Suspicious
Suspect

9c27eac2d178f884628ee6191354cec1

PE Executable
MD5: 9c27eac2d178f884628ee6191354cec1
Size: 1.21 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 9c27eac2d178f884628ee6191354cec1
Sha1 e9a1d69a69b61881d7a86f4c9bbe54c6a7c10cdb
Sha256 f37e88ccac15a8cbf0adc55ff9148f3bcdb2e59051fd87fe459cf3f012901f5c
Sha384 f6e606502d8cda7369bc308d99420a94298d4aada52400a3603e0c85316581c0cd2e46d4d91a3fa5940add49f35d6bac
Sha512 ebf22124cb13261231b0f6f810b08780384da8023ecf8c4e2d5fe7c4d27b11bb562d9a9ece1bff1d7381f734b140dc5980a81b68b83f1c65021e36120b37d672
SSDeep 24576:kuiQGE3CYLyXMtz+enKXdELg2zgZwfpKlLFG6WBW/duEzSJJSHw:knQCYLyXMxJXgPZwfpKbes/FqUw
TLSH 5445F145271AEF02C696DBF00D70E3B50BF62D845411D213CEF77EEBBA28B15A944A93
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
LaserCalculator.Form3.resources
$this.Icon
[NBF]root.IconData
LaserCalculator.Properties.Resources.resources
bVBN
[NBF]root.Data
[NBF]root.Data-preview.png
finn
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
mYvI.exe
Full Name
mYvI.exe
EntryPoint
System.Void LaserCalculator.Program::Main()
Scope Name
mYvI.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
mYvI
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
541
Main Method
System.Void LaserCalculator.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void LaserCalculator.Form1::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
LaserCalculator.Form3.resources
$this.Icon
[NBF]root.IconData
LaserCalculator.Properties.Resources.resources
bVBN
[NBF]root.Data
[NBF]root.Data-preview.png
finn
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙