Malicious
Malicious

5081657547532969afad7a03891b43f7

Share on LinkedIn
Print
PE Executable
MD5: 5081657547532969afad7a03891b43f7
Size: 655.87 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
655.87 KB · 655,872 B
First seen
2026-07-11 06:46 · 3 months ago
Last seen
2026-07-11 06:46 · 3 months ago
Last analysis
2026-07-11 06:46 · 3 months ago
Hashes
MD5 5081657547532969afad7a03891b43f7 Sha1 2aa33f9d04274c941ec0a668819a2f3960c691d1 Sha256 8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198 Sha384 09d68fef3d22d875d5a5d57db4a3c23a400338951288466e04ef5719b99c0d7aff3f7428256f3ed720227fb06478b2b0 Sha512 66d44c75fe03e44cd09a2ed8e397960e586ab990636509efbcd302d573b025c1861d12869cde01b623954547dba6e5f57091933f8f333d378c805edc40e87b14 SSDeep 12288:M9J85LGE/c8SttVJDj8iCug9aCenPcN3CNIb88WsNMP5F1k:M9gSE/c8SttHf8iC7hWPW3CNIb88WsN8 TLSH 66D4194177409B51D55A317AD3D618340BF1B9E74B32C20AEF8A3FA97D72363AC1B60A
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Medium
1 malicious · 18 files
EXE5081657547532969afad7a03891b43f7
Structure
Name Value
Module Name
Spulebane.exe
Full Name
Spulebane.exe
EntryPoint 
System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Scope Name
Spulebane.exe
Scope Type
ModuleDef
Kind
Console
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Spulebane
Assembly Version
37.40.78.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
461d39c4a423da0b
Target Framework
.NETFramework,Version=v4.0
Total Strings
124
Main Method 
System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Main IL Instruction Count
55
Main IL 
ldc.i4 79460974
stloc V_4
ldc.i4 2086112099
stloc V_5
ldc.i4 3
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 201
br IL_005E: stloc V_4
ldc.i4 135
br IL_005E: stloc V_4
ldc.i4 454
br IL_005E: stloc V_4
ldc.i4 235
br IL_005E: stloc V_4
ldc.i4 270
br IL_005E: stloc V_4
stloc V_4
ldc.i4 3
newarr System.Int32
stloc V_3
ldloc V_3
ldc.i4 0
ldc.i4 809
stelem.i4 <null>
ldloc V_3
ldc.i4 1
ldc.i4 781
stelem.i4 <null>
ldloc V_3
ldc.i4 2
ldc.i4 703
stelem.i4 <null>
ldloc V_3
ldc.i4 0
ldelem.i4 <null>
stloc V_5
nop <null>
call System.IntPtr f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cd039bc9f2ac7cb09fe1eec6c1234b95()
ldc.i4 270
ldloc V_4
sub <null>
call System.Boolean f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cf0fb09fc8737c2fbc5d8da397c3c292(System.IntPtr,System.Int32)
pop <null>
leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles()
pop <null>
leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles()
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
ldc.i4 -270
ldloc V_4
add <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void c46b289fb7fd506407569ddbd438c5e5.a57d8da3267353e6590928a2a94a29ad::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
ret <null>
Module Name
Spulebane.exe
Full Name
Spulebane.exe
EntryPoint 
System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Scope Name
Spulebane.exe
Scope Type
ModuleDef
Kind
Console
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Spulebane
Assembly Version
37.40.78.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
461d39c4a423da0b
Target Framework
.NETFramework,Version=v4.0
Total Strings
124
Main Method 
System.Void c8f2acf824d9dbac3e552a89b1cf736f.b71a30043662d3809d96f14bad90da15::eecffb1bf876af25223d7f526542343d()
Main IL Instruction Count
55
Main IL 
ldc.i4 79460974
stloc V_4
ldc.i4 2086112099
stloc V_5
ldc.i4 3
switch dnlib.DotNet.Emit.Instruction[]
ldc.i4 201
br IL_005E: stloc V_4
ldc.i4 135
br IL_005E: stloc V_4
ldc.i4 454
br IL_005E: stloc V_4
ldc.i4 235
br IL_005E: stloc V_4
ldc.i4 270
br IL_005E: stloc V_4
stloc V_4
ldc.i4 3
newarr System.Int32
stloc V_3
ldloc V_3
ldc.i4 0
ldc.i4 809
stelem.i4 <null>
ldloc V_3
ldc.i4 1
ldc.i4 781
stelem.i4 <null>
ldloc V_3
ldc.i4 2
ldc.i4 703
stelem.i4 <null>
ldloc V_3
ldc.i4 0
ldelem.i4 <null>
stloc V_5
nop <null>
call System.IntPtr f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cd039bc9f2ac7cb09fe1eec6c1234b95()
ldc.i4 270
ldloc V_4
sub <null>
call System.Boolean f7548550471a2e038c1c034cf80c1a78.e8488028eef8d069400b0c0bbd0e4c49::cf0fb09fc8737c2fbc5d8da397c3c292(System.IntPtr,System.Int32)
pop <null>
leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles()
pop <null>
leave IL_00CC: call System.Void System.Windows.Forms.Application::EnableVisualStyles()
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
ldc.i4 -270
ldloc V_4
add <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void c46b289fb7fd506407569ddbd438c5e5.a57d8da3267353e6590928a2a94a29ad::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙