATA[NBF]root.Data
BIN9374e34c21
DATA[NBF]root.Data
BIN9374e34c210
DATA[NBF]root.Data
BIN9374e34c211
DATA[NBF]root.Data
BIN9374e34c212
DATA[NBF]root.Data
BIN9374e34c213
DATA[NBF]root.Data
BIN9374e34c214
DATA[NBF]root.Data
BIN9374e34c215
DATA[NBF]root.Data
BIN9374e34c216
DATA[NBF]root.Data
BIN9374e34c217
DATA[NBF]root.Data
BIN9374e34c218
DATA[NBF]root.Data
BIN9374e34c219
DATA[NBF]root.Data
BIN9374e34c22
DATA[NBF]root.Data
BIN9374e34c220
DATA[NBF]root.Data
BIN9374e34c221
DATA[NBF]root.Data
BIN9374e34c222
DATA[NBF]root.Data
BIN9374e34c223
DATA[NBF]root.Data
BIN9374e34c224
DATA[NBF]root.Data
BIN9374e34c225
DATA[NBF]root.Data
BIN9374e34c226
DATA[NBF]root.Data
BIN9374e34c227
DATA[NBF]root.Data
BIN9374e34c228
DATA[NBF]root.Data
BIN9374e34c229
DATA[NBF]root.Data
BIN9374e34c23
DATA[NBF]root.Data
BIN9374e34c230
DATA[NBF]root.Data
BIN9374e34c231
DATA[NBF]root.Data
BIN9374e34c232
DATA[NBF]root.Data
BIN9374e34c233
DATA[NBF]root.Data
BIN9374e34c234
DATA[NBF]root.Data
BIN9374e34c235
DATA[NBF]root.Data
BIN9374e34c236
DATA[NBF]root.Data
BIN9374e34c237
DATA[NBF]root.Data
BIN9374e34c238
DATA[NBF]root.Data
BIN9374e34c239
DATA[NBF]root.Data
BIN9374e34c24
DATA[NBF]root.Data
BIN9374e34c240
DATA[NBF]root.Data
BIN9374e34c241
DATA[NBF]root.Data
BIN9374e34c242
DATA[NBF]root.Data
BIN9374e34c243
DATA[NBF]root.Data
BIN9374e34c244
DATA[NBF]root.Data
BIN9374e34c245
DATA[NBF]root.Data
BIN9374e34c246
DATA[NBF]root.Data
BIN9374e34c247
DATA[NBF]root.Data
BIN9374e34c248
DATA[NBF]root.Data
BIN9374e34c249
DATA[NBF]root.Data
BIN9374e34c25
DATA[NBF]root.Data
BIN9374e34c250
DATA[NBF]root.Data
BIN9374e34c251
DATA[NBF]root.Data
BIN9374e34c252
DATA[NBF]root.Data
BIN9374e34c253
DATA[NBF]root.Data
BIN9374e34c254
DATA[NBF]root.Data
BIN9374e34c255
DATA[NBF]root.Data
BIN9374e34c256
DATA[NBF]root.Data
BIN9374e34c257
DATA[NBF]root.Data
BIN9374e34c258
DATA[NBF]root.Data
BIN9374e34c259
DATA[NBF]root.Data
BIN9374e34c26
DATA[NBF]root.Data
BIN9374e34c260
DATA[NBF]root.Data
BIN9374e34c261
DATA[NBF]root.Data
BIN9374e34c262
DATA[NBF]root.Data
BIN9374e34c263
DATA[NBF]root.Data
BIN9374e34c264
DATA[NBF]root.Data
BIN9374e34c265
DATA[NBF]root.Data
BIN9374e34c266
DATA[NBF]root.Data
BIN9374e34c267
DATA[NBF]root.Data
BIN9374e34c268
DATA[NBF]root.Data
BIN9374e34c269
DATA[NBF]root.Data
BIN9374e34c27
DATA[NBF]root.Data
BIN9374e34c270
DATA[NBF]root.Data
BIN9374e34c271
DATA[NBF]root.Data
BIN9374e34c272
DATA[NBF]root.Data
BIN9374e34c273
DATA[NBF]root.Data
BIN9374e34c274
DATA[NBF]root.Data
BIN9374e34c275
DATA[NBF]root.Data
BIN9374e34c276
DATA[NBF]root.Data
BIN9374e34c277
DATA[NBF]root.Data
BIN9374e34c278
DATA[NBF]root.Data
BIN9374e34c279
DATA[NBF]root.Data
BIN9374e34c28
DATA[NBF]root.Data
BIN9374e34c280
DATA[NBF]root.Data
BIN9374e34c281
DATA[NBF]root.Data
BIN9374e34c282
DATA[NBF]root.Data
BIN9374e34c29
DATA[NBF]root.Data
BIN9374e34c3
DATA[NBF]root.Data
BIN9374e34c30
DATA[NBF]root.Data
BIN9374e34c31
DATA[NBF]root.Data
BIN9374e34c32
DATA[NBF]root.Data
BIN9374e34c33
DATA[NBF]root.Data
BIN9374e34c34
DATA[NBF]root.Data
BIN9374e34c35
DATA[NBF]root.Data
BIN9374e34c36
DATA[NBF]root.Data
BIN9374e34c37
DATA[NBF]root.Data
BIN9374e34c38
DATA[NBF]root.Data
BIN9374e34c39
DATA[NBF]root.Data
BIN9374e34c4
DATA[NBF]root.Data
BIN9374e34c40
DATA[NBF]root.Data
BIN9374e34c41
DATA[NBF]root.Data
BIN9374e34c42
DATA[NBF]root.Data
BIN9374e34c43
DATA[NBF]root.Data
BIN9374e34c44
DATA[NBF]root.Data
BIN9374e34c45
DATA[NBF]root.Data
BIN9374e34c46
DATA[NBF]root.Data
BIN9374e34c47
DATA[NBF]root.Data
BIN9374e34c48
DATA[NBF]root.Data
BIN9374e34c49
DATA[NBF]root.Data
BIN9374e34c5
DATA[NBF]root.Data
BIN9374e34c50
DATA[NBF]root.Data
BIN9374e34c51
DATA[NBF]root.Data
BIN9374e34c52
DATA[NBF]root.Data
BIN9374e34c53
DATA[NBF]root.Data
BIN9374e34c54
DATA[NBF]root.Data
BIN9374e34c55
DATA[NBF]root.Data
BIN9374e34c56
DATA[NBF]root.Data
BIN9374e34c57
DATA[NBF]root.Data
BIN9374e34c58
DATA[NBF]root.Data
BIN9374e34c59
DATA[NBF]root.Data
BIN9374e34c6
DATA[NBF]root.Data
BIN9374e34c60
DATA[NBF]root.Data
BIN9374e34c61
DATA[NBF]root.Data
BIN9374e34c62
DATA[NBF]root.Data
BIN9374e34c63
DATA[NBF]root.Data
BIN9374e34c64
DATA[NBF]root.Data
BIN9374e34c65
DATA[NBF]root.Data
BIN9374e34c66
DATA[NBF]root.Data
BIN9374e34c67
DATA[NBF]root.Data
BIN9374e34c68
DATA[NBF]root.Data
BIN9374e34c69
DATA[NBF]root.Data
BIN9374e34c7
DATA[NBF]root.Data
BIN9374e34c70
DATA[NBF]root.Data
BIN9374e34c71
DATA[NBF]root.Data
BIN9374e34c72
DATA[NBF]root.Data
BIN9374e34c73
DATA[NBF]root.Data
BIN9374e34c74
DATA[NBF]root.Data
BIN9374e34c75
DATA[NBF]root.Data
BIN9374e34c76
DATA[NBF]root.Data
BIN9374e34c77
DATA[NBF]root.Data
BIN9374e34c78
DATA[NBF]root.Data
BIN9374e34c79
DATA[NBF]root.Data
BIN9374e34c8
DATA[NBF]root.Data
BIN9374e34c80
DATA[NBF]root.Data
BIN9374e34c81
DATA[NBF]root.Data
BIN9374e34c82
DATA[NBF]root.Data
BIN9374e34c83
DATA[NBF]root.Data
BIN9374e34c84
DATA[NBF]root.Data
BIN9374e34c85
DATA[NBF]root.Data
BIN9374e34c86
DATA[NBF]root.Data
BIN9374e34c87
DATA[NBF]root.Data
BIN9374e34c88
DATA[NBF]root.Data
BIN9374e34c89
DATA[NBF]root.Data
BIN9374e34c9
DATA[NBF]root.Data
BIN9374e34c90
DATA[NBF]root.Data
BIN9374e34c91
DATA[NBF]root.Data
BIN9374e34c92
DATA[NBF]root.Data
BIN9374e34c93
DATA[NBF]root.Data
BIN9374e34c94
DATA[NBF]root.Data
BIN9374e34c95
DATA[NBF]root.Data
BIN9374e34c96
DATA[NBF]root.Data
BIN9374e34c97
DATA[NBF]root.Data
BIN9374e34c98
DATA[NBF]root.Data
BIN9374e34c99
DATA[NBF]root.Data
BINResources
BINRT_ICON
BINID:0032
BINID:0
BINID:0033
BINID:0
BINID:0034
BINID:0
BINID:0035
BINID:0
BINRT_GROUP_CURSOR4
BINID:0001
BINID:0
BINRT_VERSION
BINID:0001
BINID:0
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Module Name
6BmtqoX19Fo
Full Name
6BmtqoX19Fo
EntryPoint
System.Void 6BmtqoX19Fo.3qjQaPp48w::8FzdDde6nE9()
Scope Name
6BmtqoX19Fo
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
6BmtqoX19Fo
Assembly Version
19.6.6.197
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1162
Main Method
System.Void 6BmtqoX19Fo.3qjQaPp48w::8FzdDde6nE9()
Main IL Instruction Count
93
Main IL 
nop <null>
nop <null>
ldloc.0 <null>
newobj System.Void 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::.ctor(6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7)
stloc.0 <null>
ldloc.0 <null>
ldc.i4 215
stfld System.Int32 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::1qdXgjR
ldc.i4.0 <null>
stloc.2 <null>
br.s IL_0018: nop
nop <null>
newobj System.Void System.Collections.Generic.List`1<System.Action>::.ctor()
stloc.1 <null>
br.s IL_006E: ldloc.0
ldloc.1 <null>
ldloc.0 <null>
ldftn System.Void 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::8Rwrg0iSq()
newobj System.Void System.Action::.ctor(System.Object,System.IntPtr)
callvirt System.Void System.Collections.Generic.List`1<System.Action>::Add(System.Action)
nop <null>
ldloc.0 <null>
ldfld System.Int32 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::1qdXgjR
ldc.i4.s 25
cgt <null>
stloc.s V_4
ldloc.s V_4
brfalse.s IL_006C: nop
ldloc.1 <null>
ldloc.0 <null>
ldftn System.Void 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::Kba20G_dj4Yz()
newobj System.Void System.Action::.ctor(System.Object,System.IntPtr)
callvirt System.Void System.Collections.Generic.List`1<System.Action>::Add(System.Action)
nop <null>
ldloc.1 <null>
ldloc.0 <null>
ldftn System.Void 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::Pkc52bRgAxq6()
newobj System.Void System.Action::.ctor(System.Object,System.IntPtr)
callvirt System.Void System.Collections.Generic.List`1<System.Action>::Add(System.Action)
nop <null>
br.s IL_0080: nop
nop <null>
nop <null>
ldloc.0 <null>
ldfld System.Int32 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::1qdXgjR
ldc.i4.s 25
rem <null>
ldc.i4.0 <null>
cgt.un <null>
stloc.s V_5
ldloc.s V_5
brtrue.s IL_0021: ldloc.1
nop <null>
ldloc.1 <null>
callvirt System.Collections.Generic.List`1/Enumerator<System.Action> System.Collections.Generic.List`1<System.Action>::GetEnumerator()
stloc.s V_6
br.s IL_009D: ldloca.s V_6
ldloca.s V_6
call System.Action System.Collections.Generic.List`1/Enumerator<System.Action>::get_Current()
stloc.s V_7
ldloc.s V_7
callvirt System.Void System.Action::Invoke()
nop <null>
nop <null>
ldloca.s V_6
call System.Boolean System.Collections.Generic.List`1/Enumerator<System.Action>::MoveNext()
stloc.s V_8
ldloc.s V_8
brtrue.s IL_008B: ldloca.s V_6
leave.s IL_00BB: ldc.i4.0
ldloca.s V_6
constrained. System.Collections.Generic.List`1/Enumerator<System.Action>
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
ldc.i4.0 <null>
stloc.s V_9
br.s IL_00C0: nop
nop <null>
ldloc.0 <null>
ldfld System.Object 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::9DmirdF
castclass System.Byte[]
call System.Void 6BmtqoX19Fo.7ZynXtw9r1::7Yi_Lr4omXz(System.Byte[])
nop <null>
leave.s IL_00E4: nop
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_11
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00E4: nop
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
576 files
EXE42cadc4b46710184f362a4c0648ffae0
Structure
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙