Malicious
899be63b33046d462fbd58bbd9e40ceb
PE Executable
MD5: 899be63b33046d462fbd58bbd9e40ceb
Size: 1.42 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
1.42 MB · 1,416,704 B
Hashes
MD5
899be63b33046d462fbd58bbd9e40ceb
Sha1
3a61e0c55777de5fad012bb1c3a7aa2899a1b0ce
Sha256
d5a570481841b1d87e060de662e0d98cd76f77ecea5e4717085a40b0327c083d
Sha384
97d8d84c598683c5f36b26d1be45363225f8d7f76bbf9e03e4d7bcc687c77c434a15c91cdb61a181e6ce3540da6cc5a9
Sha512
deaf684e51571f6b8cc8c8b16ff5107f6b7942f4fdfc095d33f57123eef747c2e12c2536ad4ba81234ea9b4f690a73081771835d2a7f356849f4d42504761d24
SSDeep
12288:OnniIC4MccRdh7qo26K25VZMd6V2trm3dK9GwSd/oBOG6ap6YCjFaYRoZlqxf2Q0:UPm48eBRMzZ3d+1ts9l90D
TLSH
D465283439FA501AF1B3EEB64FD4759AEAAFBB633B07645D105003864623A81DEC153E
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Very high
1 malicious · 13 files
EXE899be63b33046d462fbd58bbd9e40ceb
Structure
BINResources
BINRT_ICON
BINID:0002
BINID:0
BINRT_GROUP_CURSOR4
BINID:7F00
BINID:0
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
BIN.Net Resources
BINUaFPCYjhUs5gZKel2Q.hcWrtF1x401V7R80N1
BIN11111.g.resources
BINaR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
ICON$this.Icon
BIN[NBF]root.IconData
BINprogressBar1.Modifiers
BIN$this.Language
BIN$this.GridSize
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | 11111.exe |
| Full Name | 11111.exe |
| EntryPoint | System.Void v9p8o8DxoFVBPNvnfC.kbBctMli9MFLM6yMpt::b47UkAbBc(System.String[]) |
| Scope Name | 11111.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | 11111 |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 28 |
| Main Method | System.Void v9p8o8DxoFVBPNvnfC.kbBctMli9MFLM6yMpt::b47UkAbBc(System.String[]) |
| Main IL Instruction Count | 14 |
| Main IL | |
| Module Name | 11111.exe |
| Full Name | 11111.exe |
| EntryPoint | System.Void v9p8o8DxoFVBPNvnfC.kbBctMli9MFLM6yMpt::b47UkAbBc(System.String[]) |
| Scope Name | 11111.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | 11111 |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 28 |
| Main Method | System.Void v9p8o8DxoFVBPNvnfC.kbBctMli9MFLM6yMpt::b47UkAbBc(System.String[]) |
| Main IL Instruction Count | 14 |
| Main IL | |
1 malicious · 13 files
EXE899be63b33046d462fbd58bbd9e40ceb
Structure
BINResources
BIN.Net Resources
No malware configuration was found at this point.
You must be signed in to view YARA rules.