Deep Malware Analysis of 843ea059163b2e5b5472ab50845deb7d | md5: 843ea059163b2e5b5472ab50845deb7d | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.19

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very low

MD5	843ea059163b2e5b5472ab50845deb7d
Sha1	cebc3a488c66b1766b5c02b642c178b8bc0494eb
Sha256	f1480ae593b10cb4e34ca69aad57cbc14ca94b3aed963c870affd9dba7bb2356
Sha384	89eed4abc3dfcd27f02c19ad0e4b3a59fc330aca4bc56a5d53701ac26b78860db048e0fcbbb61cc5dfd2d338ac029206
Sha512	aa903d2297949a325eb6fda30fbfed1e1b39848825250ced57e7510a85e800b25f7d9a0b6b87673596b84d8bb734fc25ea372028851ea8c53b11638b71483cd8
SSDeep	12288:xXBvVw/C02RLbRHytsuDGHCRp8ugeHuZ3CkdMUjjH3vaSA6ZE:xXwa4+uDGiRpethjzvc6ZE
TLSH	2205135C240AFE37C39717B10512F37253B11E9ED80AEB0ACBFD9DE77816A12C989295

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\hJFjhcmErd\src\obj\Debug\ZeVC.pdb
Module Name	ZeVC.exe
Full Name	ZeVC.exe
EntryPoint	System.Void screen_saver_v2.Program::Main()
Scope Name	ZeVC.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	ZeVC
Assembly Version	2.4.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	68
Main Method	System.Void screen_saver_v2.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void screen_saver_v2.ball::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Module Name	ZeVC.exe
Full Name	ZeVC.exe
EntryPoint	System.Void screen_saver_v2.Program::Main()
Scope Name	ZeVC.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	ZeVC
Assembly Version	2.4.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	68
Main Method	System.Void screen_saver_v2.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void screen_saver_v2.ball::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`