Deep Malware Analysis of 7c092fd8f743fc8debc31870998b5eaa | md5: 7c092fd8f743fc8debc31870998b5eaa | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.80

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very high

MD5	7c092fd8f743fc8debc31870998b5eaa
Sha1	4dade7871ae5b43bdf83f9fdcea3d8a1e2181d25
Sha256	294151cd09c61e402887acda85997e84ea8d9e53fd284deb26270f6b6952a629
Sha384	9db5546ae20108f79ab5b5998f24cf33035d1aa03f6aec80d4601160f233ae70ff5a337e6250649a06922e66e514798c
Sha512	bf3042d5709be347b62a6326164800874b3f5ffab77b03e8554945d18dc51ab74418d3d745c279a854412f07332f418b2bf64133cf09d7b51a513a4204835549
SSDeep	12288:ptPpwqc/VCk02xugj96Y4kq2m4XzszQ/E/CxXdbPw73suqJNG1Yw/HokxBVn0V6/:TurXRAJwY/CxXdb+fmNp4fB5y6ymqZQ
TLSH	0105CFAC3211B99EC853CE728964DDB09A247CB69707C20395E71DEFBD1D6939E102E3

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	CXtv.exe
Full Name	CXtv.exe
EntryPoint	System.Void LotterySimulation.Program::Main()
Scope Name	CXtv.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	CXtv
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	271
Main Method	System.Void LotterySimulation.Program::Main()
Main IL Instruction Count	43
Main IL	nop <null> ldc.i4 -277970619 ldc.i4 -1549729692 xor <null> dup <null> stloc.0 <null> ldc.i4.6 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0083: ret call System.Void LotterySimulation.Program::⁯⁬‫‭‪‏⁬‬‭‍‭⁬‌‪‍‬‪⁬⁫⁪‌‮⁫⁮‫‮⁬‌‫‏‮‌‮⁫⁫⁭‮() nop <null> ldloc.0 <null> ldc.i4 -880265146 mul <null> ldc.i4 -1378360486 xor <null> br.s IL_0006: ldc.i4 -1549729692 newobj System.Void LotterySimulation.Forms.MainForm::.ctor() call System.Void LotterySimulation.Program::‫‪‭⁯‮⁬‭⁫‏⁫‬‍⁮⁭⁯⁯‭⁪‭‏⁪‫⁯⁫‭‪‭‮‎‌‍‪‪‮⁪‭⁫‮‮(System.Windows.Forms.Form) ldloc.0 <null> ldc.i4 -723281356 mul <null> ldc.i4 1772180788 xor <null> br.s IL_0006: ldc.i4 -1549729692 nop <null> ldloc.0 <null> ldc.i4 643201376 mul <null> ldc.i4 245838550 xor <null> br.s IL_0006: ldc.i4 -1549729692 ldc.i4.0 <null> call System.Void LotterySimulation.Program::⁭‌‪‫⁭⁫‫‌⁬⁪⁪⁫‪‭⁪‬⁪⁬⁪⁪‪‬⁪‌‌⁪⁭‪⁫‍‭‪⁭‪‍‪⁬‮(System.Boolean) nop <null> ldloc.0 <null> ldc.i4 -821698925 mul <null> ldc.i4 -949145303 xor <null> br.s IL_0006: ldc.i4 -1549729692 ret <null>
Module Name	CXtv.exe
Full Name	CXtv.exe
EntryPoint	System.Void LotterySimulation.Program::Main()
Scope Name	CXtv.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	CXtv
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	271
Main Method	System.Void LotterySimulation.Program::Main()
Main IL Instruction Count	43
Main IL	nop <null> ldc.i4 -277970619 ldc.i4 -1549729692 xor <null> dup <null> stloc.0 <null> ldc.i4.6 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0083: ret call System.Void LotterySimulation.Program::⁯⁬‫‭‪‏⁬‬‭‍‭⁬‌‪‍‬‪⁬⁫⁪‌‮⁫⁮‫‮⁬‌‫‏‮‌‮⁫⁫⁭‮() nop <null> ldloc.0 <null> ldc.i4 -880265146 mul <null> ldc.i4 -1378360486 xor <null> br.s IL_0006: ldc.i4 -1549729692 newobj System.Void LotterySimulation.Forms.MainForm::.ctor() call System.Void LotterySimulation.Program::‫‪‭⁯‮⁬‭⁫‏⁫‬‍⁮⁭⁯⁯‭⁪‭‏⁪‫⁯⁫‭‪‭‮‎‌‍‪‪‮⁪‭⁫‮‮(System.Windows.Forms.Form) ldloc.0 <null> ldc.i4 -723281356 mul <null> ldc.i4 1772180788 xor <null> br.s IL_0006: ldc.i4 -1549729692 nop <null> ldloc.0 <null> ldc.i4 643201376 mul <null> ldc.i4 245838550 xor <null> br.s IL_0006: ldc.i4 -1549729692 ldc.i4.0 <null> call System.Void LotterySimulation.Program::⁭‌‪‫⁭⁫‫‌⁬⁪⁪⁫‪‭⁪‬⁪⁬⁪⁪‪‬⁪‌‌⁪⁭‪⁫‍‭‪⁭‪‍‪⁬‮(System.Boolean) nop <null> ldloc.0 <null> ldc.i4 -821698925 mul <null> ldc.i4 -949145303 xor <null> br.s IL_0006: ldc.i4 -1549729692 ret <null>