Suspicious
Suspect

907d294aa24e42b0329642be47993e11

PE Executable
MD5: 907d294aa24e42b0329642be47993e11
Size: 744.96 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 907d294aa24e42b0329642be47993e11
Sha1 9b59d0efef1bd25f54be499c4fd47b079a3d1223
Sha256 e59670071cfffff991781690eb247ba893808bc8a6710e6f1097b53c3e1d121d
Sha384 30cd8ccd9ad43d6f2f733f950543e8208ae9022cf0a1e014527e2f1d555c1691278ccc9b8cbc291d03b5149c5f9cb527
Sha512 3a051184b00b109b3d57272e66f2c27548c99b31d2d066bd7d0c0f275351915871bf134dc44cab783330c1ffd9eae0ca288daaf8dfec2008eb87d54aa8d57775
SSDeep 12288:AJriISA9q/DmE4wGFg3IlAEF+3ikXGD96tpy35B0qHTVxtate7rtjCV4xpq5NyVr:BISA9qqE4wMqIlFsMD96f8/ZTjN2Jfy1
TLSH 5BF41252239EDD23C4A607F048A1E3B46368AF9DB421D317AEF9BDE33435B163E44A51
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
WordScrambleGame.DifficultyForm.resources
WordScrambleGame.Properties.Resources.resources
Lachen
[NBF]root.Data
[NBF]root.Data-preview.png
Like
[NBF]root.Data
[NBF]root.Data-preview.png
True
[NBF]root.Data
puUl
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: mxNf.pdb
Module Name
mxNf.exe
Full Name
mxNf.exe
EntryPoint
System.Void WordScrambleGame.Program::Main()
Scope Name
mxNf.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
mxNf
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
167
Main Method
System.Void WordScrambleGame.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void WordScrambleGame.Form1::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
WordScrambleGame.DifficultyForm.resources
WordScrambleGame.Properties.Resources.resources
Lachen
[NBF]root.Data
[NBF]root.Data-preview.png
Like
[NBF]root.Data
[NBF]root.Data-preview.png
True
[NBF]root.Data
puUl
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙