Suspicious
Suspect

96d724ffc72fe95647d9e655787b84f1

PE Executable
MD5: 96d724ffc72fe95647d9e655787b84f1
Size: 975.36 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
975.36 KB · 975,360 B
Hashes
MD5 96d724ffc72fe95647d9e655787b84f1 Sha1 aaa33ffcc36b4921ee90eb97aff204a9d8650178 Sha256 d8d7d5cf1fe8419e8941905908d5af23d4bfe77a02644c24009f234e49643a2c Sha384 5ba6996d8cf4176cf055fc7dbafbf8f509179f2095c2bd2cf2a4e3c7f9ef27b1b973b7226f9b091cbc19b91489413170 Sha512 69c1afa8dac6b8ed7d9c4bbbc3ccc63fa3044ed6acc4cf5dc5756fb9ca47a0ddee2bca78de12c91396c055925acd340012c7f77bac7d01477f255bc7288042fd SSDeep 24576:C2cUNuA6gK+VLONf1bB8VkYAWEEFp8XHDAO6b808EbdAQ:NcUggK+ViNdbBMA048OGdfRA TLSH DC250244335ED902D5A24BF51A31E3B46BA89F88A521D3039EFAFEDBB5797053C10392
Detection
Symbol obfuscation
Medium
19 files
EXE96d724ffc72fe95647d9e655787b84f1
Structure
BIN.Net Resources
BINCaveSystem.CaveForm.resources
BINCaveSystem.Properties.Resources.resources
BINDiff
DATA[NBF]root.Data
BINoGmq
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINrestart
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINrocket
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINstatus_error
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
AvGw.exe
Full Name
AvGw.exe
EntryPoint
System.Void CaveSystem.Program::Main()
Scope Name
AvGw.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
AvGw
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
282
Main Method
System.Void CaveSystem.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void CaveSystem.CaveForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
19 files
EXE96d724ffc72fe95647d9e655787b84f1
Structure
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙