Deep Malware Analysis of 42cadc4b46710184f362a4c0648ffae0 | md5: 42cadc4b46710184f362a4c0648ffae0 | Executable | PE (Portable Executable) | .Net | Managed .NET | PE File Layout | SOS: 0.84 | Win 32 Exe | x86

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

5.77 MB · 5,768,704 B

First seen

2026-10-19 08:01 · 5 days ago

Last seen

2026-10-19 08:01 · 5 days ago

Last analysis

2026-10-19 08:02 · 5 days ago

Hashes

MD5 42cadc4b46710184f362a4c0648ffae0 Sha1 42c42696757ac261fd1eddef5cc7a385fca73218 Sha256 0ed7df66992e4d52d4aba0d66fdf687e3e3eaab8aa6826134d034da078f40fcd Sha384 2f13bbf0821a54b419e1db1832ecf4a3c8754d1e4fb2e203f3b83444ace788ec219413ed6e3bb21fdc96713822e5beb5 Sha512 af86606dcc5c2ec41cbbca3d82672c9129e58c1b03b25eba7849a64a60fa187367540b9c33ce60229376dc073c314694656ba9d031e9b33cea07602e06c52f22 SSDeep 98304:aUdUOamKBr+1dgTgFvQ+L+oL9Q37PE4rmN:5vyyzgcF4+l9Ibrc TLSH B046232237C20468C53ECB74C9399B8267F2BE5A5935CB1E7B8D318D4C36B539762722

Detection

Symbol obfuscation

Very high

576 files

EXE42cadc4b46710184f362a4c0648ffae0

Structure

BIN.Net Resources

BINResources

STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2

Name	Value
Module Name	6BmtqoX19Fo
Full Name	6BmtqoX19Fo
EntryPoint	System.Void 6BmtqoX19Fo.3qjQaPp48w::8FzdDde6nE9()
Scope Name	6BmtqoX19Fo
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	6BmtqoX19Fo
Assembly Version	19.6.6.197
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	1162
Main Method	System.Void 6BmtqoX19Fo.3qjQaPp48w::8FzdDde6nE9()
Main IL Instruction Count	93
Main IL	nop <null> nop <null> ldloc.0 <null> newobj System.Void 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::.ctor(6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7) stloc.0 <null> ldloc.0 <null> ldc.i4 215 stfld System.Int32 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::1qdXgjR ldc.i4.0 <null> stloc.2 <null> br.s IL_0018: nop nop <null> newobj System.Void System.Collections.Generic.List`1<System.Action>::.ctor() stloc.1 <null> br.s IL_006E: ldloc.0 ldloc.1 <null> ldloc.0 <null> ldftn System.Void 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::8Rwrg0iSq() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) callvirt System.Void System.Collections.Generic.List`1<System.Action>::Add(System.Action) nop <null> ldloc.0 <null> ldfld System.Int32 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::1qdXgjR ldc.i4.s 25 cgt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_006C: nop ldloc.1 <null> ldloc.0 <null> ldftn System.Void 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::Kba20G_dj4Yz() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) callvirt System.Void System.Collections.Generic.List`1<System.Action>::Add(System.Action) nop <null> ldloc.1 <null> ldloc.0 <null> ldftn System.Void 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::Pkc52bRgAxq6() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) callvirt System.Void System.Collections.Generic.List`1<System.Action>::Add(System.Action) nop <null> br.s IL_0080: nop nop <null> nop <null> ldloc.0 <null> ldfld System.Int32 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::1qdXgjR ldc.i4.s 25 rem <null> ldc.i4.0 <null> cgt.un <null> stloc.s V_5 ldloc.s V_5 brtrue.s IL_0021: ldloc.1 nop <null> ldloc.1 <null> callvirt System.Collections.Generic.List`1/Enumerator<System.Action> System.Collections.Generic.List`1<System.Action>::GetEnumerator() stloc.s V_6 br.s IL_009D: ldloca.s V_6 ldloca.s V_6 call System.Action System.Collections.Generic.List`1/Enumerator<System.Action>::get_Current() stloc.s V_7 ldloc.s V_7 callvirt System.Void System.Action::Invoke() nop <null> nop <null> ldloca.s V_6 call System.Boolean System.Collections.Generic.List`1/Enumerator<System.Action>::MoveNext() stloc.s V_8 ldloc.s V_8 brtrue.s IL_008B: ldloca.s V_6 leave.s IL_00BB: ldc.i4.0 ldloca.s V_6 constrained. System.Collections.Generic.List`1/Enumerator<System.Action> callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ldc.i4.0 <null> stloc.s V_9 br.s IL_00C0: nop nop <null> ldloc.0 <null> ldfld System.Object 6BmtqoX19Fo.3qjQaPp48w/qHd2Z6kys_1EYo.Meo1m7::9DmirdF castclass System.Byte[] call System.Void 6BmtqoX19Fo.7ZynXtw9r1::7Yi_Lr4omXz(System.Byte[]) nop <null> leave.s IL_00E4: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_11 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00E4: nop nop <null> ret <null>
Info	PE Detect: PeReader OK (file layout)