7f8c46ba811fb361f5b188d17991045b

PE Executable

MD5: 7f8c46ba811fb361f5b188d17991045b

Size: 848.38 KB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

848.38 KB · 848,384 B

First seen

2025-08-18 05:16 · one year ago

Last seen

2025-08-18 05:16 · one year ago

Last analysis

2025-08-18 05:17 · one year ago

Hashes

MD5 7f8c46ba811fb361f5b188d17991045b Sha1 dd1e95ee0c0640344c29aaac71b098d3164ae4be Sha256 be3e810d316c7bf4eefe1ea2773a1aac93a32f368f3ef85f14e842d6340ce583 Sha384 8e510e7e681a577ac6b271c6a82cb879cd49f2bddf292000778c7fe123c37399d1b923ba8dd8ec8143d3cc162236f496 Sha512 dbc45a21d30cef1a5748c5880ff8f5a299224f0a8513afa2e5b26a94b72c790af6fdd33fc1317338c9a39cbd43ffb5d905722de2635800c11d71c01068112fec SSDeep 12288:RE7obr7ru+SXm+79Xii5Xu8/syy/DC5GTcZfZOX4n3Yi:RrbDu+Sh79XisXuWADC5lZfm4oi TLSH 1C05F8057E48CE01F0291233C2EF494847B89D526AA6E71B7DBA77EE55123A73C0D9CB

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Very high

1 malicious · 4 files

EXE7f8c46ba811fb361f5b188d17991045b

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BIN.Net Resources

BIN1uCAnsKCn067E5iv0L.SQj55tQjGkxxMJo8bO

BINI5KuITw7Tv6k0K2fMv.KG4EancXlGVNGjVJGO

Name	Value
Module Name	AxqKnkLC3cLvUhgPEAKoA84
Full Name	AxqKnkLC3cLvUhgPEAKoA84
EntryPoint	System.Void dqySrsfHUDys1WXJ0V6.AMUqPQf2M3DZXElD9Rl::Sl32WqSU5g()
Scope Name	AxqKnkLC3cLvUhgPEAKoA84
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	rnryuzvwSnwDWZRUp1fZZ3hnyInlqvcC2rd92XSDqZcq
Assembly Version	7.4.8.6
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	63
Main Method	System.Void dqySrsfHUDys1WXJ0V6.AMUqPQf2M3DZXElD9Rl::Sl32WqSU5g()
Main IL Instruction Count	14
Main IL	`br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull call System.Void KqkFDnYEpZI490BlkTG.nrtEkZYFw5yi39gmvqc::kLjw4iIsCLsZtxc4lksN0j() nop <null> ldsfld System.Object dqySrsfHUDys1WXJ0V6.AMUqPQf2M3DZXElD9Rl::ard2nURsj7 callvirt System.Void TBRbE3fFw8Wy1SQsljv.hgvRTifRfpnJmFZdVSE::kLP6c3h69x() nop <null> ret <null>`
Module Name	AxqKnkLC3cLvUhgPEAKoA84
Full Name	AxqKnkLC3cLvUhgPEAKoA84
EntryPoint	System.Void dqySrsfHUDys1WXJ0V6.AMUqPQf2M3DZXElD9Rl::Sl32WqSU5g()
Scope Name	AxqKnkLC3cLvUhgPEAKoA84
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	rnryuzvwSnwDWZRUp1fZZ3hnyInlqvcC2rd92XSDqZcq
Assembly Version	7.4.8.6
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	63
Main Method	System.Void dqySrsfHUDys1WXJ0V6.AMUqPQf2M3DZXElD9Rl::Sl32WqSU5g()
Main IL Instruction Count	14
Main IL	`br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull call System.Void KqkFDnYEpZI490BlkTG.nrtEkZYFw5yi39gmvqc::kLjw4iIsCLsZtxc4lksN0j() nop <null> ldsfld System.Object dqySrsfHUDys1WXJ0V6.AMUqPQf2M3DZXElD9Rl::ard2nURsj7 callvirt System.Void TBRbE3fFw8Wy1SQsljv.hgvRTifRfpnJmFZdVSE::kLP6c3h69x() nop <null> ret <null>`

1 malicious · 4 files

EXE7f8c46ba811fb361f5b188d17991045b

Structure

BINResources

BIN.Net Resources

No malware configuration was found at this point.