Suspicious
Suspect

8be0f7ff4d41c84caadd0ffc061b0e57

PE Executable
MD5: 8be0f7ff4d41c84caadd0ffc061b0e57
Size: 775.68 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
775.68 KB · 775,680 B
First seen
2025-09-29 07:01 · one year ago
Last seen
2025-09-29 07:01 · one year ago
Last analysis
2025-09-29 07:07 · one year ago
Hashes
MD5 8be0f7ff4d41c84caadd0ffc061b0e57 Sha1 1bc0918d8730eff0097f1edd8ff1a2b9c2150b36 Sha256 c55443835b9da7ef3fd8e804969c806713c352c5fbdbe8e673e348f9588e7189 Sha384 8eb95409c3560bc508e15cbe39ef10d023c5d3ceedd65238b0d8571eb78a1c2f6c111d46119eb91c2e424e6a3a1d09ee Sha512 702995f9afacd051063e9721663504d378e2431fb604ad9483da567402fea7c2c299b46d3afcbd7402006aa01352fe4869a08988fbc1d302800a582fd0d1dabf SSDeep 12288:+3RvZLgQCzLQ99ss0S4OX9NN/1Hmd3CJVePuzp2VVLnWZDhGocmqNhH83bv09W8I:m1gQCzLQ99ss0pOXReSHzp2rWZcocrh6 TLSH 80F4124CFB2E8F66C53C1B7FC4431648C1A74455F6B2F2DC4DCA58E60D2AB58D84AA8B
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Medium
3 files
EXE8be0f7ff4d41c84caadd0ffc061b0e57
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
BnsO.exe
Full Name
BnsO.exe
EntryPoint
System.Void CustomEventLogCreator.Program::Main()
Scope Name
BnsO.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
BnsO
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
2
Main Method
System.Void CustomEventLogCreator.Program::Main()
Main IL Instruction Count
21
Main IL 
ldc.i4.3 <null>
stloc.1 <null>
ldloc.1 <null>
switch dnlib.DotNet.Emit.Instruction[]
call System.Void CustomEventLogCreator.Program::Ⴄ()
ldc.i4 533
ldc.i4 612
call System.Void CustomEventLogCreator.Classes.CustomLogger::Ⴓ(System.Char,System.Char)
ldc.i4.0 <null>
ldc.i4 326
ldc.i4 364
call System.Void CustomEventLogCreator.Program::ႥႭ(System.Boolean,System.Char,System.Int32)
ldc.i4.4 <null>
stloc.1 <null>
br.s IL_0002: ldloc.1
newobj System.Void CustomEventLogCreator.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
ret <null>
ldtoken System.Void CustomEventLogCreator.Program::Main()
pop <null>
ret <null>
Module Name
BnsO.exe
Full Name
BnsO.exe
EntryPoint
System.Void CustomEventLogCreator.Program::Main()
Scope Name
BnsO.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
BnsO
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
2
Main Method
System.Void CustomEventLogCreator.Program::Main()
Main IL Instruction Count
21
Main IL 
ldc.i4.3 <null>
stloc.1 <null>
ldloc.1 <null>
switch dnlib.DotNet.Emit.Instruction[]
call System.Void CustomEventLogCreator.Program::Ⴄ()
ldc.i4 533
ldc.i4 612
call System.Void CustomEventLogCreator.Classes.CustomLogger::Ⴓ(System.Char,System.Char)
ldc.i4.0 <null>
ldc.i4 326
ldc.i4 364
call System.Void CustomEventLogCreator.Program::ႥႭ(System.Boolean,System.Char,System.Int32)
ldc.i4.4 <null>
stloc.1 <null>
br.s IL_0002: ldloc.1
newobj System.Void CustomEventLogCreator.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
ret <null>
ldtoken System.Void CustomEventLogCreator.Program::Main()
pop <null>
ret <null>
3 files
EXE8be0f7ff4d41c84caadd0ffc061b0e57
Structure
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙