Deep Malware Analysis of 4a6b939beb42f3588ee9cb86bb646158 | md5: 4a6b939beb42f3588ee9cb86bb646158 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.78

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score High

MD5	4a6b939beb42f3588ee9cb86bb646158
Sha1	f10dd3a1c30f48393c68fac944c489616dcd8006
Sha256	326bcb8456524b7a385028d507b09df71fb56dde16100fa3f753a10d59f4c752
Sha384	89d86a93970d6ba394bb4b59fa960c8adc36a951bf5f6712b6d5258fafe90ff5d4a5c6b5a95e8557f408e32a8194313a
Sha512	c8e608789e5d825dec36f70a671fb9fd45964543f9b2b51c780994c16c61795dd6f7e1ea34a52bb2a761fc89191a62eb249e4e69396ab08edc51ffbce6ad623b
SSDeep	12288:sjGYeKqOZQ8h44udD6p7bx5WzMVMFOzrBG9Nzd2TwjQ6zGTT67UWOAO+cviqL:sjFNRQ84LdedbKzk7rBwNzUTwM
TLSH	7AE4AEAC3210B89EC453CE728E74DD70AA247D7A9707C20395D71DAFB91DA96DE002F2

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	DLcD.exe
Full Name	DLcD.exe
EntryPoint	System.Void EventLogAnalyzer.Program::Main()
Scope Name	DLcD.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	DLcD
Assembly Version	3.7.2.4
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	341
Main Method	System.Void EventLogAnalyzer.Program::Main()
Main IL Instruction Count	75
Main IL	nop <null> ldc.i4 -133843745 ldc.i4 -1032639177 xor <null> dup <null> stloc.1 <null> ldc.i4.5 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0064: nop call System.Void EventLogAnalyzer.Program::‫⁪⁭‭⁫‍‍⁭‮‬‬‫⁭‪⁭‪‍⁪‏‪⁭⁯‬‬‬‮⁮‭‬‍‮‌⁭⁮⁬‌‫‮() ldloc.1 <null> ldc.i4 -1783019940 mul <null> ldc.i4 359670237 xor <null> br.s IL_0006: ldc.i4 -1032639177 nop <null> ldloc.1 <null> ldc.i4 499836774 mul <null> ldc.i4 -316781668 xor <null> br.s IL_0006: ldc.i4 -1032639177 ldc.i4.0 <null> call System.Void EventLogAnalyzer.Program::‬⁬⁬‫⁮⁫‍‏⁫‫‍‌‮‪⁭⁬‎‪‫‮‪‭‍⁭⁪‍⁪‍‫⁬‍⁯⁭⁯⁯‪‮‎‮(System.Boolean) ldloc.1 <null> ldc.i4 1602090038 mul <null> ldc.i4 -690382356 xor <null> br.s IL_0006: ldc.i4 -1032639177 nop <null> nop <null> newobj System.Void EventLogAnalyzer.Forms.MainForm::.ctor() call System.Void EventLogAnalyzer.Program::⁪‬‌‎‏‪‭⁪‌‭‮⁯⁫‭⁫‌⁬‬‌⁯⁬⁬‌⁭‮⁯‪⁯‪‏‭‍‪‬‍‪‬‏‮‮(System.Windows.Forms.Form) nop <null> nop <null> leave.s IL_00E0: ret stloc.0 <null> ldc.i4 -997515194 ldc.i4 -1032639177 xor <null> dup <null> stloc.1 <null> ldc.i4.4 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_00DD: nop nop <null> ldloc.1 <null> ldc.i4 1673514075 mul <null> ldc.i4 1848329362 xor <null> br.s IL_007A: ldc.i4 -1032639177 ldstr An unexpected error occurred: ldloc.0 <null> call System.String EventLogAnalyzer.Program::⁭‫⁭‬‪‪‫‮⁬⁭‭‪‪‏‍‎⁬‮⁭⁬‎‍‮‪‮‭⁭‍‫‪‮‬‏‏‎‮(System.Exception) ldstr The application will now close. call System.String EventLogAnalyzer.Program::⁪⁭‮‌‭⁮⁯‌‏⁬‏⁭‮⁯‍‍⁯‏‎‫⁮‪⁪‍‏⁪⁬‫⁬‮‬‍⁮‏⁫⁫‮‮(System.String,System.String,System.String) ldstr Critical Error ldc.i4.0 <null> ldc.i4.s 16 call System.Windows.Forms.DialogResult EventLogAnalyzer.Program::‌‎⁯‌⁮⁭⁯⁬‬‏‮‮‌⁬⁭‮‪⁪⁮‍⁫‎‮‮‪⁭‬⁫‪‬‫‬‏⁭⁪‪‌‏‮(System.String,System.String,System.Windows.Forms.MessageBoxButtons,System.Windows.Forms.MessageBoxIcon) pop <null> ldloc.1 <null> ldc.i4 -559274812 mul <null> ldc.i4 -969735568 xor <null> br.s IL_007A: ldc.i4 -1032639177 nop <null> leave.s IL_00E0: ret ret <null>
Module Name	DLcD.exe
Full Name	DLcD.exe
EntryPoint	System.Void EventLogAnalyzer.Program::Main()
Scope Name	DLcD.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	DLcD
Assembly Version	3.7.2.4
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	341
Main Method	System.Void EventLogAnalyzer.Program::Main()
Main IL Instruction Count	75
Main IL	nop <null> ldc.i4 -133843745 ldc.i4 -1032639177 xor <null> dup <null> stloc.1 <null> ldc.i4.5 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0064: nop call System.Void EventLogAnalyzer.Program::‫⁪⁭‭⁫‍‍⁭‮‬‬‫⁭‪⁭‪‍⁪‏‪⁭⁯‬‬‬‮⁮‭‬‍‮‌⁭⁮⁬‌‫‮() ldloc.1 <null> ldc.i4 -1783019940 mul <null> ldc.i4 359670237 xor <null> br.s IL_0006: ldc.i4 -1032639177 nop <null> ldloc.1 <null> ldc.i4 499836774 mul <null> ldc.i4 -316781668 xor <null> br.s IL_0006: ldc.i4 -1032639177 ldc.i4.0 <null> call System.Void EventLogAnalyzer.Program::‬⁬⁬‫⁮⁫‍‏⁫‫‍‌‮‪⁭⁬‎‪‫‮‪‭‍⁭⁪‍⁪‍‫⁬‍⁯⁭⁯⁯‪‮‎‮(System.Boolean) ldloc.1 <null> ldc.i4 1602090038 mul <null> ldc.i4 -690382356 xor <null> br.s IL_0006: ldc.i4 -1032639177 nop <null> nop <null> newobj System.Void EventLogAnalyzer.Forms.MainForm::.ctor() call System.Void EventLogAnalyzer.Program::⁪‬‌‎‏‪‭⁪‌‭‮⁯⁫‭⁫‌⁬‬‌⁯⁬⁬‌⁭‮⁯‪⁯‪‏‭‍‪‬‍‪‬‏‮‮(System.Windows.Forms.Form) nop <null> nop <null> leave.s IL_00E0: ret stloc.0 <null> ldc.i4 -997515194 ldc.i4 -1032639177 xor <null> dup <null> stloc.1 <null> ldc.i4.4 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_00DD: nop nop <null> ldloc.1 <null> ldc.i4 1673514075 mul <null> ldc.i4 1848329362 xor <null> br.s IL_007A: ldc.i4 -1032639177 ldstr An unexpected error occurred: ldloc.0 <null> call System.String EventLogAnalyzer.Program::⁭‫⁭‬‪‪‫‮⁬⁭‭‪‪‏‍‎⁬‮⁭⁬‎‍‮‪‮‭⁭‍‫‪‮‬‏‏‎‮(System.Exception) ldstr The application will now close. call System.String EventLogAnalyzer.Program::⁪⁭‮‌‭⁮⁯‌‏⁬‏⁭‮⁯‍‍⁯‏‎‫⁮‪⁪‍‏⁪⁬‫⁬‮‬‍⁮‏⁫⁫‮‮(System.String,System.String,System.String) ldstr Critical Error ldc.i4.0 <null> ldc.i4.s 16 call System.Windows.Forms.DialogResult EventLogAnalyzer.Program::‌‎⁯‌⁮⁭⁯⁬‬‏‮‮‌⁬⁭‮‪⁪⁮‍⁫‎‮‮‪⁭‬⁫‪‬‫‬‏⁭⁪‪‌‏‮(System.String,System.String,System.Windows.Forms.MessageBoxButtons,System.Windows.Forms.MessageBoxIcon) pop <null> ldloc.1 <null> ldc.i4 -559274812 mul <null> ldc.i4 -969735568 xor <null> br.s IL_007A: ldc.i4 -1032639177 nop <null> leave.s IL_00E0: ret ret <null>