Suspicious
Suspect

859da88cb0b8eeb389f491f83b31cb64

PE Executable
MD5: 859da88cb0b8eeb389f491f83b31cb64
Size: 781.31 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 859da88cb0b8eeb389f491f83b31cb64
Sha1 e2536632485f9723df84d71054167338d58ce1ac
Sha256 c341e903f90a63ae34b8bc4cb96de29bdf65e2288dce2e06688b5f1b9bcfabd4
Sha384 0f8d1971925e146bee3fd72630dbd2900783849ba67836290c3315fe72659368c42ad5a1b22225b74467e566cf30079a
Sha512 edccc9684b9f462ea824e4af3f508c1586508d265e1ae5de6c2fcfc4edb4d399f0cb0b2b6c2fc490b3e1d68a56cce53fdc64dd13f5f4a2e20b42d1d6225d76e5
SSDeep 12288:+x69RiW1ehtORikfLZn/xf6ho7iacsZijdrg3Le4yjKZMGJSWWqWMDnT4cr:joqytsikTZ/xSho7Zwdrg7etKZFtWqWC
TLSH 10F41229371BE812C5A10FF04D70D3B1577DAD8E6900C6139FFAADEFB8397916858292
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0.exif
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
BucketSortAlgo.BucketAlg.resources
$this.Icon
[NBF]root.IconData
SquareSlidePuzzle.MainForm.resources
map1
[NBF]root.Data
BucketSortAlgo.Properties.Resources.resources
zLSL
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\Users\Administrator\Desktop\Client\Temp\wCxDkTDVyD\src\obj\Debug\Vvui.pdb
Module Name
Vvui.exe
Full Name
Vvui.exe
EntryPoint
System.Void BucketSortAlgo.Program::Main()
Scope Name
Vvui.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Vvui
Assembly Version
1.7.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
91
Main Method
System.Void BucketSortAlgo.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void BucketSortAlgo.BucketAlg::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
Vvui.exe
Full Name
Vvui.exe
EntryPoint
System.Void BucketSortAlgo.Program::Main()
Scope Name
Vvui.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Vvui
Assembly Version
1.7.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
91
Main Method
System.Void BucketSortAlgo.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void BucketSortAlgo.BucketAlg::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0.exif
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
BucketSortAlgo.BucketAlg.resources
$this.Icon
[NBF]root.IconData
SquareSlidePuzzle.MainForm.resources
map1
[NBF]root.Data
BucketSortAlgo.Properties.Resources.resources
zLSL
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙