Deep Malware Analysis of 4c0dfc672af1694cdc947daea6af0df2 | md5: 4c0dfc672af1694cdc947daea6af0df2 | Executable | PE (Portable Executable) | .Net | Managed .NET | PE File Layout | Win 32 Exe | x86 | SOS: 0.93

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very high

MD5	4c0dfc672af1694cdc947daea6af0df2
Sha1	0826b9f4cd72b545e87ce11272bdc979bd882aa1
Sha256	890a5dd692101ac7f2f26724d158d29080edf9fa00487faee9e49bb3deb85b7d
Sha384	e339be1ded72bff965b592d9350623bfcab170511faccaed6f04a5179d59e56b4bdca1704d41d7ff967189485febf57c
Sha512	e2c2139752ffa733d1c5b1a595f7b463ee20455add57c285c31457455ed6644d51b741f6fb9b0330a8b240b28134233b2d494c8cbc6f1e75094ca0abb782913a
SSDeep	6144:MLV6Bta6dtJmakIM5cMluAJDAxGJg09osn:MLV6BtpmkjRAioJgz8
TLSH	C314CF1A77A94A2FE2DE89B9601212579379C2E3D8C3F3EF28D455B34B163E50A071D3

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	NanoCore Client.exe
Full Name	NanoCore Client.exe
EntryPoint	System.Void ClientLoaderForm::Main()
Scope Name	NanoCore Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v2.0.50727
Tables Header Version	512
WinMD Version	<null>
Assembly Name	NanoCore Client
Assembly Version	1.2.2.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	2
Main Method	System.Void ClientLoaderForm::Main()
Main IL Instruction Count	4
Main IL	`call #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw== #=q_jQLaNdtSDa6ovA0VGw50w==::#=qqROT7DfncW7strhZvp0iRQ==() callvirt ClientLoaderForm #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw==::#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`
Module Name	NanoCore Client.exe
Full Name	NanoCore Client.exe
EntryPoint	System.Void ClientLoaderForm::Main()
Scope Name	NanoCore Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v2.0.50727
Tables Header Version	512
WinMD Version	<null>
Assembly Name	NanoCore Client
Assembly Version	1.2.2.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	2
Main Method	System.Void ClientLoaderForm::Main()
Main IL Instruction Count	4
Main IL	`call #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw== #=q_jQLaNdtSDa6ovA0VGw50w==::#=qqROT7DfncW7strhZvp0iRQ==() callvirt ClientLoaderForm #=q_jQLaNdtSDa6ovA0VGw50w==/#=qlsj4Kl0M6SYgZMJLZ$QkSw==::#=qbzig1$2CwLluEJt5uPtpgqPx5y_2S$GoPgJP36N8bTE=() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`