Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
4ff5eb85a422518dc88ee5d9bba6d6d2
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0032
ID:0
ID:0-preview.png
ID:0033
ID:0
ID:0034
ID:0
ID:0035
ID:0
ID:0036
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
zefn.zefn.resources
zefn.pgaixo4jai1.png
3f86aecdbbe539.Resources.resources
2396b5870
[NBF]root.Data
2396b5871
[NBF]root.Data
2396b58710
[NBF]root.Data
2396b587100
[NBF]root.Data
2396b587101
[NBF]root.Data
2396b587102
[NBF]root.Data
2396b587103
[NBF]root.Data
2396b587104
[NBF]root.Data
2396b587105
[NBF]root.Data
2396b587106
[NBF]root.Data
2396b587107
[NBF]root.Data
2396b587108
[NBF]root.Data
2396b587109
[NBF]root.Data
2396b58711
[NBF]root.Data
2396b587110
[NBF]root.Data
2396b587111
[NBF]root.Data
2396b587112
[NBF]root.Data
2396b587113
[NBF]root.Data
2396b587114
[NBF]root.Data
2396b587115
[NBF]root.Data
2396b587116
[NBF]root.Data
2396b587117
[NBF]root.Data
2396b587118
[NBF]root.Data
2396b587119
[NBF]root.Data
2396b58712
[NBF]root.Data
2396b587120
[NBF]root.Data
2396b587121
[NBF]root.Data
2396b587122
[NBF]root.Data
2396b587123
[NBF]root.Data
2396b587124
[NBF]root.Data
2396b587125
[NBF]root.Data
2396b587126
[NBF]root.Data
2396b587127
[NBF]root.Data
2396b587128
[NBF]root.Data
2396b587129
[NBF]root.Data
2396b58713
[NBF]root.Data
2396b587130
[NBF]root.Data
2396b587131
[NBF]root.Data
2396b587132
[NBF]root.Data
2396b587133
[NBF]root.Data
2396b587134
[NBF]root.Data
2396b587135
[NBF]root.Data
2396b587136
[NBF]root.Data
2396b587137
[NBF]root.Data
2396b587138
[NBF]root.Data
2396b587139
[NBF]root.Data
2396b58714
[NBF]root.Data
2396b587140
[NBF]root.Data
2396b587141
[NBF]root.Data
2396b587142
[NBF]root.Data
2396b587143
[NBF]root.Data
2396b58715
[NBF]root.Data
2396b58716
[NBF]root.Data
2396b58717
[NBF]root.Data
2396b58718
[NBF]root.Data
2396b58719
[NBF]root.Data
2396b5872
[NBF]root.Data
2396b58720
[NBF]root.Data
2396b58721
[NBF]root.Data
2396b58722
[NBF]root.Data
2396b58723
[NBF]root.Data
2396b58724
[NBF]root.Data
2396b58725
[NBF]root.Data
2396b58726
[NBF]root.Data
2396b58727
[NBF]root.Data
2396b58728
[NBF]root.Data
2396b58729
[NBF]root.Data
2396b5873
[NBF]root.Data
2396b58730
[NBF]root.Data
2396b58731
[NBF]root.Data
2396b58732
[NBF]root.Data
2396b58733
[NBF]root.Data
2396b58734
[NBF]root.Data
2396b58735
[NBF]root.Data
2396b58736
[NBF]root.Data
2396b58737
[NBF]root.Data
2396b58738
[NBF]root.Data
2396b58739
[NBF]root.Data
2396b5874
[NBF]root.Data
2396b58740
[NBF]root.Data
2396b58741
[NBF]root.Data
2396b58742
[NBF]root.Data
2396b58743
[NBF]root.Data
2396b58744
[NBF]root.Data
2396b58745
[NBF]root.Data
2396b58746
[NBF]root.Data
2396b58747
[NBF]root.Data
2396b58748
[NBF]root.Data
2396b58749
[NBF]root.Data
2396b5875
[NBF]root.Data
2396b58750
[NBF]root.Data
2396b58751
[NBF]root.Data
2396b58752
[NBF]root.Data
2396b58753
[NBF]root.Data
2396b58754
[NBF]root.Data
2396b58755
[NBF]root.Data
2396b58756
[NBF]root.Data
2396b58757
[NBF]root.Data
2396b58758
[NBF]root.Data
2396b58759
[NBF]root.Data
2396b5876
[NBF]root.Data
2396b58760
[NBF]root.Data
2396b58761
[NBF]root.Data
2396b58762
[NBF]root.Data
2396b58763
[NBF]root.Data
2396b58764
[NBF]root.Data
2396b58765
[NBF]root.Data
2396b58766
[NBF]root.Data
2396b58767
[NBF]root.Data
2396b58768
[NBF]root.Data
2396b58769
[NBF]root.Data
2396b5877
[NBF]root.Data
2396b58770
[NBF]root.Data
2396b58771
[NBF]root.Data
2396b58772
[NBF]root.Data
2396b58773
[NBF]root.Data
2396b58774
[NBF]root.Data
2396b58775
[NBF]root.Data
2396b58776
[NBF]root.Data
2396b58777
[NBF]root.Data
2396b58778
[NBF]root.Data
2396b58779
[NBF]root.Data
2396b5878
[NBF]root.Data
2396b58780
[NBF]root.Data
2396b58781
[NBF]root.Data
2396b58782
[NBF]root.Data
2396b58783
[NBF]root.Data
2396b58784
[NBF]root.Data
2396b58785
[NBF]root.Data
2396b58786
[NBF]root.Data
2396b58787
[NBF]root.Data
2396b58788
[NBF]root.Data
2396b58789
[NBF]root.Data
2396b5879
[NBF]root.Data
2396b58790
[NBF]root.Data
2396b58791
[NBF]root.Data
2396b58792
[NBF]root.Data
2396b58793
[NBF]root.Data
2396b58794
[NBF]root.Data
2396b58795
[NBF]root.Data
2396b58796
[NBF]root.Data
2396b58797
[NBF]root.Data
2396b58798
[NBF]root.Data
2396b58799
[NBF]root.Data
Name Value
Module Name
zefn
Full Name
zefn
EntryPoint
System.Void t3K1P.Bz41Sco9::i8WBe71J()
Scope Name
zefn
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
zefn
Assembly Version
1.7.12.8
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
2357
Main Method
System.Void t3K1P.Bz41Sco9::i8WBe71J()
Main IL Instruction Count
4
Main IL 
nop <null>
call System.Void t3K1P.Bz41Sco9::Eb14HzLn()
nop <null>
ret <null>
Module Name
zefn
Full Name
zefn
EntryPoint
System.Void t3K1P.Bz41Sco9::i8WBe71J()
Scope Name
zefn
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
zefn
Assembly Version
1.7.12.8
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
2357
Main Method
System.Void t3K1P.Bz41Sco9::i8WBe71J()
Main IL Instruction Count
4
Main IL 
nop <null>
call System.Void t3K1P.Bz41Sco9::Eb14HzLn()
nop <null>
ret <null>
Embedded Resources UNKNWOWNsuspect
4huhuhuhu
Suspicious Type Names (1-2 chars) UNKNWOWN
0huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙