Suspicious
Suspect

585c029248d4c17f5ecc2e2c9d6eef6b

Share on LinkedIn
Print
PE Executable
MD5: 585c029248d4c17f5ecc2e2c9d6eef6b
Size: 968.19 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 585c029248d4c17f5ecc2e2c9d6eef6b
Sha1 0c7a04c5e1d4af6193ce62ddb8a6b3b1a88e125d
Sha256 8045c0d6c8efb31c31142047cf7f27375da1cb845a670fa2fa9fbcc612ce3b11
Sha384 e51fd1a12d5d14a56bea331e8e8222c4c030527da8798da09dc131295e2d36c06fd7236945556a6b532f9e75eed792f7
Sha512 d1bb5c74ad2c4b72bc3f2bffcb43f4db6bc51c77fc9a8928c564edc3d6d4693028c21dc25c185403bce499f31624aeb3e6d88d55f51c5deeaed6a0f9a398d282
SSDeep 24576:iTUpqVK5COGBPDsif6YFUW4nZSCXpI5dE5C6:EUt5HBifHUdnZ7X65dE5
TLSH 2625CE682617DB37C42167B1CA73E2F416686D89E810E23F1AD97EFB7F31E305954282
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0
585c029248d4c17f5ecc2e2c9d6eef6b
.Net Resources
RicePaddy.Properties.Resources.resources
KYXo
[NBF]root.Data
[NBF]root.Data-preview.png
Tissue
[NBF]root.Data
RicePaddy.SeasonForm.resources
$this.Icon
[NBF]root.IconData
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
sizK.exe
Full Name
sizK.exe
EntryPoint
System.Void RicePaddy.Program::Main()
Scope Name
sizK.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
sizK
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
345
Main Method
System.Void RicePaddy.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void RicePaddy.PaddyForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙