Suspicious
Suspect

54141a823d598ae0440eb204cee4e1a8

PE Executable
MD5: 54141a823d598ae0440eb204cee4e1a8
Size: 910.85 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 54141a823d598ae0440eb204cee4e1a8
Sha1 5e422a64f7c867b374b5aebfad24f6afb3fa6564
Sha256 ba4beb7742a49af2cce8f677cfd35ef883b5bedc3f76478f9e49f41936f43f78
Sha384 58dd4dab89222f80c4df73444190530321b4dbf4195fc901e72134ad0d94dbb5593ab05a81c164276a4e23024ab9afb1
Sha512 f6149112e49ee751c28ee261197d6f41c7ba9578e21a045e143ab3be5b4da5dd654a707460058b857fce116b8f49df965085146d67bc8d69408ec56aa29a3de5
SSDeep 24576:8MPYpSPzoawGMGh1D5NoUnugzlxNevHEZQfyV1:9PIV6PFnu2xNxKe1
TLSH 271512641659E917D0921F780C70E3F817BA9ECDAC11D3438AFDACEBBD2AB5520942D3
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
TetrisLite.Formularios.MenuPrincipal.resources
TetrisLite.Properties.Resources.resources
OiTX
[NBF]root.Data
[NBF]root.Data-preview.png
RH1
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: GDGT.pdb
Module Name
GDGT.exe
Full Name
GDGT.exe
EntryPoint
System.Void TetrisLite.Program::Main()
Scope Name
GDGT.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
GDGT
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
79
Main Method
System.Void TetrisLite.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void TetrisLite.Formularios.MenuPrincipal::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
TetrisLite.Formularios.MenuPrincipal.resources
TetrisLite.Properties.Resources.resources
OiTX
[NBF]root.Data
[NBF]root.Data-preview.png
RH1
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙