Suspicious
Suspect

42cd21e5119193f0b631f87d9c87e36c

PE Executable
MD5: 42cd21e5119193f0b631f87d9c87e36c
Size: 1.14 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 42cd21e5119193f0b631f87d9c87e36c
Sha1 b1cc51fda64aca3e4919435f10175cd782d0e68a
Sha256 fa40373e5a9d2462d48caca66c22f98e65cebe0fe05f81dce42eae9476526673
Sha384 cf3ac4a135631a3d53554a2d405a4f783c49180be6399ce0bc7e579c5183da94bdaaba4018d93bac11909a5487da5a51
Sha512 bfb6df3a36e81053ace4947b0c44d3d7800abd96bd2b943c52fd973c098942e0b388ad6174cfa429a9b27a754ecca1e484c09b5f632dd9a4a55dbe097a695b5d
SSDeep 24576:MG8I1h6LHEbw9Ht/+66Tz5tXx5BHKmIl7+2gM2WsX:MrltmHTz5FBKJcvJT
TLSH 0F3501142219CE07C4765FF40971E2F41B795E89EA22C313EFEABEEFB57A7101855282
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual C++ v6.0 DLLMicrosoft Visual Studio .NET
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
BakeryOven.NavigationForm.resources
BakeryOven.Properties.Resources.resources
DlpR
[NBF]root.Data
[NBF]root.Data-preview.png
Qube
[NBF]root.Data
STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2
Name Value
Module Name
PKDV.exe
Full Name
PKDV.exe
EntryPoint
System.Void BakeryOven.Program::Main()
Scope Name
PKDV.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
PKDV
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Info
PE Detect: PeReader OK (file layout)
Total Strings
367
Main Method
System.Void BakeryOven.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void BakeryOven.NavigationForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
PKDV.exe
Full Name
PKDV.exe
EntryPoint
System.Void BakeryOven.Program::Main()
Scope Name
PKDV.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
PKDV
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
367
Main Method
System.Void BakeryOven.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void BakeryOven.NavigationForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
BakeryOven.NavigationForm.resources
BakeryOven.Properties.Resources.resources
DlpR
[NBF]root.Data
[NBF]root.Data-preview.png
Qube
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙