Deep Malware Analysis of 555c7b9ea196a63fa8f344991ccfd246 | md5: 555c7b9ea196a63fa8f344991ccfd246 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.83

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very high

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Gdr16TgiA
Full Name	Gdr16TgiA
EntryPoint	System.Void Gdr16TgiA.Lc8w2Aj::4rfTk9QfG()
Scope Name	Gdr16TgiA
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Gdr16TgiA
Assembly Version	11.27.24.259
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	1600
Main Method	System.Void Gdr16TgiA.Lc8w2Aj::4rfTk9QfG()
Main IL Instruction Count	131
Main IL	nop <null> newobj System.Void System.Random::.ctor() stloc.0 <null> newobj System.Void System.Windows.Forms.Form::.ctor() stloc.2 <null> nop <null> ldloc.0 <null> ldc.i4.s -10 ldc.i4.s 10 callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) stloc.3 <null> ldloc.3 <null> ldc.i4.0 <null> cgt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0050: nop ldstr System.AppDomain call System.Type System.Type::GetType(System.String) stloc.s V_5 ldloc.s V_5 ldstr CurrentDomain ldc.i4.s 24 callvirt System.Reflection.PropertyInfo System.Type::GetProperty(System.String,System.Reflection.BindingFlags) stloc.s V_6 ldloc.s V_6 ldnull <null> ldnull <null> callvirt System.Object System.Reflection.PropertyInfo::GetValue(System.Object,System.Object[]) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.1 <null> br.s IL_006E: nop nop <null> ldstr System.Object call System.Type System.Type::GetType(System.String) stloc.s V_7 ldloc.s V_7 call System.Object System.Activator::CreateInstance(System.Type) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.1 <null> nop <null> nop <null> br.s IL_000D: nop nop <null> ldloc.1 <null> ldnull <null> ldstr Load ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> call System.Byte[] Gdr16TgiA.1Fydz2xSjW::6szCwB2w() call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Reverse<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) call System.Byte[] System.Linq.Enumerable::ToArray<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) ldsfld System.Func`3<System.Byte,System.Int32,System.Byte> Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::3t_EeJd9j6XxMf brfalse.s IL_009B: ldsfld Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::yt0E4 ldsfld System.Func`3<System.Byte,System.Int32,System.Byte> Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::3t_EeJd9j6XxMf br.s IL_00B1: call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Select<System.Byte,System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>,System.Func`3<System.Byte,System.Int32,System.Byte>) ldsfld Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::yt0E4 ldftn System.Byte Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::mWi5K8gk(System.Byte,System.Int32) newobj System.Void System.Func`3<System.Byte,System.Int32,System.Byte>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`3<System.Byte,System.Int32,System.Byte> Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::3t_EeJd9j6XxMf call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Select<System.Byte,System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>,System.Func`3<System.Byte,System.Int32,System.Byte>) call System.Byte[] System.Linq.Enumerable::ToArray<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) stelem.ref <null> ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldnull <null> ldstr GetTypes ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldc.i4.s 24 box System.Int32 stelem.ref <null> ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldnull <null> ldstr GetMethods ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) castclass System.Collections.IEnumerable callvirt System.Collections.IEnumerator System.Collections.IEnumerable::GetEnumerator() stloc.s V_8 br.s IL_013B: ldloc.s V_8 ldloc.s V_8 callvirt System.Object System.Collections.IEnumerator::get_Current() call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.s V_9 nop <null> ldloc.s V_9 castclass System.Reflection.MethodInfo ldnull <null> ldc.i4.0 <null> newarr System.Object callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> leave.s IL_0139: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_10 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0139: nop nop <null> nop <null> ldloc.s V_8 callvirt System.Boolean System.Collections.IEnumerator::MoveNext() stloc.s V_11 ldloc.s V_11 brtrue.s IL_0104: ldloc.s V_8 leave.s IL_0161: ret ldloc.s V_8 isinst System.IDisposable brfalse.s IL_0160: endfinally ldloc.s V_8 isinst System.IDisposable callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ret <null>
Module Name	Gdr16TgiA
Full Name	Gdr16TgiA
EntryPoint	System.Void Gdr16TgiA.Lc8w2Aj::4rfTk9QfG()
Scope Name	Gdr16TgiA
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Gdr16TgiA
Assembly Version	11.27.24.259
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	1600
Main Method	System.Void Gdr16TgiA.Lc8w2Aj::4rfTk9QfG()
Main IL Instruction Count	131
Main IL	nop <null> newobj System.Void System.Random::.ctor() stloc.0 <null> newobj System.Void System.Windows.Forms.Form::.ctor() stloc.2 <null> nop <null> ldloc.0 <null> ldc.i4.s -10 ldc.i4.s 10 callvirt System.Int32 System.Random::Next(System.Int32,System.Int32) stloc.3 <null> ldloc.3 <null> ldc.i4.0 <null> cgt <null> stloc.s V_4 ldloc.s V_4 brfalse.s IL_0050: nop ldstr System.AppDomain call System.Type System.Type::GetType(System.String) stloc.s V_5 ldloc.s V_5 ldstr CurrentDomain ldc.i4.s 24 callvirt System.Reflection.PropertyInfo System.Type::GetProperty(System.String,System.Reflection.BindingFlags) stloc.s V_6 ldloc.s V_6 ldnull <null> ldnull <null> callvirt System.Object System.Reflection.PropertyInfo::GetValue(System.Object,System.Object[]) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.1 <null> br.s IL_006E: nop nop <null> ldstr System.Object call System.Type System.Type::GetType(System.String) stloc.s V_7 ldloc.s V_7 call System.Object System.Activator::CreateInstance(System.Type) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.1 <null> nop <null> nop <null> br.s IL_000D: nop nop <null> ldloc.1 <null> ldnull <null> ldstr Load ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> call System.Byte[] Gdr16TgiA.1Fydz2xSjW::6szCwB2w() call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Reverse<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) call System.Byte[] System.Linq.Enumerable::ToArray<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) ldsfld System.Func`3<System.Byte,System.Int32,System.Byte> Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::3t_EeJd9j6XxMf brfalse.s IL_009B: ldsfld Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::yt0E4 ldsfld System.Func`3<System.Byte,System.Int32,System.Byte> Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::3t_EeJd9j6XxMf br.s IL_00B1: call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Select<System.Byte,System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>,System.Func`3<System.Byte,System.Int32,System.Byte>) ldsfld Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::yt0E4 ldftn System.Byte Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::mWi5K8gk(System.Byte,System.Int32) newobj System.Void System.Func`3<System.Byte,System.Int32,System.Byte>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`3<System.Byte,System.Int32,System.Byte> Gdr16TgiA.Lc8w2Aj/fQo3x1Lg2tk.wt0Si8Pp3t::3t_EeJd9j6XxMf call System.Collections.Generic.IEnumerable`1<System.Byte> System.Linq.Enumerable::Select<System.Byte,System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>,System.Func`3<System.Byte,System.Int32,System.Byte>) call System.Byte[] System.Linq.Enumerable::ToArray<System.Byte>(System.Collections.Generic.IEnumerable`1<System.Byte>) stelem.ref <null> ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldnull <null> ldstr GetTypes ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldc.i4.s 24 box System.Int32 stelem.ref <null> ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) ldnull <null> ldstr GetMethods ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) castclass System.Collections.IEnumerable callvirt System.Collections.IEnumerator System.Collections.IEnumerable::GetEnumerator() stloc.s V_8 br.s IL_013B: ldloc.s V_8 ldloc.s V_8 callvirt System.Object System.Collections.IEnumerator::get_Current() call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.s V_9 nop <null> ldloc.s V_9 castclass System.Reflection.MethodInfo ldnull <null> ldc.i4.0 <null> newarr System.Object callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) pop <null> leave.s IL_0139: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_10 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0139: nop nop <null> nop <null> ldloc.s V_8 callvirt System.Boolean System.Collections.IEnumerator::MoveNext() stloc.s V_11 ldloc.s V_11 brtrue.s IL_0104: ldloc.s V_8 leave.s IL_0161: ret ldloc.s V_8 isinst System.IDisposable brfalse.s IL_0160: endfinally ldloc.s V_8 isinst System.IDisposable callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ret <null>