Suspicious
Suspect

46c6e04502e58ea0363ab6cb369a9cbf

PE Executable
MD5: 46c6e04502e58ea0363ab6cb369a9cbf
Size: 704 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 46c6e04502e58ea0363ab6cb369a9cbf
Sha1 f5e9afe7fade23dcb4a9e1f62de4ce05e40e0583
Sha256 e83387eaf804e1f901c10a215a2323211f36a4697eed30486e7018f62bf710c3
Sha384 260c4fcb5a9f45ae9ea1059402b0a5d870878af6175a66f6c7861fd070b50c2a0bfe0b514e736c0d86cdf7c6a53fc747
Sha512 c891305917b04b7b3287f6a320917735fecd9877a4d730532505ab68c71b67bdd3486363d0532e4debb1b1f1b10cc4749a3a1622f6f7676488f24b622488365b
SSDeep 12288:7NsMIZLSmC/q2IPgcalcgXmV9B94KxLwiQGx+q9WJ8y8ESI0OW:JsMIAmC/Mxaqkm0WdQGxjAuy8
TLSH E9E412A43767C906E9E117710CB1E3B67A9C3FDD6820C3074AEEACEB39256553D90362
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
TypeTester.Properties.Resources.resources
DYIE
[NBF]root.Data
[NBF]root.Data-preview.png
KS
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: PKYY.pdb
Module Name
PKYY.exe
Full Name
PKYY.exe
EntryPoint
System.Void TypeTester.Program::Main()
Scope Name
PKYY.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
PKYY
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
99
Main Method
System.Void TypeTester.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void TypeTester.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
TypeTester.Properties.Resources.resources
DYIE
[NBF]root.Data
[NBF]root.Data-preview.png
KS
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙